{"id":"https://openalex.org/W4408235512","doi":"https://doi.org/10.1109/tdsc.2025.3548970","title":"An Effective and Resilient Backdoor Attack Framework Against Deep Neural Networks and Vision Transformers","display_name":"An Effective and Resilient Backdoor Attack Framework Against Deep Neural Networks and Vision Transformers","publication_year":2025,"publication_date":"2025-03-07","ids":{"openalex":"https://openalex.org/W4408235512","doi":"https://doi.org/10.1109/tdsc.2025.3548970"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2025.3548970","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3548970","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5046712504","display_name":"Xueluan Gong","orcid":"https://orcid.org/0000-0003-2190-8117"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Xueluan Gong","raw_affiliation_strings":["Nanyang Technological University, Singapore"],"raw_orcid":"https://orcid.org/0000-0003-2190-8117","affiliations":[{"raw_affiliation_string":"Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088927164","display_name":"Bowei Tian","orcid":null},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bowei Tian","raw_affiliation_strings":["School of Cyber Science and Engineering, Wuhan University, Hubei, China","School of Cyber Science and Engineering, Wuhan University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Wuhan University, Hubei, China","institution_ids":["https://openalex.org/I37461747"]},{"raw_affiliation_string":"School of Cyber Science and Engineering, Wuhan University, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101986288","display_name":"Meng Xue","orcid":"https://orcid.org/0000-0003-4745-6526"},"institutions":[{"id":"https://openalex.org/I200769079","display_name":"Hong Kong University of Science and Technology","ror":"https://ror.org/00q4vv597","country_code":"HK","type":"education","lineage":["https://openalex.org/I200769079"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Meng Xue","raw_affiliation_strings":["Department of Computer Science and Engineering, Hong Kong University of Science and Technology, Hong Kong","Department of Computer Science and Engineering, Hong Kong University of Science and Technology, China"],"raw_orcid":"https://orcid.org/0000-0003-4745-6526","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Hong Kong University of Science and Technology, Hong Kong","institution_ids":["https://openalex.org/I200769079"]},{"raw_affiliation_string":"Department of Computer Science and Engineering, Hong Kong University of Science and Technology, China","institution_ids":["https://openalex.org/I200769079"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050974637","display_name":"Yuan Wu","orcid":"https://orcid.org/0000-0001-6173-2801"},"institutions":[{"id":"https://openalex.org/I4210119942","display_name":"Wuhan Textile University","ror":"https://ror.org/02jgsf398","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210119942"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuan Wu","raw_affiliation_strings":["School of Computer Science and Artificial Intelligence & Engineering Research Center of Hubei Province for Clothing Information, Wuhan Textile University, Hubei, China","School of Computer Science and Artificial Intelligence & Engineering Research Center of Hubei Province for Clothing Information, Wuhan Textile University, China"],"raw_orcid":"https://orcid.org/0000-0001-6173-2801","affiliations":[{"raw_affiliation_string":"School of Computer Science and Artificial Intelligence & Engineering Research Center of Hubei Province for Clothing Information, Wuhan Textile University, Hubei, China","institution_ids":["https://openalex.org/I4210119942"]},{"raw_affiliation_string":"School of Computer Science and Artificial Intelligence & Engineering Research Center of Hubei Province for Clothing Information, Wuhan Textile University, China","institution_ids":["https://openalex.org/I4210119942"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015275781","display_name":"Yanjiao Chen","orcid":"https://orcid.org/0000-0002-1382-0679"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yanjiao Chen","raw_affiliation_strings":["College of Electrical Engineering, Zhejiang University, Zhejiang, China","College of Electrical Engineering, Zhejiang University, China"],"raw_orcid":"https://orcid.org/0000-0002-1382-0679","affiliations":[{"raw_affiliation_string":"College of Electrical Engineering, Zhejiang University, Zhejiang, China","institution_ids":["https://openalex.org/I76130692"]},{"raw_affiliation_string":"College of Electrical Engineering, Zhejiang University, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100391116","display_name":"Qian Wang","orcid":"https://orcid.org/0000-0002-8967-8525"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qian Wang","raw_affiliation_strings":["School of Cyber Science and Engineering, Wuhan University, Hubei, China","School of Cyber Science and Engineering, Wuhan University, China"],"raw_orcid":"https://orcid.org/0000-0002-8967-8525","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Wuhan University, Hubei, China","institution_ids":["https://openalex.org/I37461747"]},{"raw_affiliation_string":"School of Cyber Science and Engineering, Wuhan University, China","institution_ids":["https://openalex.org/I37461747"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.792,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.89919398,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":97},"biblio":{"volume":"22","issue":"5","first_page":"4549","last_page":"4564"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9976999759674072,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9976999759674072,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9299620985984802},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7301690578460693},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.6480675339698792},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5250118374824524},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.5213842988014221},{"id":"https://openalex.org/keywords/transformer","display_name":"Transformer","score":0.42588990926742554},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.40857839584350586},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.13085365295410156},{"id":"https://openalex.org/keywords/electrical-engineering","display_name":"Electrical engineering","score":0.1016821563243866}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9299620985984802},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7301690578460693},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.6480675339698792},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5250118374824524},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.5213842988014221},{"id":"https://openalex.org/C66322947","wikidata":"https://www.wikidata.org/wiki/Q11658","display_name":"Transformer","level":3,"score":0.42588990926742554},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.40857839584350586},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.13085365295410156},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.1016821563243866},{"id":"https://openalex.org/C165801399","wikidata":"https://www.wikidata.org/wiki/Q25428","display_name":"Voltage","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tdsc.2025.3548970","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3548970","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},{"id":"pmh:oai:dr.ntu.edu.sg:10356/217722","is_oa":false,"landing_page_url":"https://hdl.handle.net/10356/217722","pdf_url":null,"source":{"id":"https://openalex.org/S4306402609","display_name":"DR-NTU (Nanyang Technological University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I172675005","host_organization_name":"Nanyang Technological University","host_organization_lineage":["https://openalex.org/I172675005"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Journal Article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/13","display_name":"Climate action","score":0.6299999952316284}],"awards":[{"id":"https://openalex.org/G2183328864","display_name":null,"funder_award_id":"U2441240","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6034313629","display_name":null,"funder_award_id":"U21B2018","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G659122245","display_name":null,"funder_award_id":"62441238","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":45,"referenced_works":["https://openalex.org/W1496659747","https://openalex.org/W2034996255","https://openalex.org/W2067713319","https://openalex.org/W2096733369","https://openalex.org/W2133665775","https://openalex.org/W2753783305","https://openalex.org/W2775907600","https://openalex.org/W2884943453","https://openalex.org/W2897475915","https://openalex.org/W2897865027","https://openalex.org/W2934843808","https://openalex.org/W2942091739","https://openalex.org/W2947133760","https://openalex.org/W2962785568","https://openalex.org/W2963037989","https://openalex.org/W2963495494","https://openalex.org/W2966104011","https://openalex.org/W2966689772","https://openalex.org/W2985913519","https://openalex.org/W2986013765","https://openalex.org/W2990270730","https://openalex.org/W2996800219","https://openalex.org/W2999321020","https://openalex.org/W3010216907","https://openalex.org/W3015815227","https://openalex.org/W3018002743","https://openalex.org/W3024103409","https://openalex.org/W3035422918","https://openalex.org/W3083185154","https://openalex.org/W3084193526","https://openalex.org/W3106646114","https://openalex.org/W3152758407","https://openalex.org/W3166022359","https://openalex.org/W3176196997","https://openalex.org/W4211230886","https://openalex.org/W4213110664","https://openalex.org/W4226550712","https://openalex.org/W4285206772","https://openalex.org/W4294170691","https://openalex.org/W4382468565","https://openalex.org/W4385187298","https://openalex.org/W4385245566","https://openalex.org/W4386066003","https://openalex.org/W4386075825","https://openalex.org/W4386159930"],"related_works":["https://openalex.org/W4320031223","https://openalex.org/W4200629851","https://openalex.org/W4281902577","https://openalex.org/W4309417370","https://openalex.org/W4292107232","https://openalex.org/W3009072493","https://openalex.org/W4386080799","https://openalex.org/W3140988292","https://openalex.org/W4317672133","https://openalex.org/W4401407399"],"abstract_inverted_index":{"Recent":[0],"studies":[1],"have":[2],"revealed":[3],"the":[4,21,32,37,55,69,75,79,85,95,99,109,136,147,156,196,208,219],"vulnerability":[5],"of":[6,36,78,98,218],"Deep":[7],"Neural":[8],"Network":[9],"(DNN)":[10],"models":[11],"to":[12,83,88,153],"backdoor":[13,17,39,110,137,148,224,232],"attacks.":[14],"However,":[15],"existing":[16],"attacks":[18],"arbitrarily":[19],"set":[20],"trigger":[22,57,80,149],"mask":[23,49],"or":[24],"use":[25],"a":[26,46,64,140,215],"randomly":[27],"selected":[28],"trigger,":[29],"which":[30],"restricts":[31],"effectiveness":[33],"and":[34,59,72,125,150,186,213],"robustness":[35,229],"generated":[38],"triggers.":[40],"In":[41],"this":[42],"paper,":[43],"we":[44,102,134,163,193],"propose":[45,103],"novel":[47],"attention-based":[48],"generation":[50],"methodology":[51],"that":[52,144,192],"searches":[53],"for":[54],"optimal":[56],"shape":[58],"location.":[60],"We":[61,173],"also":[62,164,227],"introduce":[63],"Quality-of-Experience":[65],"(QoE)":[66],"term":[67],"into":[68],"loss":[70],"function":[71],"carefully":[73],"adjust":[74],"transparency":[76],"value":[77],"in":[81,108,122,130],"order":[82],"make":[84],"backdoored":[86,151,220],"samples":[87,129],"be":[89],"more":[90],"natural.":[91],"To":[92],"further":[93,154],"improve":[94,155],"prediction":[96],"accuracy":[97],"victim":[100,114],"model,":[101],"an":[104],"alternating":[105],"retraining":[106],"algorithm":[107],"injection":[111],"process.":[112],"The":[113],"model":[115,152],"is":[116,190,211],"retrained":[117],"with":[118,126,178],"mixed":[119],"poisoned":[120],"datasets":[121],"even":[123],"iterations":[124],"only":[127],"benign":[128],"odd":[131],"iterations.":[132],"Besides,":[133],"launch":[135],"attack":[138,142,157,168,197,225],"under":[139],"co-optimized":[141],"framework":[143,226],"alternately":[145],"optimizes":[146],"performance.":[158],"Apart":[159],"from":[160],"DNN":[161],"models,":[162],"extend":[165],"our":[166,175],"proposed":[167,176,223],"method":[169,177],"against":[170,230],"vision":[171],"transformers.":[172],"evaluate":[174],"extensive":[179],"experiments":[180],"on":[181],"VGG-Flower,":[182],"CIFAR-10,":[183],"GTSRB,":[184],"CIFAR-100,":[185],"ImageNette":[187],"datasets.":[188],"It":[189],"shown":[191],"can":[194],"increase":[195],"success":[198],"rate":[199],"by":[200],"as":[201,203],"much":[202],"82%":[204],"over":[205],"baselines":[206],"when":[207],"poison":[209],"ratio":[210],"low":[212],"achieve":[214],"high":[216],"QoE":[217],"samples.":[221],"Our":[222],"showcases":[228],"state-of-the-art":[231],"defenses.":[233]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2025-12-28T23:10:05.387466","created_date":"2025-10-10T00:00:00"}