{"id":"https://openalex.org/W4408520017","doi":"https://doi.org/10.1109/tdsc.2025.3552234","title":"Towards Sample-Specific Backdoor Attack With Clean Labels via Attribute Trigger","display_name":"Towards Sample-Specific Backdoor Attack With Clean Labels via Attribute Trigger","publication_year":2025,"publication_date":"2025-03-17","ids":{"openalex":"https://openalex.org/W4408520017","doi":"https://doi.org/10.1109/tdsc.2025.3552234"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2025.3552234","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3552234","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5039795462","display_name":"Mingyan Zhu","orcid":"https://orcid.org/0009-0009-8060-4237"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingyan Zhu","raw_affiliation_strings":["Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China"],"raw_orcid":"https://orcid.org/0009-0009-8060-4237","affiliations":[{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yiming Li","orcid":"https://orcid.org/0000-0002-2258-265X"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]},{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN","SG"],"is_corresponding":false,"raw_author_name":"Yiming Li","raw_affiliation_strings":["State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China","College of Computing and Data Science, Nanyang Technological University, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-2258-265X","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]},{"raw_affiliation_string":"College of Computing and Data Science, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100584999","display_name":"Junfeng Guo","orcid":"https://orcid.org/0009-0002-2046-9386"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]},{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN","US"],"is_corresponding":false,"raw_author_name":"Junfeng Guo","raw_affiliation_strings":["Department of Computer Science, University of Maryland, College Park, MD, USA","State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Maryland, College Park, MD, USA","institution_ids":["https://openalex.org/I66946132"]},{"raw_affiliation_string":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037005385","display_name":"Tao Wei","orcid":"https://orcid.org/0000-0002-4130-7530"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tao Wei","raw_affiliation_strings":["Ant Group, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ant Group, Hangzhou, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110158722","display_name":"Shu\u2013Tao Xia","orcid":null},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shu-Tao Xia","raw_affiliation_strings":["Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0002-8639-982X","affiliations":[{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5043524348","display_name":"Zhan Qin","orcid":"https://orcid.org/0000-0001-7872-6969"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhan Qin","raw_affiliation_strings":["State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-7872-6969","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.8049,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.82828119,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":97},"biblio":{"volume":"22","issue":"5","first_page":"4685","last_page":"4698"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9950000047683716,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9950000047683716,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9937000274658203,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9713000059127808,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9313291907310486},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.658233642578125},{"id":"https://openalex.org/keywords/sample","display_name":"Sample (material)","score":0.6242525577545166},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5561152100563049},{"id":"https://openalex.org/keywords/chemistry","display_name":"Chemistry","score":0.09593024849891663}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9313291907310486},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.658233642578125},{"id":"https://openalex.org/C198531522","wikidata":"https://www.wikidata.org/wiki/Q485146","display_name":"Sample (material)","level":2,"score":0.6242525577545166},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5561152100563049},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.09593024849891663},{"id":"https://openalex.org/C43617362","wikidata":"https://www.wikidata.org/wiki/Q170050","display_name":"Chromatography","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tdsc.2025.3552234","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3552234","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},{"id":"pmh:oai:dr.ntu.edu.sg:10356/217725","is_oa":false,"landing_page_url":"https://hdl.handle.net/10356/217725","pdf_url":null,"source":{"id":"https://openalex.org/S4306402609","display_name":"DR-NTU (Nanyang Technological University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I172675005","host_organization_name":"Nanyang Technological University","host_organization_lineage":["https://openalex.org/I172675005"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Journal Article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.4399999976158142,"display_name":"Industry, innovation and infrastructure"}],"awards":[{"id":"https://openalex.org/G1803704698","display_name":null,"funder_award_id":"62072395","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2802018518","display_name":null,"funder_award_id":"62171248","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3935748781","display_name":null,"funder_award_id":"U20A20178","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G659122245","display_name":null,"funder_award_id":"62441238","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":52,"referenced_works":["https://openalex.org/W1972495287","https://openalex.org/W2108598243","https://openalex.org/W2194775991","https://openalex.org/W2543927648","https://openalex.org/W2560647685","https://openalex.org/W2807363941","https://openalex.org/W2934843808","https://openalex.org/W2942091739","https://openalex.org/W2962788625","https://openalex.org/W2962858109","https://openalex.org/W2963363373","https://openalex.org/W2963626105","https://openalex.org/W2963839617","https://openalex.org/W2973310602","https://openalex.org/W3034414373","https://openalex.org/W3034856584","https://openalex.org/W3035447895","https://openalex.org/W3042368254","https://openalex.org/W3104537462","https://openalex.org/W3114686421","https://openalex.org/W3114838227","https://openalex.org/W3128663834","https://openalex.org/W3163083600","https://openalex.org/W3163966458","https://openalex.org/W3175215793","https://openalex.org/W3177457352","https://openalex.org/W3179216274","https://openalex.org/W4214537185","https://openalex.org/W4214563788","https://openalex.org/W4214588288","https://openalex.org/W4214680449","https://openalex.org/W4230172274","https://openalex.org/W4252979261","https://openalex.org/W4285269838","https://openalex.org/W4293704294","https://openalex.org/W4312283676","https://openalex.org/W4312329299","https://openalex.org/W4312458120","https://openalex.org/W4312700692","https://openalex.org/W4313192591","https://openalex.org/W4317796293","https://openalex.org/W4319303130","https://openalex.org/W4323655037","https://openalex.org/W4375869280","https://openalex.org/W4380906025","https://openalex.org/W4382464557","https://openalex.org/W4386083011","https://openalex.org/W4390873038","https://openalex.org/W4398757423","https://openalex.org/W4399487370","https://openalex.org/W4402816792","https://openalex.org/W4404102669"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W4320031223","https://openalex.org/W4200629851","https://openalex.org/W4281902577","https://openalex.org/W4309417370","https://openalex.org/W4292107232","https://openalex.org/W3009072493","https://openalex.org/W4401407399"],"abstract_inverted_index":{"Currently,":[0],"sample-specific":[1,99],"backdoor":[2,21,180],"attacks":[3],"(SSBAs)":[4],"are":[5,30,140,188],"the":[6,19,47,72,87,95,112,128,167,195],"most":[7,17],"advanced":[8],"and":[9,93,142,150,200],"malicious":[10],"methods":[11],"since":[12],"they":[13,45],"can":[14,41],"easily":[15],"circumvent":[16],"of":[18,90,98,104,131,197],"current":[20],"defenses.":[22,205],"In":[23,50],"this":[24,154],"paper,":[25],"we":[26,52,156],"reveal":[27,76],"that":[28,54,77,127],"SSBAs":[29,62,106,133],"not":[31],"sufficiently":[32],"stealthy":[33],"due":[34,81,115],"to":[35,58,63,82,116,158,170,203],"their":[36,64,117,137],"poisoned-label":[37],"nature,":[38],"where":[39],"users":[40],"discover":[42],"anomalies":[43],"if":[44],"check":[46],"image-label":[48],"relationship.":[49],"particular,":[51],"demonstrate":[53],"it":[55,78],"is":[56,79,134,178],"ineffective":[57],"directly":[59],"generalize":[60],"existing":[61,105,132,204],"clean-label":[65,113,172],"variants":[66],"by":[67,153],"poisoning":[68],"samples":[69],"solely":[70],"from":[71],"target":[73],"class.":[74],"We":[75,125],"primarily":[80],"two":[83],"reasons,":[84],"including":[85],"<b>(1)</b>":[86],"\u2018antagonistic":[88],"effects\u2019":[89],"ground-truth":[91],"features":[92,103],"<b>(2)</b>":[94],"learning":[96],"difficulty":[97],"features.":[100],"Accordingly,":[101],"trigger-related":[102],"cannot":[107],"be":[108],"effectively":[109],"learned":[110],"under":[111],"setting":[114],"mild":[118],"trigger":[119,138,168,184],"intensity":[120,129],"required":[121],"for":[122,147],"ensuring":[123],"stealthiness.":[124],"argue":[126],"constraint":[130],"mostly":[135],"because":[136],"patterns":[139,169],"\u2018content-irrelevant\u2019":[141],"therefore":[143],"act":[144],"as":[145,166],"\u2018noises\u2019":[146],"both":[148],"humans":[149],"DNNs.":[151],"Motivated":[152],"understanding,":[155],"propose":[157],"exploit":[159],"content-relevant":[160],"features,":[161],"<inline-formula><tex-math":[162],"notation=\"LaTeX\">$a.k.a.$</tex-math></inline-formula>":[163],"(human-relied)":[164],"attributes,":[165],"design":[171],"SSBAs.":[173],"This":[174],"new":[175],"attack":[176,181],"paradigm":[177],"dubbed":[179],"with":[182],"attribute":[183],"(BAAT).":[185],"Extensive":[186],"experiments":[187],"conducted":[189],"on":[190],"benchmark":[191],"datasets,":[192],"which":[193],"verify":[194],"effectiveness":[196],"our":[198],"BAAT":[199],"its":[201],"resistance":[202]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}