{"id":"https://openalex.org/W4414008122","doi":"https://doi.org/10.1109/tdsc.2025.3606799","title":"Leveraging CVAE Encoding for Backdoor Attacks in Few-Shot Learning With Prototypical Networks","display_name":"Leveraging CVAE Encoding for Backdoor Attacks in Few-Shot Learning With Prototypical Networks","publication_year":2025,"publication_date":"2025-09-05","ids":{"openalex":"https://openalex.org/W4414008122","doi":"https://doi.org/10.1109/tdsc.2025.3606799"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2025.3606799","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3606799","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5020926749","display_name":"Sana Sana","orcid":null},"institutions":[{"id":"https://openalex.org/I180726961","display_name":"Shenzhen University","ror":"https://ror.org/01vy4gh70","country_code":"CN","type":"education","lineage":["https://openalex.org/I180726961"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Sana","raw_affiliation_strings":["College of Computer Science and Software Engineering, Shenzhen University, Shenzhen, China"],"raw_orcid":"https://orcid.org/0009-0006-6092-8566","affiliations":[{"raw_affiliation_string":"College of Computer Science and Software Engineering, Shenzhen University, Shenzhen, China","institution_ids":["https://openalex.org/I180726961"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052243076","display_name":"Qiao Yan","orcid":"https://orcid.org/0000-0003-0412-0416"},"institutions":[{"id":"https://openalex.org/I180726961","display_name":"Shenzhen University","ror":"https://ror.org/01vy4gh70","country_code":"CN","type":"education","lineage":["https://openalex.org/I180726961"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiao Yan","raw_affiliation_strings":["College of Computer Science and Software Engineering, Shenzhen University, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0003-0412-0416","affiliations":[{"raw_affiliation_string":"College of Computer Science and Software Engineering, Shenzhen University, Shenzhen, China","institution_ids":["https://openalex.org/I180726961"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Sizhe Liang","orcid":"https://orcid.org/0009-0009-0100-8825"},"institutions":[{"id":"https://openalex.org/I180726961","display_name":"Shenzhen University","ror":"https://ror.org/01vy4gh70","country_code":"CN","type":"education","lineage":["https://openalex.org/I180726961"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Sizhe Liang","raw_affiliation_strings":["College of Computer Science and Software Engineering, Shenzhen University, Shenzhen, China"],"raw_orcid":"https://orcid.org/0009-0009-0100-8825","affiliations":[{"raw_affiliation_string":"College of Computer Science and Software Engineering, Shenzhen University, Shenzhen, China","institution_ids":["https://openalex.org/I180726961"]}]},{"author_position":"last","author":{"id":null,"display_name":"Aman Ullah","orcid":null},"institutions":[{"id":"https://openalex.org/I180726961","display_name":"Shenzhen University","ror":"https://ror.org/01vy4gh70","country_code":"CN","type":"education","lineage":["https://openalex.org/I180726961"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Aman Ullah","raw_affiliation_strings":["College of Management, Shenzhen University, Shenzhen, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Management, Shenzhen University, Shenzhen, China","institution_ids":["https://openalex.org/I180726961"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I180726961"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.10760325,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"1","first_page":"432","last_page":"448"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9825000166893005,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9825000166893005,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11609","display_name":"Geophysical Methods and Applications","score":0.9244999885559082,"subfield":{"id":"https://openalex.org/subfields/2212","display_name":"Ocean Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9528980255126953},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8068474531173706},{"id":"https://openalex.org/keywords/encoding","display_name":"Encoding (memory)","score":0.7050067186355591},{"id":"https://openalex.org/keywords/shot","display_name":"Shot (pellet)","score":0.43897074460983276},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4212576746940613},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3940722942352295},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3266235291957855}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9528980255126953},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8068474531173706},{"id":"https://openalex.org/C125411270","wikidata":"https://www.wikidata.org/wiki/Q18653","display_name":"Encoding (memory)","level":2,"score":0.7050067186355591},{"id":"https://openalex.org/C2778344882","wikidata":"https://www.wikidata.org/wiki/Q278938","display_name":"Shot (pellet)","level":2,"score":0.43897074460983276},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4212576746940613},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3940722942352295},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3266235291957855},{"id":"https://openalex.org/C178790620","wikidata":"https://www.wikidata.org/wiki/Q11351","display_name":"Organic chemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3606799","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3606799","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":47,"referenced_works":["https://openalex.org/W10379479","https://openalex.org/W1903029394","https://openalex.org/W2044074081","https://openalex.org/W2112796928","https://openalex.org/W2117539524","https://openalex.org/W2132870739","https://openalex.org/W2194321275","https://openalex.org/W2194775991","https://openalex.org/W2794908468","https://openalex.org/W2798775284","https://openalex.org/W2934843808","https://openalex.org/W2942091739","https://openalex.org/W2950689937","https://openalex.org/W2963775347","https://openalex.org/W2963943197","https://openalex.org/W2964105864","https://openalex.org/W2980432044","https://openalex.org/W2990270730","https://openalex.org/W2996800219","https://openalex.org/W2997820257","https://openalex.org/W3019704403","https://openalex.org/W3034414373","https://openalex.org/W3042368254","https://openalex.org/W3095314709","https://openalex.org/W3107337211","https://openalex.org/W3108975329","https://openalex.org/W3128632573","https://openalex.org/W3176049064","https://openalex.org/W4214680449","https://openalex.org/W4252979261","https://openalex.org/W4287180559","https://openalex.org/W4298139897","https://openalex.org/W4312536478","https://openalex.org/W4319163914","https://openalex.org/W4321193508","https://openalex.org/W4365807860","https://openalex.org/W4372286532","https://openalex.org/W4385163750","https://openalex.org/W4386076050","https://openalex.org/W4390969331","https://openalex.org/W4393147399","https://openalex.org/W4393161233","https://openalex.org/W4396613334","https://openalex.org/W4396835244","https://openalex.org/W4400367706","https://openalex.org/W4402095528","https://openalex.org/W4402217569"],"related_works":["https://openalex.org/W4320031223","https://openalex.org/W4200629851","https://openalex.org/W4281902577","https://openalex.org/W4309417370","https://openalex.org/W4292107232","https://openalex.org/W3009072493","https://openalex.org/W4386080799","https://openalex.org/W3140988292","https://openalex.org/W4317672133","https://openalex.org/W4401407399"],"abstract_inverted_index":{"Few-shot":[0],"learning":[1,34],"(FSL)":[2],"has":[3],"demonstrated":[4],"tremendous":[5],"potential":[6],"when":[7],"challenged":[8],"with":[9,172,211,236],"limited":[10,121],"training":[11,68],"data,":[12],"but":[13],"the":[14,50,108,185,204,216,237,288,294],"assessment":[15],"of":[16,239,275],"its":[17,113],"vulnerability":[18],"to":[19,38,56,61,88,106,112,127,144,156,179,280,310,321],"backdoor":[20,39,42,91,182,302],"attacks":[21,303],"is":[22,36,103],"still":[23],"at":[24],"an":[25,314],"early":[26],"stage.":[27],"However,":[28],"recent":[29],"research":[30],"revealed":[31],"this":[32,77,161,202,268],"deep":[33],"framework":[35],"susceptible":[37,126],"attack.":[40],"Existing":[41],"techniques":[43,272],"attacked":[44],"FSL":[45,110,257],"by":[46,208,228],"manipulating":[47],"triggers":[48,72],"in":[49,54,115,256,273],"feature":[51,188],"space,":[52,189],"resulting":[53],"overfitting":[55],"specific":[57],"perturbations,":[58],"poor":[59],"tolerance":[60],"real-world":[62],"variability,":[63],"and":[64,176,193,233,264,277,307],"easy":[65],"detection.":[66],"Limited":[67],"samples":[69],"expose":[70],"these":[71,324],"or":[73],"dirty":[74],"labels.":[75],"In":[76,201],"paper,":[78],"we":[79],"propose":[80],"a":[81,153,191,305],"novel":[82],"technique":[83,249],"that":[84,246,287,300],"leverages":[85],"latent":[86,146,149,173,301],"embedding":[87],"successfully":[89],"implant":[90],"attack":[92,102],"on":[93,138,230],"Prototypical":[94],"Network\u2013based":[95],"few-shot":[96],"classification":[97],"model":[98],"(prototype-based":[99],"FSL).":[100],"Our":[101],"specifically":[104],"designed":[105],"target":[107],"prototype-based":[109,240,311],"due":[111],"effectiveness":[114],"constructing":[116],"fixed":[117],"class":[118,221],"prototypes":[119],"from":[120],"examples,":[122],"making":[123],"it":[124],"uniquely":[125],"subtle":[128],"prototype":[129],"shifts.":[130],"Since":[131],"prototypical":[132],"networks":[133],"do":[134],"not":[135],"require":[136],"backpropagation":[137],"testing":[139],"samples,":[140],"there's":[141],"less":[142],"chance":[143],"detect":[145],"backdoors.":[147,159],"The":[148,242],"mechanism":[150,175],"serve":[151],"as":[152,215],"crucial":[154],"enhancement":[155],"traditional":[157],"perturbation-based":[158],"For":[160],"purpose,":[162],"our":[163,224,247],"proposed":[164],"approach":[165,269],"utilizes":[166],"conditional":[167],"variational":[168],"autoencoder":[169],"(CVAE)":[170],"along":[171],"attention":[174],"regularization":[177],"terms":[178,274],"seamlessly":[180],"encode":[181],"trigger":[183,289],"within":[184],"original":[186],"image":[187],"offering":[190],"robust":[192,318],"reconstructed":[194,205],"poisoned":[195,206],"representation":[196],"while":[197,259,285],"preserving":[198,265],"data":[199,295],"integrity.":[200],"setup,":[203],"subset":[207],"CVAE,":[209],"combined":[210],"clean":[212],"images,":[213],"serves":[214],"support":[217],"set":[218],"for":[219,317],"computing":[220],"prototypes.":[222],"Besides,":[223],"strategy":[225],"enhances":[226],"generalization":[227],"focusing":[229],"high-level":[231],"abstractions":[232],"aligns":[234],"well":[235],"objectives":[238],"FSL.":[241],"experiment":[243],"results":[244],"reveal":[245],"poisoning":[248],"achieves":[250],"high":[251],"Attack":[252],"Success":[253],"Rate":[254],"(ASR)":[255],"challenges":[258],"ensuring":[260],"benign":[261],"accuracy":[262],"(BA)":[263],"stealthiness.":[266],"Consequently,":[267],"outperforms":[270],"earlier":[271],"efficiency":[276],"performance,":[278],"leading":[279],"enhanced":[281],"robustness":[282],"against":[283,323],"detection":[284],"assuring":[286],"remains":[290],"smoothly":[291],"integrated":[292],"into":[293],"distribution.":[296],"This":[297],"study":[298],"demonstrates":[299],"pose":[304],"persistent":[306],"significant":[308],"threat":[309],"FSL,":[312],"underscoring":[313],"urgent":[315],"need":[316],"security":[319],"measures":[320],"protect":[322],"vulnerabilities.":[325]},"counts_by_year":[],"updated_date":"2026-06-26T08:34:08.712188","created_date":"2025-10-10T00:00:00"}