{"id":"https://openalex.org/W4414110559","doi":"https://doi.org/10.1109/tdsc.2025.3608182","title":"Megatron: Evasive Clean-Label Backdoor Attacks Against Vision Transformer","display_name":"Megatron: Evasive Clean-Label Backdoor Attacks Against Vision Transformer","publication_year":2025,"publication_date":"2025-09-10","ids":{"openalex":"https://openalex.org/W4414110559","doi":"https://doi.org/10.1109/tdsc.2025.3608182"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2025.3608182","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3608182","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5046712504","display_name":"Xueluan Gong","orcid":"https://orcid.org/0000-0003-2190-8117"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Xueluan Gong","raw_affiliation_strings":["Nanyang Technological University, Singapore"],"raw_orcid":"https://orcid.org/0000-0003-2190-8117","affiliations":[{"raw_affiliation_string":"Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088927164","display_name":"Bowei Tian","orcid":null},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bowei Tian","raw_affiliation_strings":["School of Cyber Science and Engineering, Wuhan University, Wuhan, China","School of Cyber Science and Engineering, Wuhan University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Wuhan University, Wuhan, China","institution_ids":["https://openalex.org/I37461747"]},{"raw_affiliation_string":"School of Cyber Science and Engineering, Wuhan University, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101986288","display_name":"Meng Xue","orcid":"https://orcid.org/0000-0003-4745-6526"},"institutions":[{"id":"https://openalex.org/I200769079","display_name":"Hong Kong University of Science and Technology","ror":"https://ror.org/00q4vv597","country_code":"HK","type":"education","lineage":["https://openalex.org/I200769079"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Meng Xue","raw_affiliation_strings":["Department of Computer Science and Engineering, Hong Kong University of Science and Technology, Hong Kong SAR, China","Department of Computer Science and Engineering, Hong Kong University of Science and Technology, China"],"raw_orcid":"https://orcid.org/0000-0003-4745-6526","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Hong Kong University of Science and Technology, Hong Kong SAR, China","institution_ids":["https://openalex.org/I200769079"]},{"raw_affiliation_string":"Department of Computer Science and Engineering, Hong Kong University of Science and Technology, China","institution_ids":["https://openalex.org/I200769079"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059696543","display_name":"Shuaike Li","orcid":"https://orcid.org/0009-0006-6063-8817"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shuaike Li","raw_affiliation_strings":["School of Cyber Science and Engineering, Wuhan University, Wuhan, China","School of Cyber Science and Engineering, Wuhan University, China"],"raw_orcid":"https://orcid.org/0009-0006-6063-8817","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Wuhan University, Wuhan, China","institution_ids":["https://openalex.org/I37461747"]},{"raw_affiliation_string":"School of Cyber Science and Engineering, Wuhan University, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015275781","display_name":"Yanjiao Chen","orcid":"https://orcid.org/0000-0002-1382-0679"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yanjiao Chen","raw_affiliation_strings":["College of Electrical Engineering, Zhejiang University, Hangzhou, China","College of Electrical Engineering, Zhejiang University, China"],"raw_orcid":"https://orcid.org/0000-0002-1382-0679","affiliations":[{"raw_affiliation_string":"College of Electrical Engineering, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]},{"raw_affiliation_string":"College of Electrical Engineering, Zhejiang University, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100391116","display_name":"Qian Wang","orcid":"https://orcid.org/0000-0002-8967-8525"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qian Wang","raw_affiliation_strings":["School of Cyber Science and Engineering, Wuhan University, Wuhan, China","School of Cyber Science and Engineering, Wuhan University, China"],"raw_orcid":"https://orcid.org/0000-0002-8967-8525","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Wuhan University, Wuhan, China","institution_ids":["https://openalex.org/I37461747"]},{"raw_affiliation_string":"School of Cyber Science and Engineering, Wuhan University, China","institution_ids":["https://openalex.org/I37461747"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.1201248,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"1","first_page":"525","last_page":"542"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9919999837875366,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9919999837875366,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9790999889373779,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9401000142097473,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9901000261306763},{"id":"https://openalex.org/keywords/transformer","display_name":"Transformer","score":0.4749999940395355},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.43720000982284546},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.3073999881744385},{"id":"https://openalex.org/keywords/deception","display_name":"Deception","score":0.2680000066757202}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9901000261306763},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7671999931335449},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5526000261306763},{"id":"https://openalex.org/C66322947","wikidata":"https://www.wikidata.org/wiki/Q11658","display_name":"Transformer","level":3,"score":0.4749999940395355},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.43720000982284546},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4293999969959259},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.3199999928474426},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.3073999881744385},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2865999937057495},{"id":"https://openalex.org/C2779267917","wikidata":"https://www.wikidata.org/wiki/Q170028","display_name":"Deception","level":2,"score":0.2680000066757202},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.2653999924659729},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.26460000872612},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.25839999318122864}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3608182","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3608182","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2183328864","display_name":null,"funder_award_id":"U2441240","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":38,"referenced_works":["https://openalex.org/W1496659747","https://openalex.org/W2067713319","https://openalex.org/W2618530766","https://openalex.org/W2753783305","https://openalex.org/W2775907600","https://openalex.org/W2934843808","https://openalex.org/W2942091739","https://openalex.org/W2962785568","https://openalex.org/W2996800219","https://openalex.org/W3010216907","https://openalex.org/W3015815227","https://openalex.org/W3024103409","https://openalex.org/W3035422918","https://openalex.org/W3083185154","https://openalex.org/W3145185940","https://openalex.org/W3151130473","https://openalex.org/W3155871095","https://openalex.org/W3166022359","https://openalex.org/W3172863135","https://openalex.org/W3209577450","https://openalex.org/W4214634256","https://openalex.org/W4214680449","https://openalex.org/W4214893857","https://openalex.org/W4226550712","https://openalex.org/W4288057740","https://openalex.org/W4304099366","https://openalex.org/W4312726009","https://openalex.org/W4324007135","https://openalex.org/W4382468565","https://openalex.org/W4385187298","https://openalex.org/W4385245566","https://openalex.org/W4385768130","https://openalex.org/W4386066003","https://openalex.org/W4386075825","https://openalex.org/W4386076555","https://openalex.org/W4386159930","https://openalex.org/W4389518867","https://openalex.org/W4406610346"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W4320031223","https://openalex.org/W4200629851","https://openalex.org/W4281902577","https://openalex.org/W4309417370","https://openalex.org/W4292107232","https://openalex.org/W3009072493","https://openalex.org/W4401407399"],"abstract_inverted_index":{"Vision":[0],"transformers":[1],"have":[2],"achieved":[3],"impressive":[4],"performance":[5],"in":[6],"various":[7],"vision-related":[8],"tasks,":[9],"but":[10],"their":[11],"vulnerability":[12],"to":[13,82,135],"backdoor":[14,54,64],"attacks":[15,26],"is":[16,133,178],"under-explored.":[17],"A":[18,130],"handful":[19],"of":[20,113,156,168,175],"existing":[21],"works":[22],"focus":[23],"on":[24,146],"dirty-label":[25],"with":[27],"wrongly-labeled":[28],"poisoned":[29],"training":[30],"samples,":[31],"which":[32],"may":[33],"fail":[34],"if":[35],"a":[36,77],"benign":[37],"model":[38,86],"trainer":[39],"corrects":[40],"the":[41,60,63,67,84,103,114,122,128,137,140,154,173,176],"labels.":[42],"In":[43],"this":[44],"paper,":[45],"we":[46,75],"propose":[47],"<sc":[48,157,160,184],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[49,158,161,185],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Megatron</small>,":[50],"an":[51,72],"evasive":[52],"clean-label":[53],"attack":[55,165],"against":[56],"vision":[57,80],"transformers,":[58],"where":[59],"attacker":[61],"injects":[62],"without":[65],"manipulating":[66],"data-labeling":[68],"process.":[69],"To":[70],"generate":[71],"effective":[73],"trigger,":[74],"employ":[76],"local":[78],"surrogate":[79],"transformer":[81],"approximate":[83],"victim":[85],"and":[87,95,110,150,197,205],"customize":[88],"two":[89],"attention-based":[90],"loss":[91,94,101,120],"terms:":[92],"latent":[93,100],"attention":[96,105,118,123,141],"diffusion":[97,119,124,142],"loss.":[98,143],"The":[99,117],"aligns":[102],"last":[104],"layer":[106],"between":[107],"triggered":[108],"samples":[109,112],"clean":[111],"target":[115],"label.":[116],"emphasizes":[121],"area":[125],"that":[126],"encompasses":[127],"trigger.":[129],"theoretical":[131],"analysis":[132],"provided":[134],"underpin":[136],"rationale":[138],"behind":[139],"Extensive":[144],"experiments":[145],"CIFAR-10,":[147],"GTSRB,":[148],"CIFAR-100,":[149],"Tiny":[151],"ImageNet":[152],"demonstrate":[153],"effectiveness":[155],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Megatron</small>.":[159],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Megatron</small>":[162,186],"can":[163],"achieve":[164],"success":[166],"rates":[167],"over":[169],"90%":[170],"even":[171],"when":[172],"position":[174],"trigger":[177],"slightly":[179],"shifted":[180],"during":[181],"testing.":[182],"Furthermore,":[183],"achieves":[187],"better":[188],"evasiveness":[189],"than":[190],"baselines":[191],"regarding":[192],"both":[193],"human":[194],"visual":[195],"inspection":[196],"defense":[198],"strategies":[199],"(i.e.,":[200],"DBAVT,":[201],"BAVT,":[202],"Beatrix,":[203],"TeCo,":[204],"SAGE).":[206]},"counts_by_year":[],"updated_date":"2026-01-19T04:01:09.351973","created_date":"2025-10-10T00:00:00"}