{"id":"https://openalex.org/W4415123896","doi":"https://doi.org/10.1109/tdsc.2025.3620528","title":"Action-Perturbation Backdoor Attacks on Partially Observable Multiagent Systems","display_name":"Action-Perturbation Backdoor Attacks on Partially Observable Multiagent Systems","publication_year":2025,"publication_date":"2025-10-13","ids":{"openalex":"https://openalex.org/W4415123896","doi":"https://doi.org/10.1109/tdsc.2025.3620528"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2025.3620528","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3620528","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Shuo Chen","orcid":"https://orcid.org/0000-0002-0257-1240"},"institutions":[{"id":"https://openalex.org/I4210100255","display_name":"Beijing Academy of Artificial Intelligence","ror":"https://ror.org/016a74861","country_code":"CN","type":"other","lineage":["https://openalex.org/I4210100255"]},{"id":"https://openalex.org/I4392738278","display_name":"Beijing Institute for General Artificial Intelligence","ror":"https://ror.org/02kw1ws04","country_code":"CN","type":"government","lineage":["https://openalex.org/I4392738278"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shuo Chen","raw_affiliation_strings":["State Key Laboratory of General Artificial Intelligence, BIGAI, Beijing, China","Beijing Institute for General Artificial Intelligence, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-0257-1240","affiliations":[{"raw_affiliation_string":"State Key Laboratory of General Artificial Intelligence, BIGAI, Beijing, China","institution_ids":["https://openalex.org/I4210100255"]},{"raw_affiliation_string":"Beijing Institute for General Artificial Intelligence, Beijing, China","institution_ids":["https://openalex.org/I4210100255","https://openalex.org/I4392738278"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yue Qiu","orcid":"https://orcid.org/0000-0002-2286-397X"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Yue Qiu","raw_affiliation_strings":["College of Computing and Data Science, Nanyang Technological University, Singapore","School of Computer Science and Engineering, Nanyang Technological University, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-2286-397X","affiliations":[{"raw_affiliation_string":"College of Computing and Data Science, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]},{"raw_affiliation_string":"School of Computer Science and Engineering, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100436659","display_name":"Jie Zhang","orcid":"https://orcid.org/0000-0001-8996-7581"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Jie Zhang","raw_affiliation_strings":["College of Computing and Data Science, Nanyang Technological University, Singapore","School of Computer Science and Engineering, Nanyang Technological University, Singapore"],"raw_orcid":"https://orcid.org/0000-0001-8996-7581","affiliations":[{"raw_affiliation_string":"College of Computing and Data Science, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]},{"raw_affiliation_string":"School of Computer Science and Engineering, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2645,"currency":"USD","value_usd":2645},"apc_paid":null,"fwci":0.4423,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.63035711,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"23","issue":"1","first_page":"1736","last_page":"1750"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9769999980926514,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9769999980926514,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9609000086784363,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9478999972343445,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9671000242233276},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.9247000217437744},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6297000050544739},{"id":"https://openalex.org/keywords/multi-agent-system","display_name":"Multi-agent system","score":0.5432999730110168},{"id":"https://openalex.org/keywords/action","display_name":"Action (physics)","score":0.37380000948905945},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.3375999927520752}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9671000242233276},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.9247000217437744},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7785000205039978},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6297000050544739},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5949000120162964},{"id":"https://openalex.org/C41550386","wikidata":"https://www.wikidata.org/wiki/Q529909","display_name":"Multi-agent system","level":2,"score":0.5432999730110168},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.37380000948905945},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3564000129699707},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.3375999927520752},{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.3312000036239624},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.31380000710487366},{"id":"https://openalex.org/C32848918","wikidata":"https://www.wikidata.org/wiki/Q845789","display_name":"Observable","level":2,"score":0.2797999978065491},{"id":"https://openalex.org/C2776035688","wikidata":"https://www.wikidata.org/wiki/Q1606558","display_name":"Affect (linguistics)","level":2,"score":0.26660001277923584},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.26429998874664307}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3620528","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3620528","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W2145339207","https://openalex.org/W2166533447","https://openalex.org/W2602275733","https://openalex.org/W2747213132","https://openalex.org/W2753783305","https://openalex.org/W2807741983","https://openalex.org/W2913662073","https://openalex.org/W2981038142","https://openalex.org/W2997502221","https://openalex.org/W3034126795","https://openalex.org/W3092005433","https://openalex.org/W3192036897","https://openalex.org/W4214717370","https://openalex.org/W4296437512","https://openalex.org/W4308558696","https://openalex.org/W4315630292","https://openalex.org/W4390873038","https://openalex.org/W4393147478","https://openalex.org/W4396592806","https://openalex.org/W4408324823"],"related_works":[],"abstract_inverted_index":{"Backdoor":[0],"attacks":[1,30],"on":[2,131],"reinforcement":[3],"learning":[4],"implant":[5],"a":[6,9,104,115,141],"backdoor":[7],"in":[8,66],"victim's":[10,38,61],"policy.":[11],"Once":[12],"the":[13,21,32,37,60,84,96,125,146,155,160,169,173,184,188,194],"victim":[14],"observes":[15],"trigger":[16,100,129,142,177],"signals,":[17],"it":[18],"switches":[19],"to":[20,58,77,99,119,139,149,163,176],"abnormal":[22],"mode":[23],"and":[24,81,190],"fails":[25],"its":[26,56],"task.":[27],"Most":[28],"existing":[29],"assume":[31],"adversary":[33,53,85,97,147,174],"can":[34,87],"arbitrarily":[35],"modify":[36],"observations":[39,62,90],"(i.e.,":[40,63],"vision-perturbation),":[41],"which":[42],"may":[43,72],"be":[44,75],"impractical.":[45],"A":[46],"more":[47],"practical":[48],"way":[49],"is":[50],"letting":[51],"one":[52],"agent":[54,86,98,148,175],"use":[55,136],"actions":[57,106],"affect":[59,88,151],"action-perturbation).":[64],"However,":[65],"partially":[67],"observable":[68],"multiagent":[69,197],"systems,":[70],"agents":[71,162],"not":[73],"always":[74],"able":[76],"observe":[78],"others.":[79],"When":[80],"how":[82],"much":[83],"others'":[89,101,132,152,178],"are":[91],"uncertain.":[92],"Also,":[93],"we":[94,112,158,182],"want":[95],"backdoors":[102,179],"with":[103],"few":[105],"for":[107,193],"stealthiness.":[108],"To":[109],"achieve":[110],"that,":[111],"first":[113],"design":[114],"novel":[116],"training":[117],"framework":[118],"produce":[120],"auxiliary":[121],"rewards":[122,138],"that":[123,144,168],"measure":[124],"influence":[126],"of":[127,196],"each":[128],"action":[130],"observations.":[133,153],"We":[134],"then":[135],"these":[137],"train":[140,159],"policy":[143],"guides":[145],"efficiently":[150],"Given":[154],"affected":[156],"observations,":[157],"other":[161],"perform":[164],"abnormally.":[165],"Experiments":[166],"show":[167],"proposed":[170],"method":[171],"enables":[172],"efficiently.":[180],"Finally,":[181],"study":[183],"defense":[185],"methods":[186],"against":[187],"attack":[189],"provide":[191],"insights":[192],"deployment":[195],"systems.":[198]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2025-10-14T00:00:00"}