{"id":"https://openalex.org/W4390603833","doi":"https://doi.org/10.1109/tifs.2024.3350389","title":"Manipulating Pre-Trained Encoder for Targeted Poisoning Attacks in Contrastive Learning","display_name":"Manipulating Pre-Trained Encoder for Targeted Poisoning Attacks in Contrastive Learning","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4390603833","doi":"https://doi.org/10.1109/tifs.2024.3350389"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2024.3350389","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3350389","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100326504","display_name":"Jian Chen","orcid":"https://orcid.org/0000-0003-3738-2092"},"institutions":[{"id":"https://openalex.org/I14243506","display_name":"Hong Kong Polytechnic University","ror":"https://ror.org/0030zas98","country_code":"HK","type":"education","lineage":["https://openalex.org/I14243506"]},{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN","HK"],"is_corresponding":false,"raw_author_name":"Jian Chen","raw_affiliation_strings":["Hubei Key Laboratory of Smart Internet Technology, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China","Department of Computing, The Hong Kong Polytechnic University, Mong Man Wai Building, Hong Kong"],"raw_orcid":"https://orcid.org/0000-0003-3738-2092","affiliations":[{"raw_affiliation_string":"Hubei Key Laboratory of Smart Internet Technology, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]},{"raw_affiliation_string":"Department of Computing, The Hong Kong Polytechnic University, Mong Man Wai Building, Hong Kong","institution_ids":["https://openalex.org/I14243506"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086470221","display_name":"Yuan Gao","orcid":"https://orcid.org/0000-0003-4096-9134"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuan Gao","raw_affiliation_strings":["School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5104666790","display_name":"Gaoyang Liu","orcid":"https://orcid.org/0000-0003-2566-9360"},"institutions":[{"id":"https://openalex.org/I18014758","display_name":"Simon Fraser University","ror":"https://ror.org/0213rcc28","country_code":"CA","type":"education","lineage":["https://openalex.org/I18014758"]},{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CA","CN"],"is_corresponding":false,"raw_author_name":"Gaoyang Liu","raw_affiliation_strings":["School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China","School of Computing Science, Simon Fraser University, Burnaby, BC, Canada"],"raw_orcid":"https://orcid.org/0000-0003-2566-9360","affiliations":[{"raw_affiliation_string":"School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]},{"raw_affiliation_string":"School of Computing Science, Simon Fraser University, Burnaby, BC, Canada","institution_ids":["https://openalex.org/I18014758"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070017771","display_name":"Ahmed M. Abdelmoniem","orcid":"https://orcid.org/0000-0002-1374-1882"},"institutions":[{"id":"https://openalex.org/I166337079","display_name":"Queen Mary University of London","ror":"https://ror.org/026zzn846","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I166337079"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Ahmed M. Abdelmoniem","raw_affiliation_strings":["School of Electronic Engineering and Computer Science, Queen Mary University of London, London, U.K"],"raw_orcid":"https://orcid.org/0000-0002-1374-1882","affiliations":[{"raw_affiliation_string":"School of Electronic Engineering and Computer Science, Queen Mary University of London, London, U.K","institution_ids":["https://openalex.org/I166337079"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100337659","display_name":"Chen Wang","orcid":"https://orcid.org/0000-0003-1963-4954"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chen Wang","raw_affiliation_strings":["School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0003-1963-4954","affiliations":[{"raw_affiliation_string":"School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]}],"institutions":[],"countries_distinct_count":4,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.6671,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.85111452,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":"19","issue":null,"first_page":"2412","last_page":"2424"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9937999844551086,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.9909999966621399,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8333711624145508},{"id":"https://openalex.org/keywords/encoder","display_name":"Encoder","score":0.8296478986740112},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.7531986832618713},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6112092733383179},{"id":"https://openalex.org/keywords/downstream","display_name":"Downstream (manufacturing)","score":0.6032159924507141},{"id":"https://openalex.org/keywords/feature-learning","display_name":"Feature learning","score":0.48138144612312317},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.47276049852371216},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.45159125328063965},{"id":"https://openalex.org/keywords/autoencoder","display_name":"Autoencoder","score":0.43617403507232666},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.37579619884490967},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.344817578792572}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8333711624145508},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.8296478986740112},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.7531986832618713},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6112092733383179},{"id":"https://openalex.org/C2776207758","wikidata":"https://www.wikidata.org/wiki/Q5303302","display_name":"Downstream (manufacturing)","level":2,"score":0.6032159924507141},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.48138144612312317},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.47276049852371216},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.45159125328063965},{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.43617403507232666},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.37579619884490967},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.344817578792572},{"id":"https://openalex.org/C21547014","wikidata":"https://www.wikidata.org/wiki/Q1423657","display_name":"Operations management","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tifs.2024.3350389","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3350389","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},{"id":"pmh:oai:qmro.qmul.ac.uk:123456789/102813","is_oa":false,"landing_page_url":"https://qmro.qmul.ac.uk/xmlui/handle/123456789/102813","pdf_url":null,"source":{"id":"https://openalex.org/S4306400530","display_name":"Queen Mary Research Online (Queen Mary University of London)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I166337079","host_organization_name":"Queen Mary University of London","host_organization_lineage":["https://openalex.org/I166337079"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6100000143051147,"id":"https://metadata.un.org/sdg/4","display_name":"Quality Education"}],"awards":[{"id":"https://openalex.org/G2616141538","display_name":null,"funder_award_id":"62002104","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2656589067","display_name":"\u5f02\u6784\u65e0\u7ebf\u5bc6\u96c6\u7f51\u7edc\u9ad8\u7ef4\u8d44\u6e90\u667a\u80fd\u90e8\u7f72\u7814\u7a76","funder_award_id":"62071192","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4137277356","display_name":null,"funder_award_id":"62272183","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7481879049","display_name":null,"funder_award_id":"62171189","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320334202","display_name":"Wuhan Yellow Crane Talents Program","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":57,"referenced_works":["https://openalex.org/W1821462560","https://openalex.org/W2001610032","https://openalex.org/W2067713319","https://openalex.org/W2194775991","https://openalex.org/W2807363941","https://openalex.org/W2934843808","https://openalex.org/W2960732052","https://openalex.org/W2962763344","https://openalex.org/W2962858109","https://openalex.org/W2963163009","https://openalex.org/W2963446712","https://openalex.org/W2963618920","https://openalex.org/W2964043980","https://openalex.org/W2998356391","https://openalex.org/W3009561768","https://openalex.org/W3117572899","https://openalex.org/W3118608800","https://openalex.org/W3128839796","https://openalex.org/W3163222347","https://openalex.org/W3171007011","https://openalex.org/W3174159092","https://openalex.org/W3176108833","https://openalex.org/W3189812816","https://openalex.org/W3213515577","https://openalex.org/W4226499556","https://openalex.org/W4283802608","https://openalex.org/W4290712239","https://openalex.org/W4294068600","https://openalex.org/W4312408631","https://openalex.org/W4312416140","https://openalex.org/W4312768002","https://openalex.org/W4323338627","https://openalex.org/W4367046748","https://openalex.org/W4386065406","https://openalex.org/W4386071525","https://openalex.org/W4386075521","https://openalex.org/W4386076668","https://openalex.org/W6637373629","https://openalex.org/W6677919164","https://openalex.org/W6681673350","https://openalex.org/W6725794477","https://openalex.org/W6735632633","https://openalex.org/W6749794497","https://openalex.org/W6750462152","https://openalex.org/W6756333562","https://openalex.org/W6774314701","https://openalex.org/W6774670964","https://openalex.org/W6776700526","https://openalex.org/W6782718173","https://openalex.org/W6787972765","https://openalex.org/W6791353385","https://openalex.org/W6794653564","https://openalex.org/W6795961950","https://openalex.org/W6809906018","https://openalex.org/W6838899697","https://openalex.org/W6845441860","https://openalex.org/W6849375654"],"related_works":["https://openalex.org/W2983142544","https://openalex.org/W4321789545","https://openalex.org/W2891059443","https://openalex.org/W4281663961","https://openalex.org/W3208888551","https://openalex.org/W4313561566","https://openalex.org/W3208386644","https://openalex.org/W4389832810","https://openalex.org/W4220682630","https://openalex.org/W3181622257"],"abstract_inverted_index":{"In":[0],"recent":[1],"years,":[2],"contrastive":[3,30],"learning":[4,11,31],"has":[5],"become":[6],"very":[7],"powerful":[8],"for":[9,118],"representation":[10,111],"using":[12],"large-scale":[13],"unlabeled":[14,52],"data,":[15],"by":[16,113],"involving":[17],"pre-trained":[18,74,116,166],"encoders":[19],"to":[20,70,87,130,162,173],"fine-tune":[21],"downstream":[22,79,98,132,176,212],"classifiers.":[23],"However,":[24],"the":[25,36,43,51,73,78,88,96,109,114,119,125,131,135,139,158,165,169,175,187,192,203,208,211],"latest":[26],"research":[27],"indicates":[28],"that":[29,77,103,186,201],"can":[32,91],"potentially":[33],"suffer":[34],"from":[35,124],"risks":[37],"of":[38,191,202,210],"data":[39],"poisoning":[40,66],"attacks,":[41,206],"where":[42],"attacker":[44],"injects":[45],"maliciously":[46],"crafted":[47],"poisoned":[48,115],"samples":[49,123],"into":[50],"pre-training":[53],"data.":[54],"To":[55],"step":[56],"forward,":[57],"in":[58],"this":[59],"paper,":[60],"we":[61,143],"present":[62],"a":[63,83,104],"more":[64],"stealthy":[65],"attack":[67,146,188,194],"dubbed":[68],"PA-CL":[69],"directly":[71],"poison":[72,164],"encoder,":[75,167],"such":[76],"classifier\u2019s":[80,213],"behavior":[81],"on":[82,181,198],"single":[84],"target":[85,120,136,159],"instance":[86],"attacker-desired":[89,126,140],"class":[90],"be":[92],"manipulated":[93],"without":[94],"affecting":[95],"overall":[97],"classification":[99,177],"performance.":[100,178],"We":[101],"observe":[102],"high":[105],"similarity":[106],"exists":[107],"between":[108],"feature":[110],"generated":[112],"encoder":[117],"sample":[121,137],"and":[122,151,168,207],"class.":[127,141],"This":[128],"leads":[129],"classifier":[133],"misclassifying":[134],"with":[138],"Therefore,":[142],"formulate":[144],"our":[145],"as":[147],"an":[148],"optimization":[149],"problem,":[150],"design":[152],"two":[153],"novel":[154],"loss":[155,161,172],"functions,":[156],"namely,":[157],"effectiveness":[160],"effectively":[163],"model":[170],"utility":[171],"maintain":[174],"Experimental":[179],"results":[180],"four":[182],"real-world":[183],"datasets":[184],"demonstrate":[185],"success":[189],"rate":[190],"proposed":[193],"is":[195,216],"40%":[196],"higher":[197],"average":[199],"than":[200],"three":[204],"baseline":[205],"fluctuation":[209],"prediction":[214],"accuracy":[215],"within":[217],"5%.":[218]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}