{"id":"https://openalex.org/W4394586040","doi":"https://doi.org/10.1109/tifs.2024.3386058","title":"BAGM: A Backdoor Attack for Manipulating Text-to-Image Generative Models","display_name":"BAGM: A Backdoor Attack for Manipulating Text-to-Image Generative Models","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4394586040","doi":"https://doi.org/10.1109/tifs.2024.3386058"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2024.3386058","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3386058","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5027726376","display_name":"Jordan Vice","orcid":"https://orcid.org/0000-0002-3951-1188"},"institutions":[{"id":"https://openalex.org/I177877127","display_name":"The University of Western Australia","ror":"https://ror.org/047272k79","country_code":"AU","type":"education","lineage":["https://openalex.org/I177877127"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Jordan Vice","raw_affiliation_strings":["Department of Computer Science and Software Engineering, The University of Western Australia, Perth, WA, Australia"],"raw_orcid":"https://orcid.org/0000-0002-3951-1188","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Software Engineering, The University of Western Australia, Perth, WA, Australia","institution_ids":["https://openalex.org/I177877127"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069697936","display_name":"Naveed Akhtar","orcid":"https://orcid.org/0000-0003-3406-673X"},"institutions":[{"id":"https://openalex.org/I165779595","display_name":"The University of Melbourne","ror":"https://ror.org/01ej9dk98","country_code":"AU","type":"education","lineage":["https://openalex.org/I165779595"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Naveed Akhtar","raw_affiliation_strings":["School of Computing and Information Systems, The University of Melbourne, Melbourne, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0003-3406-673X","affiliations":[{"raw_affiliation_string":"School of Computing and Information Systems, The University of Melbourne, Melbourne, VIC, Australia","institution_ids":["https://openalex.org/I165779595"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020216442","display_name":"Richard Hartley","orcid":"https://orcid.org/0000-0002-5005-0191"},"institutions":[{"id":"https://openalex.org/I118347636","display_name":"Australian National University","ror":"https://ror.org/019wvm592","country_code":"AU","type":"education","lineage":["https://openalex.org/I118347636"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Richard Hartley","raw_affiliation_strings":["Department of Systems Engineering, RSISE, The Australian National University, Canberra, ACT, Australia"],"raw_orcid":"https://orcid.org/0000-0002-5005-0191","affiliations":[{"raw_affiliation_string":"Department of Systems Engineering, RSISE, The Australian National University, Canberra, ACT, Australia","institution_ids":["https://openalex.org/I118347636"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5089986388","display_name":"Ajmal Mian","orcid":"https://orcid.org/0000-0002-5206-3842"},"institutions":[{"id":"https://openalex.org/I177877127","display_name":"The University of Western Australia","ror":"https://ror.org/047272k79","country_code":"AU","type":"education","lineage":["https://openalex.org/I177877127"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Ajmal Mian","raw_affiliation_strings":["Department of Computer Science and Software Engineering, The University of Western Australia, Perth, WA, Australia"],"raw_orcid":"https://orcid.org/0000-0002-5206-3842","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Software Engineering, The University of Western Australia, Perth, WA, Australia","institution_ids":["https://openalex.org/I177877127"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":7.378,"has_fulltext":false,"cited_by_count":30,"citation_normalized_percentile":{"value":0.97559755,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":"19","issue":null,"first_page":"4865","last_page":"4880"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9837999939918518,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9837999939918518,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9555000066757202,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.9416000247001648,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9564437866210938},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8056917786598206},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.5546118021011353},{"id":"https://openalex.org/keywords/generative-grammar","display_name":"Generative grammar","score":0.5059804320335388},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5047281980514526},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.39274799823760986},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.3233596682548523},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2827109098434448}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9564437866210938},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8056917786598206},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.5546118021011353},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.5059804320335388},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5047281980514526},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.39274799823760986},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3233596682548523},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2827109098434448}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tifs.2024.3386058","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3386058","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},{"id":"pmh:oai:pure.atira.dk:publications/8abaf3ad-93ad-4999-8aeb-9ea5a1426011","is_oa":false,"landing_page_url":"https://research-repository.uwa.edu.au/en/publications/8abaf3ad-93ad-4999-8aeb-9ea5a1426011","pdf_url":null,"source":{"id":"https://openalex.org/S4306402492","display_name":"UWA Profiles and Research Repository (UWA)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I177877127","host_organization_name":"The University of Western Australia","host_organization_lineage":["https://openalex.org/I177877127"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Vice, J, Akhtar, N, Hartley, R & Mian, A 2024, 'BAGM : A Backdoor Attack for Manipulating Text-to-Image Generative Models', IEEE Transactions on Information Forensics and Security, vol. 19, pp. 4865-4880. https://doi.org/10.1109/TIFS.2024.3386058","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2330925116","display_name":null,"funder_award_id":"DE230101058","funder_id":"https://openalex.org/F4320315885","funder_display_name":"Australian Government"},{"id":"https://openalex.org/G3206439402","display_name":null,"funder_award_id":"FT210100268","funder_id":"https://openalex.org/F4320315885","funder_display_name":"Australian Government"}],"funders":[{"id":"https://openalex.org/F4320315885","display_name":"Australian Government","ror":"https://ror.org/0314h5y94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":44,"referenced_works":["https://openalex.org/W1861492603","https://openalex.org/W1901129140","https://openalex.org/W2755577605","https://openalex.org/W2901232240","https://openalex.org/W2919358988","https://openalex.org/W2921353139","https://openalex.org/W2985913519","https://openalex.org/W3041840141","https://openalex.org/W3096831136","https://openalex.org/W3097631606","https://openalex.org/W3190013336","https://openalex.org/W3196523899","https://openalex.org/W3211999566","https://openalex.org/W4214823156","https://openalex.org/W4221141428","https://openalex.org/W4224035735","https://openalex.org/W4288089799","https://openalex.org/W4312820932","https://openalex.org/W4312933868","https://openalex.org/W4318751661","https://openalex.org/W4322760473","https://openalex.org/W4360884927","https://openalex.org/W4386072042","https://openalex.org/W4386072096","https://openalex.org/W4386072220","https://openalex.org/W4386075682","https://openalex.org/W4386075825","https://openalex.org/W4387195417","https://openalex.org/W4387967988","https://openalex.org/W4390872151","https://openalex.org/W6679045638","https://openalex.org/W6765775151","https://openalex.org/W6765779288","https://openalex.org/W6769627184","https://openalex.org/W6779823529","https://openalex.org/W6786375611","https://openalex.org/W6791353385","https://openalex.org/W6795288823","https://openalex.org/W6809173602","https://openalex.org/W6809885388","https://openalex.org/W6811013733","https://openalex.org/W6838639034","https://openalex.org/W6846007759","https://openalex.org/W6848763691"],"related_works":["https://openalex.org/W4320031223","https://openalex.org/W3015678314","https://openalex.org/W4281902577","https://openalex.org/W4200629851","https://openalex.org/W3009072493","https://openalex.org/W4386185023","https://openalex.org/W4317672133","https://openalex.org/W3140988292","https://openalex.org/W4386080799","https://openalex.org/W4309417370"],"abstract_inverted_index":{"The":[0,155],"rise":[1],"in":[2,55,124],"popularity":[3],"of":[4,73,81,102,105,140,149,157,181],"text-to-image":[5,37,67,153],"generative":[6,68,75,91,164,214],"artificial":[7],"intelligence":[8],"(AI)":[9],"has":[10],"attracted":[11],"widespread":[12],"public":[13],"interest.":[14],"We":[15,31],"demonstrate":[16],"that":[17,26,51,107,175],"this":[18,125,132],"technology":[19],"can":[20,238],"be":[21,239],"attacked":[22],"to":[23,63,110,220,226],"generate":[24],"content":[25,210],"subtly":[27],"manipulates":[28],"its":[29],"users.":[30],"propose":[32],"a":[33,103,137,167,179],"Backdoor":[34],"Attack":[35],"on":[36,94,152],"Generative":[38],"Models":[39],"(BAGM),":[40],"which":[41],"upon":[42],"triggering,":[43],"infuses":[44],"the":[45,56,61,74,79,82,85,89,95,100,128,147,171,189,192,200,204,208,244],"generated":[46,209],"images":[47],"with":[48],"manipulative":[49],"details":[50],"are":[52,108],"naturally":[53],"blended":[54],"content.":[57],"Our":[58,185],"attack":[59],"is":[60,159,246],"first":[62],"target":[64,172,193],"three":[65,71],"popular":[66],"models":[69],"across":[70],"stages":[72],"process":[76],"by":[77,161,195],"modifying":[78],"behaviour":[80],"embedded":[83,186],"tokenizer,":[84],"language":[86],"model":[87,205],"or":[88,207],"image":[90],"model.":[92],"Based":[93],"penetration":[96],"level,":[97],"BAGM":[98,158],"takes":[99],"form":[101],"suite":[104],"attacks":[106,123,151],"referred":[109],"as":[111,170],"<italic":[112,116,120],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[113,117,121],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">surface</i>":[114],",":[115],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">shallow</i>":[118],"and":[119,224,235,243],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">deep</i>":[122],"article.":[126],"Given":[127],"existing":[129],"gap":[130],"within":[131],"domain,":[133],"we":[134,177,217],"also":[135],"contribute":[136,178],"comprehensive":[138],"set":[139],"quantitative":[141],"metrics":[142],"designed":[143],"specifically":[144],"for":[145],"assessing":[146],"effectiveness":[148],"backdoor":[150],"models.":[154,232],"efficacy":[156],"established":[160],"attacking":[162],"state-of-the-art":[163],"models,":[165],"using":[166,230],"marketing":[168],"scenario":[169],"domain.":[173],"To":[174],"end,":[176],"dataset":[180,245],"branded":[182],"product":[183],"images.":[184],"backdoors":[187],"increase":[188],"bias":[190],"towards":[191],"outputs":[194],"more":[196],"than":[197],"five":[198],"times":[199],"usual,":[201],"without":[202],"compromising":[203],"robustness":[206],"utility.":[211],"By":[212],"exposing":[213],"AI\u2019s":[215],"vulnerabilities,":[216],"encourage":[218],"researchers":[219],"tackle":[221],"these":[222],"challenges":[223],"practitioners":[225],"exercise":[227],"caution":[228],"when":[229],"pre-trained":[231],"Relevant":[233],"code":[234],"input":[236],"prompts":[237],"found":[240],"at":[241],"https://github.com/JJ-Vice/BAGM,":[242],"available":[247],"at:":[248],"https://ieee-dataport.org/documents/marketable-foods-mf-dataset.":[249]},"counts_by_year":[{"year":2026,"cited_by_count":8},{"year":2025,"cited_by_count":18},{"year":2024,"cited_by_count":4}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}