{"id":"https://openalex.org/W7138873808","doi":"https://doi.org/10.1109/tifs.2026.3675424","title":"A Dual-Purpose Framework for Backdoor Defense and Backdoor Amplification in Diffusion Models","display_name":"A Dual-Purpose Framework for Backdoor Defense and Backdoor Amplification in Diffusion Models","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7138873808","doi":"https://doi.org/10.1109/tifs.2026.3675424"},"language":null,"primary_location":{"id":"doi:10.1109/tifs.2026.3675424","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2026.3675424","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5022180792","display_name":"Vu Tuan Truong","orcid":"https://orcid.org/0009-0003-3072-7905"},"institutions":[{"id":"https://openalex.org/I39481719","display_name":"Institut National de la Recherche Scientifique","ror":"https://ror.org/04td37d32","country_code":"CA","type":"education","lineage":["https://openalex.org/I39481719","https://openalex.org/I49663120"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Vu Tuan Truong","raw_affiliation_strings":["INRS, University of Québec, Montréal, QC, Canada"],"raw_orcid":"https://orcid.org/0009-0003-3072-7905","affiliations":[{"raw_affiliation_string":"INRS, University of Québec, Montréal, QC, Canada","institution_ids":["https://openalex.org/I39481719"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5029986211","display_name":"Long Bao Le","orcid":"https://orcid.org/0000-0003-3577-6530"},"institutions":[{"id":"https://openalex.org/I39481719","display_name":"Institut National de la Recherche Scientifique","ror":"https://ror.org/04td37d32","country_code":"CA","type":"education","lineage":["https://openalex.org/I39481719","https://openalex.org/I49663120"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Long Bao Le","raw_affiliation_strings":["INRS, University of Québec, Montréal, QC, Canada"],"raw_orcid":"https://orcid.org/0000-0003-3577-6530","affiliations":[{"raw_affiliation_string":"INRS, University of Québec, Montréal, QC, Canada","institution_ids":["https://openalex.org/I39481719"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I39481719"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.27803173,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"21","issue":null,"first_page":"3297","last_page":"3311"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.46560001373291016,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.46560001373291016,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.11349999904632568,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.06260000169277191,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9988999962806702},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.44760000705718994},{"id":"https://openalex.org/keywords/inversion","display_name":"Inversion (geology)","score":0.3935000002384186},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.2720000147819519},{"id":"https://openalex.org/keywords/diffusion","display_name":"Diffusion","score":0.2558000087738037}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9988999962806702},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.664900004863739},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.44760000705718994},{"id":"https://openalex.org/C1893757","wikidata":"https://www.wikidata.org/wiki/Q3653001","display_name":"Inversion (geology)","level":3,"score":0.3935000002384186},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3472999930381775},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.2720000147819519},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.27079999446868896},{"id":"https://openalex.org/C69357855","wikidata":"https://www.wikidata.org/wiki/Q163214","display_name":"Diffusion","level":2,"score":0.2558000087738037},{"id":"https://openalex.org/C14036430","wikidata":"https://www.wikidata.org/wiki/Q3736076","display_name":"Function (biology)","level":2,"score":0.24150000512599945},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.23149999976158142}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2026.3675424","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2026.3675424","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.49779510498046875,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W1834627138","https://openalex.org/W1901129140","https://openalex.org/W1965555277","https://openalex.org/W2543927648","https://openalex.org/W2934843808","https://openalex.org/W3042368254","https://openalex.org/W4312933868","https://openalex.org/W4383221550","https://openalex.org/W4386065402","https://openalex.org/W4386066154","https://openalex.org/W4386072042","https://openalex.org/W4386072220","https://openalex.org/W4387967988","https://openalex.org/W4390872151","https://openalex.org/W4393156382","https://openalex.org/W4400276244","https://openalex.org/W4404725244","https://openalex.org/W4408155387","https://openalex.org/W4409361744","https://openalex.org/W4411409004","https://openalex.org/W4413144602","https://openalex.org/W4414539170","https://openalex.org/W7133192493"],"related_works":[],"abstract_inverted_index":{"Diffusion":[0],"models":[1,26],"have":[2,17],"emerged":[3],"as":[4],"state-of-the-art":[5],"generative":[6],"frameworks,":[7],"excelling":[8],"in":[9,80,164,203],"producing":[10],"high-quality":[11],"multi-modal":[12],"samples.":[13],"However,":[14],"recent":[15],"studies":[16],"revealed":[18],"their":[19,44],"vulnerability":[20],"to":[21,43,75,133,158,220,229],"backdoor":[22,32,61,64,77,106,119,131,135,178,218],"attacks,":[23],"where":[24],"backdoored":[25,166],"generate":[27],"specific,":[28],"undesirable":[29],"outputs":[30],"called":[31],"target":[33],"(e.g.,":[34],"harmful":[35],"images)":[36],"when":[37,104],"a":[38,52,105,118,194],"pre-defined":[39],"trigger":[40,112,127,152,162,200],"is":[41,107,114],"embedded":[42,79,163],"inputs.":[45],"In":[46,137],"this":[47],"paper,":[48],"we":[49,69,116,148],"propose":[50],"PureDiffusion,":[51],"dual-purpose":[53],"framework":[54],"that":[55,122,184],"simultaneously":[56],"serves":[57],"two":[58,71],"contrasting":[59],"roles:":[60],"defense":[62],"and":[63,128],"attack":[65,140,172,207,212],"amplification.":[66],"For":[67],"defense,":[68],"introduce":[70],"novel":[72],"loss":[73],"functions":[74],"invert":[76],"triggers":[78],"diffusion":[81,94,167],"models.":[82],"The":[83],"first":[84],"leverages":[85],"trigger-induced":[86],"distribution":[87],"shifts":[88],"across":[89],"multiple":[90],"timesteps":[91],"of":[92,139,145,216],"the":[93,97,100,125,129,143,160,165,176,211],"process,":[95],"while":[96,174,223],"second":[98],"exploits":[99],"denoising":[101],"consistency":[102],"effect":[103],"activated.":[108],"Once":[109],"an":[110,146],"accurate":[111],"inversion":[113,153],"achieved,":[115],"develop":[117],"detection":[120,188],"method":[121],"analyzes":[123],"both":[124],"inverted":[126],"generated":[130],"targets":[132],"identify":[134],"attacks.":[136],"terms":[138],"amplification":[141,208],"with":[142],"role":[144],"attacker,":[147],"describe":[149],"how":[150],"our":[151,206],"algorithm":[154],"can":[155],"be":[156],"used":[157],"reinforce":[159],"original":[161],"model.":[168],"This":[169],"significantly":[170],"boosts":[171],"performance":[173],"reducing":[175,224],"required":[177],"training":[179,225],"time.":[180],"Experimental":[181],"results":[182],"demonstrate":[183],"PureDiffusion":[185],"achieves":[186],"near-perfect":[187],"accuracy,":[189],"outperforming":[190],"existing":[191,217],"defenses":[192],"by":[193,227],"large":[195],"margin,":[196],"particularly":[197],"against":[198],"complex":[199],"patterns.":[201],"Additionally,":[202],"attacking":[204],"scenarios,":[205],"approach":[209],"elevates":[210],"success":[213],"rate":[214],"(ASR)":[215],"attacks":[219],"nearly":[221],"100%":[222],"time":[226],"up":[228],"20\u00d7.":[230]},"counts_by_year":[],"updated_date":"2026-04-02T13:48:15.688549","created_date":"2026-03-20T00:00:00"}