{"id":"https://openalex.org/W4393184763","doi":"https://doi.org/10.1109/tip.2024.3378918","title":"BadCM: Invisible Backdoor Attack Against Cross-Modal Learning","display_name":"BadCM: Invisible Backdoor Attack Against Cross-Modal Learning","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4393184763","doi":"https://doi.org/10.1109/tip.2024.3378918","pmid":"https://pubmed.ncbi.nlm.nih.gov/38530729"},"language":"en","primary_location":{"id":"doi:10.1109/tip.2024.3378918","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tip.2024.3378918","pdf_url":null,"source":{"id":"https://openalex.org/S4210173141","display_name":"IEEE Transactions on Image Processing","issn_l":"1057-7149","issn":["1057-7149","1941-0042"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Image Processing","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref","pubmed"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2410.02182","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100459168","display_name":"Zheng Zhang","orcid":"https://orcid.org/0000-0003-1470-6998"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zheng Zhang","raw_affiliation_strings":["School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0003-1470-6998","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100359954","display_name":"Yuan Xu","orcid":"https://orcid.org/0000-0002-2822-9443"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xu Yuan","raw_affiliation_strings":["School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0002-2822-9443","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108048954","display_name":"Lei Zhu","orcid":"https://orcid.org/0000-0002-2993-7142"},"institutions":[{"id":"https://openalex.org/I116953780","display_name":"Tongji University","ror":"https://ror.org/03rc6as71","country_code":"CN","type":"education","lineage":["https://openalex.org/I116953780"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lei Zhu","raw_affiliation_strings":["School of Electronic and Information Engineering, Tongji University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-2993-7142","affiliations":[{"raw_affiliation_string":"School of Electronic and Information Engineering, Tongji University, Shanghai, China","institution_ids":["https://openalex.org/I116953780"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036987388","display_name":"Jingkuan Song","orcid":"https://orcid.org/0000-0002-2549-8322"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jingkuan Song","raw_affiliation_strings":["School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China"],"raw_orcid":"https://orcid.org/0000-0002-2549-8322","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5038612499","display_name":"Liqiang Nie","orcid":"https://orcid.org/0000-0003-1476-0273"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Liqiang Nie","raw_affiliation_strings":["School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0003-1476-0273","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, China","institution_ids":["https://openalex.org/I204983213"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.7005,"has_fulltext":true,"cited_by_count":23,"citation_normalized_percentile":{"value":0.95996065,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"33","issue":null,"first_page":"2558","last_page":"2571"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.9779000282287598,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11780","display_name":"Rabies epidemiology and control","score":0.9435999989509583,"subfield":{"id":"https://openalex.org/subfields/2406","display_name":"Virology"},"field":{"id":"https://openalex.org/fields/24","display_name":"Immunology and Microbiology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9977825880050659},{"id":"https://openalex.org/keywords/modal","display_name":"Modal","score":0.7471346259117126},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6479885578155518},{"id":"https://openalex.org/keywords/generalization","display_name":"Generalization","score":0.5623363256454468},{"id":"https://openalex.org/keywords/modality","display_name":"Modality (human\u2013computer interaction)","score":0.5168986320495605},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5013232231140137},{"id":"https://openalex.org/keywords/invariant","display_name":"Invariant (physics)","score":0.41400665044784546},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.3476848304271698},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.34557294845581055},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.31534379720687866},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.15868332982063293}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9977825880050659},{"id":"https://openalex.org/C71139939","wikidata":"https://www.wikidata.org/wiki/Q910194","display_name":"Modal","level":2,"score":0.7471346259117126},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6479885578155518},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.5623363256454468},{"id":"https://openalex.org/C2780226545","wikidata":"https://www.wikidata.org/wiki/Q6888030","display_name":"Modality (human\u2013computer interaction)","level":2,"score":0.5168986320495605},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5013232231140137},{"id":"https://openalex.org/C190470478","wikidata":"https://www.wikidata.org/wiki/Q2370229","display_name":"Invariant (physics)","level":2,"score":0.41400665044784546},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3476848304271698},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.34557294845581055},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.31534379720687866},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.15868332982063293},{"id":"https://openalex.org/C37914503","wikidata":"https://www.wikidata.org/wiki/Q156495","display_name":"Mathematical physics","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C188027245","wikidata":"https://www.wikidata.org/wiki/Q750446","display_name":"Polymer chemistry","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/tip.2024.3378918","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tip.2024.3378918","pdf_url":null,"source":{"id":"https://openalex.org/S4210173141","display_name":"IEEE Transactions on Image Processing","issn_l":"1057-7149","issn":["1057-7149","1941-0042"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Image Processing","raw_type":"journal-article"},{"id":"pmid:38530729","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/38530729","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE transactions on image processing : a publication of the IEEE Signal Processing Society","raw_type":null},{"id":"pmh:oai:arXiv.org:2410.02182","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2410.02182","pdf_url":"https://arxiv.org/pdf/2410.02182","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2410.02182","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2410.02182","pdf_url":"https://arxiv.org/pdf/2410.02182","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G186144173","display_name":null,"funder_award_id":"HIT.OCEF.2023026","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G1943805037","display_name":null,"funder_award_id":"62372132","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4393184763.pdf","grobid_xml":"https://content.openalex.org/works/W4393184763.grobid-xml"},"referenced_works_count":71,"referenced_works":["https://openalex.org/W1673923490","https://openalex.org/W1686810756","https://openalex.org/W1861492603","https://openalex.org/W1901129140","https://openalex.org/W1933349210","https://openalex.org/W2006147162","https://openalex.org/W2007972815","https://openalex.org/W2114770744","https://openalex.org/W2194775991","https://openalex.org/W2266728343","https://openalex.org/W2476034201","https://openalex.org/W2560730294","https://openalex.org/W2745461083","https://openalex.org/W2747623286","https://openalex.org/W2748789698","https://openalex.org/W2765440071","https://openalex.org/W2774423163","https://openalex.org/W2807363941","https://openalex.org/W2896457183","https://openalex.org/W2962858109","https://openalex.org/W2962938439","https://openalex.org/W2962964995","https://openalex.org/W2963073614","https://openalex.org/W2963150162","https://openalex.org/W2963622213","https://openalex.org/W2966683369","https://openalex.org/W2967957126","https://openalex.org/W2971661634","https://openalex.org/W2973217491","https://openalex.org/W2996800219","https://openalex.org/W3035367371","https://openalex.org/W3101449015","https://openalex.org/W3106646114","https://openalex.org/W3109409894","https://openalex.org/W3112001526","https://openalex.org/W3123566204","https://openalex.org/W3167245327","https://openalex.org/W3175052694","https://openalex.org/W3176270593","https://openalex.org/W3188772578","https://openalex.org/W3204619801","https://openalex.org/W3205696278","https://openalex.org/W3215670835","https://openalex.org/W3216470601","https://openalex.org/W4200475325","https://openalex.org/W4214564822","https://openalex.org/W4214680449","https://openalex.org/W4224932902","https://openalex.org/W4229079397","https://openalex.org/W4281902577","https://openalex.org/W4289792716","https://openalex.org/W4312280786","https://openalex.org/W4312569687","https://openalex.org/W4312700692","https://openalex.org/W4312715548","https://openalex.org/W4321472343","https://openalex.org/W4386083011","https://openalex.org/W6620707391","https://openalex.org/W6637162671","https://openalex.org/W6637373629","https://openalex.org/W6721087566","https://openalex.org/W6743581629","https://openalex.org/W6746897123","https://openalex.org/W6752083267","https://openalex.org/W6755207826","https://openalex.org/W6784558051","https://openalex.org/W6789325072","https://openalex.org/W6789753369","https://openalex.org/W6791353385","https://openalex.org/W6794566239","https://openalex.org/W6849726631"],"related_works":["https://openalex.org/W4320031223","https://openalex.org/W4200629851","https://openalex.org/W4281902577","https://openalex.org/W4309417370","https://openalex.org/W4292107232","https://openalex.org/W3009072493","https://openalex.org/W4386080799","https://openalex.org/W3140988292","https://openalex.org/W4317672133","https://openalex.org/W627697492"],"abstract_inverted_index":{"Despite":[0],"remarkable":[1],"successes":[2],"in":[3,30,58,72,79,166],"unimodal":[4,37],"learning":[5,11,92],"tasks,":[6],"backdoor":[7,69,82,88,180,227],"attacks":[8,187],"against":[9,90],"cross-modal":[10,46,81,91,96,133,186,200],"are":[12],"still":[13],"underexplored":[14],"due":[15],"to":[16,70,101,130,139],"the":[17,73,77,80,103,123,170,177,205],"limited":[18],"generalization":[19,208],"and":[20,49,83,157,202,207],"inferior":[21],"stealthiness":[22],"when":[23],"involving":[24],"multiple":[25,213],"modalities.":[26],"Notably,":[27],"since":[28],"works":[29],"this":[31,62],"area":[32],"mainly":[33],"inherit":[34],"ideas":[35],"from":[36],"visual":[38,156],"attacks,":[39],"they":[40],"struggle":[41],"with":[42,44],"dealing":[43],"diverse":[45,185],"attack":[47,141,216],"circumstances":[48],"manipulating":[50],"imperceptible":[51],"trigger":[52,112,164],"samples,":[53],"which":[54],"hinders":[55],"their":[56],"practicability":[57],"real-world":[59],"applications.":[60],"In":[61],"paper,":[63],"we":[64,151,219],"introduce":[65],"a":[66,85,95],"novel":[67],"bilateral":[68],"fill":[71],"missing":[74],"pieces":[75],"of":[76,148,172,209,215],"puzzle":[78],"propose":[84],"generalized":[86],"invisible":[87,179],"framework":[89,137],"(BadCM).":[93],"Specifically,":[94],"mining":[97],"scheme":[98],"is":[99,128,176,231],"developed":[100],"capture":[102],"modality-invariant":[104,167],"components":[105],"as":[106],"target":[107],"poisoning":[108],"areas,":[109],"where":[110],"well-designed":[111],"patterns":[113,165],"injected":[114],"into":[115],"these":[116],"regions":[117],"can":[118,223],"be":[119],"efficiently":[120],"recognized":[121],"by":[122],"victim":[124],"models.":[125],"This":[126],"strategy":[127],"adapted":[129],"different":[131],"image-text":[132],"models,":[134],"making":[135],"our":[136,173,210],"available":[138,232],"various":[140],"scenarios.":[142,217],"Furthermore,":[143],"for":[144,155,184],"generating":[145],"poisoned":[146],"samples":[147],"high":[149],"stealthiness,":[150],"conceive":[152],"modality-specific":[153],"generators":[154],"linguistic":[158],"modalities":[159],"that":[160,221],"facilitate":[161],"hiding":[162],"explicit":[163],"regions.":[168],"To":[169],"best":[171],"knowledge,":[174],"BadCM":[175,222],"first":[178],"method":[181,211],"deliberately":[182],"designed":[183],"within":[188],"one":[189],"unified":[190],"framework.":[191],"Comprehensive":[192],"experimental":[193],"evaluations":[194],"on":[195],"two":[196],"typical":[197],"applications,":[198],"i.e.,":[199],"retrieval":[201],"VQA,":[203],"demonstrate":[204],"effectiveness":[206],"under":[212],"kinds":[214],"Moreover,":[218],"show":[220],"robustly":[224],"evade":[225],"existing":[226],"defenses.":[228],"Our":[229],"code":[230],"at":[233],"https://github.com/xandery-geek/BadCM.":[234]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":13},{"year":2024,"cited_by_count":5}],"updated_date":"2025-12-19T19:40:27.379048","created_date":"2025-10-10T00:00:00"}