{"id":"https://openalex.org/W7128999787","doi":"https://doi.org/10.1109/tmm.2026.3664918","title":"Transferable Backdoor Attack on Any CLIP Model With Any Target Class by Pre-Trained Hack Network","display_name":"Transferable Backdoor Attack on Any CLIP Model With Any Target Class by Pre-Trained Hack Network","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7128999787","doi":"https://doi.org/10.1109/tmm.2026.3664918"},"language":null,"primary_location":{"id":"doi:10.1109/tmm.2026.3664918","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tmm.2026.3664918","pdf_url":null,"source":{"id":"https://openalex.org/S137030581","display_name":"IEEE Transactions on Multimedia","issn_l":"1520-9210","issn":["1520-9210","1941-0077"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Multimedia","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Bing Wang","orcid":"https://orcid.org/0009-0000-1018-6425"},"institutions":[{"id":"https://openalex.org/I136765683","display_name":"Tianjin University of Technology","ror":"https://ror.org/00zbe0w13","country_code":"CN","type":"education","lineage":["https://openalex.org/I136765683"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bing Wang","raw_affiliation_strings":["School of Computer Science and Engineering, Tianjin University of Technology, China"],"raw_orcid":"https://orcid.org/0009-0000-1018-6425","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Tianjin University of Technology, China","institution_ids":["https://openalex.org/I136765683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126078440","display_name":"Shengsheng Qian","orcid":null},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210112150","display_name":"Institute of Automation","ror":"https://ror.org/022c3hy66","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210112150"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shengsheng Qian","raw_affiliation_strings":["State Key Laboratory of Multimodal Artificial Intelligence Systems, Institute of Automation, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-9488-2208","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Multimodal Artificial Intelligence Systems, Institute of Automation, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210112150","https://openalex.org/I19820366"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5039349437","display_name":"Chunqiang Xu","orcid":"https://orcid.org/0000-0001-8343-9665"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210112150","display_name":"Institute of Automation","ror":"https://ror.org/022c3hy66","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210112150"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Changsheng Xu","raw_affiliation_strings":["State Key Laboratory of Multimodal Artificial Intelligence Systems, Institute of Automation, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-8343-9665","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Multimodal Artificial Intelligence Systems, Institute of Automation, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210112150","https://openalex.org/I19820366"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.15819153,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"28","issue":null,"first_page":"4917","last_page":"4927"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.972100019454956,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.972100019454956,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.005200000014156103,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.0024999999441206455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.998199999332428},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.5375000238418579},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.43639999628067017},{"id":"https://openalex.org/keywords/evasion","display_name":"Evasion (ethics)","score":0.4323999881744385},{"id":"https://openalex.org/keywords/flexibility","display_name":"Flexibility (engineering)","score":0.382999986410141},{"id":"https://openalex.org/keywords/covert","display_name":"Covert","score":0.37059998512268066},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.32330000400543213}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.998199999332428},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8197000026702881},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.589900016784668},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.5375000238418579},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.43639999628067017},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.4323999881744385},{"id":"https://openalex.org/C2780598303","wikidata":"https://www.wikidata.org/wiki/Q65921492","display_name":"Flexibility (engineering)","level":2,"score":0.382999986410141},{"id":"https://openalex.org/C2779338814","wikidata":"https://www.wikidata.org/wiki/Q5179285","display_name":"Covert","level":2,"score":0.37059998512268066},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.32330000400543213},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.3197000026702881},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3190000057220459},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.3174000084400177},{"id":"https://openalex.org/C774472","wikidata":"https://www.wikidata.org/wiki/Q6760393","display_name":"Margin (machine learning)","level":2,"score":0.2849999964237213},{"id":"https://openalex.org/C124304363","wikidata":"https://www.wikidata.org/wiki/Q673661","display_name":"Abstraction","level":2,"score":0.2842999994754791},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2662000060081482},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2597000002861023},{"id":"https://openalex.org/C2776207758","wikidata":"https://www.wikidata.org/wiki/Q5303302","display_name":"Downstream (manufacturing)","level":2,"score":0.2565000057220459}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tmm.2026.3664918","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tmm.2026.3664918","pdf_url":null,"source":{"id":"https://openalex.org/S137030581","display_name":"IEEE Transactions on Multimedia","issn_l":"1520-9210","issn":["1520-9210","1941-0077"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Multimedia","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.4476795494556427}],"awards":[{"id":"https://openalex.org/G1498893086","display_name":null,"funder_award_id":"62036012","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2280626339","display_name":null,"funder_award_id":"62276257","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5545906956","display_name":null,"funder_award_id":"L252032","funder_id":"https://openalex.org/F4320322919","funder_display_name":"Natural Science Foundation of Beijing Municipality"},{"id":"https://openalex.org/G8976386447","display_name":null,"funder_award_id":"JQ23018","funder_id":"https://openalex.org/F4320322919","funder_display_name":"Natural Science Foundation of Beijing Municipality"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322919","display_name":"Natural Science Foundation of Beijing Municipality","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"CLIP":[0,21,63,84,104,165,219],"has":[1,22],"promoted":[2],"miscellaneous":[3],"models":[4],"and":[5,70,132,201,220],"downstream":[6,203,222],"applications,":[7],"creating":[8],"a":[9,37,66,91,123,149,211],"great":[10],"family":[11],"in":[12,142],"the":[13,18,42,50,61,130,140,156,163,171,215],"deep":[14],"learning":[15],"community.":[16],"Recently,":[17],"security":[19,216],"of":[20,170,218],"become":[23],"an":[24],"increasingly":[25],"popular":[26],"research":[27],"topic,":[28],"where":[29,129,155],"backdoor":[30,39,46,100,152],"attacks":[31,47,101],"show":[32],"potential":[33],"devastation":[34],"by":[35],"injecting":[36],"covert":[38],"to":[40,57,78,118,138],"manipulate":[41],"output":[43],"features.":[44],"Existing":[45],"typically":[48],"bind":[49],"target":[51,62,80,83,108,164,172],"class":[52,81],"with":[53,106,167],"large-scale":[54],"poisonous":[55],"data":[56],"pre-train":[58],"or":[59,82,116],"finetune":[60],"model.":[64,85],"Such":[65],"paradigm":[67,97],"lacks":[68],"transferability":[69],"flexibility":[71],"since":[72],"it":[73],"needs":[74],"retraining":[75],"when":[76],"applied":[77],"another":[79],"In":[86,174],"this":[87,207],"paper,":[88],"we":[89,121,147],"propose":[90,122,148],"novel":[92],"Transferable":[93,177],"Backdoor":[94],"Attack":[95],"(TBA)":[96],"for":[98,194],"transferring":[99],"on":[102,197,214],"any":[103,107],"model":[105,166],"class,":[109],"reducing":[110],"time":[111],"costs":[112],"from":[113],"conventional":[114],"days":[115],"hours":[117],"seconds.":[119],"First,":[120],"multimodal":[124,143],"hack":[125,134,157],"network":[126],"pre-training":[127],"step,":[128,154],"visual":[131],"textual":[133],"networks":[135,158],"are":[136,159],"pre-trained":[137],"recognize":[139],"triggers":[141],"inputs":[144],"robustly.":[145],"Second,":[146],"few-shot":[150],"training-free":[151],"transfer":[153],"efficiently":[160],"fused":[161],"into":[162],"few":[168],"samples":[169],"class.":[173],"experiments,":[175],"our":[176],"Hack":[178],"Network":[179],"(THNet)":[180],"consistently":[181],"achieves":[182],"<inline-formula":[183],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[184],"xmlns:xlink=\"http://www.w3.org/1999/xlink\"><tex-math":[185],"notation=\"LaTeX\">$&gt;99$</tex-math></inline-formula>%":[186],"attack":[187],"success":[188],"rate":[189],"while":[190],"making":[191],"minimum":[192],"impact":[193],"clean":[195],"input":[196],"various":[198],"TBA":[199],"settings":[200],"two":[202],"tasks.":[204],"We":[205],"hope":[206],"work":[208],"can":[209],"contribute":[210],"new":[212],"perspective":[213],"vulnerability":[217],"its":[221],"applications.":[223]},"counts_by_year":[],"updated_date":"2026-06-30T06:16:30.551410","created_date":"2026-02-17T00:00:00"}