{"id":"https://openalex.org/W4393325714","doi":"https://doi.org/10.1109/tr.2024.3375526","title":"Leverage NLP Models Against Other NLP Models: Two Invisible Feature Space Backdoor Attacks","display_name":"Leverage NLP Models Against Other NLP Models: Two Invisible Feature Space Backdoor Attacks","publication_year":2024,"publication_date":"2024-03-29","ids":{"openalex":"https://openalex.org/W4393325714","doi":"https://doi.org/10.1109/tr.2024.3375526"},"language":"en","primary_location":{"id":"doi:10.1109/tr.2024.3375526","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tr.2024.3375526","pdf_url":null,"source":{"id":"https://openalex.org/S87725633","display_name":"IEEE Transactions on Reliability","issn_l":"0018-9529","issn":["0018-9529","1558-1721"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Reliability","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100755635","display_name":"Xiangjun Li","orcid":"https://orcid.org/0000-0003-4901-6065"},"institutions":[{"id":"https://openalex.org/I141649914","display_name":"Nanchang University","ror":"https://ror.org/042v6xz23","country_code":"CN","type":"education","lineage":["https://openalex.org/I141649914"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiangjun Li","raw_affiliation_strings":["School of Software, Nanchang University, Nanchang, China"],"raw_orcid":"https://orcid.org/0000-0003-4901-6065","affiliations":[{"raw_affiliation_string":"School of Software, Nanchang University, Nanchang, China","institution_ids":["https://openalex.org/I141649914"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110375999","display_name":"Xin Lu","orcid":"https://orcid.org/0000-0002-6135-6778"},"institutions":[{"id":"https://openalex.org/I141649914","display_name":"Nanchang University","ror":"https://ror.org/042v6xz23","country_code":"CN","type":"education","lineage":["https://openalex.org/I141649914"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xin Lu","raw_affiliation_strings":["School of Software, Nanchang University, Nanchang, China"],"raw_orcid":"https://orcid.org/0000-0002-6135-6778","affiliations":[{"raw_affiliation_string":"School of Software, Nanchang University, Nanchang, China","institution_ids":["https://openalex.org/I141649914"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103214488","display_name":"Peixuan Li","orcid":"https://orcid.org/0009-0005-9668-6282"},"institutions":[{"id":"https://openalex.org/I141649914","display_name":"Nanchang University","ror":"https://ror.org/042v6xz23","country_code":"CN","type":"education","lineage":["https://openalex.org/I141649914"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peixuan Li","raw_affiliation_strings":["School of Software, Nanchang University, Nanchang, China"],"raw_orcid":"https://orcid.org/0009-0005-9668-6282","affiliations":[{"raw_affiliation_string":"School of Software, Nanchang University, Nanchang, China","institution_ids":["https://openalex.org/I141649914"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I141649914"],"apc_list":null,"apc_paid":null,"fwci":1.6671,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.85477809,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":"73","issue":"3","first_page":"1559","last_page":"1568"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.9861999750137329,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.958299994468689,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.8679152727127075},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.770915150642395},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.7220748066902161},{"id":"https://openalex.org/keywords/natural-language-processing","display_name":"Natural language processing","score":0.5769193172454834},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.534637451171875},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.4342684745788574},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3474084734916687},{"id":"https://openalex.org/keywords/philosophy","display_name":"Philosophy","score":0.08796164393424988},{"id":"https://openalex.org/keywords/linguistics","display_name":"Linguistics","score":0.08168882131576538},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.07508519291877747}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.8679152727127075},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.770915150642395},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.7220748066902161},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.5769193172454834},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.534637451171875},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4342684745788574},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3474084734916687},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.08796164393424988},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.08168882131576538},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.07508519291877747}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tr.2024.3375526","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tr.2024.3375526","pdf_url":null,"source":{"id":"https://openalex.org/S87725633","display_name":"IEEE Transactions on Reliability","issn_l":"0018-9529","issn":["0018-9529","1558-1721"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Reliability","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2208792108","display_name":null,"funder_award_id":"62262023","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6501951852","display_name":null,"funder_award_id":"62262039","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":45,"referenced_works":["https://openalex.org/W1566289585","https://openalex.org/W2064675550","https://openalex.org/W2618530766","https://openalex.org/W2753783305","https://openalex.org/W2774423163","https://openalex.org/W2896457183","https://openalex.org/W2942091739","https://openalex.org/W2949611393","https://openalex.org/W2956090150","https://openalex.org/W2963126845","https://openalex.org/W2973217491","https://openalex.org/W2978017171","https://openalex.org/W2979826702","https://openalex.org/W3034579202","https://openalex.org/W3035367371","https://openalex.org/W3042368254","https://openalex.org/W3100727892","https://openalex.org/W3107337211","https://openalex.org/W3109409894","https://openalex.org/W3121099749","https://openalex.org/W3158487140","https://openalex.org/W3163168187","https://openalex.org/W3171158332","https://openalex.org/W3176270593","https://openalex.org/W3195374612","https://openalex.org/W3204619801","https://openalex.org/W3205696278","https://openalex.org/W3212213895","https://openalex.org/W4287998266","https://openalex.org/W4288624561","https://openalex.org/W4385573698","https://openalex.org/W6631190155","https://openalex.org/W6679436768","https://openalex.org/W6685053522","https://openalex.org/W6691459498","https://openalex.org/W6746897123","https://openalex.org/W6750535842","https://openalex.org/W6758737392","https://openalex.org/W6768021236","https://openalex.org/W6768851824","https://openalex.org/W6770897281","https://openalex.org/W6772197573","https://openalex.org/W6787231136","https://openalex.org/W6797333283","https://openalex.org/W6839252630"],"related_works":["https://openalex.org/W4320031223","https://openalex.org/W4200629851","https://openalex.org/W4281902577","https://openalex.org/W4309417370","https://openalex.org/W4292107232","https://openalex.org/W3009072493","https://openalex.org/W4386080799","https://openalex.org/W3140988292","https://openalex.org/W4317672133","https://openalex.org/W4386185023"],"abstract_inverted_index":{"At":[0],"present,":[1],"deep":[2],"neural":[3],"networks":[4],"are":[5,47],"at":[6],"risk":[7],"from":[8],"backdoor":[9,20,27,32,44,51,66,86,95,120,137,147,163,171],"attacks,":[10,28,164],"but":[11],"natural":[12],"language":[13,37,63,104,113],"processing":[14],"(NLP)":[15],"lacks":[16],"sufficient":[17],"research":[18],"on":[19],"attacks.":[21,52],"To":[22],"improve":[23],"the":[24,61,75,94,100,124,131,136,165],"invisibility":[25],"of":[26,73,102,127],"some":[29],"innovative":[30],"textual":[31],"attack":[33,87,148],"methods":[34,149],"utilize":[35],"modern":[36,103],"models":[38,105],"to":[39,106,143],"generate":[40],"poisoned":[41,166],"text":[42,91],"with":[43,159],"triggers,":[45],"which":[46,122],"called":[48],"feature":[49,161],"space":[50,162],"However,":[53],"this":[54,80,115],"article":[55,81,116],"find":[56],"that":[57,88,145],"texts":[58,109],"generated":[59,110,129,168],"by":[60,99,111,130,169],"same":[62,132],"model":[64,134],"without":[65],"triggers":[67],"also":[68],"have":[69,140,173],"a":[70,83,118],"high":[71],"probability":[72],"activating":[74],"backdoors":[76],"they":[77],"injected.":[78],"Therefore,":[79],"proposes":[82,117],"multistyle":[84],"transfer-based":[85],"uses":[89],"multiple":[90],"styles":[92],"as":[93,135],"trigger.":[96,138],"Furthermore,":[97],"inspired":[98],"ability":[101],"distinguish":[107],"between":[108],"different":[112],"models,":[114],"paraphrase-based":[119,170],"attack,":[121],"leverages":[123],"shared":[125],"characteristics":[126],"sentences":[128],"paraphrase":[133],"Experiments":[139],"been":[141],"conducted":[142],"demonstrate":[144],"both":[146],"can":[150],"be":[151],"effective":[152],"against":[153],"NLP":[154],"models.":[155],"More":[156],"importantly,":[157],"compared":[158],"other":[160],"samples":[167],"attacks":[172],"improved":[174],"semantic":[175],"similarity.":[176]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}