{"id":"https://openalex.org/W7127133872","doi":"https://doi.org/10.1109/trustcom66490.2025.00110","title":"Clean Label Backdoor Attack Based on Feature Distance Guided Sample Selection and Noise Optimization","display_name":"Clean Label Backdoor Attack Based on Feature Distance Guided Sample Selection and Noise Optimization","publication_year":2025,"publication_date":"2025-11-14","ids":{"openalex":"https://openalex.org/W7127133872","doi":"https://doi.org/10.1109/trustcom66490.2025.00110"},"language":null,"primary_location":{"id":"doi:10.1109/trustcom66490.2025.00110","is_oa":false,"landing_page_url":"https://doi.org/10.1109/trustcom66490.2025.00110","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 24th International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5121764536","display_name":"Lixia Xie","orcid":null},"institutions":[{"id":"https://openalex.org/I28813325","display_name":"Civil Aviation University of China","ror":"https://ror.org/03je71k37","country_code":"CN","type":"education","lineage":["https://openalex.org/I28813325"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lixia Xie","raw_affiliation_strings":["Civil Aviation University of China,College of Computer Science and Technology,Tianjin,China,300300"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Civil Aviation University of China,College of Computer Science and Technology,Tianjin,China,300300","institution_ids":["https://openalex.org/I28813325"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5124811976","display_name":"Pengcheng Kang","orcid":null},"institutions":[{"id":"https://openalex.org/I28813325","display_name":"Civil Aviation University of China","ror":"https://ror.org/03je71k37","country_code":"CN","type":"education","lineage":["https://openalex.org/I28813325"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Pengcheng Kang","raw_affiliation_strings":["Civil Aviation University of China,College of Computer Science and Technology,Tianjin,China,300300"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Civil Aviation University of China,College of Computer Science and Technology,Tianjin,China,300300","institution_ids":["https://openalex.org/I28813325"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057118376","display_name":"Hongyu Yang","orcid":"https://orcid.org/0000-0002-6955-2503"},"institutions":[{"id":"https://openalex.org/I28813325","display_name":"Civil Aviation University of China","ror":"https://ror.org/03je71k37","country_code":"CN","type":"education","lineage":["https://openalex.org/I28813325"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hongyu Yang","raw_affiliation_strings":["Civil Aviation University of China,College of Safety Science and Engineering,Tianjin,China,300300"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Civil Aviation University of China,College of Safety Science and Engineering,Tianjin,China,300300","institution_ids":["https://openalex.org/I28813325"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5088360655","display_name":"Juncheng Hu","orcid":"https://orcid.org/0000-0002-6232-9093"},"institutions":[{"id":"https://openalex.org/I4210134929","display_name":"Jilin Province Science and Technology Department","ror":"https://ror.org/049x38272","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210134929"]},{"id":"https://openalex.org/I4210141933","display_name":"Jilin Agricultural Science and Technology University","ror":"https://ror.org/04w5zb891","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210141933"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Juncheng Hu","raw_affiliation_strings":["Jilin University,College of Computer Science and Technology,Jilin,China,130000"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Jilin University,College of Computer Science and Technology,Jilin,China,130000","institution_ids":["https://openalex.org/I4210134929","https://openalex.org/I4210141933"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"950","last_page":"957"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7342000007629395,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7342000007629395,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.06300000101327896,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12535","display_name":"Machine Learning and Data Classification","score":0.041099999099969864,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.7613000273704529},{"id":"https://openalex.org/keywords/feature-selection","display_name":"Feature selection","score":0.7017999887466431},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.6887000203132629},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.6657000184059143},{"id":"https://openalex.org/keywords/noise","display_name":"Noise (video)","score":0.6606000065803528},{"id":"https://openalex.org/keywords/feature-vector","display_name":"Feature vector","score":0.5910999774932861},{"id":"https://openalex.org/keywords/sample","display_name":"Sample (material)","score":0.5038999915122986},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.4690000116825104},{"id":"https://openalex.org/keywords/divergence","display_name":"Divergence (linguistics)","score":0.42559999227523804}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.7613000273704529},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.7017999887466431},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.6887000203132629},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.6657000184059143},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.6606000065803528},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6173999905586243},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6003999710083008},{"id":"https://openalex.org/C83665646","wikidata":"https://www.wikidata.org/wiki/Q42139305","display_name":"Feature vector","level":2,"score":0.5910999774932861},{"id":"https://openalex.org/C198531522","wikidata":"https://www.wikidata.org/wiki/Q485146","display_name":"Sample (material)","level":2,"score":0.5038999915122986},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.4690000116825104},{"id":"https://openalex.org/C207390915","wikidata":"https://www.wikidata.org/wiki/Q1230525","display_name":"Divergence (linguistics)","level":2,"score":0.42559999227523804},{"id":"https://openalex.org/C140479938","wikidata":"https://www.wikidata.org/wiki/Q5254619","display_name":"Iterated function","level":2,"score":0.4018000066280365},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.38119998574256897},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.37959998846054077},{"id":"https://openalex.org/C177769412","wikidata":"https://www.wikidata.org/wiki/Q278090","display_name":"Prior probability","level":3,"score":0.3625999987125397},{"id":"https://openalex.org/C29265498","wikidata":"https://www.wikidata.org/wiki/Q7047719","display_name":"Noise measurement","level":3,"score":0.33079999685287476},{"id":"https://openalex.org/C100675267","wikidata":"https://www.wikidata.org/wiki/Q1371624","display_name":"Background noise","level":2,"score":0.32670000195503235},{"id":"https://openalex.org/C100279318","wikidata":"https://www.wikidata.org/wiki/Q467440","display_name":"Sample space","level":2,"score":0.3248000144958496},{"id":"https://openalex.org/C140779682","wikidata":"https://www.wikidata.org/wiki/Q210868","display_name":"Sampling (signal processing)","level":3,"score":0.3118000030517578},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.311599999666214},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.3050000071525574},{"id":"https://openalex.org/C107673813","wikidata":"https://www.wikidata.org/wiki/Q812534","display_name":"Bayesian probability","level":2,"score":0.30230000615119934},{"id":"https://openalex.org/C163294075","wikidata":"https://www.wikidata.org/wiki/Q581861","display_name":"Noise reduction","level":2,"score":0.29679998755455017},{"id":"https://openalex.org/C147764199","wikidata":"https://www.wikidata.org/wiki/Q6865248","display_name":"Minification","level":2,"score":0.2964000105857849},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.29159998893737793},{"id":"https://openalex.org/C129848803","wikidata":"https://www.wikidata.org/wiki/Q2564360","display_name":"Sample size determination","level":2,"score":0.2897000014781952},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2777999937534332},{"id":"https://openalex.org/C149441793","wikidata":"https://www.wikidata.org/wiki/Q200726","display_name":"Probability distribution","level":2,"score":0.2759000062942505},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.25929999351501465},{"id":"https://openalex.org/C102366305","wikidata":"https://www.wikidata.org/wiki/Q1097688","display_name":"Nonparametric statistics","level":2,"score":0.25589999556541443}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/trustcom66490.2025.00110","is_oa":false,"landing_page_url":"https://doi.org/10.1109/trustcom66490.2025.00110","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 24th International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.4354846775531769,"display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W2905423756","https://openalex.org/W2942091739","https://openalex.org/W2996800219","https://openalex.org/W3034414373","https://openalex.org/W3081178496","https://openalex.org/W3083185154","https://openalex.org/W3107990944","https://openalex.org/W3185095134","https://openalex.org/W3188772578","https://openalex.org/W3204155906","https://openalex.org/W4214537185","https://openalex.org/W4293011163","https://openalex.org/W4293379500","https://openalex.org/W4312233756","https://openalex.org/W4312351352","https://openalex.org/W4312569687","https://openalex.org/W4323655037","https://openalex.org/W4404056941"],"related_works":[],"abstract_inverted_index":{"To":[0],"address":[1],"the":[2,42,50,55,61,79,103,106,119,122,144,173,193],"limitations":[3],"of":[4,63,105,121,196],"existing":[5,166],"clean-label":[6,19],"backdoor":[7,20],"attacks,":[8],"particularly":[9],"concerning":[10],"feature":[11,33,44,66,113],"space":[12],"heterogeneity,":[13],"we":[14,24,83,100],"propose":[15],"a":[16,27,138],"novel":[17],"feature-distance-guided":[18],"attack":[21,174],"method.":[22],"Specifically,":[23],"first":[25],"introduce":[26],"sample":[28,65],"selection":[29],"strategy":[30,39],"based":[31],"on":[32,187],"discrepancy":[34],"and":[35,52],"recognizability":[36,120],"constraints.":[37],"This":[38,190],"involves":[40],"calculating":[41],"mean":[43],"vector":[45],"for":[46,156],"each":[47,96],"class":[48,71,80],"within":[49],"dataset":[51],"subsequently":[53],"employing":[54],"Fr\u00e9chet":[56],"Inception":[57],"Distance":[58],"to":[59,109,148,165,179],"quantify":[60],"deviation":[62],"individual":[64],"vectors":[67],"from":[68,78],"their":[69],"respective":[70],"mean,":[72],"thereby":[73],"identifying":[74],"samples":[75,147],"significantly":[76,171],"diverging":[77],"distribution.":[81],"Subsequently,":[82],"present":[84],"an":[85],"innovative":[86],"noise":[87,108],"generation":[88],"technique":[89],"termed":[90],"Feature":[91],"Displacement-Driven":[92],"Noise":[93],"Iteration.":[94],"For":[95],"selected":[97],"training":[98,146],"sample,":[99],"iteratively":[101],"adjust":[102],"intensity":[104],"added":[107],"effectively":[110],"amplify":[111],"its":[112],"distribution":[114],"divergence":[115],"while":[116,181],"rigorously":[117],"preserving":[118],"sample\u2019s":[123],"original":[124],"label,":[125],"ultimately":[126],"yielding":[127],"highly":[128],"optimized":[129],"adversarial":[130],"noise.":[131],"Finally,":[132],"this":[133],"iterated":[134],"noise,":[135],"along":[136],"with":[137],"pre-defined":[139],"trigger,":[140],"is":[141],"embedded":[142],"into":[143],"chosen":[145],"construct":[149],"poisoned":[150],"samples,":[151],"which":[152],"are":[153],"then":[154],"utilized":[155],"model":[157],"training.":[158],"Experimental":[159],"results":[160],"unequivocally":[161],"demonstrate":[162],"that,":[163],"compared":[164],"techniques,":[167],"our":[168,197],"proposed":[169],"method":[170],"enhances":[172],"success":[175],"rate":[176],"by":[177],"0.88%":[178],"13.99%,":[180],"maintaining":[182],"nearly":[183],"identical":[184],"classification":[185],"accuracy":[186],"benign":[188],"samples.":[189],"conclusively":[191],"validates":[192],"superior":[194],"performance":[195],"approach.":[198]},"counts_by_year":[],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2026-02-03T00:00:00"}