{"id":"https://openalex.org/W4407948749","doi":"https://doi.org/10.1109/tnnls.2025.3540303","title":"Backdoor Attacks and Countermeasures in Natural Language Processing Models: A Comprehensive Security Review","display_name":"Backdoor Attacks and Countermeasures in Natural Language Processing Models: A Comprehensive Security Review","publication_year":2025,"publication_date":"2025-02-26","ids":{"openalex":"https://openalex.org/W4407948749","doi":"https://doi.org/10.1109/tnnls.2025.3540303","pmid":"https://pubmed.ncbi.nlm.nih.gov/40031656"},"language":"en","primary_location":{"id":"doi:10.1109/tnnls.2025.3540303","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnnls.2025.3540303","pdf_url":null,"source":{"id":"https://openalex.org/S4210175523","display_name":"IEEE Transactions on Neural Networks and Learning Systems","issn_l":"2162-237X","issn":["2162-237X","2162-2388"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Neural Networks and Learning Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","pubmed"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5009313267","display_name":"Pengzhou Cheng","orcid":"https://orcid.org/0000-0003-0945-8790"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Pengzhou Cheng","raw_affiliation_strings":["Department of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0003-0945-8790","affiliations":[{"raw_affiliation_string":"Department of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100585973","display_name":"Zongru Wu","orcid":"https://orcid.org/0000-0002-5387-7821"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zongru Wu","raw_affiliation_strings":["Department of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-5387-7821","affiliations":[{"raw_affiliation_string":"Department of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5099848276","display_name":"Wei Du","orcid":"https://orcid.org/0000-0001-7474-6452"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wei Du","raw_affiliation_strings":["Department of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0001-7474-6452","affiliations":[{"raw_affiliation_string":"Department of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025780527","display_name":"Haodong Zhao","orcid":"https://orcid.org/0000-0002-4405-1649"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haodong Zhao","raw_affiliation_strings":["Department of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-4405-1649","affiliations":[{"raw_affiliation_string":"Department of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045807606","display_name":"Wei Lu","orcid":"https://orcid.org/0000-0003-0827-0382"},"institutions":[{"id":"https://openalex.org/I152815399","display_name":"Singapore University of Technology and Design","ror":"https://ror.org/05j6fvn87","country_code":"SG","type":"education","lineage":["https://openalex.org/I152815399"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Wei Lu","raw_affiliation_strings":["StatNLP Research Group, Singapore University of Technology and Design, Tampines, Singapore","StatNLP Research Group, Singapore University of Technology and Design, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0000-0003-0827-0382","affiliations":[{"raw_affiliation_string":"StatNLP Research Group, Singapore University of Technology and Design, Tampines, Singapore","institution_ids":["https://openalex.org/I152815399"]},{"raw_affiliation_string":"StatNLP Research Group, Singapore University of Technology and Design, Singapore, Singapore","institution_ids":["https://openalex.org/I152815399"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5085695760","display_name":"Gongshen Liu","orcid":"https://orcid.org/0000-0001-5194-1570"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Gongshen Liu","raw_affiliation_strings":["Department of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0001-5194-1570","affiliations":[{"raw_affiliation_string":"Department of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":26.5239,"has_fulltext":false,"cited_by_count":20,"citation_normalized_percentile":{"value":0.99512037,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":100},"biblio":{"volume":"36","issue":"8","first_page":"13628","last_page":"13648"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9384999871253967,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9384999871253967,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9211000204086304,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.990341305732727},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5985777974128723},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5349010229110718},{"id":"https://openalex.org/keywords/natural","display_name":"Natural (archaeology)","score":0.5108997225761414},{"id":"https://openalex.org/keywords/geology","display_name":"Geology","score":0.19640696048736572}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.990341305732727},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5985777974128723},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5349010229110718},{"id":"https://openalex.org/C2776608160","wikidata":"https://www.wikidata.org/wiki/Q4785462","display_name":"Natural (archaeology)","level":2,"score":0.5108997225761414},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.19640696048736572},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tnnls.2025.3540303","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnnls.2025.3540303","pdf_url":null,"source":{"id":"https://openalex.org/S4210175523","display_name":"IEEE Transactions on Neural Networks and Learning Systems","issn_l":"2162-237X","issn":["2162-237X","2162-2388"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Neural Networks and Learning Systems","raw_type":"journal-article"},{"id":"pmid:40031656","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/40031656","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE transactions on neural networks and learning systems","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1561164823","display_name":null,"funder_award_id":"62406188","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7272630985","display_name":null,"funder_award_id":"U21B2020","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":164,"referenced_works":["https://openalex.org/W2101105183","https://openalex.org/W2807363941","https://openalex.org/W2891177506","https://openalex.org/W2970641574","https://openalex.org/W2973217491","https://openalex.org/W2990270730","https://openalex.org/W3032769455","https://openalex.org/W3035367371","https://openalex.org/W3038046627","https://openalex.org/W3047587361","https://openalex.org/W3102554603","https://openalex.org/W3109409894","https://openalex.org/W3129468510","https://openalex.org/W3133652505","https://openalex.org/W3152758407","https://openalex.org/W3158487140","https://openalex.org/W3167002899","https://openalex.org/W3170572542","https://openalex.org/W3171523434","https://openalex.org/W3173596483","https://openalex.org/W3173784240","https://openalex.org/W3175052694","https://openalex.org/W3176270593","https://openalex.org/W3177223224","https://openalex.org/W3178077565","https://openalex.org/W3190075653","https://openalex.org/W3195374612","https://openalex.org/W3196832521","https://openalex.org/W3204619801","https://openalex.org/W3205191765","https://openalex.org/W3205696278","https://openalex.org/W3207360435","https://openalex.org/W3210951978","https://openalex.org/W3212213895","https://openalex.org/W3213508244","https://openalex.org/W3215670835","https://openalex.org/W4205710429","https://openalex.org/W4224100994","https://openalex.org/W4224903411","https://openalex.org/W4225614914","https://openalex.org/W4280510162","https://openalex.org/W4281902577","https://openalex.org/W4285603001","https://openalex.org/W4288057740","https://openalex.org/W4288057743","https://openalex.org/W4288064574","https://openalex.org/W4319793479","https://openalex.org/W4321484124","https://openalex.org/W4322760473","https://openalex.org/W4323555855","https://openalex.org/W4328028903","https://openalex.org/W4375869395","https://openalex.org/W4382239944","https://openalex.org/W4382317564","https://openalex.org/W4385570110","https://openalex.org/W4385570691","https://openalex.org/W4385570811","https://openalex.org/W4385571591","https://openalex.org/W4385571902","https://openalex.org/W4385572332","https://openalex.org/W4385573287","https://openalex.org/W4385573555","https://openalex.org/W4385573698","https://openalex.org/W4385574083","https://openalex.org/W4385644179","https://openalex.org/W4385734263","https://openalex.org/W4387426828","https://openalex.org/W4387427990","https://openalex.org/W4389519269","https://openalex.org/W4389523874","https://openalex.org/W4389524573","https://openalex.org/W4390874189","https://openalex.org/W4391696889","https://openalex.org/W4392904068","https://openalex.org/W4392909875","https://openalex.org/W4393147876","https://openalex.org/W4393325714","https://openalex.org/W4399450079","https://openalex.org/W4401025145","https://openalex.org/W4401042403","https://openalex.org/W4401042536","https://openalex.org/W4401042664","https://openalex.org/W4401042705","https://openalex.org/W4401042804","https://openalex.org/W4401042878","https://openalex.org/W4401042907","https://openalex.org/W4401042972","https://openalex.org/W4401043416","https://openalex.org/W4402227401","https://openalex.org/W4402669801","https://openalex.org/W4402670002","https://openalex.org/W4402670435","https://openalex.org/W4402671620","https://openalex.org/W4402671722","https://openalex.org/W4402671795","https://openalex.org/W4402683911","https://openalex.org/W4404781676","https://openalex.org/W4404782283","https://openalex.org/W4404782315","https://openalex.org/W4404782584","https://openalex.org/W4405181110","https://openalex.org/W4408749786","https://openalex.org/W4408750049","https://openalex.org/W4409346744","https://openalex.org/W4411112990","https://openalex.org/W4412888092","https://openalex.org/W4412888231","https://openalex.org/W4412888589","https://openalex.org/W6682631176","https://openalex.org/W6743581629","https://openalex.org/W6755207826","https://openalex.org/W6781420246","https://openalex.org/W6788876066","https://openalex.org/W6791576469","https://openalex.org/W6801759574","https://openalex.org/W6804444742","https://openalex.org/W6810332148","https://openalex.org/W6810822526","https://openalex.org/W6811048154","https://openalex.org/W6838562696","https://openalex.org/W6839252630","https://openalex.org/W6846250077","https://openalex.org/W6849568046","https://openalex.org/W6849638892","https://openalex.org/W6851635387","https://openalex.org/W6852368700","https://openalex.org/W6852748698","https://openalex.org/W6853393693","https://openalex.org/W6855083434","https://openalex.org/W6856773073","https://openalex.org/W6857330746","https://openalex.org/W6857438062","https://openalex.org/W6857626974","https://openalex.org/W6858480916","https://openalex.org/W6858967259","https://openalex.org/W6859106585","https://openalex.org/W6859173201","https://openalex.org/W6860616875","https://openalex.org/W6861292197","https://openalex.org/W6861479177","https://openalex.org/W6861883325","https://openalex.org/W6862463349","https://openalex.org/W6863083980","https://openalex.org/W6863208875","https://openalex.org/W6864025076","https://openalex.org/W6869097575","https://openalex.org/W6869205968","https://openalex.org/W6869209932","https://openalex.org/W6869354332","https://openalex.org/W6870180478","https://openalex.org/W6871333230","https://openalex.org/W6872388705","https://openalex.org/W6872484577","https://openalex.org/W6872975695","https://openalex.org/W6873008244","https://openalex.org/W6873155728","https://openalex.org/W6873236645","https://openalex.org/W6873565295","https://openalex.org/W6873815827","https://openalex.org/W6874107655","https://openalex.org/W6874172394","https://openalex.org/W6874583031","https://openalex.org/W6875106686","https://openalex.org/W6940086981"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W4320031223","https://openalex.org/W4200629851","https://openalex.org/W4281902577","https://openalex.org/W4309417370","https://openalex.org/W4292107232","https://openalex.org/W3009072493","https://openalex.org/W4401407399"],"abstract_inverted_index":{"Language":[0],"models":[1],"(LMs)":[2],"are":[3,48,59,138,172,176],"becoming":[4],"increasingly":[5],"popular":[6],"in":[7],"real-world":[8],"applications.":[9],"Outsourcing":[10],"model":[11,63,146,157,165,185],"training":[12,36,159],"and":[13,72,81,95,122,129,161,184,191,195,203,210,234],"data":[14,39],"hosting":[15],"to":[16,40,107,125],"third-party":[17],"platforms":[18],"has":[19],"become":[20],"a":[21,29,42,49,91,116],"standard":[22],"method":[23],"for":[24,207,224],"reducing":[25],"costs.":[26],"In":[27],"such":[28],"situation,":[30],"the":[31,35,62,78,98,109,126,133,135,144,155,200,213,216,221,228],"attacker":[32],"can":[33],"manipulate":[34],"process":[37],"or":[38,150],"inject":[41],"backdoor":[43,85,101,120],"into":[44,140,178],"models.":[45],"Backdoor":[46],"attacks":[47,121,168,209],"serious":[50],"threat":[51],"where":[52],"malicious":[53],"behavior":[54],"is":[55,68,90],"activated":[56],"when":[57],"triggers":[58],"present;":[60],"otherwise,":[61],"operates":[64],"normally.":[65],"However,":[66],"there":[67,89],"still":[69],"no":[70],"systematic":[71],"comprehensive":[73],"review":[74,118,189],"of":[75,93,97,119,132],"LMs":[76],"from":[77,215],"attacker's":[79],"capabilities":[80],"purposes":[82],"on":[83,227],"different":[84],"attack":[86,136],"surfaces.":[87],"Moreover,":[88],"shortage":[92],"analysis":[94],"comparison":[96],"diverse":[99],"emerging":[100],"countermeasures.":[102,123,236],"Therefore,":[103],"this":[104],"work":[105],"aims":[106],"provide":[108,204],"natural":[110],"language":[111,164],"processing":[112],"(NLP)":[113],"community":[114],"with":[115,147,158],"timely":[117],"According":[124],"attackers'":[127],"capability":[128],"affected":[130],"stage":[131],"LMs,":[134],"surfaces":[137],"formalized":[139],"four":[141],"categorizations:":[142],"attacking":[143,154,162],"pretrained":[145],"fine-tuning":[148,152],"(APMF)":[149],"parameter-efficient":[151],"(PEFT),":[153],"final":[156],"(AFMT),":[160],"large":[163],"(ALLM).":[166],"Thus,":[167,187],"under":[169],"each":[170],"categorization":[171],"combed.":[173],"The":[174],"countermeasures":[175,190],"categorized":[177],"two":[179],"general":[180],"classes:":[181],"sample":[182],"inspection":[183],"inspection.":[186],"we":[188,198,218],"analyze":[192],"their":[193],"advantages":[194],"disadvantages.":[196],"Also,":[197],"summarize":[199],"benchmark":[201],"datasets":[202],"comparable":[205],"evaluations":[206],"representative":[208],"defenses.":[211],"Drawing":[212],"insights":[214],"review,":[217],"point":[219],"out":[220],"crucial":[222],"areas":[223],"future":[225],"research":[226],"backdoor,":[229],"especially":[230],"soliciting":[231],"more":[232],"efficient":[233],"practical":[235]},"counts_by_year":[{"year":2026,"cited_by_count":7},{"year":2025,"cited_by_count":12},{"year":2024,"cited_by_count":1}],"updated_date":"2025-12-22T23:10:17.713674","created_date":"2025-10-10T00:00:00"}