{"id":"https://openalex.org/W4410088801","doi":"https://doi.org/10.1145/3696410.3714624","title":"Model Supply Chain Poisoning: Backdooring Pre-trained Models via Embedding Indistinguishability","display_name":"Model Supply Chain Poisoning: Backdooring Pre-trained Models via Embedding Indistinguishability","publication_year":2025,"publication_date":"2025-04-22","ids":{"openalex":"https://openalex.org/W4410088801","doi":"https://doi.org/10.1145/3696410.3714624"},"language":"en","primary_location":{"id":"doi:10.1145/3696410.3714624","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3696410.3714624","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Web Conference 2025","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5112461688","display_name":"Hao Wang","orcid":"https://orcid.org/0009-0001-2350-9032"},"institutions":[{"id":"https://openalex.org/I158842170","display_name":"Chongqing University","ror":"https://ror.org/023rhb549","country_code":"CN","type":"education","lineage":["https://openalex.org/I158842170"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hao Wang","raw_affiliation_strings":["Chongqing University, Chongqing, China"],"raw_orcid":"https://orcid.org/0009-0001-2350-9032","affiliations":[{"raw_affiliation_string":"Chongqing University, Chongqing, China","institution_ids":["https://openalex.org/I158842170"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073264981","display_name":"Shangwei Guo","orcid":"https://orcid.org/0000-0002-6443-5308"},"institutions":[{"id":"https://openalex.org/I158842170","display_name":"Chongqing University","ror":"https://ror.org/023rhb549","country_code":"CN","type":"education","lineage":["https://openalex.org/I158842170"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shangwei Guo","raw_affiliation_strings":["Chongqing University, Chongqing, China"],"raw_orcid":"https://orcid.org/0000-0002-6443-5308","affiliations":[{"raw_affiliation_string":"Chongqing University, Chongqing, China","institution_ids":["https://openalex.org/I158842170"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016904590","display_name":"Jialing He","orcid":"https://orcid.org/0000-0002-8643-0647"},"institutions":[{"id":"https://openalex.org/I158842170","display_name":"Chongqing University","ror":"https://ror.org/023rhb549","country_code":"CN","type":"education","lineage":["https://openalex.org/I158842170"]},{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jialing He","raw_affiliation_strings":["Chongqing University, Chongqing, China and Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-8643-0647","affiliations":[{"raw_affiliation_string":"Chongqing University, Chongqing, China and Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I158842170","https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079756731","display_name":"Hangcheng Liu","orcid":"https://orcid.org/0000-0002-4392-2254"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Hangcheng Liu","raw_affiliation_strings":["Nanyang Technological University, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-4392-2254","affiliations":[{"raw_affiliation_string":"Nanyang Technological University, Singapore, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101591101","display_name":"Tianwei Zhang","orcid":"https://orcid.org/0000-0001-6595-6650"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Tianwei Zhang","raw_affiliation_strings":["Nanyang Technological University, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0000-0001-6595-6650","affiliations":[{"raw_affiliation_string":"Nanyang Technological University, Singapore, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5079461118","display_name":"Tao Xiang","orcid":"https://orcid.org/0000-0002-9439-4623"},"institutions":[{"id":"https://openalex.org/I158842170","display_name":"Chongqing University","ror":"https://ror.org/023rhb549","country_code":"CN","type":"education","lineage":["https://openalex.org/I158842170"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tao Xiang","raw_affiliation_strings":["Chongqing University, Chongqing, China"],"raw_orcid":"https://orcid.org/0000-0002-9439-4623","affiliations":[{"raw_affiliation_string":"Chongqing University, Chongqing, China","institution_ids":["https://openalex.org/I158842170"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":15.2463,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":{"value":0.99171304,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"840","last_page":"851"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9352999925613403,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12072","display_name":"Machine Learning and Algorithms","score":0.9222999811172485,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/supply-chain","display_name":"Supply chain","score":0.6579905152320862},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.6369394659996033},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6135411858558655},{"id":"https://openalex.org/keywords/chain","display_name":"Chain (unit)","score":0.46651116013526917},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.35537195205688477},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.33683598041534424},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.22225144505500793},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.0824744701385498}],"concepts":[{"id":"https://openalex.org/C108713360","wikidata":"https://www.wikidata.org/wiki/Q1824206","display_name":"Supply chain","level":2,"score":0.6579905152320862},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.6369394659996033},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6135411858558655},{"id":"https://openalex.org/C199185054","wikidata":"https://www.wikidata.org/wiki/Q552299","display_name":"Chain (unit)","level":2,"score":0.46651116013526917},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.35537195205688477},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.33683598041534424},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.22225144505500793},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0824744701385498},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0},{"id":"https://openalex.org/C1276947","wikidata":"https://www.wikidata.org/wiki/Q333","display_name":"Astronomy","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3696410.3714624","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3696410.3714624","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Web Conference 2025","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/2","score":0.4699999988079071,"display_name":"Zero hunger"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W2067713319","https://openalex.org/W2108598243","https://openalex.org/W2155904486","https://openalex.org/W2194775991","https://openalex.org/W2753783305","https://openalex.org/W2807363941","https://openalex.org/W2962858109","https://openalex.org/W2970335439","https://openalex.org/W2996800219","https://openalex.org/W3189812816","https://openalex.org/W3196832521","https://openalex.org/W3210951978","https://openalex.org/W3213508244","https://openalex.org/W3215670835","https://openalex.org/W4207080468","https://openalex.org/W4247924304","https://openalex.org/W4249502209","https://openalex.org/W4252979261","https://openalex.org/W4255556797","https://openalex.org/W4312329299","https://openalex.org/W4322760473","https://openalex.org/W4403780662","https://openalex.org/W6600018615"],"related_works":["https://openalex.org/W2899084033","https://openalex.org/W2081900870","https://openalex.org/W2037549926","https://openalex.org/W2345479200","https://openalex.org/W2183306018","https://openalex.org/W2767550285","https://openalex.org/W2849310602","https://openalex.org/W3006008237","https://openalex.org/W2620085874","https://openalex.org/W2047299571"],"abstract_inverted_index":{"Pre-trained":[0],"models":[1],"(PTMs)":[2],"are":[3,54],"widely":[4],"adopted":[5],"across":[6],"various":[7,200],"downstream":[8,170,193],"tasks":[9,194],"in":[10,93,98,119],"the":[11,27,51,58,66,73,90,99,120,132,135,143,206,211],"machine":[12],"learning":[13],"supply":[14,29,74,101,213],"chain.":[15,75,102],"Adopting":[16],"untrustworthy":[17],"PTMs":[18,44,94,157,167],"introduces":[19],"significant":[20],"security":[21],"risks,":[22],"where":[23],"adversaries":[24],"can":[25,45],"poison":[26],"model":[28,100,212],"chain":[30,214],"by":[31],"embedding":[32,121,125,160],"hidden":[33],"malicious":[34],"behaviors":[35],"(backdoors)":[36],"into":[37,127],"PTMs.":[38],"However,":[39],"existing":[40],"backdoor":[41,85,182,218],"attacks":[42,183],"to":[43,68,95,158,209],"only":[46],"achieve":[47,159],"partially":[48],"task-agnostic":[49,181],"and":[50,70,83,116,129,137,141,155,168,196],"embedded":[52,92],"backdoors":[53,67,91],"easily":[55],"erased":[56],"during":[57],"fine-tuning":[59],"process.":[60],"This":[61],"makes":[62],"it":[63],"challenging":[64],"for":[65],"persist":[69],"propagate":[71],"through":[72],"In":[76,103],"this":[77,108],"paper,":[78],"we":[79,105,146],"propose":[80,147],"a":[81,148],"novel":[82],"severer":[84],"attack,":[86],"TransTroj,":[87],"which":[88],"enables":[89],"efficiently":[96],"transfer":[97],"particular,":[104],"first":[106],"formalize":[107],"attack":[109,188],"as":[110],"an":[111],"indistinguishability":[112,126],"problem":[113],"between":[114],"poisoned":[115,136],"clean":[117],"samples":[118],"space.":[122],"We":[123,162],"decompose":[124],"pre-":[128],"post-indistinguishability,":[130],"representing":[131],"similarity":[133],"of":[134],"reference":[138],"embeddings":[139],"before":[140],"after":[142],"attack.":[144],"Then,":[145],"two-stage":[149],"optimization":[150],"that":[151,175],"separately":[152],"optimizes":[153],"triggers":[154],"victim":[156],"indistinguishability.":[161],"evaluate":[163],"TransTroj":[164],"on":[165,191],"four":[166],"six":[169],"tasks.":[171],"Experimental":[172],"results":[173],"show":[174],"our":[176],"method":[177],"significantly":[178],"outperforms":[179],"SOTA":[180],"--":[184,195],"achieving":[185],"nearly":[186],"100%":[187],"success":[189],"rate":[190],"most":[192],"demonstrates":[197],"robustness":[198],"under":[199],"system":[201],"settings.":[202],"Our":[203],"findings":[204],"underscore":[205],"urgent":[207],"need":[208],"secure":[210],"against":[215],"such":[216],"transferable":[217],"attacks.":[219],"The":[220],"code":[221],"is":[222],"available":[223],"at":[224],"https://github.com/haowang-cqu/TransTroj":[225]},"counts_by_year":[{"year":2026,"cited_by_count":7},{"year":2025,"cited_by_count":4}],"updated_date":"2026-08-29T07:29:34.045763","created_date":"2025-10-10T00:00:00"}