{"id":"https://openalex.org/W4415540396","doi":"https://doi.org/10.1145/3746027.3754780","title":"BadMDA: Towards Backdoor Injection during Domain Adaptation to Collapse Multi-Agent Perception","display_name":"BadMDA: Towards Backdoor Injection during Domain Adaptation to Collapse Multi-Agent Perception","publication_year":2025,"publication_date":"2025-10-25","ids":{"openalex":"https://openalex.org/W4415540396","doi":"https://doi.org/10.1145/3746027.3754780"},"language":null,"primary_location":{"id":"doi:10.1145/3746027.3754780","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3746027.3754780","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 33rd ACM International Conference on Multimedia","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101503805","display_name":"Tong Chen","orcid":"https://orcid.org/0009-0007-8496-1819"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tong Chen","raw_affiliation_strings":["SKLCCSE, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0007-8496-1819","affiliations":[{"raw_affiliation_string":"SKLCCSE, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053487836","display_name":"Bowen Du","orcid":"https://orcid.org/0000-0003-0975-2367"},"institutions":[{"id":"https://openalex.org/I4210126311","display_name":"Beijing Transportation Research Center","ror":"https://ror.org/03pydk223","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210126311"]},{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bowen Du","raw_affiliation_strings":["School of Transportation Science and Engineering, Beihang University, Beijing, China and Zhongguancun Laboratory, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-0975-2367","affiliations":[{"raw_affiliation_string":"School of Transportation Science and Engineering, Beihang University, Beijing, China and Zhongguancun Laboratory, Beijing, China","institution_ids":["https://openalex.org/I82880672","https://openalex.org/I4210126311"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078965599","display_name":"Jiejie Zhao","orcid":"https://orcid.org/0000-0001-6892-9906"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jiejie Zhao","raw_affiliation_strings":["Zhongguancun Laboratory, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-6892-9906","affiliations":[{"raw_affiliation_string":"Zhongguancun Laboratory, Beijing, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":null,"display_name":"Hanyang Xia","orcid":"https://orcid.org/0009-0001-9503-6529"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hanyang Xia","raw_affiliation_strings":["School of Software, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0001-9503-6529","affiliations":[{"raw_affiliation_string":"School of Software, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101567973","display_name":"Haiquan Wang","orcid":"https://orcid.org/0000-0003-1745-9814"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haiquan Wang","raw_affiliation_strings":["School of Software, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-1745-9814","affiliations":[{"raw_affiliation_string":"School of Software, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5031116553","display_name":"Jiakai Wang","orcid":"https://orcid.org/0000-0001-5884-3412"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jiakai Wang","raw_affiliation_strings":["Zhongguancun Laboratory, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-5884-3412","affiliations":[{"raw_affiliation_string":"Zhongguancun Laboratory, Beijing, China","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.14512055,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"975","last_page":"983"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9909999966621399},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6295999884605408},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.546500027179718},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5187000036239624},{"id":"https://openalex.org/keywords/perception","display_name":"Perception","score":0.47099998593330383},{"id":"https://openalex.org/keywords/adaptation","display_name":"Adaptation (eye)","score":0.40959998965263367},{"id":"https://openalex.org/keywords/distortion","display_name":"Distortion (music)","score":0.3449000120162964},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.3321000039577484}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9909999966621399},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.737500011920929},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6295999884605408},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.546500027179718},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5187000036239624},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5073999762535095},{"id":"https://openalex.org/C26760741","wikidata":"https://www.wikidata.org/wiki/Q160402","display_name":"Perception","level":2,"score":0.47099998593330383},{"id":"https://openalex.org/C139807058","wikidata":"https://www.wikidata.org/wiki/Q352374","display_name":"Adaptation (eye)","level":2,"score":0.40959998965263367},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3978999853134155},{"id":"https://openalex.org/C126780896","wikidata":"https://www.wikidata.org/wiki/Q899871","display_name":"Distortion (music)","level":4,"score":0.3449000120162964},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.3321000039577484},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.32910001277923584},{"id":"https://openalex.org/C2776434776","wikidata":"https://www.wikidata.org/wiki/Q19246213","display_name":"Domain adaptation","level":3,"score":0.3287999927997589},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.31700000166893005},{"id":"https://openalex.org/C2781238097","wikidata":"https://www.wikidata.org/wiki/Q175026","display_name":"Object (grammar)","level":2,"score":0.3025999963283539},{"id":"https://openalex.org/C207685749","wikidata":"https://www.wikidata.org/wiki/Q2088941","display_name":"Domain knowledge","level":2,"score":0.27469998598098755},{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.26829999685287476},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.267300009727478},{"id":"https://openalex.org/C2776151529","wikidata":"https://www.wikidata.org/wiki/Q3045304","display_name":"Object detection","level":3,"score":0.26660001277923584},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.2644999921321869},{"id":"https://openalex.org/C2780264999","wikidata":"https://www.wikidata.org/wiki/Q7445032","display_name":"Security domain","level":2,"score":0.26260000467300415},{"id":"https://openalex.org/C17137986","wikidata":"https://www.wikidata.org/wiki/Q215067","display_name":"Orthogonality","level":2,"score":0.2603999972343445},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.258899986743927},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.2526000142097473},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.25130000710487366}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3746027.3754780","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3746027.3754780","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 33rd ACM International Conference on Multimedia","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":9,"referenced_works":["https://openalex.org/W2060303868","https://openalex.org/W2796096089","https://openalex.org/W2891529090","https://openalex.org/W2942091739","https://openalex.org/W2996759437","https://openalex.org/W3114838227","https://openalex.org/W3164543136","https://openalex.org/W4321021640","https://openalex.org/W4352977781"],"related_works":[],"abstract_inverted_index":{"Domain":[0],"adaptation,":[1,130],"which":[2],"bridges":[3],"the":[4,18,34,54,59,67,73,82,88,110,115,128,133,141,175,183,188,203,217,226],"domain":[5,89,111,129,213],"gap":[6],"between":[7,177],"heterogeneous":[8],"agents,":[9,42],"has":[10],"emerged":[11],"as":[12,30,72],"an":[13],"effective":[14],"solution":[15],"to":[16,37,57,92,105,152,169],"improve":[17],"perception":[19],"capabilities":[20],"of":[21,123,136,223],"multi-agent":[22,94],"systems.":[23],"However,":[24],"it":[25],"may":[26],"introduce":[27],"backdoor":[28,60,84],"vulnerabilities,":[29],"adversaries":[31],"could":[32],"exploit":[33],"collaborative":[35],"process":[36,91],"propagate":[38],"malicious":[39,171,185],"features":[40,125,186,198],"across":[41],"yet":[43],"these":[44],"threats":[45],"remain":[46],"largely":[47],"unexplored.":[48],"In":[49],"this":[50,63,77],"paper,":[51],"we":[52,79,97,131,145],"take":[53],"first":[55,83,98],"step":[56],"study":[58],"attacks":[61],"in":[62,156],"safety-critical":[64],"scenario,":[65],"with":[66,166],"3D":[68,157],"object":[69,158],"detection":[70,159,193],"task":[71],"representative":[74],"case.":[75],"To":[76],"end,":[78],"propose":[80,99,146],"BadMDA,":[81,224],"attack":[85],"tailored":[86],"for":[87,228],"adaptation":[90,214],"collapse":[93],"perception.":[95],"Specifically,":[96],"a":[100,147,229],"gradient-suppression":[101],"trigger":[102,107,142],"optimization":[103],"module":[104,151,162],"mitigate":[106],"distortion":[108],"during":[109],"adaptation.":[112],"By":[113],"utilizing":[114],"optimizable":[116],"additive":[117],"triggers":[118],"and":[119,179,221],"minimizing":[120],"gradient":[121],"variations":[122],"triggered":[124,137,197],"induced":[126],"by":[127],"reduce":[132],"transformation":[134],"magnitude":[135],"features,":[138,172],"thereby":[139],"maintaining":[140],"effectiveness.":[143],"Then,":[144],"dual-gradient":[148],"guided":[149],"poisoning":[150,155],"achieve":[153],"clean-label":[154],"tasks.":[160],"This":[161],"aligns":[163],"training":[164,178],"gradients":[165],"poisoned":[167],"ones":[168],"learn":[170],"while":[173,199],"enforcing":[174],"orthogonality":[176],"benign":[180],"gradients.":[181],"Consequently,":[182],"learned":[184],"mislead":[187],"victim's":[189],"finetuning":[190],"updates,":[191],"causing":[192],"failures":[194],"upon":[195],"receiving":[196],"only":[200],"slightly":[201],"affecting":[202],"victim":[204],"agent's":[205],"model":[206],"utility.":[207],"Extensive":[208],"experiments":[209],"on":[210],"various":[211],"dominant":[212],"methods":[215],"show":[216],"superior":[218],"attacking":[219],"effectiveness":[220],"universality":[222],"underscoring":[225],"need":[227],"more":[230],"advanced":[231],"defense.":[232]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-25T00:00:00"}