{"id":"https://openalex.org/W7137952305","doi":"https://doi.org/10.1609/aaai.v40i13.38056","title":"FRBAT: Conditionally-Visible Physical Backdoor Attack via Fluorescence","display_name":"FRBAT: Conditionally-Visible Physical Backdoor Attack via Fluorescence","publication_year":2026,"publication_date":"2026-03-14","ids":{"openalex":"https://openalex.org/W7137952305","doi":"https://doi.org/10.1609/aaai.v40i13.38056"},"language":"en","primary_location":{"id":"doi:10.1609/aaai.v40i13.38056","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v40i13.38056","pdf_url":null,"source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://doi.org/10.1609/aaai.v40i13.38056","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5074589029","display_name":"Yalun Wu","orcid":"https://orcid.org/0000-0002-0891-1904"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yalun Wu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129647262","display_name":"Liu Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu Liu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085778638","display_name":"Endong Tong","orcid":"https://orcid.org/0000-0003-0348-2108"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Endong Tong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049446052","display_name":"Yingxiao Xiang","orcid":"https://orcid.org/0000-0002-8679-7000"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yingxiao Xiang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075844359","display_name":"Xiaoting Lyu","orcid":"https://orcid.org/0000-0003-0732-0261"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xiaoting Lyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129682050","display_name":"Zhen Han","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhen Han","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5129736426","display_name":"Jiqiang Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jiqiang Liu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"40","issue":"13","first_page":"10808","last_page":"10816"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9412999749183655,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9412999749183655,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.010200000368058681,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12611","display_name":"Neural Networks and Reservoir Computing","score":0.009999999776482582,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9937000274658203},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.7171000242233276},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6463000178337097},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.36970001459121704},{"id":"https://openalex.org/keywords/physical-system","display_name":"Physical system","score":0.36500000953674316},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.36000001430511475}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9937000274658203},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.7171000242233276},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.657800018787384},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6463000178337097},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.47749999165534973},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.36970001459121704},{"id":"https://openalex.org/C116672817","wikidata":"https://www.wikidata.org/wiki/Q1454986","display_name":"Physical system","level":2,"score":0.36500000953674316},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.36000001430511475},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3483000099658966},{"id":"https://openalex.org/C139676723","wikidata":"https://www.wikidata.org/wiki/Q1193832","display_name":"Sign (mathematics)","level":2,"score":0.2874000072479248},{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.28299999237060547},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.26759999990463257},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.26010000705718994},{"id":"https://openalex.org/C179768478","wikidata":"https://www.wikidata.org/wiki/Q1120057","display_name":"Cyber-physical system","level":2,"score":0.25999999046325684},{"id":"https://openalex.org/C73301696","wikidata":"https://www.wikidata.org/wiki/Q5469984","display_name":"Formalism (music)","level":3,"score":0.2513999938964844}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1609/aaai.v40i13.38056","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v40i13.38056","pdf_url":null,"source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},{"id":"pmh:oai:ojs.aaai.org:article/38056","is_oa":false,"landing_page_url":"https://ojs.aaai.org/index.php/AAAI/article/view/38056","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"2159-5399","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.1609/aaai.v40i13.38056","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v40i13.38056","pdf_url":null,"source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2727007973","display_name":null,"funder_award_id":"2024YJS048","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"}],"funders":[{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Deep":[0],"neural":[1],"networks":[2],"are":[3],"increasingly":[4],"vulnerable":[5],"to":[6,15,32,49,85,98,112,139,152],"physically":[7],"deployable":[8],"backdoor":[9,23,59],"attacks,":[10,162],"which":[11,61],"manipulate":[12],"real-world":[13],"objects":[14],"induce":[16],"targeted":[17],"model":[18,138],"failures.":[19],"However,":[20],"current":[21],"physical":[22,58,127,161],"attacks":[24],"predominantly":[25],"rely":[26],"on":[27,147],"perpetually":[28],"visible":[29],"triggers":[30,97],"appended":[31],"target":[33,137],"objects.":[34],"These":[35],"methods":[36],"inevitably":[37],"expose":[38],"attack":[39,155],"traces":[40],"during":[41],"the":[42,73,82,136,141,174],"deployment":[43,79],"phase,":[44],"risking":[45],"human":[46],"suspicion":[47],"prior":[48],"activation.":[50],"In":[51],"this":[52],"paper,":[53],"we":[54,91,104],"propose":[55],"a":[56,106],"conditionally-visible":[57],"attack,":[60],"can":[62],"only":[63],"be":[64],"activated":[65],"under":[66,122,132],"specific":[67,133],"optical":[68],"conditions":[69],"and":[70,80,88,110,120,159,163,177],"thereby":[71],"overcomes":[72],"risk":[74],"of":[75,179],"being":[76],"detected":[77],"after":[78],"before":[81],"attack.":[83,181],"Specifically,":[84],"ensure":[86],"robust":[87],"reliable":[89],"activation,":[90],"design":[92],"irregular":[93],"polygonal":[94],"pattern":[95],"as":[96],"against":[99,167],"across":[100],"environmental":[101],"variations.":[102],"Moreover,":[103],"introduce":[105],"dual-phase":[107],"mechanism":[108],"(dormant":[109],"activated)":[111],"enable":[113],"stealthy":[114],"deployment.":[115],"Our":[116],"trigger":[117],"remains":[118],"invisible":[119],"dormant":[121],"non-attack":[123],"conditions,":[124],"leaving":[125],"no":[126],"traces.":[128],"It":[129],"activates":[130],"instantaneously":[131],"illumination,":[134],"inducing":[135],"perform":[140],"desired":[142],"behavior.":[143],"We":[144],"conduct":[145],"experiments":[146],"traffic":[148],"sign":[149],"recognition":[150],"tasks":[151],"compare":[153],"our":[154,180],"with":[156],"six":[157],"digital":[158],"seven":[160],"assess":[164],"its":[165],"performance":[166],"potential":[168],"defenses.":[169],"Extensive":[170],"experimental":[171],"results":[172],"demonstrate":[173],"effectiveness,":[175],"stealthiness,":[176],"robustness":[178]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2026-03-18T00:00:00"}