{"id":"https://openalex.org/W4412945405","doi":"https://doi.org/10.18653/v1/2025.acl-long.541","title":"TWIST: Text-encoder Weight-editing for Inserting Secret Trojans in Text-to-Image Models","display_name":"TWIST: Text-encoder Weight-editing for Inserting Secret Trojans in Text-to-Image Models","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4412945405","doi":"https://doi.org/10.18653/v1/2025.acl-long.541"},"language":"en","primary_location":{"id":"doi:10.18653/v1/2025.acl-long.541","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2025.acl-long.541","pdf_url":"https://aclanthology.org/2025.acl-long.541.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://aclanthology.org/2025.acl-long.541.pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5114240949","display_name":"Xiuwen Li","orcid":"https://orcid.org/0009-0009-2250-7148"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xindi Li","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100462378","display_name":"Zhe Liu","orcid":"https://orcid.org/0000-0002-9690-7373"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhe Liu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114833240","display_name":"Tong Zhang","orcid":"https://orcid.org/0000-0001-8163-3050"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tong Zhang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100434475","display_name":"Jiahao Chen","orcid":"https://orcid.org/0000-0002-5631-1997"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jiahao Chen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080797233","display_name":"Qingming Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Qingming Li","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100665545","display_name":"Jinbao Li","orcid":"https://orcid.org/0000-0002-2432-8807"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jinbao Li","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5058611515","display_name":"Shouling Ji","orcid":"https://orcid.org/0000-0003-4268-372X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shouling Ji","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.18517916,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"11025","last_page":"11041"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10388","display_name":"Advanced Steganography and Watermarking Techniques","score":0.9090999960899353,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10388","display_name":"Advanced Steganography and Watermarking Techniques","score":0.9090999960899353,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9083999991416931,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6947522163391113},{"id":"https://openalex.org/keywords/encoder","display_name":"Encoder","score":0.6688872575759888},{"id":"https://openalex.org/keywords/twist","display_name":"Twist","score":0.6617286205291748},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.5886173248291016},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4367956519126892},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.43064630031585693},{"id":"https://openalex.org/keywords/computer-graphics","display_name":"Computer graphics (images)","score":0.36220526695251465},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.3256905674934387},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.1279367208480835},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.07409244775772095}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6947522163391113},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.6688872575759888},{"id":"https://openalex.org/C2776196297","wikidata":"https://www.wikidata.org/wiki/Q17138781","display_name":"Twist","level":2,"score":0.6617286205291748},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.5886173248291016},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4367956519126892},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.43064630031585693},{"id":"https://openalex.org/C121684516","wikidata":"https://www.wikidata.org/wiki/Q7600677","display_name":"Computer graphics (images)","level":1,"score":0.36220526695251465},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3256905674934387},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.1279367208480835},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.07409244775772095},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.18653/v1/2025.acl-long.541","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2025.acl-long.541","pdf_url":"https://aclanthology.org/2025.acl-long.541.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.18653/v1/2025.acl-long.541","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2025.acl-long.541","pdf_url":"https://aclanthology.org/2025.acl-long.541.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1056051951","display_name":"\u5927\u6a21\u578b\u5b89\u5168\u98ce\u9669\u62a4\u680f\u7406\u8bba\u53ca\u5173\u952e\u6280\u672f\u7814\u7a76","funder_award_id":"LD24F020002","funder_id":"https://openalex.org/F4320338464","funder_display_name":"Natural Science Foundation of Zhejiang Province"},{"id":"https://openalex.org/G2094257571","display_name":null,"funder_award_id":"62402425","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3859458567","display_name":null,"funder_award_id":"2022YFB3102100","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G4868500656","display_name":null,"funder_award_id":"U24A20336","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6963178280","display_name":null,"funder_award_id":"62172243","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8283732743","display_name":null,"funder_award_id":"U244120033","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null},{"id":"https://openalex.org/F4320338464","display_name":"Natural Science Foundation of Zhejiang Province","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4412945405.pdf","grobid_xml":"https://content.openalex.org/works/W4412945405.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2136809508","https://openalex.org/W2113101158","https://openalex.org/W2113978471","https://openalex.org/W2363462720","https://openalex.org/W2073211296","https://openalex.org/W2059790760","https://openalex.org/W2371240756","https://openalex.org/W2804553642","https://openalex.org/W2066719453","https://openalex.org/W2184360580"],"abstract_inverted_index":{"Text-to-image":[0],"(T2I)":[1],"models":[2],"excel":[3],"at":[4],"generating":[5],"high-quality":[6],"images":[7],"from":[8,28,61],"text":[9,12,26,171],"via":[10],"powerful":[11],"encoders,":[13],"but":[14],"training":[15,57],"these":[16,50],"encoders":[17,27,172],"demands":[18],"substantial":[19],"computational":[20],"resources.Consequently,":[21],"many":[22],"users":[23],"seek":[24],"pre-trained":[25],"model":[29],"plugin-sharing":[30],"platforms":[31],"like":[32],"Civitai":[33],"and":[34,59,70,107,116,145,157,176],"Hugging":[35],"Face,":[36],"which":[37,111],"introduces":[38,79],"an":[39,127],"underexplored":[40],"threat:":[41],"the":[42,72,80,91,138,147,166,178],"potential":[43],"for":[44,85,180],"adversaries":[45],"to":[46,161],"embed":[47],"Trojans":[48,88],"within":[49],"plugins.Existing":[51],"Trojan":[52,109],"attacks":[53],"often":[54],"require":[55],"extensive":[56],"data":[58],"suffer":[60],"poor":[62],"generalization":[63,149],"across":[64,120],"different":[65],"triggers,":[66],"limiting":[67],"their":[68],"effectiveness":[69],"scalability.To":[71],"best":[73],"of":[74,132],"our":[75],"knowledge,":[76],"this":[77],"paper":[78],"first":[81],"Text-encoder":[82],"Weight-editing":[83],"method":[84,141],"Inserting":[86],"Secret":[87],"(TWIST).By":[89],"identifying":[90],"bottleneck":[92],"MLP":[93],"layer-the":[94],"critical":[95],"point":[96],"where":[97],"minimal":[98],"edits":[99],"can":[100],"dominantly":[101],"control":[102],"cross-modal":[103],"alignment-TWIST":[104],"achieves":[105],"training-free":[106],"data-free":[108],"insertion,":[110],"makes":[112],"it":[113],"highly":[114],"efficient":[115],"practical.The":[117],"experimental":[118],"results":[119],"various":[121],"triggers":[122],"demonstrate":[123],"that":[124],"TWIST":[125,151],"attains":[126],"average":[128],"attack":[129],"success":[130],"rate":[131],"91%,":[133],"a":[134],"78%":[135],"improvement":[136],"over":[137],"state-of-the-art":[139],"(SOTA)":[140],"proposed":[142],"in":[143,173],"2024":[144],"highlights":[146],"excellent":[148],"capability.Moreover,":[150],"reduces":[152],"modified":[153],"parameters":[154],"by":[155],"8-fold":[156],"cuts":[158],"injection":[159],"time":[160],"25":[162],"seconds.Our":[163],"findings":[164],"underscore":[165],"security":[167],"risks":[168],"associated":[169],"with":[170],"real-world":[174],"applications":[175],"emphasize":[177],"need":[179],"more":[181],"robust":[182],"defense":[183],"mechanisms.":[184]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}
