{"id":"https://openalex.org/W7133339155","doi":"https://doi.org/10.48550/arxiv.2603.01019","title":"BadRSSD: Backdoor Attacks on Regularized Self-Supervised Diffusion Models","display_name":"BadRSSD: Backdoor Attacks on Regularized Self-Supervised Diffusion Models","publication_year":2026,"publication_date":"2026-03-01","ids":{"openalex":"https://openalex.org/W7133339155","doi":"https://doi.org/10.48550/arxiv.2603.01019"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.01019","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.01019","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.01019","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5127933183","display_name":"Jiayao Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Jiayao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035931692","display_name":"Yi Zhang","orcid":"https://orcid.org/0000-0002-8794-4332"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Yiping","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5127899016","display_name":"Mohammad Maruf Hasan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hasan, Mohammad Maruf","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5121303786","display_name":"Xiaoying Lei","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lei, Xiaoying","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5127925080","display_name":"Jiale Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Jiale","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5124966199","display_name":"Junwu Zhu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhu, Junwu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089198043","display_name":"Qilin Wu","orcid":"https://orcid.org/0000-0002-4559-9315"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wu, Qilin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5127991972","display_name":"Dongfang Zhao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhao, Dongfang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6793000102043152,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6793000102043152,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.2076999992132187,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.009399999864399433,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9121999740600586},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.6362000107765198},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.6151000261306763},{"id":"https://openalex.org/keywords/feature-vector","display_name":"Feature vector","score":0.5587000250816345},{"id":"https://openalex.org/keywords/constraint","display_name":"Constraint (computer-aided design)","score":0.4433000087738037},{"id":"https://openalex.org/keywords/space","display_name":"Space (punctuation)","score":0.3799000084400177},{"id":"https://openalex.org/keywords/regularization","display_name":"Regularization (linguistics)","score":0.37369999289512634},{"id":"https://openalex.org/keywords/feature-learning","display_name":"Feature learning","score":0.34630000591278076},{"id":"https://openalex.org/keywords/unobservable","display_name":"Unobservable","score":0.3407999873161316}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9121999740600586},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.6362000107765198},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.6151000261306763},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5604000091552734},{"id":"https://openalex.org/C83665646","wikidata":"https://www.wikidata.org/wiki/Q42139305","display_name":"Feature vector","level":2,"score":0.5587000250816345},{"id":"https://openalex.org/C2776036281","wikidata":"https://www.wikidata.org/wiki/Q48769818","display_name":"Constraint (computer-aided design)","level":2,"score":0.4433000087738037},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.40709999203681946},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.38019999861717224},{"id":"https://openalex.org/C2778572836","wikidata":"https://www.wikidata.org/wiki/Q380933","display_name":"Space (punctuation)","level":2,"score":0.3799000084400177},{"id":"https://openalex.org/C2776135515","wikidata":"https://www.wikidata.org/wiki/Q17143721","display_name":"Regularization (linguistics)","level":2,"score":0.37369999289512634},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3490000069141388},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.34630000591278076},{"id":"https://openalex.org/C2780695315","wikidata":"https://www.wikidata.org/wiki/Q3799040","display_name":"Unobservable","level":2,"score":0.3407999873161316},{"id":"https://openalex.org/C147764199","wikidata":"https://www.wikidata.org/wiki/Q6865248","display_name":"Minification","level":2,"score":0.33869999647140503},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3147999942302704},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.30790001153945923},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.30250000953674316},{"id":"https://openalex.org/C177769412","wikidata":"https://www.wikidata.org/wiki/Q278090","display_name":"Prior probability","level":3,"score":0.29980000853538513},{"id":"https://openalex.org/C13662910","wikidata":"https://www.wikidata.org/wiki/Q193139","display_name":"Trajectory","level":2,"score":0.2996000051498413},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.28790000081062317},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.28529998660087585},{"id":"https://openalex.org/C2779696439","wikidata":"https://www.wikidata.org/wiki/Q7512811","display_name":"Signature (topology)","level":2,"score":0.2833999991416931},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.2757999897003174},{"id":"https://openalex.org/C2779227376","wikidata":"https://www.wikidata.org/wiki/Q6505497","display_name":"Layer (electronics)","level":2,"score":0.2694999873638153},{"id":"https://openalex.org/C69357855","wikidata":"https://www.wikidata.org/wiki/Q163214","display_name":"Diffusion","level":2,"score":0.2603999972343445},{"id":"https://openalex.org/C149441793","wikidata":"https://www.wikidata.org/wiki/Q200726","display_name":"Probability distribution","level":2,"score":0.25360000133514404},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.2515999972820282}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.01019","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.01019","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.01019","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.01019","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.4922242760658264,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Self-supervised":[0],"diffusion":[1,55,86],"models":[2],"learn":[3],"high-quality":[4],"visual":[5],"representations":[6,62],"via":[7],"latent":[8,27],"space":[9,29,73,120],"denoising.":[10],"However,":[11],"their":[12],"representation":[13,51,110],"layer":[14,52],"poses":[15],"a":[16,77],"distinct":[17],"threat:":[18],"unlike":[19],"traditional":[20],"attacks":[21,155],"targeting":[22,49],"generative":[23],"outputs,":[24],"its":[25],"unconstrained":[26],"semantic":[28,61],"allows":[30],"for":[31],"stealthy":[32],"backdoors,":[33],"permitting":[34],"malicious":[35],"control":[36],"upon":[37,139],"triggering.":[38],"In":[39],"this":[40],"paper,":[41],"we":[42,108],"propose":[43],"BadRSSD,":[44],"the":[45,50,60,82,100,104,114],"first":[46],"backdoor":[47,174],"attack":[48,124],"of":[53,63,76],"self-supervised":[54],"models.":[56],"Specifically,":[57],"it":[58],"hijacks":[59],"poisoned":[64],"samples":[65],"with":[66],"triggers":[67],"in":[68,156],"Principal":[69],"Component":[70],"Analysis":[71],"(PCA)":[72],"toward":[74,102],"those":[75],"target":[78,137],"image,":[79],"then":[80],"controls":[81],"denoising":[83],"trajectory":[84],"during":[85],"by":[87],"applying":[88],"coordinated":[89],"constraints":[90],"across":[91,165],"latent,":[92],"pixel,":[93],"and":[94,159,168,170],"feature":[95,119],"distribution":[96],"spaces":[97],"to":[98,117],"steer":[99],"model":[101,130],"generating":[103],"specified":[105],"target.":[106],"Additionally,":[107],"integrate":[109],"dispersion":[111],"regularization":[112],"into":[113],"constraint":[115],"framework":[116],"maintain":[118],"uniformity,":[121],"significantly":[122],"enhancing":[123],"stealth.":[125],"This":[126],"approach":[127],"preserves":[128],"normal":[129],"functionality":[131],"(high":[132,142],"utility)":[133],"while":[134],"achieving":[135],"precise":[136],"generation":[138],"trigger":[140],"activation":[141],"specificity).":[143],"Experiments":[144],"on":[145],"multiple":[146],"benchmark":[147],"datasets":[148],"demonstrate":[149],"that":[150],"BadRSSD":[151],"substantially":[152],"outperforms":[153],"existing":[154],"both":[157],"FID":[158],"MSE":[160],"metrics,":[161],"reliably":[162],"establishing":[163],"backdoors":[164],"different":[166],"architectures":[167],"configurations,":[169],"effectively":[171],"resisting":[172],"state-of-the-art":[173],"defenses.":[175]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-03-04T00:00:00"}