{"id":"https://openalex.org/W7147728429","doi":"https://doi.org/10.48550/arxiv.2603.28092","title":"InkDrop: Invisible Backdoor Attacks Against Dataset Condensation","display_name":"InkDrop: Invisible Backdoor Attacks Against Dataset Condensation","publication_year":2026,"publication_date":"2026-03-30","ids":{"openalex":"https://openalex.org/W7147728429","doi":"https://doi.org/10.48550/arxiv.2603.28092"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.28092","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.28092","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.28092","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5132661047","display_name":"He Yang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, He","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5132681659","display_name":"Dongyi Lv","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lv, Dongyi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5132591179","display_name":"Song Ma","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ma, Song","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5132620314","display_name":"Wei Xi","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xi, Wei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5132704921","display_name":"Zhi Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Zhi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046115188","display_name":"Hanlin Gu","orcid":"https://orcid.org/0000-0001-8266-4561"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gu, Hanlin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5132618803","display_name":"Yajie Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Yajie","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9932000041007996,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9932000041007996,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.0010999999940395355,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.0007999999797903001,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9842000007629395},{"id":"https://openalex.org/keywords/dimension","display_name":"Dimension (graph theory)","score":0.5389000177383423},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.47769999504089355},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4740000069141388},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.4336000084877014},{"id":"https://openalex.org/keywords/decision-boundary","display_name":"Decision boundary","score":0.4334999918937683},{"id":"https://openalex.org/keywords/perception","display_name":"Perception","score":0.4113999903202057},{"id":"https://openalex.org/keywords/construct","display_name":"Construct (python library)","score":0.3917999863624573}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9842000007629395},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6869999766349792},{"id":"https://openalex.org/C33676613","wikidata":"https://www.wikidata.org/wiki/Q13415176","display_name":"Dimension (graph theory)","level":2,"score":0.5389000177383423},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.47769999504089355},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4740000069141388},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4336000084877014},{"id":"https://openalex.org/C42023084","wikidata":"https://www.wikidata.org/wiki/Q5249231","display_name":"Decision boundary","level":3,"score":0.4334999918937683},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.426800012588501},{"id":"https://openalex.org/C26760741","wikidata":"https://www.wikidata.org/wiki/Q160402","display_name":"Perception","level":2,"score":0.4113999903202057},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.3917999863624573},{"id":"https://openalex.org/C62354387","wikidata":"https://www.wikidata.org/wiki/Q875399","display_name":"Boundary (topology)","level":2,"score":0.3901999890804291},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3650999963283539},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3499999940395355},{"id":"https://openalex.org/C2776196576","wikidata":"https://www.wikidata.org/wiki/Q196113","display_name":"Camouflage","level":2,"score":0.3375999927520752},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.33399999141693115},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.32519999146461487},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.320499986410141},{"id":"https://openalex.org/C56086750","wikidata":"https://www.wikidata.org/wiki/Q6042592","display_name":"Integer programming","level":2,"score":0.3012000024318695},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.2754000127315521},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.27219998836517334},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.2651999890804291},{"id":"https://openalex.org/C100776233","wikidata":"https://www.wikidata.org/wiki/Q2532492","display_name":"Bridge (graph theory)","level":2,"score":0.26260000467300415},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.25380000472068787},{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.2535000145435333},{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.2533999979496002}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.28092","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.28092","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.28092","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.28092","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.7839142680168152,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Dataset":[0],"Condensation":[1],"(DC)":[2],"is":[3,182],"a":[4,27,107],"data-efficient":[5],"learning":[6],"paradigm":[7],"that":[8,124],"synthesizes":[9],"small":[10],"yet":[11],"informative":[12],"datasets,":[13],"enabling":[14],"models":[15],"to":[16,32,105,129,166],"match":[17],"the":[18,43,62,76,90,120,130,149,158],"performance":[19],"of":[20,30,65,78,161],"full-data":[21],"training.":[22],"However,":[23],"recent":[24],"work":[25],"exposes":[26],"critical":[28],"vulnerability":[29],"DC":[31],"backdoor":[33,111],"attacks,":[34],"where":[35,97],"malicious":[36,79,146],"patterns":[37],"(\\textit{e.g.},":[38],"triggers)":[39],"are":[40],"implanted":[41],"into":[42,148,170],"condensation":[44],"dataset,":[45],"inducing":[46],"targeted":[47,145],"misclassification":[48],"on":[49],"specific":[50],"inputs.":[51],"Existing":[52],"attacks":[53],"always":[54],"prioritize":[55],"attack":[56,83],"effectiveness":[57,84,160],"and":[58,85,109,141,177],"model":[59,86,94,175],"utility,":[60],"overlooking":[61],"crucial":[63],"dimension":[64],"stealthiness.":[66],"To":[67],"bridge":[68],"this":[69],"gap,":[70],"we":[71],"propose":[72],"InkDrop,":[73,162],"which":[74],"enhances":[75],"imperceptibility":[77],"manipulation":[80],"without":[81],"degrading":[82],"utility.":[87],"InkDrop":[88,114],"leverages":[89],"inherent":[91],"uncertainty":[92],"near":[93,119],"decision":[95,122],"boundaries,":[96],"minor":[98],"input":[99],"perturbations":[100,137],"can":[101],"induce":[102],"semantic":[103,127],"shifts,":[104],"construct":[106],"stealthy":[108],"effective":[110],"attack.":[112],"Specifically,":[113],"first":[115],"selects":[116],"candidate":[117],"samples":[118],"target":[121,131],"boundary":[123],"exhibit":[125],"latent":[126],"affinity":[128],"class.":[132],"It":[133],"then":[134],"learns":[135],"instance-dependent":[136],"constrained":[138],"by":[139],"perceptual":[140],"spatial":[142],"consistency,":[143],"embedding":[144],"behavior":[147],"condensed":[150,171],"dataset.":[151],"Extensive":[152],"experiments":[153],"across":[154],"diverse":[155],"datasets":[156,172],"validate":[157],"overall":[159],"demonstrating":[163],"its":[164],"ability":[165],"integrate":[167],"adversarial":[168],"intent":[169],"while":[173],"preserving":[174],"utility":[176],"minimizing":[178],"detectability.":[179],"Our":[180],"code":[181],"available":[183],"at":[184],"https://github.com/lvdongyi/InkDrop.":[185]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-04-02T00:00:00"}