{"id":"https://openalex.org/W7151410218","doi":"https://doi.org/10.48550/arxiv.2604.04630","title":"Multimodal Backdoor Attack on VLMs for Autonomous Driving via Graffiti and Cross-Lingual Triggers","display_name":"Multimodal Backdoor Attack on VLMs for Autonomous Driving via Graffiti and Cross-Lingual Triggers","publication_year":2026,"publication_date":"2026-04-06","ids":{"openalex":"https://openalex.org/W7151410218","doi":"https://doi.org/10.48550/arxiv.2604.04630"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.04630","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.04630","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.04630","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5133074178","display_name":"Jiancheng Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Jiancheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133116825","display_name":"Lidan Liang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liang, Lidan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133129622","display_name":"Yong Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Yong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084552425","display_name":"Zhuo Su","orcid":"https://orcid.org/0000-0002-6090-0110"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Su, Zengzhen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051051967","display_name":"Haifeng Xia","orcid":"https://orcid.org/0000-0002-3317-0490"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xia, Haifeng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078311721","display_name":"Yuanting Yan","orcid":"https://orcid.org/0000-0001-6090-910X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yan, Yuanting","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5133082162","display_name":"Wei Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Wei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8507999777793884,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8507999777793884,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12262","display_name":"Hate Speech and Cyberbullying Detection","score":0.014999999664723873,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.014299999922513962,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9965000152587891},{"id":"https://openalex.org/keywords/construct","display_name":"Construct (python library)","score":0.6046000123023987},{"id":"https://openalex.org/keywords/covert","display_name":"Covert","score":0.5164999961853027},{"id":"https://openalex.org/keywords/consistency","display_name":"Consistency (knowledge bases)","score":0.3637000024318695},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.33480000495910645},{"id":"https://openalex.org/keywords/semantic-security","display_name":"Semantic security","score":0.3149999976158142}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9965000152587891},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6761000156402588},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.6046000123023987},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.541100025177002},{"id":"https://openalex.org/C2779338814","wikidata":"https://www.wikidata.org/wiki/Q5179285","display_name":"Covert","level":2,"score":0.5164999961853027},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3650999963283539},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.3637000024318695},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.33480000495910645},{"id":"https://openalex.org/C204806902","wikidata":"https://www.wikidata.org/wiki/Q2333581","display_name":"Semantic security","level":5,"score":0.3149999976158142},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.29010000824928284},{"id":"https://openalex.org/C2779606619","wikidata":"https://www.wikidata.org/wiki/Q17092524","display_name":"Interchangeability","level":2,"score":0.2687999904155731},{"id":"https://openalex.org/C3770464","wikidata":"https://www.wikidata.org/wiki/Q775963","display_name":"Smoothing","level":2,"score":0.26190000772476196},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.2565000057220459},{"id":"https://openalex.org/C2776654903","wikidata":"https://www.wikidata.org/wiki/Q2601463","display_name":"SAFER","level":2,"score":0.25619998574256897}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.04630","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.04630","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.04630","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.04630","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Sustainable cities and communities","id":"https://metadata.un.org/sdg/11","score":0.5799333453178406}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Visual":[0],"language":[1],"model":[2,124],"(VLM)":[3],"is":[4],"rapidly":[5],"being":[6],"integrated":[7],"into":[8,68],"safety-critical":[9,166],"systems":[10],"such":[11,132],"as":[12,133],"autonomous":[13,49],"driving,":[14],"making":[15,37,135],"it":[16,38,136],"an":[17],"important":[18],"attack":[19,46,160],"surface":[20],"for":[21,138,162],"potential":[22],"backdoor":[23,26,119,163],"attacks.":[24],"Existing":[25],"attacks":[27],"mainly":[28],"rely":[29],"on":[30,90,125],"unimodal,":[31],"explicit,":[32],"and":[33,44,71,109,156],"easily":[34],"detectable":[35],"triggers,":[36,74],"difficult":[39,137],"to":[40,83,101,143],"construct":[41],"both":[42],"covert":[43],"stable":[45,62],"channels":[47],"in":[48,153,165],"driving":[50],"scenarios.":[51],"GLA":[52,94],"introduces":[53],"two":[54],"naturalistic":[55],"triggers:":[56],"graffiti-based":[57],"visual":[58],"patterns":[59],"generated":[60],"via":[61],"diffusion":[63],"inpainting,":[64],"which":[65,75],"seamlessly":[66],"blend":[67],"urban":[69],"scenes,":[70],"cross-language":[72],"text":[73],"introduce":[76],"distributional":[77],"shifts":[78],"while":[79],"maintaining":[80],"semantic":[81],"consistency":[82],"build":[84],"robust":[85],"language-side":[86],"trigger":[87],"signals.":[88],"Experiments":[89],"DriveVLM":[91],"show":[92],"that":[93],"requires":[95],"only":[96],"a":[97,103,110,158],"10\\%":[98],"poisoning":[99],"ratio":[100],"achieve":[102],"90\\%":[104],"Attack":[105],"Success":[106],"Rate":[107,114],"(ASR)":[108],"0\\%":[111],"False":[112],"Positive":[113],"(FPR).":[115],"More":[116],"insidiously,":[117],"the":[118,123,145],"does":[120],"not":[121],"weaken":[122],"clean":[126],"tasks,":[127],"but":[128],"instead":[129],"improves":[130],"metrics":[131],"BLEU-1,":[134],"traditional":[139],"performance-degradation-based":[140],"detection":[141],"methods":[142],"identify":[144],"attack.":[146],"This":[147],"study":[148],"reveals":[149],"underestimated":[150],"security":[151],"threats":[152],"self-driving":[154],"VLMs":[155],"provides":[157],"new":[159],"paradigm":[161],"evaluation":[164],"multimodal":[167],"systems.":[168]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-04-08T00:00:00"}