{"id":"https://openalex.org/W7160260819","doi":"https://doi.org/10.48550/arxiv.2605.01298","title":"Checkerboard: A Simple, Effective, Efficient and Learning-free Clean Label Backdoor Attack with Low Poisoning Budget","display_name":"Checkerboard: A Simple, Effective, Efficient and Learning-free Clean Label Backdoor Attack with Low Poisoning Budget","publication_year":2026,"publication_date":"2026-05-02","ids":{"openalex":"https://openalex.org/W7160260819","doi":"https://doi.org/10.48550/arxiv.2605.01298"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.01298","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.01298","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.01298","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135346045","display_name":"Yi \u6613 Yang \u6768","orcid":"https://orcid.org/0000-0003-0395-3889"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Yi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135316284","display_name":"Jinyang Huang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Huang, Jinyang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135361483","display_name":"Binbin Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Binbin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135353681","display_name":"Feng-Qi Cui","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Cui, Feng-Qi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135372701","display_name":"Xiaokang Zhou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhou, Xiaokang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135298287","display_name":"Zhi Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Zhi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135391479","display_name":"Jie Zhang","orcid":"https://orcid.org/0009-0002-9163-1774"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Jie","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5135309135","display_name":"Meng Li","orcid":"https://orcid.org/0009-0000-2628-6236"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Meng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9929999709129333,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9929999709129333,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.001500000013038516,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.0012000000569969416,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9912999868392944},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.3984000086784363},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.390500009059906},{"id":"https://openalex.org/keywords/sample","display_name":"Sample (material)","score":0.3776000142097473},{"id":"https://openalex.org/keywords/baseline","display_name":"Baseline (sea)","score":0.323199987411499}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9912999868392944},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5472999811172485},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5446000099182129},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.3984000086784363},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.390500009059906},{"id":"https://openalex.org/C198531522","wikidata":"https://www.wikidata.org/wiki/Q485146","display_name":"Sample (material)","level":2,"score":0.3776000142097473},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.323199987411499},{"id":"https://openalex.org/C149629883","wikidata":"https://www.wikidata.org/wiki/Q660926","display_name":"Fraction (chemistry)","level":2,"score":0.3158000111579895},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.30320000648498535},{"id":"https://openalex.org/C2779168147","wikidata":"https://www.wikidata.org/wiki/Q460711","display_name":"Checkerboard","level":2,"score":0.29159998893737793},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2612999975681305}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.01298","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.01298","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.01298","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.01298","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.46766018867492676}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Backdoor":[0],"attacks":[1,37,55,138],"threaten":[2],"the":[3,14,99],"deep":[4],"learning":[5],"supply":[6],"chain":[7],"by":[8,124],"poisoning":[9,145,158,171],"a":[10,19,70,86,92,152,170],"small":[11],"fraction":[12],"of":[13,156,173],"training":[15,103,160],"data":[16,65,119],"so":[17],"that":[18,77],"model":[20],"behaves":[21],"normally":[22],"on":[23,58,149],"clean":[24,182],"inputs":[25,29],"but":[26],"misclassifies":[27],"trigger-carrying":[28],"to":[30,50,83,120,198],"an":[31],"attacker-chosen":[32],"target":[33],"class.":[34],"Clean-label":[35],"backdoor":[36,75,192],"are":[38,47],"especially":[39],"dangerous":[40],"because":[41],"poisoned":[42],"samples":[43,161],"remain":[44],"label-consistent":[45],"and":[46,81,104,139,194],"therefore":[48],"harder":[49],"detect.":[51],"Yet":[52],"existing":[53],"clean-label":[54,74],"typically":[56],"rely":[57],"expensive":[59],"optimization,":[60],"surrogate-model":[61,102],"training,":[62],"or":[63],"nontrivial":[64],"access.":[66],"We":[67],"present":[68],"Checkerboard,":[69],"theoretically":[71],"grounded,":[72],"learning-free":[73],"attack":[76,186],"is":[78],"effective,":[79],"efficient,":[80],"simple":[82],"implement.":[84],"From":[85],"linear":[87],"separability":[88],"formulation,":[89],"we":[90,110],"derive":[91],"checkerboard":[93],"trigger":[94,105,153],"in":[95],"closed":[96],"form,":[97],"removing":[98],"need":[100],"for":[101,128],"optimization.":[106],"For":[107,147],"texture-rich":[108],"datasets,":[109,133],"introduce":[111],"Complexity-driven":[112],"Sample":[113],"Selection,":[114],"which":[115],"uses":[116],"only":[117,174],"target-class":[118],"improve":[121],"trigger-to-background":[122],"contrast":[123],"selecting":[125],"low-complexity":[126],"images":[127],"poisoning.":[129],"Across":[130],"four":[131],"benchmark":[132],"Checkerboard":[134],"outperforms":[135],"8":[136],"baseline":[137],"achieves":[140,162],"state-of-the-art":[141,191],"performance":[142],"under":[143,151],"low":[144],"budgets.":[146],"example,":[148],"CIFAR-10,":[150],"perturbation":[154],"budget":[155],"$10/255$,":[157],"20":[159],"$99.99\\%$":[163],"Attack":[164],"Success":[165],"Rate":[166],"(ASR).":[167],"On":[168],"ImageNet-100,":[169],"rate":[172],"$0.46\\%$":[175],"yields":[176],"over":[177],"$94\\%$":[178],"ASR":[179],"without":[180],"degrading":[181],"accuracy.":[183],"The":[184],"proposed":[185],"also":[187],"remains":[188],"effective":[189],"against":[190],"defenses":[193],"shows":[195],"strong":[196],"resistance":[197],"adaptive":[199],"defenses.":[200]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-06T00:00:00"}