{"id":"https://openalex.org/W7165617792","doi":"https://doi.org/10.48550/arxiv.2606.23362","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","display_name":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","publication_year":2026,"publication_date":"2026-06-22","ids":{"openalex":"https://openalex.org/W7165617792","doi":"https://doi.org/10.48550/arxiv.2606.23362"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.23362","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.23362","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.23362","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5139191006","display_name":"Vu Tuan Truong","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Truong, Vu Tuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5029986211","display_name":"Long Bao Le","orcid":"https://orcid.org/0000-0003-3577-6530"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Le, Long Bao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.47540000081062317,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.47540000081062317,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12262","display_name":"Hate Speech and Cyberbullying Detection","score":0.03750000149011612,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.03229999914765358,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9987999796867371},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.511900007724762},{"id":"https://openalex.org/keywords/range","display_name":"Range (aeronautics)","score":0.34459999203681946},{"id":"https://openalex.org/keywords/diffusion","display_name":"Diffusion","score":0.29809999465942383},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.2680000066757202}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9987999796867371},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5989999771118164},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.511900007724762},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.44530001282691956},{"id":"https://openalex.org/C204323151","wikidata":"https://www.wikidata.org/wiki/Q905424","display_name":"Range (aeronautics)","level":2,"score":0.34459999203681946},{"id":"https://openalex.org/C69357855","wikidata":"https://www.wikidata.org/wiki/Q163214","display_name":"Diffusion","level":2,"score":0.29809999465942383},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.2680000066757202},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.24210000038146973},{"id":"https://openalex.org/C47446073","wikidata":"https://www.wikidata.org/wiki/Q5165890","display_name":"Control theory (sociology)","level":3,"score":0.22020000219345093},{"id":"https://openalex.org/C2994123057","wikidata":"https://www.wikidata.org/wiki/Q1595418","display_name":"Cure rate","level":2,"score":0.20600000023841858}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.23362","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.23362","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.23362","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.23362","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Diffusion":[0],"models":[1],"(DMs),":[2],"despite":[3],"their":[4],"impressive":[5],"capabilities":[6],"across":[7],"a":[8,50,78,83,180],"wide":[9],"range":[10],"of":[11,94],"generative":[12],"tasks,":[13],"have":[14],"been":[15],"shown":[16],"to":[17,20,89],"be":[18],"vulnerable":[19],"backdoor":[21,25,66,75,79,95,146],"attacks.":[22,198],"However,":[23],"existing":[24,150],"methods":[26,151],"face":[27],"critical":[28,181],"trade-offs":[29],"among":[30],"key":[31],"factors:":[32],"attack":[33,46,62],"performance,":[34],"stealthiness,":[35,59],"time":[36],"complexity,":[37],"and":[38,54,173,185],"required":[39,126],"poison":[40,52,118,136,160],"rates.":[41],"For":[42],"example,":[43],"achieving":[44],"high":[45,51,111,175],"performance":[47,93],"typically":[48,125],"demands":[49],"rate":[53,161],"prolonged":[55],"training,":[56],"which":[57,81],"undermines":[58],"making":[60],"the":[61,92,123,131,159,187],"more":[63,190],"detectable":[64],"by":[65,127],"defenses.":[67],"This":[68],"paper":[69],"proposes":[70],"TooBad":[71,108,138,168],"(trigger":[72],"optimization":[73,87],"for":[74,162,189],"diffusion":[76],"models),":[77],"framework":[80],"introduces":[82],"novel":[84],"DM-tailored":[85],"trigger":[86],"technique":[88],"dramatically":[90],"enhance":[91],"attacks":[96],"on":[97,100,130,183],"DMs.":[98],"Experiments":[99],"representative":[101],"benchmarks":[102],"such":[103,194],"as":[104],"CIFAR-10":[105],"show":[106],"that":[107],"can":[109],"achieve":[110],"ASRs":[112],"($>":[113],"85$%)":[114],"at":[115,153,157],"only":[116],"0.5%":[117],"rate,":[119,137],"significantly":[120],"lower":[121],"than":[122],"10%":[124],"prior":[128],"work":[129],"same":[132],"datasets.":[133],"At":[134],"5%":[135],"reaches":[139],"nearly":[140],"100%":[141],"ASR":[142],"within":[143],"just":[144],"3-5":[145],"injection":[147],"epochs,":[148],"whereas":[149],"need":[152,188],"least":[154],"30-50":[155],"epochs":[156],"double":[158],"comparable":[163],"results.":[164],"Despite":[165],"its":[166],"potency,":[167],"easily":[169],"evades":[170],"SOTA":[171],"defenses":[172,192],"maintains":[174],"utility.":[176],"These":[177],"results":[178],"reveal":[179],"threat":[182],"DMs":[184],"highlight":[186],"robust":[191],"against":[193],"stealthy":[195],"yet":[196],"efficient":[197]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-24T00:00:00"}