Cover Image

Backdooring CLIP through Concept Confusion

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Hu, Lijie, Liao, Junchi, Lyu, Weimin, Fu, Shaopeng, Huang, Tianhao, Yang, Shu, Hu, Guimin, Wang, Di
Format:	Preprint
Published:	2025
Subjects:	Cryptography and Security Computer Vision and Pattern Recognition
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

CAT: Concept-level backdoor ATtacks for Concept Bottleneck Models
by: Lai, Songning, et al.
Published: (2024)

Guarding the Gate: ConceptGuard Battles Concept-Level Backdoors in Concept Bottleneck Models
by: Lai, Songning, et al.
Published: (2024)

Invisible Backdoor Attacks on Diffusion Models
by: Li, Sen, et al.
Published: (2024)

ToxicTextCLIP: Text-Based Poisoning and Backdoor Attacks on CLIP Pre-training
by: Yao, Xin, et al.
Published: (2025)

Clean-image Backdoor Attacks
by: Rong, Dazhong, et al.
Published: (2024)

Backdoor Attacks on Prompt-Driven Video Segmentation Foundation Models
by: Zhang, Zongmin, et al.
Published: (2025)

Long-Tailed Backdoor Attack Using Dynamic Data Augmentation Operations
by: Pang, Lu, et al.
Published: (2024)

Perturb and Recover: Fine-tuning for Effective Backdoor Removal from CLIP
by: Singh, Naman Deep, et al.
Published: (2024)

Learning New Concepts, Remembering the Old: Continual Learning for Multimodal Concept Bottleneck Models
by: Lai, Songning, et al.
Published: (2024)

LOTUS: Evasive and Resilient Backdoor Attacks through Sub-Partitioning
by: Cheng, Siyuan, et al.
Published: (2024)

REDEditing: Relationship-Driven Precise Backdoor Poisoning on Text-to-Image Diffusion Models
by: Guo, Chongye, et al.
Published: (2025)

Mitigating Backdoor Attack by Injecting Proactive Defensive Backdoor
by: Wei, Shaokui, et al.
Published: (2024)

Removing the Trigger, Not the Backdoor: Alternative Triggers and Latent Backdoors
by: Abad, Gorka, et al.
Published: (2026)

Beyond Text Prompts: Precise Concept Erasure through Text-Image Collaboration
by: Li, Jun, et al.
Published: (2026)

Bad-PFL: Exploring Backdoor Attacks against Personalized Federated Learning
by: Fan, Mingyuan, et al.
Published: (2025)

HoneypotNet: Backdoor Attacks Against Model Extraction
by: Wang, Yixu, et al.
Published: (2025)

IPBA: Imperceptible Perturbation Backdoor Attack in Federated Self-Supervised Learning
by: Wang, Jiayao, et al.
Published: (2025)

Poisoning-based Backdoor Attacks for Arbitrary Target Label with Positive Triggers
by: Huang, Binxiao, et al.
Published: (2024)

Backdoor Directions in Vision Transformers
by: Karayalcin, Sengim, et al.
Published: (2026)

Backdoor Federated Learning by Poisoning Backdoor-Critical Layers
by: Zhuang, Haomin, et al.
Published: (2023)

Event Trojan: Asynchronous Event-based Backdoor Attacks
by: Wang, Ruofei, et al.
Published: (2024)

Backdoor Attack with Sparse and Invisible Trigger
by: Gao, Yinghua, et al.
Published: (2023)

SATBA: An Invisible Backdoor Attack Based On Spatial Attention
by: Zhou, Huasong, et al.
Published: (2023)

Backdoor Cleaning without External Guidance in MLLM Fine-tuning
by: Rong, Xuankun, et al.
Published: (2025)

Data Free Backdoor Attacks
by: Cao, Bochuan, et al.
Published: (2024)

BadBone: Backdoor Attacks Against Backbone Models in Visual Prompt Learning
by: Yang, Ziqing, et al.
Published: (2026)

CLIP-Inspector: Model-Level Backdoor Detection for Prompt-Tuned CLIP via OOD Trigger Inversion
by: Jindal, Akshit, et al.
Published: (2026)

A Proxy Attack-Free Strategy for Practically Improving the Poisoning Efficiency in Backdoor Attacks
by: Li, Ziqiang, et al.
Published: (2023)

Revocable Backdoor for Deep Model Trading
by: Xu, Yiran, et al.
Published: (2024)

Towards Physical World Backdoor Attacks against Skeleton Action Recognition
by: Zheng, Qichen, et al.
Published: (2024)

Robust and Transferable Backdoor Attacks Against Deep Image Compression With Selective Frequency Prior
by: Yu, Yi, et al.
Published: (2024)

Gungnir: Exploiting Stylistic Features in Images for Backdoor Attacks on Diffusion Models
by: Zhang, Lei, et al.
Published: (2025)

Scaling Exposes the Trigger: Input-Level Backdoor Detection in Text-to-Image Diffusion Models via Cross-Attention Scaling
by: Li, Zida, et al.
Published: (2026)

Test-Time Attention Purification for Backdoored Large Vision Language Models
by: Zhang, Zhifang, et al.
Published: (2026)

Versatile Backdoor Attack with Visible, Semantic, Sample-Specific, and Compatible Triggers
by: Wang, Ruotong, et al.
Published: (2023)

CatchBackdoor: Backdoor Detection via Critical Trojan Neural Path Fuzzing
by: Jin, Haibo, et al.
Published: (2021)

Robust Anti-Backdoor Instruction Tuning in LVLMs
by: Xun, Yuan, et al.
Published: (2025)

Backdoor Attack with Mode Mixture Latent Modification
by: Zhang, Hongwei, et al.
Published: (2024)

UFID: A Unified Framework for Input-level Backdoor Detection on Diffusion Models
by: Guan, Zihan, et al.
Published: (2024)

Megatron: Evasive Clean-Label Backdoor Attacks against Vision Transformer
by: Gong, Xueluan, et al.
Published: (2024)