Backdoor Attacks

Ask about this topic

Momentum

6 papers in the last four weeks, down 14% on the four weeks before. 0.1% of all new papers.

Jul 13Week of Sep 28
View on map

Latest papers 87

All topics
CardsList

  1. Backdooring Acoustic Foundation Models for Physically Realizable Triggers

    Oct 7, 2026Zebin Yun, Eyal Ronen, Mahmood SharifBackdoor AttacksAdversarial Attacks

    Tel Aviv University, Tel Aviv, Israel

  2. The Model Plants the Trigger: Answer-Side Backdoor Attacks in Multi-Turn Large Language Models

    Oct 6, 2026Yibo Zhang, Tianrong Guan, Liang Lin +3LLM Backdoor AttacksBackdoor Attacks

    Queen Mary University of London, UK · Squirrel AI Learning, USA

  3. Topology-Conditioned Backdoors: Language Models That Insert Vulnerabilities When They Infer They Are in a Multi-Agent System

    Oct 5, 2026Keegan Wang, Anantika MannbyLLM Backdoor AttacksAI Agent Auditing

    Carnegie Mellon University Prosaic Intelligence · University of Southern California Prosaic Intelligence

  4. BadAction: Backdoor Attacks on Interactive Video Generation via Action-Guided Triggers

    Sep 30, 2026Zhihang Wu, Zhongqi Wang, Jie Zhang +3Action-Conditioned Video GenerationBackdoor Attacks

    Key Laboratory of AI Safety of CAS, Institute of Computing Technology, Chinese Academy of Sciences (CAS), Beijing, China · University of Chinese Academy of Sciences, Beijing, China · School of Advanced Interdisciplinary Sciences, University of Chinese of Sciences, Beijing, China

  5. ODPure: Backdoor Purification for Object Detection via Ensemble Corruption Consensus

    Sep 23, 2026Li Zeng, Mingcheng Duan, Longfei Fan +5Backdoor AttacksBackdoor Defense

    School of Computer and Communication Engineering, Changsha University of Science & Technology, Changsha 410114, China · School of Computer Science, Xiangtan University, Xiangtan 411105, China · School of Software, Yunnan University, Kunming 650500, China +3

  6. Implementing a White-Box Undetectable Backdoor for Random Fourier Features

    Sep 14, 2026Michael Collins, Jada Cumberland, Brianne Dunn +3Adversarial AttacksBackdoor Attacks

    Laboratory for Advanced Cybersecurity Research Laurel, MD 20707 · School of Cybersecurity Old Dominion University Norfolk, VA 23259 · Old Dominion University Norfolk, VA 23259 +1

  7. When the World Lies: Backdoor Attacks on Latent World Models for Downstream Control

    Sep 14, 2026Roberto Riaño, Gorka Abad, Stjepan Picek +1Backdoor AttacksLatent World Models

    Radboud University, The Netherlands · IKERLAN Technology Research Centre, Spain · University of Bergen, Norway +1

  8. Pick Your Poison: Learning to Select Poison Sets for Stronger LLM Backdoor Attacks

    Sep 14, 2026Aashiq Muhamed, Mona T. Diab, Virginia Smith +2LLM Backdoor AttacksBackdoor Attacks

    Carnegie Mellon University · Anthropic

  9. Empirical Evaluation of Data Poisoning Attacks in Supervised Learning

    Sep 10, 2026Toshif Khan, Muhammad AbusaqerAdversarial AttacksBackdoor Attacks

    Minot State University · Department of Math, Data & Technology Minot State University Minot, ND, 58707 · Trustworthy Language Intelligence Lab, Minot State University

  10. CACTUS: Mask-Guided Semantic Clean-Label Backdoors in Decentralized Federated Learning

    Sep 2, 2026Chao Feng, Burkhard StillerBackdoor AttacksBackdoor Attacks in Federated Learning

    Communication Systems Group, Department of Informatics University of Zurich, Switzerland

  11. Ouroboros: Self-Referential Backdoor Attacks on Speech Enhancement via Clean Audio Triggers

    Aug 31, 2026Yunjie Zhou, Yuheng Huang, Diqun YanBackdoor AttacksSpeech Enhancement

    Faculty of Electrical Engineering and Computer Science, Ningbo University, China · College of Artificial Intelligence, Ningbo University of Finance and Economics, China

  12. Understanding Backdoor Vulnerabilities in Vertical Federated Learning: The Gap Between Research and Practice

    Aug 13, 2026Ziqi Zhao, Jialin Lu, Junjie Shan +3Backdoor AttacksBackdoor Attacks in Federated Learning

    School of Computing and Data Science, The University of Hong Kong, Hong Kong SAR, China

  13. Analysis of Federated Aggregation under Model Poisoning and Backdoor Attacks: A Reconstructed Cross-Dataset and Cross-Architecture Benchmark

    Aug 11, 2026Soumya Mazumdar, Vineet Kumar Rakesh, Tapas SamantaFederated Learning AggregationByzantine-Robust Federated Learning

    Department of Computer Science and Business Systems Gargi Memorial Institute of Technology Affiliated to Maulana Abul Kalam Azad University of Technology Balarampur, Mouza Beralia, Baruipur, Kolkata 700144, West Bengal, India · Computer and Informatics Group, Variable Energy Cyclotron Centre 1/AF, Bidhannagar, Kolkata 700064, West Bengal, India · Engineering Sciences, Homi Bhabha National Institute Anushaktinagar, Mumbai, Maharashtra 400094, India

  14. Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs

    Aug 11, 2026Tao Lin, Gaojie Jin, Zongxin Liu +2Adversarial Attacks on VLMsVision-Language Models

    Key Laboratory of System Software (Chinese Academy of Sciences), Beijing, China · Institute of Software, Chinese Academy of Sciences, Beijing, China · University of Chinese Academy of Sciences, Beijing, China +2

  15. DiffSafeMerge: Mitigating Backdoor Inheritance in Diffusion Model Merging

    Aug 10, 2026Jiayang Zhang, Ji Guo, Jiachen Li +2Backdoor AttacksBackdoor Defense

    University of Electronic Science and Technology of China, Chengdu, China · Wuhan University of Technology, Wuhan, China

  16. Diversity Matters: Distributional Feature Coverage Sample Selection for Data-Efficient Backdoor Attacks

    Aug 10, 2026Yi Yang, Xiaoke Chen, Jinyang Huang +6Backdoor AttacksData Selection

    School of Computer Science and Information Engineering, Hefei University of Technology, Hefei 230601, China · School of Information Science and Technology, University of Science and Technology of China, Hefei 230026, China · John Hopcroft Center for Computer Science, Shanghai Jiao Tong University, Shanghai 200240, China +1

  17. Robust Reputation-Driven Crowdsourced Federated Learning

    Aug 9, 2026Mouhamed Amine Bouchiha, Gregory BlancByzantine-Robust Federated LearningBackdoor Attacks

    SAMOVAR, Télécom SudParis, Institut Polytechnique de Paris

  18. Genotypic Triggers: Exposing Pharmacogenomic Blind Spots via Host-Specific Backdoors in Generative Antimicrobial Peptide Models

    Aug 7, 2026Doniyorkhon Obidov, Xiaolong Guo, Yonghui Li +1Backdoor AttacksMolecular Generation

    Michigan Technological University · Lehigh University · Kansas State University

  19. Bypassing Krum: Selection-Aware Backdoor Attacks in Federated Learning

    Aug 6, 2026Srinivasan Subramanian, Md. Abdullah Al Hafiz Khan, Kazi Aminul IslamFederated Learning AggregationByzantine-Robust Federated Learning

    Department of Computer Science Kennesaw State University Marietta, USA

  20. Evading Chain-of-Thought Monitoring Through Model Poisoning

    Aug 3, 2026Giorgio Severi, Shujaat Mirza, Blake Bullwinkel +1LLM Backdoor AttacksLLM Auditing

    Microsoft

  21. When Collaboration Becomes a Trigger: Collective Evidence-Threshold Backdoors in Multi-Agent Systems

    Aug 2, 2026Jia-Hao Xiao, Lei Feng, Min-Ling ZhangMulti-Agent LLM SystemsBackdoor Attacks

    School of Computer Science and Engineering, Southeast University, Nanjing 210096, China · Key Laboratory of Computer Network and Information Integration (Southeast University)

  22. Mitigating Backdoors via Decoy Shortcuts and Knowledge Decoupling

    Aug 1, 2026Zixuan Zhu, Rui Wang, Lihua Jing +1Backdoor AttacksBackdoor Defense

    Institute of Information Engineering, Chinese Academy of Sciences · School of Cyber Security, University of Chinese Academy of Sciences

  23. Robust Watermarks Meet Backdoored Models: Evading Diffusion Semantic Watermarks via Stealthy Backdoor

    Aug 1, 2026Jinyuan Liu, Tianshuo Cong, Pei Li +4Variational AutoencodersDiffusion Model Watermarking

    1Tsinghua University · 2Shandong University · 4Shandong Key Laboratory of Artificial Intelligence Security, Shandong University +5

  24. Temporal Poisoning: Clean-Label Backdoors via Event Redistribution in SNNs

    Jul 30, 2026Roberto Riaño, Gorka Abad, Stjepan Picek +1Backdoor AttacksBackdoor Detection

    Radboud University, The Netherlands · Ikerlan Research Centre, Spain · University of Bergen, Norway +1

  25. TriShield: Zero-Utility-Loss Defense Against Privacy Backdoors in Federated Language Model Fine-Tuning via Orthogonal Gradient Projection and Optimizer State Entanglement

    Jul 30, 2026Cheng WeiBackdoor AttacksBackdoor Attacks in Federated Learning

    Honor Device Co., Ltd., Shenzhen, China

  26. Lilith: Backdoor Generalization under Training-Inference Trigger Shift

    Jul 28, 2026Zhou Feng, Jiahao Chen, Chunyi Zhou +6Backdoor AttacksData Poisoning Attacks

    Zhejiang University College of Computer Science and Technology Hangzhou, China · Zhejiang University School of Software Technology Hangzhou, China · Chongqing University School of Big Data & Software Engineering Chongqing, China +1

  27. Early Detection of Distributed Backdoors in Multi-Agent LLM Systems: A Characterization Study

    Jul 27, 2026Diego Fernandez Arias, Dev Prashant Mistry, Ren Wang +1Multi-Agent LLM SystemsLLM Backdoor Attacks

    Illinois Institute of Technology Chicago, Illinois, USA

  28. FedLSG: LLM-Enhanced Semantic Calibration for Federated Graph Backdoor Defense

    Jul 22, 2026Chenyu Zhou, Yabin Peng, Wei Huang +3Graph Neural NetworksBackdoor Attacks

    Southeast University Purple Mountain Laboratories · Institute of AI for Industries Chinese Academy of Sciences · Purple Mountain Laboratories

  29. Natural Backdoor Attacks on Speech Recognition Models

    Jul 17, 2026Jinwen Xin, Xixiang Lyu, Jing MaBackdoor AttacksAutomatic Speech Recognition

    School of Cyber Engineering, Xidian University, Xi’an, China

  30. Input-Aware Dynamic Backdoor Attack Against Quantum Neural Networks

    Jul 13, 2026Junrui Zhang, Zemin Chen, Lusi Li +3Backdoor AttacksQuantum Neural Networks

    Department of Computer Science, Old Dominion University, Norfolk, VA, USA · School of Cybersecurity , Old Dominion University, Norfolk, VA, USA

  31. When Local Monitors Miss Compositional Harm: Diagnosing Distributed Backdoors in Multi-Agent Systems

    Jul 13, 2026Yibo Hu, Ren WangBackdoor AttacksBackdoor Detection

    Illinois Institute of Technology

  32. Statistically Undetectable Backdoors in Deep Neural Networks

    Jul 10, 2026Andrej Bogdanov, Alon Rosen, Neekon VafaBackdoor AttacksAdversarial Examples

    University of Ottawa. · Bocconi University. · Massachusetts Institute of Technology.

  33. Event Burst Trigger: An Availability Backdoor Attack on Event-Based SNN Object Detection

    Jul 10, 2026Jaesun Baek, Chanwook Lee, Eun-Kyu LeeBackdoor AttacksSpiking Neural Networks

    Dept. of Information and Telecommunication Eng., Incheon National University, Republic of Korea

  34. Assessing the Operational Impact of Poisoning Attacks over Augmented 3D Point Cloud Public Datasets for Connected and Autonomous Vehicles

    Jul 7, 2026Marwan Lazrag, Badis Hammi, Lorena Gonzalez-Manzano +1Autonomous Driving DatasetsData Augmentation

    SAMOVAR, Télécom SudParis, Institut Polytechnique de Paris Palaiseau, France · Universidad Carlos III de Madrid Leganes, Spain

  35. The Power of Backdoor Absorption in Community Training

    Jul 7, 2026Issam Seddik, Sami Souihi, Mohamed Tamaazousti +1Algorithmic AuditingBackdoor Attacks

    Université Paris-Saclay, CEA LIST, Palaiseau, France

  36. Two Sides of the Same Coin: Learning the Backdoor to Remove the Backdoor

    Jul 7, 2026Qi Zhao, Christian WressneggerBackdoor AttacksBackdoor Detection

    KASTEL Security Research Labs · Karlsruhe Institute of Technology (KIT)

  37. DRL-CLBA: A Clean Label Backdoor Attack for Speech Classification via DDPG Reinforcement Learning

    Jul 2, 2026Yueming Huang, Wenhan Yao, Fen Xiao +2Backdoor AttacksDeep Deterministic Policy Gradient

    Xiangtan University, Yuhu District Xiangda Road, Xiangtan, 411100, Hunan, China · Peking University, No.5, Summer Palace Road, Haidian District, Beijing, China, Beijing, 100871, Beijing, China

  38. Pmeta-TLA: Backdoor Attacks for Speech Classification Models via Meta-Learning with Timbre Leakage Attack

    Jul 2, 2026Yueming Huang, Wenhan Yao, Fen Xiao +2Backdoor Attacks

    Xiangtan University, Yuhu District Xiangda Road, Xiangtan, 411100, Hunan, China · Peking University, No.5, Summer Palace Road, Haidian District, Beijing, China, Beijing, 100871, Beijing, China

  39. Wireless Backdoor Attack and Defense for Semantic Communications over Multiple Access Channel

    Jun 29, 2026Yalin E. Sagduyu, Tugba Erpek, Aylin Yener +1Backdoor AttacksSemantic Communication

    Nexcepta, Gaithersburg, MD, USA · The Ohio State University, Columbus, OH, USA · University of Maryland, College Park, MD, USA

  40. Clustering Unsupervised Representations as Defense against Poisoning Attacks on Speech Commands Classification System

    Jun 27, 2026Thomas Thebaud, Sonal Joshi, Henry Li +4Backdoor AttacksAutomatic Speech Recognition

    Center for Language and Speech Processing, Johns Hopkins University, USA · Faculty of Information Technology, Brno University of Technology, Czechia

  41. TEMPO-Diffusion: Temporally Exposed Malicious Poisoning of Diffusion Models

    Jun 24, 2026William Aiken, Paula Branco, Guy-Vincent Jourdan +1Backdoor AttacksDiffusion-Based Image Generation

    School of Electrical Engineering and Computer Science, University of Ottawa, Ottawa, ON K1N 6N5, Canada

  42. Color Matters: Trigger Color Affects Success in Federated Backdoor Attacks

    Jun 24, 2026Kavindu Herath, Joshua C. Zhao, Saurabh BagchiBackdoor AttacksBackdoor Attacks in Federated Learning

    Department of Electrical and Computer Engineering, Purdue University, West Lafayette, USA

  43. TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger

    Jun 22, 2026Vu Tuan Truong, Long Bao LeBackdoor AttacksDiffusion Models

    INRS, University of Quebec

  44. Rethinking Molecular Graph Backdoors under Chemistry-aware Admission

    Jun 22, 2026Thinh T. H. Nguyen, Sze Jue Yang, Khoa D. Doan +2Graph Neural NetworksBackdoor Attacks

    VinUniversity, Hanoi, Vietnam · Universiti Malaya

  45. CLIP-guided Diffusion Model for Backdoor Generation in Sensor-based Human Activity Recognition

    Jun 22, 2026Toby Briston, Illya Kosyk, Kuniyih SHuman Activity RecognitionBackdoor Attacks

  46. BadDreamer: Transferable Backdoor Attacks against Video World Models for Autonomous Driving

    Jun 19, 2026Zhe Shuai, Xiaopeng Xie, Yikun ZengBackdoor AttacksAutonomous Driving

    Shanghai Jiao Tong University

  47. Backdoor Attacks on Speech Emotion Recognition via TTS-Generated Poisoning

    Jun 19, 2026Yongbin Huang, Xihao Xie, Jia ZhangBackdoor AttacksSpeech Emotion Recognition

    Department of Computer Science Southern Methodist University Dallas, USA

  48. Mirage: a Clean-Label Backdoor against LiDAR 3D Object Detection

    Jun 18, 2026Ziba Parsons, Ang LiLidar-Based 3D Object DetectionBackdoor Attacks

    Computer and Information Science University of Michigan - Dearborn Dearborn, MI 48170

  49. FloatDoor: Platform-Triggered Backdoors in LLMs

    Jun 17, 2026Nils Loose, Jonas Sander, Felix Mächtle +1LLM Backdoor AttacksBackdoor Attacks

    University of Luebeck

  50. Beyond Native Success: Auditing Deployment-Interface Exposure of CLIP Backdoors

    Jun 16, 2026Kunlan Xiang, Haomiao Yang, Wenbo JiangVLM RobustnessAdversarial Attacks on VLMs

    University of Electronic Science and Technology of China

  51. Continual Backdoor Training in IoT/CPS

    Jun 12, 2026Oxana Salish, Kuniyilh SBackdoor AttacksContinual Learning

  52. PolicyGuard: Towards Test-time and Step-level Adversary (Backdoor) Defense for Reinforcement Learning Agent

    Jun 11, 2026Junfeng Guo Heng HuangBackdoor AttacksBackdoor Defense

    Computer Science, University of Maryland College Park, USA.

  53. Targeting World Models to Compromise Robot Learning Pipelines

    Jun 8, 2026Ethan Rathbun, Ahmed Agha, Saaduddin Mahmud +3Robot Policy LearningWorld Models for Robotics

    Northeastern University · University of Massachusetts Amherst

  54. Patcher: Post-Hoc Patching of Backdoored Large Language Models

    Jun 2, 2026Anjun Gao, Yueyang Quan, Yufei Xia +2LLM Backdoor AttacksBackdoor Attacks

    University of Louisville · University of North Texas

  55. BadBone: Backdoor Attacks Against Backbone Models in Visual Prompt Learning

    May 29, 2026Ziqing Yang, Rui Wen, Xinlei He +3Adversarial AttacksBackdoor Attacks

    1CISPA Helmholtz Center for Information Security · Institute of Science Tokyo · 3Wuhan University +1

  56. Density-aware Sample-specific Attack

    May 27, 2026Qiyuan Wang, Yao Li, Raymond K. W. WongBackdoor AttacksAdversarial Robustness

    Texas A&M University · University of North Carolina at Chapel Hill

  57. Backdoor Attacks on Fault Detection and Localization in Cyber-Physical Systems

    May 26, 2026Abile Jean, Kuniyilh SCyber-Physical SystemsBackdoor Attacks

  58. When Stronger Triggers Backfire: A High-Dimensional Theory of Backdoor Attacks

    May 21, 2026Donald Flynn, Hadas Yaron Goldhirsh, Jonathan P. Keating +1Backdoor AttacksStatistical Learning Theory

    1Mathematical Institute, University of Oxford · School of Mathematical Science, Tel Aviv University · School of Mathematical Science and Computer Science, Tel Aviv University

  59. TimeGuard: Channel-wise Pool Training for Backdoor Defense in Time Series Forecasting

    May 21, 2026Quang Duc Nguyen, Siyuan Liang, Yiming Li +2Backdoor AttacksTime Series Forecasting

    College of Computing and Data Science, Nanyang Technological University, Singapore.

  60. Trusted Weights, Treacherous Optimizations? Optimization-Triggered Backdoor Attacks on LLMs

    May 20, 2026Yifei Wang, Yida Yang, Tianlin Li +3LLM Backdoor AttacksBackdoor Attacks

    Shanghai Jiao Tong University · Tongji University · Beihang University +1