{"id":"https://openalex.org/W7152039857","doi":"https://doi.org/10.48550/arxiv.2604.05809","title":"Stealthy and Adjustable Text-Guided Backdoor Attacks on Multimodal Pretrained Models","display_name":"Stealthy and Adjustable Text-Guided Backdoor Attacks on Multimodal Pretrained Models","publication_year":2026,"publication_date":"2026-04-07","ids":{"openalex":"https://openalex.org/W7152039857","doi":"https://doi.org/10.48550/arxiv.2604.05809"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.05809","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.05809","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.05809","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5133219217","display_name":"Yiyang Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Yiyang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133181161","display_name":"Chaojian Yu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yu, Chaojian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133230840","display_name":"Ziming Hong","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hong, Ziming","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068395489","display_name":"Yuanjie Shao","orcid":"https://orcid.org/0000-0003-1141-0454"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shao, Yuanjie","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133172668","display_name":"Qinmu Peng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Peng, Qinmu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133214847","display_name":"Tongliang Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Tongliang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5133148213","display_name":"Xinge You","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"You, Xinge","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7131999731063843,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7131999731063843,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.14820000529289246,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.03240000084042549,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9962000250816345},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.47049999237060547},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.39070001244544983},{"id":"https://openalex.org/keywords/multimodal-learning","display_name":"Multimodal learning","score":0.3089999854564667},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.30790001153945923},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.2955999970436096}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9962000250816345},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7269999980926514},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6347000002861023},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.47049999237060547},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.39070001244544983},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3361000120639801},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.3167000114917755},{"id":"https://openalex.org/C2780660688","wikidata":"https://www.wikidata.org/wiki/Q25052564","display_name":"Multimodal learning","level":2,"score":0.3089999854564667},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.30790001153945923},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.2955999970436096},{"id":"https://openalex.org/C4441509","wikidata":"https://www.wikidata.org/wiki/Q6418787","display_name":"Multimodal therapy","level":2,"score":0.2939999997615814},{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.2734000086784363},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.27140000462532043},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.2615000009536743}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.05809","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.05809","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.05809","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.05809","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.533513605594635,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Multimodal":[0],"pretrained":[1,44,94,128],"models":[2],"are":[3,19],"vulnerable":[4],"to":[5,71],"backdoor":[6,55],"attacks,":[7],"yet":[8],"most":[9],"existing":[10],"methods":[11],"rely":[12],"on":[13,42,68,88],"visual":[14,65],"or":[15],"multimodal":[16,43,93,127],"triggers,":[17,56,78],"which":[18],"impractical":[20],"since":[21],"visually":[22],"embedded":[23],"triggers":[24],"rarely":[25],"occur":[26],"in":[27,50,126],"real-world":[28],"data.":[29],"To":[30],"overcome":[31],"this":[32],"limitation,":[33],"we":[34,63],"propose":[35],"a":[36,80],"novel":[37],"Text-Guided":[38],"Backdoor":[39],"(TGB)":[40],"attack":[41,115],"models,":[45,95],"where":[46],"commonly":[47],"occurring":[48],"words":[49],"textual":[51,77],"descriptions":[52],"serve":[53],"as":[54],"significantly":[57],"improving":[58],"stealthiness":[59,112],"and":[60,82,101,111],"practicality.":[61],"Furthermore,":[62],"introduce":[64],"adversarial":[66],"perturbations":[67],"poisoned":[69],"samples":[70],"modulate":[72],"the":[73],"model's":[74],"learning":[75],"of":[76],"enabling":[79],"controllable":[81],"adjustable":[83,114],"TGB":[84,108],"attack.":[85],"Extensive":[86],"experiments":[87],"downstream":[89],"tasks":[90],"built":[91],"upon":[92],"including":[96],"Composed":[97],"Image":[98],"Retrieval":[99],"(CIR)":[100],"Visual":[102],"Question":[103],"Answering":[104],"(VQA),":[105],"demonstrate":[106],"that":[107],"achieves":[109],"practicality":[110],"with":[113],"success":[116],"rates":[117],"across":[118],"diverse":[119],"realistic":[120],"settings,":[121],"revealing":[122],"critical":[123],"security":[124],"vulnerabilities":[125],"models.":[129]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-04-09T00:00:00"}