具有可见,语义,样本特定和兼容触发器的多功能后门攻击
IEEE transactions on pattern analysis and machine intelligence
|December 9, 2025
概括
研究人员开发了一种新的可见,语义,样本特定和兼容 (VSSC) 触发器,用于深度神经网络后门攻击. 这种自动化管道使得物理后门攻击对人工智能系统来说更加系统和现实.
科学领域:
- 人工智能的人工智能
- 机器学习安全 机器学习安全
- 计算机视觉 计算机视觉
背景情况:
- 深度神经网络 (DNN) 容易受到后门攻击,其中特定的触发器可以操纵行为而不影响良性性能.
- 由于手动触发器选择,时间限制和对现实世界视觉扭曲的敏感性,实施物理后门攻击具有挑战性.
研究的目的:
- 为了解决当前物理后门攻击的局限性.
- 引入一种新的触发器和自动化管道,以进行有效,隐蔽和强大的物理后门攻击.
主要方法:
- 定义了一个可见,语义,样本特定和兼容 (VSSC) 触发器,用于物理部署.
- 开发了一个自动化管道,其中包括用于触发器选择 (使用LLM),插入 (使用生成模型) 和质量评估 (使用视觉语言模型) 的模块.
主要成果:
- 该VSSC触发器证明了对视觉扭曲的有效性,隐形性和稳定性.
- 成功集成的自动化管道触发了图像,确保了自然和成功的插入.
- 在物理场景中验证了强大的实用性,将后门攻击转化为系统威胁.
结论:
- VSSC触发器和自动化管道为物理后门攻击提供了一个实用的解决方案.
- 这项工作通过使物理后门攻击更加系统和现实化,推动了这一领域的发展.
- 拟议的方法可以激发未来的研究,设计后门攻击的实际触发器.
相关概念视频
Leaky Scanning
5.6K
During most eukaryotic translation processes, the small 40S ribosome subunit scans an mRNA from its 5' end until it encounters the first start AUG codon. The large 60S ribosomal subunit then joins the smaller one to initiate protein synthesis. The location of the translation initiation is largely determined by the nucleotides near the start codon as there may be multiple translation initiation sites present on the mRNA. Marilyn Kozak discovered that the sequence RCCAUGG (where R...
5.6K
Masking and Demasking Agents
3.4K
EDTA titrations may necessitate masking and demasking agents to temporarily protect a particular metal ion in a mixture from the EDTA reaction. These agents facilitate the sequential analysis of the metal ions by forming stable complexes with some—but not all—metal ions during certain steps.
There are many masking agents, such as cyanide, fluoride, triethanolamine, thiourea, and 2,3-bis(sulfanyl)propan-1-ol (formerly 2,3-dimercapto-1-propanol), with the masking agent chosen based on...
There are many masking agents, such as cyanide, fluoride, triethanolamine, thiourea, and 2,3-bis(sulfanyl)propan-1-ol (formerly 2,3-dimercapto-1-propanol), with the masking agent chosen based on...
3.4K
Sampling Theorem
1.2K
In signal processing, the analysis of continuous-time signals, denoted as x(t), often involves sampling techniques to convert these signals into discrete-time signals. This process is essential for digital representation and manipulation. A critical component in sampling is the train of impulses, characterized by the sampling interval and the sampling frequency. The relationship between these parameters and the original signal's properties dictates the success of the sampling process.
1.2K
Sample Handling
1.4K
Transportation of samples from the collection point to the laboratory, as well as storage and preservation techniques, are crucial for maintaining sample integrity and ensuring accurate and reliable test results.
Samples should be transported carefully from collection points to the laboratory. They should be properly sealed and clearly labeled to prevent cross-contamination. To preserve the sample integrity, optimal temperature conditions during transport are essential. This could involve using...
Samples should be transported carefully from collection points to the laboratory. They should be properly sealed and clearly labeled to prevent cross-contamination. To preserve the sample integrity, optimal temperature conditions during transport are essential. This could involve using...
1.4K
Fixed Action Patterns
17.4K
A fixed action pattern (FAP) is a specific, hard-wired sequence of behaviors that occurs in response to an external stimulus, called a sign stimulus. The behavior is “fixed” because it is essentially unchangeable—proceeding similarly across individuals of a species every time it occurs.
17.4K
Woodward–Hoffmann Selection Rules and Microscopic Reversibility
3.8K
Electrocyclic reactions, cycloadditions, and sigmatropic rearrangements are concerted pericyclic reactions that proceed via a cyclic transition state. These reactions are stereospecific and regioselective. The stereochemistry of the products depends on the symmetry characteristics of the interacting orbitals and the reaction conditions. Accordingly, pericyclic reactions are classified as either symmetry-allowed or symmetry-forbidden. Woodward and Hoffmann presented the selection criteria for...
3.8K
