{"id":"https://openalex.org/W4403323708","doi":"https://doi.org/10.48550/arxiv.2410.04823","title":"CAT: Concept-level backdoor ATtacks for Concept Bottleneck Models","display_name":"CAT: Concept-level backdoor ATtacks for Concept Bottleneck Models","publication_year":2024,"publication_date":"2024-10-07","ids":{"openalex":"https://openalex.org/W4403323708","doi":"https://doi.org/10.48550/arxiv.2410.04823"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2410.04823","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2410.04823","pdf_url":"https://arxiv.org/pdf/2410.04823","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2410.04823","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5086484127","display_name":"Songning Lai","orcid":"https://orcid.org/0009-0007-3132-9414"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lai, Songning","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100759138","display_name":"Jiayu Yang","orcid":"https://orcid.org/0000-0002-1457-1803"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Jiayu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101775142","display_name":"Yu Huang","orcid":"https://orcid.org/0000-0002-5885-5365"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Huang, Yu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5098903317","display_name":"Lijie Hu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hu, Lijie","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113429435","display_name":"Tianlang Xue","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xue, Tianlang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113429436","display_name":"Zhangyi Hu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hu, Zhangyi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007190734","display_name":"Jiaxu Li","orcid":"https://orcid.org/0000-0003-1641-2774"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Jiaxu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032304100","display_name":"Haicheng Liao","orcid":"https://orcid.org/0000-0002-0207-5087"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liao, Haicheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5052861384","display_name":"Yutao Yue","orcid":"https://orcid.org/0000-0003-4532-0924"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yue, Yutao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11106","display_name":"Data Management and Algorithms","score":0.9843000173568726,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11106","display_name":"Data Management and Algorithms","score":0.9843000173568726,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10317","display_name":"Advanced Database Systems and Queries","score":0.9678999781608582,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10203","display_name":"Recommender Systems and Techniques","score":0.9559999704360962,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9644840955734253},{"id":"https://openalex.org/keywords/bottleneck","display_name":"Bottleneck","score":0.8200582265853882},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.538881778717041},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4936109781265259},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.3465322256088257},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.060978084802627563}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9644840955734253},{"id":"https://openalex.org/C2780513914","wikidata":"https://www.wikidata.org/wiki/Q18210350","display_name":"Bottleneck","level":2,"score":0.8200582265853882},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.538881778717041},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4936109781265259},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3465322256088257},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.060978084802627563}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2410.04823","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2410.04823","pdf_url":"https://arxiv.org/pdf/2410.04823","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2410.04823","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2410.04823","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2410.04823","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2410.04823","pdf_url":"https://arxiv.org/pdf/2410.04823","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4403323708.pdf","grobid_xml":"https://content.openalex.org/works/W4403323708.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W4320031223","https://openalex.org/W4200629851","https://openalex.org/W4281902577","https://openalex.org/W4309417370","https://openalex.org/W4292107232","https://openalex.org/W3009072493","https://openalex.org/W4386080799","https://openalex.org/W4401407399"],"abstract_inverted_index":{"Despite":[0],"the":[1,10,18,69,75,85,90,105,136,145,154,182],"transformative":[2],"impact":[3],"of":[4,13,20,80,83,118],"deep":[5],"learning":[6,51],"across":[7],"multiple":[8],"domains,":[9],"inherent":[11],"opacity":[12],"these":[14,26],"models":[15],"has":[16,71],"driven":[17],"development":[19],"Explainable":[21],"Artificial":[22],"Intelligence":[23],"(XAI).":[24],"Among":[25],"efforts,":[27],"Concept":[28],"Bottleneck":[29],"Models":[30],"(CBMs)":[31],"have":[32],"emerged":[33],"as":[34],"a":[35,101,130,191],"key":[36],"approach":[37],"to":[38,55,110,133],"improve":[39],"interpretability":[40],"by":[41],"leveraging":[42],"high-level":[43],"semantic":[44],"information.":[45],"However,":[46],"CBMs,":[47],"like":[48],"other":[49],"machine":[50],"models,":[52],"are":[53],"susceptible":[54],"security":[56,184,197],"threats,":[57],"particularly":[58],"backdoor":[59,78],"attacks,":[60],"which":[61],"can":[62],"covertly":[63],"manipulate":[64],"model":[65,119],"behaviors.":[66],"Understanding":[67],"that":[68,103,161],"community":[70],"not":[72],"yet":[73],"studied":[74],"concept":[76,141],"level":[77],"attack":[79,126,155],"CBM,":[81],"because":[82],"\"Better":[84],"devil":[86,91],"you":[87,92],"know":[88],"than":[89],"don't":[93],"know.\",":[94],"we":[95],"introduce":[96],"CAT":[97,162],"(Concept-level":[98],"Backdoor":[99],"ATtacks),":[100],"methodology":[102,194],"leverages":[104],"conceptual":[106],"representations":[107],"within":[108],"CBMs":[109,188],"embed":[111],"triggers":[112],"during":[113],"training,":[114],"enabling":[115],"controlled":[116],"manipulation":[117],"predictions":[120],"at":[121],"inference":[122],"time.":[123],"An":[124],"enhanced":[125],"pattern,":[127],"CAT+,":[128],"incorporates":[129],"correlation":[131],"function":[132],"systematically":[134],"select":[135],"most":[137],"effective":[138],"and":[139,158,163,189],"stealthy":[140],"triggers,":[142],"thereby":[143],"optimizing":[144],"attack's":[146],"impact.":[147],"Our":[148],"comprehensive":[149],"evaluation":[150],"framework":[151],"assesses":[152],"both":[153],"success":[156],"rate":[157],"stealthiness,":[159],"demonstrating":[160],"CAT+":[164],"maintain":[165],"high":[166],"performance":[167],"on":[168,176],"clean":[169],"data":[170],"while":[171],"achieving":[172],"significant":[173],"targeted":[174],"effects":[175],"backdoored":[177],"datasets.":[178],"This":[179],"work":[180],"underscores":[181],"potential":[183],"risks":[185],"associated":[186],"with":[187],"provides":[190],"robust":[192],"testing":[193],"for":[195],"future":[196],"assessments.":[198]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2025-10-10T00:00:00"}