{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,15]],"date-time":"2026-01-15T22:27:36Z","timestamp":1768516056337,"version":"3.49.0"},"reference-count":39,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,12,14]],"date-time":"2025-12-14T00:00:00Z","timestamp":1765670400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,12,14]],"date-time":"2025-12-14T00:00:00Z","timestamp":1765670400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,12,14]]},"DOI":"10.1109\/icpads67057.2025.11322912","type":"proceedings-article","created":{"date-parts":[[2026,1,14]],"date-time":"2026-01-14T20:36:54Z","timestamp":1768423014000},"page":"1-8","source":"Crossref","is-referenced-by-count":0,"title":["Invisible Stealthy Backdoor Attack on Diffusion Models"],"prefix":"10.1109","author":[{"ORCID":"https:\/\/orcid.org\/0009-0005-6693-6850","authenticated-orcid":false,"given":"Zhi","family":"Chen","sequence":"first","affiliation":[{"name":"Hainan University,HaiKou,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-2560-8610","authenticated-orcid":false,"given":"Qing","family":"Luo","sequence":"additional","affiliation":[{"name":"Hainan University,HaiKou,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3777-9479","authenticated-orcid":false,"given":"Xiaoyi","family":"Zhou","sequence":"additional","affiliation":[{"name":"Hainan University,HaiKou,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7458-7412","authenticated-orcid":false,"given":"Jixin","family":"Ma","sequence":"additional","affiliation":[{"name":"University of Greenwich,London,UK"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2023.3261988"},{"key":"ref2","first-page":"8780","article-title":"Diffusion models beat gans on image synthesis","volume":"34","author":"Dhariwal","year":"2021","journal-title":"Advances in neural information processing systems"},{"issue":"2","key":"ref3","first-page":"3","article-title":"Hierarchical text-conditional image generation with clip latents","volume":"1","author":"Ramesh","year":"2022","journal-title":"arXiv preprint arXiv"},{"key":"ref4","article-title":"Glide: Towards photorealistic image generation and editing with text-guided diffusion models","author":"Nichol","year":"2021","journal-title":"arXiv preprint arXiv"},{"key":"ref5","article-title":"Denoising diffusion implicit models","author":"Song","year":"2020","journal-title":"arXiv preprint arXiv"},{"key":"ref6","article-title":"Score-based generative modeling through stochastic differential equations","author":"Song","year":"2020","journal-title":"arXiv preprint arXiv"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/cvpr52688.2022.01042"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3528233.3530757"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3422622"},{"key":"ref10","first-page":"36479","article-title":"Photorealistic text-to-image diffusion models with deep language understanding","volume":"35","author":"Saharia","year":"2022","journal-title":"Advances in neural information processing systems"},{"key":"ref11","article-title":"Text-guided synthesis of artistic images with retrieval-augmented diffusion models","author":"Rombach","year":"2022","journal-title":"arXiv preprint arXiv"},{"key":"ref12","article-title":"Diffwave: A versatile diffusion model for audio synthesis","author":"Kong","year":"2020","journal-title":"arXiv preprint arXiv"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2022\/577"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3503161.3547855"},{"key":"ref15","first-page":"11119","article-title":"Guided-tts: A diffusion model for text-tospeech via classifier guidance","volume-title":"International Conference on Machine Learning","author":"Kim"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i10.28958"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00393"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00391"},{"key":"ref19","article-title":"Villandiffusion: A unified backdoor attack framework for diffusion models","volume":"36","author":"Chou","year":"2024","journal-title":"Advances in Neural Information Processing Systems"},{"issue":"2","key":"ref20","article-title":"Zero-day backdoor attack against text-to-image diffusion models via personalization","volume":"1","author":"Huang","year":"2023","journal-title":"arXiv preprint arXiv"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i19.30110"},{"key":"ref22","article-title":"The stronger the diffusion model, the easier the backdoor: Data poisoning to induce copyright breaches without adjusting finetuning pipeline","author":"Wang","year":"2024","journal-title":"arXiv preprint arXiv"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01615"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00786"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.3021407"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01465"},{"key":"ref27","first-page":"16216","article-title":"Rethinking backdoor attacks","volume-title":"International Conference on Machine Learning","author":"Khaddaj"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i07.6871"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v39i26.34941"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52734.2025.01787"},{"key":"ref31","article-title":"Gans trained by a two time-scale update rule converge to a local nash equilibrium","volume":"30","author":"Heusel","year":"2017","journal-title":"Advances in neural information processing systems"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2022.103138"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2023.3286393"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1016\/j.sigpro.2022.108890"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00469"},{"key":"ref36","first-page":"6840","article-title":"Denoising diffusion probabilistic models","volume":"33","author":"Ho","year":"2020","journal-title":"Advances in neural information processing systems"},{"key":"ref37","article-title":"Terd: A unified framework for safeguarding diffusion models against backdoors","author":"Mo","year":"2024","journal-title":"ICML"},{"key":"ref38","article-title":"Disdet: Exploring detectability of backdoor attack on diffusion models","author":"Sui","year":"2024","journal-title":"arXiv preprint arXiv"},{"key":"ref39","article-title":"Invisible backdoor attacks on diffusion models","author":"Li","year":"2024","journal-title":"arXiv preprint arXiv"}],"event":{"name":"2025 IEEE 31th International Conference on Parallel and Distributed Systems (ICPADS)","location":"Hefei, China","start":{"date-parts":[[2025,12,14]]},"end":{"date-parts":[[2025,12,18]]}},"container-title":["2025 IEEE 31th International Conference on Parallel and Distributed Systems (ICPADS)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11322805\/11322871\/11322912.pdf?arnumber=11322912","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,1,15]],"date-time":"2026-01-15T07:09:01Z","timestamp":1768460941000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11322912\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,12,14]]},"references-count":39,"URL":"https:\/\/doi.org\/10.1109\/icpads67057.2025.11322912","relation":{},"subject":[],"published":{"date-parts":[[2025,12,14]]}}}