{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,13]],"date-time":"2026-07-13T21:07:45Z","timestamp":1783976865478,"version":"3.55.0"},"reference-count":54,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Shenzhen Science and Technology Program","award":["SYSRD20250529113401002"],"award-info":[{"award-number":["SYSRD20250529113401002"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62441619"],"award-info":[{"award-number":["62441619"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U2541229"],"award-info":[{"award-number":["U2541229"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62132006"],"award-info":[{"award-number":["62132006"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62372448"],"award-info":[{"award-number":["62372448"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Open Topics from the Lion Rock Labs of Cyberspace Security","award":["LRL24009"],"award-info":[{"award-number":["LRL24009"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1109\/tdsc.2026.3694473","type":"journal-article","created":{"date-parts":[[2026,5,19]],"date-time":"2026-05-19T19:52:15Z","timestamp":1779220335000},"page":"9682-9694","source":"Crossref","is-referenced-by-count":0,"title":["PersGuard: Preventing Malicious Personalization in Text-to-Image Diffusion Models via Model Backdoors"],"prefix":"10.1109","volume":"23","author":[{"ORCID":"https:\/\/orcid.org\/0009-0009-9510-418X","authenticated-orcid":false,"given":"Xinwei","family":"Liu","sequence":"first","affiliation":[{"name":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2018-9344","authenticated-orcid":false,"given":"Xiaojun","family":"Jia","sequence":"additional","affiliation":[{"name":"Cyber Security Research Centre @ NTU, Nanyang Technological University, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-7069-9816","authenticated-orcid":false,"given":"Yuan","family":"Xun","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7627-4142","authenticated-orcid":false,"given":"Hua","family":"Zhang","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7141-708X","authenticated-orcid":false,"given":"Xiaochun","family":"Cao","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Technology, Shenzhen Campus, Sun Yat-sen University, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","first-page":"6840","article-title":"Denoising diffusion probabilistic models","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"33","author":"Ho","year":"2020"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01042"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.52202\/068431-0313"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3503161.3547855"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.52202\/068431-0628"},{"key":"ref6","article-title":"Denoising diffusion implicit models","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Song","year":"2021"},{"issue":"3","key":"ref7","first-page":"8","article-title":"Improving image generation with better captions","volume":"2","author":"Betker","year":"2023","journal-title":"Comput. Sci."},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.52202\/068431-2643"},{"key":"ref9","article-title":"LoRA: Low-rank adaptation of large language models","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Hu","year":"2022"},{"key":"ref10","article-title":"An image is worth one word: Personalizing text-to-image generation using textual inversion","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Gal","year":"2023"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.02155"},{"key":"ref12","article-title":"Towards resilient safety-driven unlearning for diffusion models against downstream fine-tuning","author":"Li","year":"2025"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/SP61157.2025.00073"},{"key":"ref14","article-title":"DUAW: Data-free universal adversarial watermark against stable diffusion customization","author":"Ye","year":"2023"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3664647.3681243"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00202"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.52202\/079017-4339"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.01145"},{"key":"ref19","first-page":"20763","article-title":"Adversarial example does good: Preventing painting imitation from diffusion models via adversarial examples","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Liang","year":"2023"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-19781-9_1"},{"key":"ref21","article-title":"UnLearnable examples: Making personal data unexploitable","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Huang","year":"2021"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3664647.3680708"},{"key":"ref23","article-title":"Data poisoning won\u2019t save you from facial recognition","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Radiya-Dixit","year":"2022"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3581783.3612108"},{"key":"ref25","first-page":"16784","article-title":"GLIDE: Towards photorealistic image generation and editing with text-guided diffusion models","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Nichol","year":"2022"},{"key":"ref26","article-title":"eDiff-I: Text-to-image diffusion models with an ensemble of expert denoisers","author":"Balaji","year":"2022"},{"key":"ref27","article-title":"Hierarchical text-conditional image generation with clip latents","author":"Ramesh","year":"2022"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.52202\/068431-1833"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00673"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.00624"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01569"},{"key":"ref32","article-title":"Detecting backdoor samples in contrastive language image pretraining","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Huang","year":"2025"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"ref34","article-title":"Targeted backdoor attacks on deep learning systems using data poisoning","author":"Chen","year":"2017"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-25056-9_26"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP49357.2023.10095980"},{"key":"ref37","article-title":"Poisoning and backdooring contrastive learning","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Carlini","year":"2022"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02327"},{"key":"ref39","article-title":"BAAAN: Backdoor attacks against autoencoder and GAN-based machine learning models","author":"Salem","year":"2020"},{"key":"ref40","article-title":"Injecting bias in text-to-image models via composite-trigger backdoors","author":"Naseh","year":"2024"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i19.30110"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3664647.3680689"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00423"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3386058"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02286"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/IJCB62174.2024.10744490"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/SP61157.2025.00073"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-72933-1_26"},{"key":"ref49","first-page":"1615","article-title":"Turning your weakness into a strength: Watermarking deep neural networks by backdooring","volume-title":"Proc. 27th USENIX Secur. Symp.","author":"Adi","year":"2018"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196550"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417231"},{"key":"ref52","article-title":"Progressive growing of GANs for improved quality, stability, and variation","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Karras","year":"2018"},{"key":"ref53","first-page":"6626","article-title":"GANs trained by a two time-scale update rule converge to a local Nash equilibrium","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"30","author":"Heusel","year":"2017"},{"key":"ref54","first-page":"5644","article-title":"What the DAAM: Interpreting stable diffusion using cross attention","volume-title":"Proc. 61st Annu. Meeting Assoc. Computat. Linguistics","author":"Tang","year":"2023"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8858\/11603880\/11523584.pdf?arnumber=11523584","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,13]],"date-time":"2026-07-13T20:08:29Z","timestamp":1783973309000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11523584\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7]]},"references-count":54,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2026.3694473","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,7]]}}}