{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T22:11:34Z","timestamp":1782857494911,"version":"3.54.5"},"reference-count":66,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100004826","name":"Beijing Natural Science Foundation","doi-asserted-by":"publisher","award":["JQ23018"],"award-info":[{"award-number":["JQ23018"]}],"id":[{"id":"10.13039\/501100004826","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004826","name":"Beijing Natural Science Foundation","doi-asserted-by":"publisher","award":["L252032"],"award-info":[{"award-number":["L252032"]}],"id":[{"id":"10.13039\/501100004826","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62036012"],"award-info":[{"award-number":["62036012"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62276257"],"award-info":[{"award-number":["62276257"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Multimedia"],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/tmm.2026.3664918","type":"journal-article","created":{"date-parts":[[2026,2,16]],"date-time":"2026-02-16T21:07:48Z","timestamp":1771276068000},"page":"4917-4927","source":"Crossref","is-referenced-by-count":0,"title":["Transferable Backdoor Attack on Any CLIP Model With Any Target Class by Pre-Trained Hack Network"],"prefix":"10.1109","volume":"28","author":[{"ORCID":"https:\/\/orcid.org\/0009-0000-1018-6425","authenticated-orcid":false,"given":"Bing","family":"Wang","sequence":"first","affiliation":[{"name":"School of Computer Science and Engineering, Tianjin University of Technology, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9488-2208","authenticated-orcid":false,"given":"Shengsheng","family":"Qian","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Multimodal Artificial Intelligence Systems, Institute of Automation, Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8343-9665","authenticated-orcid":false,"given":"Changsheng","family":"Xu","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Multimodal Artificial Intelligence Systems, Institute of Automation, Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","first-page":"8748","article-title":"Learning transferable visual models from natural language supervision","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Radford","year":"2021"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00276"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2024.3377136"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TMI.2023.3237183"},{"key":"ref5","first-page":"1","article-title":"Supervision exists everywhere: A data efficient contrastive language-image pre-training paradigm","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Li","year":"2022"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01755"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP43922.2022.9747669"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00633"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-20077-9_21"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-19809-0_30"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2022.acl-long.357"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-025-02461-z"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3626772.3657740"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2025.3571142"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3664647.3681649"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3503161.3547910"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00355"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2024.3382493"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.02156"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00701"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3503161.3547801"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833644"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.52202\/075280-0469"},{"key":"ref24","first-page":"56096","article-title":"Better safe than sorry: Pre-training CLIP against targeted data poisoning and backdoor attacks","volume-title":"Proc. 41st Int. Conf. Mach. Learn.","author":"Yang","year":"2024"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2023.3311646"},{"key":"ref26","first-page":"1","article-title":"Poisoning and backdooring contrastive learning","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Carlini","year":"2022"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02288"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02327"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/SmartWorld-UIC-ATC-ScalCom-DigitalTwin-PriComp-Metaverse56740.2022.00246"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.52202\/068431-1487"},{"key":"ref31","first-page":"1","article-title":"FILIP: Fine-grained interactive language-image pre-training","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Yao","year":"2022"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.52202\/068431-0486"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2025.3535353"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2025.3535333"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2025.3535304"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2023.3321501"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.emnlp-main.544"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00209"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.00246"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-024-02322-1"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2022.3169693"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00383"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i07.6871"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01175"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2024.3412388"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP43922.2022.9746008"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2025.3543050"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01298"},{"key":"ref49","article-title":"Erasing self-supervised learning backdoor by cluster activation masking","author":"Qian","year":"2023"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00403"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01179"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.acl-long.530"},{"key":"ref53","first-page":"984","article-title":"Where to attack: A dynamic locator model for backdoor attack in text classifications","volume-title":"Proc. 29th Int. Conf. Comput. Linguistics","author":"Lu","year":"2022"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.emnlp-main.374"},{"key":"ref55","first-page":"3611","article-title":"Hidden trigger backdoor attack on $\\lbrace$NLP$\\rbrace$ models via linguistic style manipulation","volume-title":"Proc. 31st USENIX Secur. Symp.","author":"Pan","year":"2022"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.11"},{"key":"ref58","first-page":"1","article-title":"Channel vision transformers: An image is Worth 1  16  16 Words","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Bao","year":"2024"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/n19-1423"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-10602-1_48"},{"key":"ref62","article-title":"Fashion-Gen: The generative fashion dataset and challenge","author":"Rostamzadeh","year":"2018"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2004.383"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-10599-4_29"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1162\/tacl_a_00166"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2023.findings-emnlp.833"}],"container-title":["IEEE Transactions on Multimedia"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6046\/11342315\/11397095.pdf?arnumber=11397095","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T21:37:29Z","timestamp":1782855449000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11397095\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":66,"URL":"https:\/\/doi.org\/10.1109\/tmm.2026.3664918","relation":{},"ISSN":["1520-9210","1941-0077"],"issn-type":[{"value":"1520-9210","type":"print"},{"value":"1941-0077","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}