{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,10]],"date-time":"2025-12-10T05:04:00Z","timestamp":1765343040366,"version":"3.46.0"},"publisher-location":"New York, NY, USA","reference-count":42,"publisher":"ACM","funder":[{"name":"the National Natural Science Foundation of China","award":["No. U2469205"],"award-info":[{"award-number":["No. U2469205"]}]},{"name":"the Fundamental Research Funds for the Central Universities of China","award":["No. JKF-20240769"],"award-info":[{"award-number":["No. JKF-20240769"]}]},{"name":"the Beijing Nova Program","award":["No. 20230484353"],"award-info":[{"award-number":["No. 20230484353"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,10,27]]},"DOI":"10.1145\/3746027.3754780","type":"proceedings-article","created":{"date-parts":[[2025,10,25]],"date-time":"2025-10-25T07:27:39Z","timestamp":1761377259000},"page":"975-983","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["BadMDA: Towards Backdoor Injection during Domain Adaptation to Collapse Multi-Agent Perception"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0007-8496-1819","authenticated-orcid":false,"given":"Tong","family":"Chen","sequence":"first","affiliation":[{"name":"SKLCCSE, Beihang University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0975-2367","authenticated-orcid":false,"given":"Bowen","family":"Du","sequence":"additional","affiliation":[{"name":"School of Transportation Science and Engineering, Beihang University, Beijing, China and Zhongguancun Laboratory, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6892-9906","authenticated-orcid":false,"given":"Jiejie","family":"Zhao","sequence":"additional","affiliation":[{"name":"Zhongguancun Laboratory, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-9503-6529","authenticated-orcid":false,"given":"Hanyang","family":"Xia","sequence":"additional","affiliation":[{"name":"School of Software, Beihang University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1745-9814","authenticated-orcid":false,"given":"Haiquan","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Software, Beihang University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5884-3412","authenticated-orcid":false,"given":"Jiakai","family":"Wang","sequence":"additional","affiliation":[{"name":"Zhongguancun Laboratory, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2025,10,27]]},"reference":[{"key":"e_1_3_2_1_1_1","first-page":"308","article-title":"Deep learning with differential privacy","author":"Abadi Martin","year":"2016","unstructured":"Martin Abadi, Andy Chu, Ian Goodfellow, H Brendan McMahan, Ilya Mironov, Kunal Talwar, and Li Zhang. 2016. Deep learning with differential privacy. In ACM CCS. 308-318.","journal-title":"ACM CCS."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2020.3028424"},{"key":"e_1_3_2_1_3_1","volume-title":"Estimating or propagating gradients through stochastic neurons for conditional computation. arXiv preprint arXiv:1308.3432","author":"Bengio Yoshua","year":"2013","unstructured":"Yoshua Bengio, Nicholas L\u00e9onard, and Aaron Courville. 2013. Estimating or propagating gradients through stochastic neurons for conditional computation. arXiv preprint arXiv:1308.3432 (2013)."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.robot.2018.11.002"},{"key":"e_1_3_2_1_5_1","first-page":"17222","article-title":"Learning from all vehicles","author":"Chen Dian","year":"2022","unstructured":"Dian Chen and Philipp Kr\u00e4henb\u00fchl. 2022. Learning from all vehicles. In CVPR. 17222-17231.","journal-title":"CVPR."},{"key":"e_1_3_2_1_6_1","first-page":"88","article-title":"F-cooper: Feature based cooperative perception for autonomous vehicle edge computing system using 3D point clouds","author":"Chen Qi","year":"2019","unstructured":"Qi Chen, Xu Ma, Sihai Tang, Jingda Guo, Qing Yang, and Song Fu. 2019a. F-cooper: Feature based cooperative perception for autonomous vehicle edge computing system using 3D point clouds. In SCE. 88-100.","journal-title":"SCE."},{"key":"e_1_3_2_1_7_1","first-page":"514","article-title":"Cooper: Cooperative perception for connected autonomous vehicles based on 3d point clouds","author":"Chen Qi","year":"2019","unstructured":"Qi Chen, Sihai Tang, Qing Yang, and Song Fu. 2019b. Cooper: Cooperative perception for connected autonomous vehicles based on 3d point clouds. In ICDCS. IEEE, 514-524.","journal-title":"ICDCS. IEEE"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i2.16201"},{"key":"e_1_3_2_1_9_1","first-page":"17252","article-title":"Coopernaut: End-to-end driving with cooperative perception for networked vehicles","author":"Cui Jiaxun","year":"2022","unstructured":"Jiaxun Cui, Hang Qiu, Dian Chen, Peter Stone, and Yuke Zhu. 2022. Coopernaut: End-to-end driving with cooperative perception for networked vehicles. In CVPR. 17252-17262.","journal-title":"CVPR."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2018.2822828"},{"key":"e_1_3_2_1_11_1","unstructured":"Jonas Geiping Liam H Fowl W Ronny Huang Wojciech Czaja Gavin Taylor Michael Moeller and Tom Goldstein. 2021. Witches' Brew: Industrial Scale Data Poisoning via Gradient Matching. In ICLR."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"e_1_3_2_1_13_1","first-page":"4874","article-title":"Where2comm: Communication-efficient collaborative perception via spatial confidence maps","volume":"35","author":"Hu Yue","year":"2022","unstructured":"Yue Hu, Shaoheng Fang, Zixing Lei, Yiqi Zhong, and Siheng Chen. 2022. Where2comm: Communication-efficient collaborative perception via spatial confidence maps. NeurIPS, Vol. 35 (2022), 4874-4886.","journal-title":"NeurIPS"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/LRA.2023.3245421"},{"key":"e_1_3_2_1_15_1","first-page":"12697","article-title":"Pointpillars: Fast encoders for object detection from point clouds","author":"Lang Alex H","year":"2019","unstructured":"Alex H Lang, Sourabh Vora, Holger Caesar, Lubing Zhou, Jiong Yang, and Oscar Beijbom. 2019. Pointpillars: Fast encoders for object detection from point clouds. In CVPR. 12697-12705.","journal-title":"CVPR."},{"key":"e_1_3_2_1_16_1","first-page":"18414","article-title":"Breaking Data Silos: Cross-Domain Learning for Multi-Agent Perception from Independent Private Sources","author":"Li Jinlong","year":"2024","unstructured":"Jinlong Li, Baolu Li, Xinyu Liu, Runsheng Xu, Jiaqi Ma, and Hongkai Yu. 2024. Breaking Data Silos: Cross-Domain Learning for Multi-Agent Perception from Independent Private Sources. In ICRA. IEEE, 18414-18420.","journal-title":"ICRA. IEEE"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIV.2023.3260040"},{"key":"e_1_3_2_1_18_1","first-page":"186","article-title":"Among us: Adversarially robust collaborative perception by consensus","author":"Li Yiming","year":"2023","unstructured":"Yiming Li, Qi Fang, Jiamu Bai, Siheng Chen, Felix Juefei-Xu, and Chen Feng. 2023a. Among us: Adversarially robust collaborative perception by consensus. In ICCV. 186-195.","journal-title":"ICCV."},{"key":"e_1_3_2_1_19_1","first-page":"16463","article-title":"Invisible backdoor attack with sample-specific triggers","author":"Li Yuezun","year":"2021","unstructured":"Yuezun Li, Yiming Li, Baoyuan Wu, Longkang Li, Ran He, and Siwei Lyu. 2021a. Invisible backdoor attack with sample-specific triggers. In ICCV. 16463-16472.","journal-title":"ICCV."},{"key":"e_1_3_2_1_20_1","volume-title":"ICLR workshop.","author":"Li Yiming","year":"2021","unstructured":"Yiming Li, Tongqing Zhai, Yong Jiang, Zhifeng Li, and Shu-Tao Xia. 2021b. Backdoor attack in the physical world. In ICLR workshop."},{"key":"e_1_3_2_1_21_1","first-page":"273","article-title":"Fine-Pruning","author":"Liu Kang","year":"2018","unstructured":"Kang Liu, Brendan Dolan-Gavitt, and Siddharth Garg. 2018. Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks. In RAID. 273-294.","journal-title":"Defending Against Backdooring Attacks on Deep Neural Networks. In RAID."},{"volume-title":"An Extensible Framework for Open Heterogeneous Collaborative Perception. In The Twelfth International Conference on Learning Representations.","author":"Lu Yifan","key":"e_1_3_2_1_22_1","unstructured":"Yifan Lu, Yue Hu, Yiqi Zhong, Dequan Wang, Yanfeng Wang, and Siheng Chen. [n.d.]. An Extensible Framework for Open Heterogeneous Collaborative Perception. In The Twelfth International Conference on Learning Representations."},{"key":"e_1_3_2_1_23_1","first-page":"3578","article-title":"Complementarity-enhanced and redundancy-minimized collaboration network for multi-agent perception","author":"Luo Guiyang","year":"2022","unstructured":"Guiyang Luo, Hui Zhang, Quan Yuan, and Jinglin Li. 2022. Complementarity-enhanced and redundancy-minimized collaboration network for multi-agent perception. In ACM MM. 3578-3586.","journal-title":"ACM MM."},{"volume-title":"Plug and Play: A Representation Enhanced Domain Adapter for Collaborative Perception","author":"Luo Tianyou","key":"e_1_3_2_1_24_1","unstructured":"Tianyou Luo, Quan Yuan, Guiyang Luo, Yuchen Xia, Yujia Yang, and Jinglin Li. 2025. Plug and Play: A Representation Enhanced Domain Adapter for Collaborative Perception. In ECCV. Springer, 287-303."},{"key":"e_1_3_2_1_25_1","first-page":"3454","article-title":"Input-aware dynamic backdoor attack","volume":"33","author":"Nguyen Tuan Anh","year":"2020","unstructured":"Tuan Anh Nguyen and Anh Tran. 2020. Input-aware dynamic backdoor attack. NeurIPS, Vol. 33 (2020), 3454-3464.","journal-title":"NeurIPS"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/2750675.2750683"},{"key":"e_1_3_2_1_27_1","first-page":"133","article-title":"VIPS: Real-time perception fusion for infrastructure-assisted autonomous driving","author":"Shi Shuyao","year":"2022","unstructured":"Shuyao Shi, Jiahe Cui, Zhehao Jiang, Zhenyu Yan, Guoliang Xing, Jianwei Niu, and Zhenchao Ouyang. 2022. VIPS: Real-time perception fusion for infrastructure-assisted autonomous driving. In MobiCom. 133-146.","journal-title":"MobiCom."},{"key":"e_1_3_2_1_28_1","first-page":"19165","article-title":"Sleeper agent: Scalable hidden trigger backdoors for neural networks trained from scratch","volume":"35","author":"Souri Hossein","year":"2022","unstructured":"Hossein Souri, Liam Fowl, Rama Chellappa, Micah Goldblum, and Tom Goldstein. 2022. Sleeper agent: Scalable hidden trigger backdoors for neural networks trained from scratch. NeurIPS, Vol. 35 (2022), 19165-19178.","journal-title":"NeurIPS"},{"key":"e_1_3_2_1_29_1","first-page":"7768","article-title":"Adversarial Attacks On Multi-Agent Communication","author":"Tu James","year":"2021","unstructured":"James Tu, Tsun Hsuan Wang, Jingkang Wang, Sivabalan Maniva Sagam, Mengye Ren, and Raquel Urtasun. 2021. Adversarial Attacks On Multi-Agent Communication. In ICCV. 7768-7777.","journal-title":"ICCV."},{"key":"e_1_3_2_1_30_1","volume-title":"Label-consistent backdoor attacks. arXiv preprint arXiv:1912.02771","author":"Turner Alexander","year":"2019","unstructured":"Alexander Turner, Dimitris Tsipras, and Aleksander Madry. 2019. Label-consistent backdoor attacks. arXiv preprint arXiv:1912.02771 (2019)."},{"volume-title":"V2vnet: Vehicle-to-vehicle communication for joint perception and prediction","author":"Wang Tsun-Hsuan","key":"e_1_3_2_1_31_1","unstructured":"Tsun-Hsuan Wang, Sivabalan Manivasagam, Ming Liang, Bin Yang, Wenyuan Zeng, and Raquel Urtasun. 2020. V2vnet: Vehicle-to-vehicle communication for joint perception and prediction. In ECCV. Springer, 605-621."},{"key":"e_1_3_2_1_32_1","first-page":"16913","article-title":"Adversarial neuron pruning purifies backdoored deep models","volume":"34","author":"Wu Dongxian","year":"2021","unstructured":"Dongxian Wu and Yisen Wang. 2021. Adversarial neuron pruning purifies backdoored deep models. NeurIPS, Vol. 34 (2021), 16913-16925.","journal-title":"NeurIPS"},{"key":"e_1_3_2_1_33_1","first-page":"284","article-title":"HM-ViT: Hetero-modal vehicle-to-vehicle cooperative perception with vision transformer","author":"Xiang Hao","year":"2023","unstructured":"Hao Xiang, Runsheng Xu, and Jiaqi Ma. 2023. HM-ViT: Hetero-modal vehicle-to-vehicle cooperative perception with vision transformer. In ICCV. 284-295.","journal-title":"ICCV."},{"key":"e_1_3_2_1_34_1","first-page":"6035","article-title":"Bridging the domain gap for multi-agent perception","author":"Xu Runsheng","year":"2023","unstructured":"Runsheng Xu, Jinlong Li, Xiaoyu Dong, Hongkai Yu, and Jiaqi Ma. 2023a. Bridging the domain gap for multi-agent perception. In ICRA. IEEE, 6035-6042.","journal-title":"ICRA. IEEE"},{"key":"e_1_3_2_1_35_1","first-page":"989","article-title":"CoBEVT","author":"Xu Runsheng","year":"2023","unstructured":"Runsheng Xu, Zhengzhong Tu, Hao Xiang, Wei Shao, Bolei Zhou, and Jiaqi Ma. 2023b. CoBEVT: Cooperative Bird's Eye View Semantic Segmentation with Sparse Transformers. In CoRL. PMLR, 989-1000.","journal-title":"In CoRL. PMLR"},{"volume-title":"V2x-vit: Vehicle-to-everything cooperative perception with vision transformer","author":"Xu Runsheng","key":"e_1_3_2_1_36_1","unstructured":"Runsheng Xu, Hao Xiang, Zhengzhong Tu, Xin Xia, Ming-Hsuan Yang, and Jiaqi Ma. 2022a. V2x-vit: Vehicle-to-everything cooperative perception with vision transformer. In ECCV. Springer, 107-124."},{"key":"e_1_3_2_1_37_1","first-page":"2583","article-title":"Opv2v: An open benchmark dataset and fusion pipeline for perception with vehicle-to-vehicle communication","author":"Xu Runsheng","year":"2022","unstructured":"Runsheng Xu, Hao Xiang, Xin Xia, Xu Han, Jinlong Li, and Jiaqi Ma. 2022b. Opv2v: An open benchmark dataset and fusion pipeline for perception with vehicle-to-vehicle communication. In ICRA. IEEE, 2583-2589.","journal-title":"ICRA. IEEE"},{"key":"e_1_3_2_1_38_1","first-page":"11141","article-title":"Robust instance segmentation through reasoning about multi-object occlusion","author":"Yuan Xiaoding","year":"2021","unstructured":"Xiaoding Yuan, Adam Kortylewski, Yihong Sun, and Alan Yuille. 2021a. Robust instance segmentation through reasoning about multi-object occlusion. In CVPR. 11141-11150.","journal-title":"CVPR."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2021.3082763"},{"key":"e_1_3_2_1_40_1","volume-title":"Dsdnet: Deep structured self-driving network","author":"Zeng Wenyuan","year":"2020","unstructured":"Wenyuan Zeng, Shenlong Wang, Renjie Liao, Yun Chen, Bin Yang, and Raquel Urtasun. 2020. Dsdnet: Deep structured self-driving network. In ECCV. Springer, 156-172."},{"key":"e_1_3_2_1_41_1","first-page":"12575","article-title":"Ermvp: Communication-efficient and collaboration-robust multi-vehicle perception in challenging environments","author":"Zhang Jingyu","year":"2024","unstructured":"Jingyu Zhang, Kun Yang, Yilei Wang, Hanqi Wang, Peng Sun, and Liang Song. 2024. Ermvp: Communication-efficient and collaboration-robust multi-vehicle perception in challenging environments. In CVPR. 12575-12584.","journal-title":"CVPR."},{"key":"e_1_3_2_1_42_1","first-page":"533","article-title":"Towards backdoor attacks against lidar object detection in autonomous driving","author":"Zhang Yan","year":"2022","unstructured":"Yan Zhang, Yi Zhu, Zihao Liu, Chenglin Miao, Foad Hajiaghajani, Lu Su, and Chunming Qiao. 2022. Towards backdoor attacks against lidar object detection in autonomous driving. In SenSys. 533-547.","journal-title":"SenSys."}],"event":{"name":"MM '25: The 33rd ACM International Conference on Multimedia","sponsor":["SIGMM ACM Special Interest Group on Multimedia"],"location":"Dublin Ireland","acronym":"MM '25"},"container-title":["Proceedings of the 33rd ACM International Conference on Multimedia"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3746027.3754780","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,10]],"date-time":"2025-12-10T04:59:16Z","timestamp":1765342756000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3746027.3754780"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,27]]},"references-count":42,"alternative-id":["10.1145\/3746027.3754780","10.1145\/3746027"],"URL":"https:\/\/doi.org\/10.1145\/3746027.3754780","relation":{},"subject":[],"published":{"date-parts":[[2025,10,27]]},"assertion":[{"value":"2025-10-27","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}