{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,4]],"date-time":"2026-09-04T21:14:06Z","timestamp":1788556446731,"version":"build-2803163510"},"publisher-location":"New York, NY, USA","reference-count":31,"publisher":"ACM","license":[{"start":{"date-parts":[[2026,8,8]],"date-time":"2026-08-08T00:00:00Z","timestamp":1786147200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"National Natural Science Foundation of China","award":["62402273"],"award-info":[{"award-number":["62402273"]}]},{"name":"Fundamental and Interdisciplinary Disciplines Breakthrough Plan of the Ministry of Education of China","award":["JYB2025XDXM114"],"award-info":[{"award-number":["JYB2025XDXM114"]}]},{"name":"National Cyber Security-National Science and Technology Major Project","award":["2026ZD1500901"],"award-info":[{"award-number":["2026ZD1500901"]}]},{"name":"Scientific Research Innovation Capability Support Project for Young Faculty","award":["ZYGXQNJSKYCXNLZCXM-P4"],"award-info":[{"award-number":["ZYGXQNJSKYCXNLZCXM-P4"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,8,9]]},"DOI":"10.1145\/3770855.3817768","type":"proceedings-article","created":{"date-parts":[[2026,8,6]],"date-time":"2026-08-06T17:15:37Z","timestamp":1786036537000},"page":"699-709","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Rethinking the Stealthiness of Cryptographically Undetectable Backdoors in Practical RFF Learning"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3189-8223","authenticated-orcid":false,"given":"Tianshuo","family":"Cong","sequence":"first","affiliation":[{"name":"School of Cryptologic Science and Engineering, Shandong University, Jinan, Shandong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-9002-7930","authenticated-orcid":false,"given":"Pei","family":"Li","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Technology, Shandong University, Qingdao, Shandong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-4577-1208","authenticated-orcid":false,"given":"Haojie","family":"Wu","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Technology, Shandong University, Qingdao, Shandong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-6346-5240","authenticated-orcid":false,"given":"Jinyuan","family":"Liu","sequence":"additional","affiliation":[{"name":"Institute for Advanced Study, Tsinghua University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-3793-1809","authenticated-orcid":false,"given":"Tairong","family":"Huang","sequence":"additional","affiliation":[{"name":"Institute for Advanced Study, Tsinghua University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-3046-5362","authenticated-orcid":false,"given":"Guoyan","family":"Zhang","sequence":"additional","affiliation":[{"name":"School of Cryptologic Science and Engineering, Shandong University, Jinan, Shandong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1086-0288","authenticated-orcid":false,"given":"Anyu","family":"Wang","sequence":"additional","affiliation":[{"name":"Institute for Advanced Study, Tsinghua University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,8,8]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Sampling techniques for kernel methods. Advances in neural information processing systems","author":"Achlioptas Dimitris","year":"2001","unstructured":"Dimitris Achlioptas, Frank McSherry, and Bernhard Sch\u00f6lkopf. 2001. Sampling techniques for kernel methods. Advances in neural information processing systems, Vol. 14 (2001)."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","unstructured":"Jock Blackard. 1998. Covertype. UCI Machine Learning Repository. DOI: https:\/\/doi.org\/10.24432\/C50K5N.","DOI":"10.24432\/C50K5N"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/3406325.3451000"},{"key":"e_1_3_2_1_4_1","volume-title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning. CoRR","author":"Chen Xinyun","year":"2017","unstructured":"Xinyun Chen, Chang Liu, Bo Li, Kimberly Lu, and Dawn Song. 2017. Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning. CoRR, Vol. abs\/1712.05526 (2017). arXiv:1712.05526 http:\/\/arxiv.org\/abs\/1712.05526"},{"key":"e_1_3_2_1_5_1","volume-title":"international conference on machine learning. PMLR, 1310-1320","author":"Cohen Jeremy","year":"2019","unstructured":"Jeremy Cohen, Elan Rosenfeld, and Zico Kolter. 2019. Certified adversarial robustness via randomized smoothing. In international conference on machine learning. PMLR, 1310-1320."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2941376"},{"key":"e_1_3_2_1_7_1","volume-title":"2022 IEEE 63rd Annual Symposium on Foundations of Computer Science (FOCS). IEEE, 931-942","author":"Goldwasser Shafi","year":"2022","unstructured":"Shafi Goldwasser, Michael P Kim, Vinod Vaikuntanathan, and Or Zamir. 2022. Planting undetectable backdoors in machine learning models. In 2022 IEEE 63rd Annual Symposium on Foundations of Computer Science (FOCS). IEEE, 931-942."},{"key":"e_1_3_2_1_8_1","unstructured":"Shafi Goldwasser Michael P. Kim Vinod Vaikuntanathan and Or Zamir. 2024. Planting Undetectable Backdoors in Machine Learning Models. arXiv:2204.06974 [cs.LG] https:\/\/arxiv.org\/abs\/2204.06974"},{"key":"e_1_3_2_1_9_1","volume-title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain. CoRR","author":"Gu Tianyu","year":"2017","unstructured":"Tianyu Gu, Brendan Dolan-Gavitt, and Siddharth Garg. 2017. BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain. CoRR, Vol. abs\/1708.06733 (2017). arXiv:1708.06733 http:\/\/arxiv.org\/abs\/1708.06733"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM50108.2020.00025"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.52202\/079017-0837"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.3386\/w31502"},{"key":"e_1_3_2_1_13_1","unstructured":"Alex Krizhevsky Geoffrey Hinton et al. 2009. Learning multiple layers of features from tiny images. (2009)."},{"key":"e_1_3_2_1_14_1","volume-title":"The Twelfth International Conference on Learning Representations, ICLR 2024","author":"Li Yanzhou","year":"2024","unstructured":"Yanzhou Li, Tianlin Li, Kangjie Chen, Jian Zhang, Shangqing Liu, Wenhan Wang, Tianwei Zhang, and Yang Liu. 2024. BadEdit: Backdooring Large Language Models by Model Editing. In The Twelfth International Conference on Learning Representations, ICLR 2024, Vienna, Austria, May 7-11, 2024. OpenReview.net. https:\/\/openreview.net\/forum?id=duZANm2ABX"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_13"},{"key":"e_1_3_2_1_16_1","volume-title":"International Conference on Learning Representations.","author":"Madry Aleksander","year":"2018","unstructured":"Aleksander Madry, Aleksandar Makelov, Ludwig Schmidt, Dimitris Tsipras, and Adrian Vladu. 2018. Towards Deep Learning Models Resistant to Adversarial Attacks. In International Conference on Learning Representations."},{"key":"e_1_3_2_1_17_1","volume-title":"Input-Aware Dynamic Backdoor Attack. In Advances in Neural Information Processing Systems 33: Annual Conference on Neural Information Processing Systems 2020","author":"Nguyen Tuan Anh","year":"2020","unstructured":"Tuan Anh Nguyen and Anh Tuan Tran. 2020. Input-Aware Dynamic Backdoor Attack. In Advances in Neural Information Processing Systems 33: Annual Conference on Neural Information Processing Systems 2020, NeurIPS 2020, December 6-12, 2020, virtual, Hugo Larochelle, Marc'Aurelio Ranzato, Raia Hadsell, Maria-Florina Balcan, and Hsuan-Tien Lin (Eds.). https:\/\/proceedings.neurips.cc\/paper\/2020\/hash\/234e691320c0ad5b45ee3c96d0d7b8f8-Abstract.html"},{"key":"e_1_3_2_1_18_1","volume-title":"WaNet - Imperceptible Warping-based Backdoor Attack. In 9th International Conference on Learning Representations, ICLR 2021","author":"Nguyen Tuan Anh","year":"2021","unstructured":"Tuan Anh Nguyen and Anh Tuan Tran. 2021. WaNet - Imperceptible Warping-based Backdoor Attack. In 9th International Conference on Learning Representations, ICLR 2021, Virtual Event, Austria, May 3-7, 2021. OpenReview.net. https:\/\/openreview.net\/forum?id=eEn8KTtJOx"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","unstructured":"Fanchao Qi Mukai Li Yangyi Chen Zhengyan Zhang Zhiyuan Liu Yasheng Wang and Maosong Sun. 2021. Hidden Killer: Invisible Textual Backdoor Attacks with Syntactic Trigger. In Proceedings of the 59th Annual Meeting of the Association for Computational Linguistics and the 11th International Joint Conference on Natural Language Processing ACL\/IJCNLP 2021 (Volume 1: Long Papers) Virtual Event August 1-6 2021 Chengqing Zong Fei Xia Wenjie Li and Roberto Navigli (Eds.). Association for Computational Linguistics 443-453. doi:10.18653\/V1\/2021.ACL-LONG.37","DOI":"10.18653\/V1\/2021.ACL-LONG.37"},{"key":"e_1_3_2_1_20_1","volume-title":"Random features for large-scale kernel machines. Advances in neural information processing systems","author":"Rahimi Ali","year":"2007","unstructured":"Ali Rahimi and Benjamin Recht. 2007. Random features for large-scale kernel machines. Advances in neural information processing systems, Vol. 20 (2007)."},{"key":"e_1_3_2_1_21_1","volume-title":"An overview of gradient descent optimization algorithms. arXiv preprint arXiv:1609.04747","author":"Ruder Sebastian","year":"2016","unstructured":"Sebastian Ruder. 2016. An overview of gradient descent optimization algorithms. arXiv preprint arXiv:1609.04747 (2016)."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP61157.2025.00161"},{"key":"e_1_3_2_1_23_1","volume-title":"Fourier features let networks learn high frequency functions in low dimensional domains. Advances in neural information processing systems","author":"Tancik Matthew","year":"2020","unstructured":"Matthew Tancik, Pratul Srinivasan, Ben Mildenhall, Sara Fridovich-Keil, Nithin Raghavan, Utkarsh Singhal, Ravi Ramamoorthi, Jonathan Barron, and Ren Ng. 2020. Fourier features let networks learn high frequency functions in low dimensional domains. Advances in neural information processing systems, Vol. 33 (2020), 7537-7547."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.7551\/mitpress\/4057.003.0004"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"e_1_3_2_1_26_1","volume-title":"Rethinking the Reverse-engineering of Trojan Triggers. ArXiv","author":"Wang Zhenting","year":"2022","unstructured":"Zhenting Wang, Kai Mei, Hailun Ding, Juan Zhai, and Shiqing Ma. 2022. Rethinking the Reverse-engineering of Trojan Triggers. ArXiv, Vol. abs\/2210.15127 (2022). https:\/\/api.semanticscholar.org\/CorpusID:253157887"},{"key":"e_1_3_2_1_27_1","volume-title":"UNICORN: A Unified Backdoor Trigger Inversion Framework. ArXiv","author":"Wang Zhenting","year":"2023","unstructured":"Zhenting Wang, Kai Mei, Juan Zhai, and Shiqing Ma. 2023. UNICORN: A Unified Backdoor Trigger Inversion Framework. ArXiv, Vol. abs\/2304.02786 (2023). https:\/\/api.semanticscholar.org\/CorpusID:257984946"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.naacl-long.337"},{"key":"e_1_3_2_1_29_1","volume-title":"The Tenth International Conference on Learning Representations, ICLR 2022","author":"Zeng Yi","year":"2022","unstructured":"Yi Zeng, Si Chen, Won Park, Zhuoqing Mao, Ming Jin, and Ruoxi Jia. 2022. Adversarial Unlearning of Backdoors via Implicit Hypergradient. In The Tenth International Conference on Learning Representations, ICLR 2022, Virtual Event, April 25-29, 2022. OpenReview.net. https:\/\/openreview.net\/forum?id=MeeQkFYVbzW"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-20065-6_11"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00412"}],"event":{"name":"KDD '26: The 32nd ACM SIGKDD Conference on Knowledge Discovery and Data Mining","location":"Jeju Island Republic of Korea","sponsor":["SIGMOD ACM Special Interest Group on Management of Data","SIGKDD ACM Special Interest Group on Knowledge Discovery in Data"]},"container-title":["Proceedings of the 32nd ACM SIGKDD Conference on Knowledge Discovery and Data Mining V.2"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3770855.3817768","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,9,4]],"date-time":"2026-09-04T20:32:09Z","timestamp":1788553929000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3770855.3817768"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,8,8]]},"references-count":31,"alternative-id":["10.1145\/3770855.3817768","10.1145\/3770855"],"URL":"https:\/\/doi.org\/10.1145\/3770855.3817768","relation":{},"subject":[],"published":{"date-parts":[[2026,8,8]]},"assertion":[{"value":"2026-08-08","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}