{"id":"W4405440513","doi":"10.1109/pst62714.2024.10788056","title":"DevilDiffusion: Embedding Hidden Noise Backdoors into Diffusion Models","year":2024,"lang":"en","type":"article","venue":"","topic":"Simulation Techniques and Applications","field":"Decision Sciences","cited_by":1,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Ottawa","funders":"","keywords":"Computer science; Noise (video); Embedding; Diffusion; Computer security; Artificial intelligence; Physics","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["insufficient_payload"],"consensus_categories":["insufficient_payload"],"category_scores_codex":[0.0009251555,0.0001497961,0.0001834594,0.0003528038,0.0002591851,0.0006181368,0.0006001248,0.0001038568,0.003740559],"category_scores_gemma":[0.0001791026,0.00009931855,0.0001557864,0.001248248,0.00005291421,0.0007231674,0.0003001755,0.000138369,0.001598943],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00005498705,"about_ca_system_score_gemma":0.00004414171,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0000697262,"about_ca_topic_score_gemma":0.00001573269,"domain_scores_codex":[0.997601,0.00005277746,0.0005815838,0.0006133079,0.0009559609,0.0001953345],"domain_scores_gemma":[0.9981862,0.0007674868,0.00005780939,0.0006654193,0.0001782643,0.0001448665],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.000006476094,0.00005769811,0.0002761041,0.000008903457,0.000007594184,0.000006740065,0.0009818663,0.001830775,0.005695391,0.3551078,0.03572743,0.6002932],"study_design_scores_gemma":[0.00005146429,0.00001087804,0.000136847,0.00001917739,0.000004889655,0.000003591966,0.0002517371,0.5736223,0.0007576942,0.3292386,0.09578633,0.0001164569],"study_design_candidate":"theoretical_or_conceptual","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.191396,0.0003532535,0.7204548,0.003843661,0.00029519,0.0003583489,0.000005650302,0.0008690452,0.08242404],"genre_scores_gemma":[0.9593065,0.00005414987,0.02643567,0.0003941431,0.0001324255,0.0000463807,0.000006357741,0.0000196832,0.01360469],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.7679105,"threshold_uncertainty_score":0.9991784,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.1031066479792857,"score_gpt":0.4301004708913387,"score_spread":0.326993822912053,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}