{"id":"W4413476775","doi":"10.1016/j.eswa.2025.129481","title":"Clean-label backdoor attack via sample-customized feature alignment","year":2025,"lang":"en","type":"article","venue":"Expert Systems with Applications","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":1,"is_retracted":false,"has_abstract":false,"ca_institutions":"Artificial Intelligence in Medicine (Canada)","funders":"National Natural Science Foundation of China-Shandong Joint Fund; Natural Science Foundation of Shandong Province; National Natural Science Foundation of China","keywords":"Backdoor; Computer science; Sample (material); Feature (linguistics); Pattern recognition (psychology); Artificial intelligence; Data mining; Computer security; Chromatography","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0003089226,0.0002817435,0.000365998,0.0001602321,0.000514278,0.0002414553,0.001283926,0.0001396468,0.00001212127],"category_scores_gemma":[0.00004799327,0.0002317899,0.000058593,0.0009688641,0.00007634267,0.0002862885,0.0003030429,0.0002842276,0.0001226638],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0002352625,"about_ca_system_score_gemma":0.0001426456,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0002711643,"about_ca_topic_score_gemma":0.00001841947,"domain_scores_codex":[0.9979663,0.0001590429,0.0003509483,0.0007417623,0.0003908023,0.0003911017],"domain_scores_gemma":[0.9976473,0.0004092746,0.0002101814,0.001439078,0.0001606435,0.0001335541],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"not_applicable","study_design_scores_codex":[0.0001833481,0.0007458194,0.001686251,0.000276599,0.0005914125,0.00001708902,0.003247099,0.0445242,0.002863673,0.6966365,0.1576386,0.09158935],"study_design_scores_gemma":[0.002684313,0.00005530136,0.0001928549,0.0001646757,0.00002851656,0.00002809098,0.0004804769,0.3169395,0.0002908332,0.0004720085,0.6781313,0.0005321402],"study_design_candidate":"not_applicable","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.00008989179,0.0006596672,0.9890574,0.003904057,0.0004165869,0.001512765,0.000006754504,0.0004923815,0.003860465],"genre_scores_gemma":[0.3562154,0.00003992792,0.6246944,0.001762151,0.0007232278,0.006404525,0.00006858383,0.00007187257,0.01001996],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.6961645,"threshold_uncertainty_score":0.9452119,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01506443899332251,"score_gpt":0.2946220818503113,"score_spread":0.2795576428569888,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}