{"id":"W4413786017","doi":"10.1109/tdsc.2025.3603639","title":"I2I Backdoor: Backdoor Attacks Against Image-to-Image Tasks","year":2025,"lang":"en","type":"article","venue":"IEEE Transactions on Dependable and Secure Computing","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":5,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of New Brunswick","funders":"National Natural Science Foundation of China","keywords":"Backdoor; Computer science; Image (mathematics); Computer security; Artificial intelligence; Computer vision","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.0005578585,0.0004058664,0.0004317753,0.0004607512,0.001062036,0.0005637308,0.0009405309,0.0001812004,0.0000518627],"category_scores_gemma":[0.00004252999,0.0004202691,0.0001597429,0.001110951,0.00008659384,0.0006641479,0.0000593818,0.0009739314,0.0001594711],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.000114982,"about_ca_system_score_gemma":0.0001408257,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00007775366,"about_ca_topic_score_gemma":0.00004039993,"domain_scores_codex":[0.9972894,0.0002046532,0.0004924493,0.0009768938,0.0003594922,0.0006771213],"domain_scores_gemma":[0.998377,0.0003706571,0.0001221959,0.0007275016,0.0001693635,0.0002333028],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00009570437,0.0003283064,0.0001078898,0.0002556324,0.0002471465,0.0002158529,0.002771359,0.5112831,0.008657798,0.004121616,0.00350291,0.4684127],"study_design_scores_gemma":[0.001386014,0.0001498028,0.0002481346,0.0003642439,0.00005742164,0.00004335038,0.0002831376,0.9755799,0.01125966,0.0004658902,0.009411149,0.0007512814],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.02085672,0.0000773924,0.968843,0.001515273,0.001578924,0.0003554676,0.00001015872,0.0004739082,0.006289198],"genre_scores_gemma":[0.8333182,0.00002286807,0.1639135,0.00146876,0.0001047344,0.00001125738,0.000003293196,0.00003323139,0.001124106],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.8124616,"threshold_uncertainty_score":0.9998249,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.008572549446998498,"score_gpt":0.2709500114351712,"score_spread":0.2623774619881727,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}