Accepted author manuscript, 921 KB, PDF document
Available under license: CC BY: Creative Commons Attribution 4.0 International License
Final published version
Research output: Contribution to Journal/Magazine › Journal article › peer-review
Research output: Contribution to Journal/Magazine › Journal article › peer-review
}
TY - JOUR
T1 - Concealed Backdoor Attack on Diffusion Models for Smart Devices with Non-standard Gaussian Distribution Noise
AU - Li, J.
AU - Tan, Y.-A.
AU - Fan, S.
AU - Li, F.
AU - Liu, X.
AU - Liu, R.
AU - Li, Y.
AU - Meng, W.
PY - 2024/12/11
Y1 - 2024/12/11
N2 - Edge AI-driven diffusion models (DMs) are increasingly integrated into consumer devices for high-quality data generation and content creation. This paper introduces InvisibleDiffusion, a novel backdoor attack framework for diffusion models in consumer electronics, designed to remain undetected by utilizing a non-standard Gaussian distribution as a concealed trigger. Unlike previous backdoor methods, InvisibleDiffusion does not rely on obvious visual triggers, enhancing its stealthiness. Extensive experiments demonstrate that InvisibleDiffusion achieves high attack efficacy against DDPM and DDIM models on CIFAR-10 and CelebA datasets, while maintaining the functional integrity of the models. Our code is available for reproducibility at https://anonymous.4open.science/r/b2hoaWNhbnRzZWV0aGF0bm9vb29vb29vb29v.
AB - Edge AI-driven diffusion models (DMs) are increasingly integrated into consumer devices for high-quality data generation and content creation. This paper introduces InvisibleDiffusion, a novel backdoor attack framework for diffusion models in consumer electronics, designed to remain undetected by utilizing a non-standard Gaussian distribution as a concealed trigger. Unlike previous backdoor methods, InvisibleDiffusion does not rely on obvious visual triggers, enhancing its stealthiness. Extensive experiments demonstrate that InvisibleDiffusion achieves high attack efficacy against DDPM and DDIM models on CIFAR-10 and CelebA datasets, while maintaining the functional integrity of the models. Our code is available for reproducibility at https://anonymous.4open.science/r/b2hoaWNhbnRzZWV0aGF0bm9vb29vb29vb29v.
KW - Consumer devices
KW - Edge AI
KW - Generative artificial intelligence
KW - Security in deep learning
KW - Gaussian distribution
KW - Gaussian noise (electronic)
KW - Backdoors
KW - Diffusion model
KW - Driven diffusion
KW - Gaussians
KW - High quality data
KW - Smart devices
U2 - 10.1109/TCE.2024.3516352
DO - 10.1109/TCE.2024.3516352
M3 - Journal article
JO - IEEE Transactions on Consumer Electronics
JF - IEEE Transactions on Consumer Electronics
SN - 0098-3063
ER -