% Key papers for Backdoors in large multimodal models (scime atlas, https://atlas.scime.ai). Authors are not included: add them from the paper pages.

@inproceedings{cvpr2022_backdoor_18341,
  title = {{Backdoor Attacks on Self-Supervised Learning}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2022},
}

@inproceedings{cvpr2023_trojvit_22422,
  title = {{TrojViT: Trojan Insertion in Vision Transformers}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2023},
  url = {https://cvpr.thecvf.com/virtual/2023/poster/21812},
}

@inproceedings{cvpr2023_you_22584,
  title = {{You Are Catching My Attention: Are Vision Transformers Bad Learners Under Backdoor Attacks?}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2023},
  url = {https://cvpr.thecvf.com/virtual/2023/poster/21177},
}

@inproceedings{iclr2022_badpre_31189,
  title = {{BadPre: Task-agnostic Backdoor Attacks to Pre-trained NLP Foundation Models}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2022},
  url = {https://iclr.cc/virtual/2022/poster/6220},
}

@inproceedings{cvpr2024_badclip_22817,
  title = {{BadCLIP: Dual-Embedding Guided Backdoor Attack on Multimodal Contrastive Learning}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2024},
  url = {https://cvpr.thecvf.com/virtual/2024/poster/29223},
}

@inproceedings{aaai2024_backdoor_5263,
  title = {{Backdoor Attacks via Machine Unlearning}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/29321},
}

@inproceedings{aaai2023_defending_3435,
  title = {{Defending against Backdoor Attacks in Natural Language Generation}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2023},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/25656},
}

@inproceedings{cvpr2024_badclip_22818,
  title = {{BadCLIP: Trigger-Aware Prompt Learning for Backdoor Attacks on CLIP}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2024},
  url = {https://cvpr.thecvf.com/virtual/2024/poster/31458},
}

@inproceedings{aaai2024_personalization_6946,
  title = {{Personalization as a Shortcut for Few-Shot Backdoor Attack against Text-to-Image Diffusion Models}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/30110},
}

@inproceedings{iclr2022_few_31710,
  title = {{Few-Shot Backdoor Attacks on Visual Object Tracking}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2022},
  url = {https://iclr.cc/virtual/2022/poster/6523},
}

@inproceedings{cvpr2023_the_22335,
  title = {{The Dark Side of Dynamic Routing Neural Networks: Towards Efficiency Backdoor Injection}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2023},
  url = {https://cvpr.thecvf.com/virtual/2023/poster/20989},
}

@inproceedings{cvpr2024_adversarial_22734,
  title = {{Adversarial Backdoor Attack by Naturalistic Data Poisoning on Trajectory Prediction in Autonomous Driving}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2024},
  url = {https://cvpr.thecvf.com/virtual/2024/poster/29988},
}

@inproceedings{neurips2022_badprompt_66152,
  title = {{BadPrompt: Backdoor Attacks on Continuous Prompts}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2022},
  url = {https://nips.cc/virtual/2022/poster/53386},
}

@inproceedings{aaai2023_defending_3433,
  title = {{Defending Backdoor Attacks on Vision Transformer via Patch Processing}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2023},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/25125},
}

@inproceedings{aaai2024_badrl_5267,
  title = {{BadRL: Sparse Targeted Backdoor Attack against Reinforcement Learning}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/29052},
}

@inproceedings{aaai2024_does_5737,
  title = {{Does Few-Shot Learning Suffer from Backdoor Attacks?}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/29965},
}

@inproceedings{cvpr2024_physical_24463,
  title = {{Physical Backdoor: Towards Temperature-based Backdoor Attacks in the Physical World}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2024},
  url = {https://cvpr.thecvf.com/virtual/2024/poster/30929},
}

@inproceedings{cvpr2024_not_24302,
  title = {{Not All Prompts Are Secure: A Switchable Backdoor Attack Against Pre-trained Vision Transfomers}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2024},
  url = {https://cvpr.thecvf.com/virtual/2024/poster/29871},
}

@inproceedings{aaai2025_watch_11268,
  title = {{Watch Out for Your Guidance on Generation! Exploring Conditional Backdoor Attacks against Large Language Models}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2025},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/34819},
}

@inproceedings{cvpr2025_revisiting_27460,
  title = {{Revisiting Backdoor Attacks against Large Vision-Language Models from Domain Shift}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2025},
  url = {https://cvpr.thecvf.com/virtual/2025/poster/33919},
}

@inproceedings{iclr2024_universal_34062,
  title = {{Universal Jailbreak Backdoors from Poisoned Human Feedback}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2024},
  url = {https://iclr.cc/virtual/2024/poster/19013},
}

@inproceedings{cvpr2025_badtoken_25564,
  title = {{BadToken: Token-level Backdoor Attacks to Multi-modal Large Language Models}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2025},
  url = {https://cvpr.thecvf.com/virtual/2025/poster/35047},
}

@inproceedings{cvpr2025_invisible_26654,
  title = {{Invisible Backdoor Attack against Self-supervised Learning}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2025},
  url = {https://cvpr.thecvf.com/virtual/2025/poster/35258},
}

@inproceedings{neurips2026_poisoning_95465,
  title = {{Poisoning Attacks on LLMs Require a Near-constant Number of Poison Samples}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2026},
  url = {https://neurips.cc/virtual/2026/poster/154663},
}

@inproceedings{aaai2024_uma_7669,
  title = {{UMA: Facilitating Backdoor Scanning via Unlearning-Based Model Ablation}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/30183},
}

@inproceedings{aaai2025_backdoor_8224,
  title = {{Backdoor Attacks Against No-Reference Image Quality Assessment Models via a Scalable Trigger}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2025},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/33051},
}

@inproceedings{neurips2024_sleepernets_71450,
  title = {{SleeperNets: Universal Backdoor Poisoning Attacks Against Reinforcement Learning Agents}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2024},
  url = {https://neurips.cc/virtual/2024/poster/95806},
}

@inproceedings{aaai2024_badsam_5268,
  title = {{BadSAM: Exploring Security Vulnerabilities of SAM via Backdoor Attacks (Student Abstract)}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/30448},
}

@inproceedings{aaai2025_attack_8164,
  title = {{Attack on Prompt: Backdoor Attack in Prompt-Based Continual Learning}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2025},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/34168},
}