% Key papers for Trigger-based backdoor attacks (scime atlas, https://atlas.scime.ai). Authors are not included: add them from the paper pages.

@inproceedings{aaai2020_hidden_103764,
  title = {{Hidden Trigger Backdoor Attacks}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2020},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/6871},
}

@inproceedings{neurips2018_spectral_57642,
  title = {{Spectral Signatures in Backdoor Attacks}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2018},
  url = {https://nips.cc/virtual/2018/poster/11767},
}

@inproceedings{cvpr2020_clean_15252,
  title = {{Clean-Label Backdoor Attacks on Video Recognition Models}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2020},
}

@inproceedings{cvpr2021_backdoor_16632,
  title = {{Backdoor Attacks Against Deep Learning Systems in the Physical World}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2021},
}

@inproceedings{cvpr2020_universal_16406,
  title = {{Universal Litmus Patterns: Revealing Backdoor Attacks in CNNs}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2020},
}

@inproceedings{neurips2020_input_60089,
  title = {{Input-Aware Dynamic Backdoor Attack}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2020},
  url = {https://nips.cc/virtual/2020/poster/18221},
}

@inproceedings{aaai2021_deep_376,
  title = {{Deep Feature Space Trojan Attack of Neural Networks by Controlled Detoxification}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2021},
  url = {https://aaai.org/papers/01148-deep-feature-space-trojan-attack-of-neural-networks-by-controlled-detoxification/},
}

@inproceedings{iclr2021_wanet_30495,
  title = {{WaNet - Imperceptible Warping-based Backdoor Attack}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2021},
  url = {https://iclr.cc/virtual/2021/poster/3087},
}

@inproceedings{cvpr2022_fiba_18815,
  title = {{FIBA: Frequency-Injection Based Backdoor Attack in Medical Image Analysis}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2022},
}

@inproceedings{iclr2020_robust_29650,
  title = {{Robust anomaly detection and backdoor attack detection via differential privacy}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2020},
  url = {https://openreview.net/forum?id=SJx0q1rtvS},
}

@inproceedings{cvpr2023_color_20606,
  title = {{Color Backdoor: A Robust Poisoning Attack in Color Space}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2023},
  url = {https://cvpr.thecvf.com/virtual/2023/poster/21916},
}

@inproceedings{cvpr2022_defeat_18571,
  title = {{DEFEAT: Deep Hidden Feature Backdoor Attacks by Imperceptible Perturbation and Latent Representation Constraints}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2022},
}

@inproceedings{cvpr2023_how_21178,
  title = {{How to Backdoor Diffusion Models?}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2023},
  url = {https://cvpr.thecvf.com/virtual/2023/poster/21572},
}

@inproceedings{neurips2019_defending_58116,
  title = {{Defending Neural Backdoors via Generative Distribution Modeling}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2019},
  url = {https://nips.cc/virtual/2019/poster/14329},
}

@inproceedings{icml2021_just_39487,
  title = {{Just How Toxic is Data Poisoning? A Unified Benchmark for Backdoor and Data Poisoning Attacks}},
  booktitle = {International Conference on Machine Learning (ICML)},
  year = {2021},
  url = {https://icml.cc/virtual/2021/poster/8473},
}

@inproceedings{cvpr2022_better_18355,
  title = {{Better Trigger Inversion Optimization in Backdoor Scanning}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2022},
}

@inproceedings{cvpr2022_towards_20056,
  title = {{Towards Practical Deployment-Stage Backdoor Attack on Deep Neural Networks}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2022},
}

@inproceedings{cvpr2023_backdoor_20442,
  title = {{Backdoor Attacks Against Deep Image Compression via Adaptive Frequency Trigger}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2023},
  url = {https://cvpr.thecvf.com/virtual/2023/poster/21640},
}

@inproceedings{aaai2022_certified_1827,
  title = {{Certified Robustness of Nearest Neighbors against Data Poisoning and Backdoor Attacks}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2022},
  url = {https://aaai.org/papers/09575-certified-robustness-of-nearest-neighbors-against-data-poisoning-and-backdoor-attacks/},
}

@inproceedings{neurips2022_backdoorbench_63815,
  title = {{BackdoorBench: A Comprehensive Benchmark of Backdoor Learning}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2022},
  url = {https://nips.cc/virtual/2022/poster/55715},
}

@inproceedings{aaai2024_elijah_5820,
  title = {{Elijah: Eliminating Backdoors Injected in Diffusion Models via Distribution Shift}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/28958},
}

@inproceedings{aaai2024_combat_5351,
  title = {{COMBAT: Alternated Training for Effective Clean-Label Backdoor Attacks}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/28019},
}

@inproceedings{cvpr2024_data_23108,
  title = {{Data Poisoning based Backdoor Attacks to Contrastive Learning}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2024},
  url = {https://cvpr.thecvf.com/virtual/2024/poster/30500},
}

@inproceedings{aaai2024_conditional_5464,
  title = {{Conditional Backdoor Attack via JPEG Compression}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/29957},
}

@inproceedings{cvpr2024_lotus_23901,
  title = {{LOTUS: Evasive and Resilient Backdoor Attacks through Sub-Partitioning}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2024},
  url = {https://cvpr.thecvf.com/virtual/2024/poster/31790},
}

@inproceedings{aaai2024_temporal_7518,
  title = {{Temporal-Distributed Backdoor Attack against Video Based Action Recognition}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/28104},
}

@inproceedings{iclr2024_efficient_35537,
  title = {{Efficient Backdoor Attacks for Deep Neural Networks in Real-world Scenarios}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2024},
  url = {https://iclr.cc/virtual/2024/poster/17536},
}

@inproceedings{aaai2025_cl_8344,
  title = {{CL-Attack: Textual Backdoor Attacks via Cross-Lingual Triggers}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2025},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/34842},
}

@inproceedings{neurips2024_data_73967,
  title = {{Data Free Backdoor Attacks}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2024},
  url = {https://neurips.cc/virtual/2024/poster/93546},
}

@inproceedings{cvpr2025_uibdiffusion_27967,
  title = {{UIBDiffusion: Universal Imperceptible Backdoor Attack for Diffusion Models}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2025},
  url = {https://cvpr.thecvf.com/virtual/2025/poster/34785},
}

@inproceedings{aaai2025_meme_9934,
  title = {{Meme Trojan: Backdoor Attacks Against Hateful Meme Detection via Cross-Modal Triggers}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2025},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/32845},
}

@inproceedings{aaai2025_speed_10817,
  title = {{Speed Master: Quick or Slow Play to Attack Speaker Recognition}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2025},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/34367},
}

@inproceedings{iclr2024_poisoned_33757,
  title = {{Poisoned Forgery Face: Towards Backdoor Attacks on Face Forgery Detection}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2024},
  url = {https://iclr.cc/virtual/2024/poster/19318},
}

@inproceedings{neurips2024_waveattack_71526,
  title = {{WaveAttack: Asymmetric Frequency Obfuscation-based Backdoor Attacks Against Deep Neural Networks}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2024},
  url = {https://neurips.cc/virtual/2024/poster/95737},
}

@inproceedings{aaai2024_from_6065,
  title = {{From Toxic to Trustworthy: Using Self-Distillation and Semi-supervised Methods to Refine Neural Networks}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/29629},
}

@inproceedings{aaai2025_backdoor_8223,
  title = {{Backdoor Attack on Propagation-based Rumor Detectors}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2025},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/33944},
}

@inproceedings{aaai2026_clean_100502,
  title = {{Clean-Label Physical Backdoor Attacks with Data Distillation}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2026},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/37349},
}

@inproceedings{aaai2025_clean_8421,
  title = {{Clean-Label Graph Backdoor Attack in the Node Classification Task}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2025},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/35466},
}

@inproceedings{aaai2025_influence_9564,
  title = {{Influence-Based Fair Selection for Sample-Discriminative Backdoor Attack}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2025},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/35449},
}

@inproceedings{iclr2024_universal_33561,
  title = {{Universal Backdoor Attacks}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2024},
  url = {https://iclr.cc/virtual/2024/poster/19514},
}