Concealed Backdoor Attack on Diffusion Models for Smart Devices With Non-Standard Gaussian Distribution Noise
Edge AI-driven diffusion models (DMs) are increasingly integrated into consumer devices for high-quality data generation and content creation. This paper introduces InvisibleDiffusion, a novel backdoor attack framework for diffusion models in consumer electronics, designed to remain undetected by utilizing a non-standard Gaussian distribution as a concealed trigger. Unlike previous backdoor methods, InvisibleDiffusion does not rely on obvious visual triggers, enhancing its stealthiness. Extensive experiments demonstrate that InvisibleDiffusion achieves high attack efficacy against DDPM and DDIM models on CIFAR-10 and CelebA datasets, while maintaining the functional integrity of the models. Our code is available for reproducibility at <uri xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">https://anonymous.4open.science/r/b2hoaWNhbnRzZWV0aGF0bm9vb29vb29vb29v</uri>.
Authors
- Yu‐an Tan (ORCID: https://orcid.org/0000-0001-6404-8853)
- Yuanzhang Li (ORCID: https://orcid.org/0000-0002-1931-366X)
- Weizhi Meng (ORCID: https://orcid.org/0000-0003-4384-5786)
- Runke Liu
- Sizhe Fan
- Fan Li (ORCID: https://orcid.org/0000-0002-2348-4488)
- Jiaxing Li (ORCID: https://orcid.org/0000-0001-7048-9284)
- Xinyu Liu (ORCID: https://orcid.org/0009-0008-8239-6294)
Institutions
- Beijing Institute of Technology (CN)
- Lancaster University (GB)
Publication Details
- Journal
- IEEE Transactions on Consumer Electronics
- Published
- 2024-12-11
- DOI
- https://doi.org/10.1109/tce.2024.3516352
- Primary Topic
- Smart Grid Security and Resilience
- Type
- article
- Field-Weighted Citation Impact
- 0.00
Funders
- National Natural Science Foundation of China