Badhash: Invisible Backdoor Attacks Against Deep Hashing With Clean Label

Abstract

Due to its powerful feature learning capability and high efficiency, deep hashing has achieved great success in large-scale image retrieval. Meanwhile, extensive works have demonstrated that deep neural networks (DNNs) are susceptible to adversarial examples, and exploring adversarial attack against deep hashing has attracted many research efforts. Nevertheless, backdoor attack, another famous threat to DNNs, has not been studied for deep hashing yet. Although various backdoor attacks have been proposed in the field of image classification, existing approaches failed to realize a truly imperceptive backdoor attack that enjoys invisible triggers and clean label setting simultaneously, and they also cannot meet the intrinsic demand of image retrieval backdoor. In this paper, we propose BadHash, the first generative-based imperceptible backdoor attack against deep hashing, which can effectively generate invisible and input-specific poisoned images with clean label. Specifically, we first

Stats

• citations30
• S2 citations—
• github stars0
• HF likes0
• heat score11.19
• arxiv keyhu2022badhash

Related papers

• Darkhash: A Data-free Backdoor Attack Against Deep Hashing (2025)2.26
• Clean Image May Be Dangerous: Data Poisoning Attacks Against Deep Hashing (2025)0.00
• Backdoor Attack On Hash-based Image Retrieval Via Clean-label Data Poisoning (2021)2.51
• Prototype-supervised Adversarial Network For Targeted Attack Of Deep Hashing (2021)15.97
• Diffhash: Text-guided Targeted Attack Via Diffusion Models Against Deep Hashing Image Retrieval (2025)0.00
• Targeted Attack For Deep Hashing Based Retrieval (2020)13.65
• Model Inversion Attack Against Deep Hashing (2025)0.00
• Unsupervised Multi-criteria Adversarial Detection In Deep Image Retrieval (2023)0.00