English
Related papers

Related papers: Coward: Collision-based OOD Watermarking for Pract…

200 papers

Despite the promise of Federated Learning (FL) for privacy-preserving model training on distributed data, it remains susceptible to backdoor attacks. These attacks manipulate models by embedding triggers (specific input patterns) in the…

Cryptography and Security · Computer Science 2024-07-12 Tuan Nguyen , Dung Thuy Nguyen , Khoa D Doan , Kok-Seng Wong

Federated Learning (FL) enables collaborative deep learning training across multiple participants without exposing sensitive personal data. However, the distributed nature of FL and the unvetted participants' data makes it vulnerable to…

Machine Learning · Computer Science 2023-04-24 Manaar Alam , Hithem Lamri , Michail Maniatakos

Federated learning (FL) allows participants to jointly train a machine learning model without sharing their private data with others. However, FL is vulnerable to poisoning attacks such as backdoor attacks. Consequently, a variety of…

Machine Learning · Computer Science 2023-01-24 Kavita Kumari , Phillip Rieger , Hossein Fereidooni , Murtuza Jadliwala , Ahmad-Reza Sadeghi

Backdoors on federated learning will be diluted by subsequent benign updates. This is reflected in the significant reduction of attack success rate as iterations increase, ultimately failing. We use a new metric to quantify the degree of…

Cryptography and Security · Computer Science 2024-04-30 Tao Liu , Yuhang Zhang , Zhu Feng , Zhiqin Yang , Chen Xu , Dapeng Man , Wu Yang

Federated learning enables training high-utility models across several clients without directly sharing their private data. As a downside, the federated setting makes the model vulnerable to various adversarial attacks in the presence of…

Machine Learning · Computer Science 2024-03-12 Xiaoyang Wang , Dimitrios Dimitriadis , Sanmi Koyejo , Shruti Tople

3D object detection plays an important role in autonomous driving; however, its vulnerability to backdoor attacks has become evident. By injecting ''triggers'' to poison the training dataset, backdoor attacks manipulate the detector's…

Computer Vision and Pattern Recognition · Computer Science 2024-05-08 Saket S. Chaturvedi , Lan Zhang , Wenbin Zhang , Pan He , Xiaoyong Yuan

Out-of-distribution (OOD) detection is the task of identifying inputs that deviate from the training data distribution. This capability is essential for safely deploying deep computer vision models in open-world environments. In this work,…

Computer Vision and Pattern Recognition · Computer Science 2025-03-25 Wenxi Chen , Raymond A. Yeh , Shaoshuai Mou , Yan Gu

The growing demand for oriented object detection (OOD) across various domains has driven significant research in this area. However, the high cost of dataset annotation remains a major concern. Current mainstream OOD algorithms can be…

Computer Vision and Pattern Recognition · Computer Science 2026-03-05 Mingxin Liu , Peiyuan Zhang , Yuan Liu , Wei Zhang , Yue Zhou , Ning Liao , Ziyang Gong , Junwei Luo , Zhirui Wang , Yi Yu , Xue Yang

Federated Instruction Tuning (FIT) enables collaborative instruction tuning of large language models across multiple organizations (clients) in a cross-silo setting without requiring the sharing of private instructions. Recent findings on…

Cryptography and Security · Computer Science 2026-03-03 Haodong Zhao , Jinming Hu , Zhaomin Wu , Zongru Wu , Wei Du , Junyi Hou , Caibei Zhao , Zhuosheng Zhang , Bingsheng He , Gongshen Liu

Federated Learning (FL) enables collaborative model training while preserving data privacy, but it is highly vulnerable to backdoor attacks. Most existing defense methods in FL have limited effectiveness due to their neglect of the model's…

Cryptography and Security · Computer Science 2025-08-05 Xinhai Yan , Libing Wu , Zhuangzhuang Zhang , Bingyi Liu , Lijuan Huo , Jing Wang

Federated learning (FL) remains highly vulnerable to adaptive backdoor attacks that preserve stealth by closely imitating benign update statistics. Existing defenses predominantly rely on anomaly detection in parameter or gradient space,…

Machine Learning · Computer Science 2026-02-13 Chibueze Peace Obioma , Youcheng Sun , Mustafa A. Mustafa

Federated learning (FL) is gaining increasing attention as an emerging collaborative machine learning approach, particularly in the context of large-scale computing and data systems. However, the fundamental algorithm of FL, Federated…

Cryptography and Security · Computer Science 2025-05-20 Jianyi Zhang , Ziyin Zhou , Yilong Li , Qichao Jin

Out-of-distribution (OOD) detection aims to identify OOD inputs from unknown classes, which is important for the reliable deployment of machine learning models in the open world. Various scoring functions are proposed to distinguish it from…

Machine Learning · Computer Science 2024-10-29 Boxuan Zhang , Jianing Zhu , Zengmao Wang , Tongliang Liu , Bo Du , Bo Han

Current backdoor attacks against federated learning (FL) strongly rely on universal triggers or semantic patterns, which can be easily detected and filtered by certain defense mechanisms such as norm clipping, comparing parameter…

Machine Learning · Computer Science 2023-10-02 Yanqi Qiao , Dazhuang Liu , Congwen Chen , Rui Wang , Kaitai Liang

Website Fingerprinting (WF) is an effective tool for regulating and governing the dark web. However, its performance can be significantly degraded by backdoor poisoning attacks in practical deployments. This paper aims to address the…

Cryptography and Security · Computer Science 2025-06-17 Yali Yuan , Kai Xu , Ruolin Ma , Yuchen Zhang

There have been several efforts in backdoor attacks, but these have primarily focused on the closed-set performance of classifiers (i.e., classification). This has left a gap in addressing the threat to classifiers' open-set performance,…

Machine Learning · Computer Science 2024-12-09 ZeinabSadat Taghavi , Hossein Mirzaei

In recent years, the neural network backdoor hidden in the parameters of the federated learning model has been proved to have great security risks. Considering the characteristics of trigger generation, data poisoning and model training in…

Machine Learning · Computer Science 2024-04-23 Rong Wang , Guichen Zhou , Mingjun Gao , Yunpeng Xiao

Federated Learning (FL) has received increasing attention due to its privacy protection capability. However, the base algorithm FedAvg is vulnerable when it suffers from so-called backdoor attacks. Former researchers proposed several robust…

Cryptography and Security · Computer Science 2022-12-29 Jianyi Zhang , Fangjiao Zhang , Qichao Jin , Zhiqiang Wang , Xiaodong Lin , Xiali Hei

With the swift advancement of deep learning, state-of-the-art algorithms have been utilized in various social situations. Nonetheless, some algorithms have been discovered to exhibit biases and provide unequal results. The current debiasing…

Machine Learning · Computer Science 2024-07-02 Shangxi Wu , Qiuyang He , Jian Yu , Jitao Sang

Federated Learning (FL) enables collaborative model training across multiple devices while preserving data privacy. However, it remains susceptible to backdoor attacks, where malicious participants can compromise the global model. Existing…

Cryptography and Security · Computer Science 2025-02-26 Ebtisaam Alharbi , Leandro Soriano Marcolino , Qiang Ni , Antonios Gouglidis