中文
相关论文

相关论文: Attack of the Tails: Yes, You Really Can Backdoor …

200 篇论文

Federated Learning (FL) is a collaborative machine learning approach allowing participants to jointly train a model without having to share their private, potentially sensitive local datasets with others. Despite its benefits, FL is…

Federated Learning (FL) allows multiple clients to collaboratively train a Neural Network (NN) model on their private data without revealing the data. Recently, several targeted poisoning attacks against FL have been introduced. These…

密码学与安全 · 计算机科学 2022-01-04 Phillip Rieger , Thien Duc Nguyen , Markus Miettinen , Ahmad-Reza Sadeghi

Federated learning (FL) has been widely adopted as a decentralized training paradigm that enables multiple clients to collaboratively learn a shared model without exposing their local data. As concerns over data privacy and regulatory…

密码学与安全 · 计算机科学 2025-08-22 Bingguang Lu , Hongsheng Hu , Yuantian Miao , Shaleeza Sohail , Chaoxiang He , Shuo Wang , Xiao Chen

Federated learning is a versatile framework for training models in decentralized environments. However, the trust placed in clients makes federated learning vulnerable to backdoor attacks launched by malicious participants. While many…

密码学与安全 · 计算机科学 2024-12-23 Borja Molina-Coronado

Federated Learning (FL) enables collaborative training of Deep Learning (DL) models where the data is retained locally. Like DL, FL has severe security weaknesses that the attackers can exploit, e.g., model inversion and backdoor attacks.…

密码学与安全 · 计算机科学 2023-03-01 Gorka Abad , Servio Paguada , Oguzhan Ersoy , Stjepan Picek , Víctor Julio Ramírez-Durán , Aitor Urbieta

Federated learning allows clients to collaboratively train a global model without uploading raw data for privacy preservation. This feature, i.e., the inability to review participants' datasets, has recently been found responsible for…

机器学习 · 计算机科学 2023-12-19 Yihang Lin , Pengyuan Zhou , Zhiqian Wu , Yong Liao

The distributed nature of training makes Federated Learning (FL) vulnerable to backdoor attacks, where malicious model updates aim to compromise the global model's performance on specific tasks. Existing defense methods show limited…

机器学习 · 计算机科学 2025-03-20 Jiahao Xu , Zikai Zhang , Rui Hu

Federated learning (FL) enables multiple parties to collaboratively train a machine learning model without sharing their data; rather, they train their own model locally and send updates to a central server for aggregation. Depending on how…

机器学习 · 计算机科学 2023-08-25 Mohammad Naseri , Yufei Han , Emiliano De Cristofaro

Federated Learning (FL), a privacy-preserving machine learning framework, faces significant data-related challenges. For example, the lack of suitable public datasets leads to ineffective information exchange, especially in heterogeneous…

密码学与安全 · 计算机科学 2025-04-22 Xi Li , Chen Wu , Jiaqi Wang

Federated learning (FL) is a decentralized machine learning technique that allows multiple entities to jointly train a model while preserving dataset privacy. However, its distributed nature has raised various security concerns, which have…

密码学与安全 · 计算机科学 2025-01-06 Nuno Neves

Federated Learning (FL) is a decentralized machine learning method that enables participants to collaboratively train a model without sharing their private data. Despite its privacy and scalability benefits, FL is susceptible to backdoor…

密码学与安全 · 计算机科学 2024-09-11 Yujie Zhang , Neil Gong , Michael K. Reiter

Federated Learning (FL) enables decentralized model training while preserving privacy. Recently, the integration of Foundation Models (FMs) into FL has enhanced performance but introduced a novel backdoor attack mechanism. Attackers can…

机器学习 · 计算机科学 2025-05-28 Xiaohuan Bi , Xi Li

Inserting a backdoor into the joint model in federated learning (FL) is a recent threat raising concerns. Existing studies mostly focus on developing effective countermeasures against this threat, assuming that backdoored local models, if…

机器学习 · 计算机科学 2021-11-30 Zeki Bilgin

Most machine learning applications rely on centralized learning processes, opening up the risk of exposure of their training datasets. While federated learning (FL) mitigates to some extent these privacy risks, it relies on a trusted…

机器学习 · 计算机科学 2024-09-18 Georgios Syros , Gokberk Yar , Simona Boboila , Cristina Nita-Rotaru , Alina Oprea

Due to their decentralized nature, federated learning (FL) systems have an inherent vulnerability during their training to adversarial backdoor attacks. In this type of attack, the goal of the attacker is to use poisoned updates to implant…

The decentralized nature of federated learning makes detecting and defending against adversarial attacks a challenging task. This paper focuses on backdoor attacks in the federated learning setting, where the goal of the adversary is to…

机器学习 · 计算机科学 2019-12-04 Ziteng Sun , Peter Kairouz , Ananda Theertha Suresh , H. Brendan McMahan

Federated learning (FL) is vulnerable to backdoor attacks, yet most existing methods are limited by fixed-pattern or single-target triggers, making them inflexible and easier to detect. We propose FLAT (FL Arbitrary-Target Attack), a novel…

机器学习 · 计算机科学 2025-08-07 Tuan Nguyen , Khoa D Doan , Kok-Seng Wong

In a federated learning (FL) system, decentralized data owners (clients) could upload their locally trained models to a central server, to jointly train a global model. Malicious clients may plant backdoors into the global model through…

密码学与安全 · 计算机科学 2024-06-03 Songze Li , Yanbo Dai

Federated Learning (FL) enables multiple clients to collaboratively train a shared model without exposing local data. However, backdoor attacks pose a significant threat to FL. These attacks aim to implant a stealthy trigger into the global…

机器学习 · 计算机科学 2026-01-06 Chenyu Hu , Qiming Hu , Sinan Chen , Nianyu Li , Mingyue Zhang , Jialong Li

Research on backdoor attacks in Federated Learning (FL) has accelerated in recent years, with new attacks and defenses continually proposed in an escalating arms race. However, the evaluation of these methods remains neither standardized…

密码学与安全 · 计算机科学 2025-11-26 Thinh Dao , Dung Thuy Nguyen , Khoa D Doan , Kok-Seng Wong