中文
相关论文

相关论文: Genetic Algorithm-Based Dynamic Backdoor Attack on…

200 篇论文

Backdoor attack is a new AI security risk that has emerged in recent years. Drawing on the previous research of adversarial attack, we argue that the backdoor attack has the potential to tap into the model learning process and improve model…

密码学与安全 · 计算机科学 2022-02-23 Shangxi Wu , Qiuyang He , Yi Zhang , Jitao Sang

Recent studies have shown that federated learning (FL) is vulnerable to poisoning attacks that inject a backdoor into the global model. These attacks are effective even when performed by a single client, and undetectable by most existing…

密码学与安全 · 计算机科学 2021-04-20 Sebastien Andreina , Giorgia Azzurra Marson , Helen Möllering , Ghassan Karame

Federated Learning (FL) has emerged as a leading paradigm for privacy-preserving distributed machine learning, yet the distributed nature of FL introduces unique security challenges, notably the threat of backdoor attacks. Existing backdoor…

密码学与安全 · 计算机科学 2025-06-27 Chengcheng Zhu , Ye Li , Bosen Rao , Jiale Zhang , Yunlong Mao , Sheng Zhong

Federated Learning (FL) is a privacy-preserving distributed machine learning technique that enables individual clients (e.g., user participants, edge devices, or organizations) to train a model on their local data in a secure environment…

密码学与安全 · 计算机科学 2024-02-26 Waris Gill , Ali Anwar , Muhammad Ali Gulzar

Federated Learning is an emerging privacy-preserving distributed machine learning approach to building a shared model by performing distributed training locally on participating devices (clients) and aggregating the local models into a…

机器学习 · 计算机科学 2021-04-15 Sreya Francis , Irene Tenison , Irina Rish

Backdoor attacks have emerged as one of the major security threats to deep learning models as they can easily control the model's test-time predictions by pre-injecting a backdoor trigger into the model at training time. While backdoor…

机器学习 · 计算机科学 2023-02-07 Yujing Jiang , Xingjun Ma , Sarah Monazam Erfani , James Bailey

Federated Learning (FL) is a distributed learning paradigm that enables different parties to train a model together for high quality and strong privacy protection. In this scenario, individual participants may get compromised and perform…

Graph Neural Networks (GNNs) have demonstrated strong performance across tasks such as node classification, link prediction, and graph classification, but remain vulnerable to backdoor attacks that implant imperceptible triggers during…

机器学习 · 计算机科学 2025-12-16 Xiaobao Wang , Ruoxiao Sun , Yujun Zhang , Bingdao Feng , Dongxiao He , Luzhi Wang , Di Jin

Federated learning (FL), which aims to facilitate data collaboration across multiple organizations without exposing data privacy, encounters potential security risks. One serious threat is backdoor attacks, where an attacker injects a…

密码学与安全 · 计算机科学 2023-06-21 Yuexin Xuan , Xiaojun Chen , Zhendong Zhao , Bisheng Tang , Ye Dong

Federated learning achieves joint training of deep models by connecting decentralized data sources, which can significantly mitigate the risk of privacy leakage. However, in a more general case, the distributions of labels among clients are…

机器学习 · 计算机科学 2022-12-20 Tao Sheng , Chengchao Shen , Yuan Liu , Yeyu Ou , Zhe Qu , Jianxin Wang

Federated learning enables learning from decentralized data sources without compromising privacy, which makes it a crucial technique. However, it is vulnerable to model poisoning attacks, where malicious clients interfere with the training…

密码学与安全 · 计算机科学 2023-07-19 Sungwon Park , Sungwon Han , Fangzhao Wu , Sundong Kim , Bin Zhu , Xing Xie , Meeyoung Cha

Federated learning (FL) represents a novel paradigm to machine learning, addressing critical issues related to data privacy and security, yet suffering from data insufficiency and imbalance. The emergence of foundation models (FMs) provides…

分布式、并行与集群计算 · 计算机科学 2023-11-02 Xi Li , Songhe Wang , Chen Wu , Hao Zhou , Jiaqi Wang

Federated Transfer Learning (FTL) is the most general variation of Federated Learning. According to this distributed paradigm, a feature learning pre-step is commonly carried out by only one party, typically the server, on publicly shared…

机器学习 · 计算机科学 2024-05-01 Marco Arazzi , Stefanos Koffas , Antonino Nocera , Stjepan Picek

The decentralized nature of federated learning makes detecting and defending against adversarial attacks a challenging task. This paper focuses on backdoor attacks in the federated learning setting, where the goal of the adversary is to…

机器学习 · 计算机科学 2019-12-04 Ziteng Sun , Peter Kairouz , Ananda Theertha Suresh , H. Brendan McMahan

Backdoor attacks pose a significant security risk to graph learning models. Backdoors can be embedded into the target model by inserting backdoor triggers into the training dataset, causing the model to make incorrect predictions when the…

密码学与安全 · 计算机科学 2023-08-09 Zihan Guan , Mengnan Du , Ninghao Liu

Recently backdoor attack has become an emerging threat to the security of deep neural network (DNN) models. To date, most of the existing studies focus on backdoor attack against the uncompressed model; while the vulnerability of compressed…

密码学与安全 · 计算机科学 2022-08-24 Huy Phan , Cong Shi , Yi Xie , Tianfang Zhang , Zhuohang Li , Tianming Zhao , Jian Liu , Yan Wang , Yingying Chen , Bo Yuan

Federated Learning (FL) enables numerous participants to train deep learning models collaboratively without exposing their personal, potentially sensitive data, making it a promising solution for data privacy in collaborative training. The…

密码学与安全 · 计算机科学 2022-06-02 Manaar Alam , Esha Sarkar , Michail Maniatakos

Federated Learning (FL) has emerged as a decentralized technique, where contrary to traditional centralized approaches, devices perform a model training in a collaborative manner, while preserving data privacy. Despite the existing efforts…

Backdoor attacks are dangerous and difficult to prevent in federated learning (FL), where training data is sourced from untrusted clients over long periods of time. These difficulties arise because: (a) defenders in FL do not have access to…

机器学习 · 计算机科学 2023-02-01 Shuaiqi Wang , Jonathan Hayase , Giulia Fanti , Sewoong Oh

Graph Neural Networks (GNNs) have achieved promising results in various tasks such as node classification and graph classification. Recent studies find that GNNs are vulnerable to adversarial attacks. However, effective backdoor attacks on…

密码学与安全 · 计算机科学 2023-03-03 Enyan Dai , Minhua Lin , Xiang Zhang , Suhang Wang