中文
相关论文

相关论文: IPBA: Imperceptible Perturbation Backdoor Attack i…

200 篇论文

Federated learning security research has predominantly focused on backdoor threats from a minority of malicious clients that intentionally corrupt model updates. This paper challenges this paradigm by investigating a more pervasive and…

密码学与安全 · 计算机科学 2026-02-18 Haodong Zhao , Jinming Hu , Gongshen Liu

Recent studies have shown that federated learning (FL) is vulnerable to poisoning attacks that inject a backdoor into the global model. These attacks are effective even when performed by a single client, and undetectable by most existing…

密码学与安全 · 计算机科学 2021-04-20 Sebastien Andreina , Giorgia Azzurra Marson , Helen Möllering , Ghassan Karame

Deep learning-based face restoration models, increasingly prevalent in smart devices, have become targets for sophisticated backdoor attacks. These attacks, through subtle trigger injection into input face images, can lead to unexpected…

计算机视觉与模式识别 · 计算机科学 2025-04-09 Zhenbo Song , Wenhao Gao , Zhenyuan Zhang , Jianfeng Lu

With the rapid advancement of image generative models, generative data augmentation has become an effective way to enrich training images, especially when only small-scale datasets are available. At the same time, in practical applications,…

计算机视觉与模式识别 · 计算机科学 2026-02-04 Ting Xiang , Jinhui Zhao , Changjian Chen , Zhuo Tang

Large models adaptation through Federated Learning (FL) addresses a wide range of use cases and is enabled by Parameter-Efficient Fine-Tuning techniques such as Low-Rank Adaptation (LoRA). However, this distributed learning paradigm faces…

机器学习 · 计算机科学 2026-02-19 Bastien Vuillod , Pierre-Alain Moellic , Jean-Max Dutertre

Split learning is a collaborative learning design that allows several participants (clients) to train a shared model while keeping their datasets private. Recent studies demonstrate that collaborative learning models, specifically federated…

密码学与安全 · 计算机科学 2023-05-29 Behrad Tajalli , Oguzhan Ersoy , Stjepan Picek

Dataset condensation aims to synthesize compact yet informative datasets that retain the training efficacy of full-scale data, offering substantial gains in efficiency. Recent studies reveal that the condensation process can be vulnerable…

密码学与安全 · 计算机科学 2026-04-01 He Yang , Dongyi Lv , Song Ma , Wei Xi , Jizhong Zhao

Graph Neural Networks (GNNs) are a class of deep learning-based methods for processing graph domain information. GNNs have recently become a widely used graph analysis method due to their superior ability to learn representations for…

密码学与安全 · 计算机科学 2024-12-10 Jing Xu , Rui Wang , Stefanos Koffas , Kaitai Liang , Stjepan Picek

Large language models (LLMs) have demonstrated superior performance compared to previous methods on various tasks, and often serve as the foundation models for many researches and services. However, the untrustworthy third-party LLMs may…

密码学与安全 · 计算机科学 2024-04-02 Hai Huang , Zhengyu Zhao , Michael Backes , Yun Shen , Yang Zhang

Deep learning-based lane detection (LD) plays a critical role in autonomous driving and advanced driver assistance systems. However, its vulnerability to backdoor attacks presents a significant security concern. Existing backdoor attack…

密码学与安全 · 计算机科学 2026-03-26 Yifan Liao , Yuxin Cao , Yedi Zhang , Wentao He , Yan Xiao , Xianglong Du , Zhiyong Huang , Jin Song Dong

3D deep learning has been increasingly more popular for a variety of tasks including many safety-critical applications. However, recently several works raise the security issues of 3D deep models. Although most of them consider adversarial…

机器学习 · 计算机科学 2025-05-09 Xinke Li , Zhirui Chen , Yue Zhao , Zekun Tong , Yabang Zhao , Andrew Lim , Joey Tianyi Zhou

Federated learning (FL) is vulnerable to backdoor attacks, yet most existing methods are limited by fixed-pattern or single-target triggers, making them inflexible and easier to detect. We propose FLAT (FL Arbitrary-Target Attack), a novel…

机器学习 · 计算机科学 2025-08-07 Tuan Nguyen , Khoa D Doan , Kok-Seng Wong

Federated Learning (FL) is a distributed paradigm aimed at protecting participant data privacy by exchanging model parameters to achieve high-quality model training. However, this distributed nature also makes FL highly vulnerable to…

密码学与安全 · 计算机科学 2025-09-26 Wei Wan , Yuxuan Ning , Zhicong Huang , Cheng Hong , Shengshan Hu , Ziqi Zhou , Yechao Zhang , Tianqing Zhu , Wanlei Zhou , Leo Yu Zhang

Vertical split learning (SL) enables collaborative model training across parties holding complementary features without sharing raw data, but recent work has shown that it is highly vulnerable to poisoning-based backdoor attacks operating…

密码学与安全 · 计算机科学 2026-04-07 Yuhan Shui , Ruobin Jin , Zhihao Dou , Zhiqiang Gao

Backdoor attacks are an insidious security threat against machine learning models. Adversaries can manipulate the predictions of compromised models by inserting triggers into the training phase. Various backdoor attacks have been devised…

计算与语言 · 计算机科学 2023-05-29 Xuanli He , Jun Wang , Benjamin Rubinstein , Trevor Cohn

Federated learning (FL) has been widely adopted as a decentralized training paradigm that enables multiple clients to collaboratively learn a shared model without exposing their local data. As concerns over data privacy and regulatory…

密码学与安全 · 计算机科学 2025-08-22 Bingguang Lu , Hongsheng Hu , Yuantian Miao , Shaleeza Sohail , Chaoxiang He , Shuo Wang , Xiao Chen

Federated learning (FL) remains highly vulnerable to adaptive backdoor attacks that preserve stealth by closely imitating benign update statistics. Existing defenses predominantly rely on anomaly detection in parameter or gradient space,…

机器学习 · 计算机科学 2026-02-13 Chibueze Peace Obioma , Youcheng Sun , Mustafa A. Mustafa

Federated learning (FL) is a decentralized machine learning technique that allows multiple entities to jointly train a model while preserving dataset privacy. However, its distributed nature has raised various security concerns, which have…

密码学与安全 · 计算机科学 2025-01-06 Nuno Neves

Current adversarial attack research reveals the vulnerability of learning-based classifiers against carefully crafted perturbations. However, most existing attack methods have inherent limitations in cross-dataset generalization as they…

计算机视觉与模式识别 · 计算机科学 2022-03-25 Cheng Luo , Qinliang Lin , Weicheng Xie , Bizhu Wu , Jinheng Xie , Linlin Shen

Distributed backdoor attacks (DBA) have shown a higher attack success rate than centralized attacks in centralized federated learning (FL). However, it has not been investigated in the decentralized FL. In this paper, we experimentally…

机器学习 · 计算机科学 2025-07-08 Bohan Liu , Yang Xiao , Ruimeng Ye , Zinan Ling , Xiaolong Ma , Bo Hui