{"id":"https://openalex.org/W4416640539","doi":"https://doi.org/10.1016/j.procs.2025.10.259","title":"One Perturbation to Deceive Them All: Universal Adversarial Attacks Against Federated Models","display_name":"One Perturbation to Deceive Them All: Universal Adversarial Attacks Against Federated Models","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4416640539","doi":"https://doi.org/10.1016/j.procs.2025.10.259"},"language":"en","primary_location":{"id":"doi:10.1016/j.procs.2025.10.259","doi":"https://doi.org/10.1016/j.procs.2025.10.259","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.procs.2025.10.259","pdf_url":null,"source":{"id":"https://openalex.org/S120348307","display_name":"Procedia Computer Science","issn_l":"1877-0509","issn":["1877-0509"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","cwts-core","jufo-1","norway-1"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Procedia Computer Science","raw_type":"journal-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://doi.org/10.1016/j.procs.2025.10.259","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5022101618","display_name":"Aidos Askhatuly","orcid":"https://orcid.org/0009-0009-2847-2468","observed_orcids":["https://orcid.org/0009-0009-2847-2468"]},"institutions":[{"id":"https://openalex.org/I185571130","display_name":"Al-Farabi Kazakh National University","ror":"https://ror.org/03q0vrn42","country_code":"KZ","type":"education","lineage":["https://openalex.org/I185571130"]}],"countries":["KZ"],"is_corresponding":true,"raw_author_name":"Aidos Askhatuly","raw_affiliation_strings":["Kazakh National University, al-Farabi, Almaty, Kazakhstan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kazakh National University, al-Farabi, Almaty, Kazakhstan","institution_ids":["https://openalex.org/I185571130"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074621718","display_name":"Dinara Berdysheva","orcid":"https://orcid.org/0009-0008-3130-5356","observed_orcids":["https://orcid.org/0009-0008-3130-5356"]},"institutions":[{"id":"https://openalex.org/I185571130","display_name":"Al-Farabi Kazakh National University","ror":"https://ror.org/03q0vrn42","country_code":"KZ","type":"education","lineage":["https://openalex.org/I185571130"]}],"countries":["KZ"],"is_corresponding":false,"raw_author_name":"Dinara Berdysheva","raw_affiliation_strings":["Kazakh National University, al-Farabi, Almaty, Kazakhstan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kazakh National University, al-Farabi, Almaty, Kazakhstan","institution_ids":["https://openalex.org/I185571130"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004235277","display_name":"Didar Yedilkhan","orcid":"https://orcid.org/0000-0002-6343-5277","observed_orcids":["https://orcid.org/0000-0002-6343-5277"]},"institutions":[{"id":"https://openalex.org/I4405257690","display_name":"Astana IT University","ror":"https://ror.org/05jnvbc31","country_code":"KZ","type":"education","lineage":["https://openalex.org/I4405257690"]}],"countries":["KZ"],"is_corresponding":false,"raw_author_name":"Didar Yedilkhan","raw_affiliation_strings":["Astana IT University Astana, Kazakhstan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Astana IT University Astana, Kazakhstan","institution_ids":["https://openalex.org/I4405257690"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5074255801","display_name":"Azamat Berdyshev","orcid":"https://orcid.org/0000-0003-0574-1580","observed_orcids":["https://orcid.org/0000-0003-0574-1580"]},"institutions":[{"id":"https://openalex.org/I4210143508","display_name":"International Information Technologies University","ror":"https://ror.org/042dtza69","country_code":"KZ","type":"education","lineage":["https://openalex.org/I4210143508"]}],"countries":["KZ"],"is_corresponding":false,"raw_author_name":"Azamat Berdyshev","raw_affiliation_strings":["International Information Technology University Almaty, Kazakhstan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"International Information Technology University Almaty, Kazakhstan","institution_ids":["https://openalex.org/I4210143508"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5022101618"],"corresponding_institution_ids":["https://openalex.org/I185571130"],"apc_list":null,"apc_paid":null,"fwci":0.3567,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.54602513,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":"272","issue":null,"first_page":"631","last_page":"636"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8720999956130981,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8720999956130981,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.12759999930858612,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/federated-learning","display_name":"federated learning","score":0.9200000166893005},{"id":"https://openalex.org/keywords/universal-adversarial-perturbations","display_name":"universal adversarial perturbations","score":0.9909999966621399},{"id":"https://openalex.org/keywords/adversarial-attacks","display_name":"adversarial attacks","score":0.9620000123977661},{"id":"https://openalex.org/keywords/malicious-clients","display_name":"malicious clients","score":0.7419999837875366},{"id":"https://openalex.org/keywords/data-poisoning-attacks","display_name":"data poisoning","score":0.44999998807907104},{"id":"https://openalex.org/keywords/non-iid-data","display_name":"non-IID data","score":0.6650000214576721},{"id":"https://openalex.org/keywords/injection-timing","display_name":"injection timing","score":0.7900000214576721},{"id":"https://openalex.org/keywords/model-accuracy-degradation","display_name":"model accuracy degradation","score":0.4830000102519989},{"id":"https://openalex.org/keywords/adversarial-defense","display_name":"adversarial defense","score":0.5450000166893005}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8981000185012817},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8734999895095825},{"id":"https://openalex.org/C190502265","wikidata":"https://www.wikidata.org/wiki/Q17069496","display_name":"MNIST database","level":3,"score":0.7208999991416931},{"id":"https://openalex.org/C141513077","wikidata":"https://www.wikidata.org/wiki/Q378542","display_name":"Independent and identically distributed random variables","level":3,"score":0.6541000008583069},{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.6194999814033508},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.5861999988555908},{"id":"https://openalex.org/C177918212","wikidata":"https://www.wikidata.org/wiki/Q803623","display_name":"Perturbation (astronomy)","level":2,"score":0.567300021648407},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5181999802589417},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4966000020503998},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.39820000529289246},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3720000088214874},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.33660000562667847},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.3192000091075897},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.2897000014781952},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.28700000047683716},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.28439998626708984},{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.26809999346733093},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.25029999017715454}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/j.procs.2025.10.259","doi":"https://doi.org/10.1016/j.procs.2025.10.259","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.procs.2025.10.259","pdf_url":null,"source":{"id":"https://openalex.org/S120348307","display_name":"Procedia Computer Science","issn_l":"1877-0509","issn":["1877-0509"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","cwts-core","jufo-1","norway-1"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Procedia Computer Science","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1016/j.procs.2025.10.259","doi":"https://doi.org/10.1016/j.procs.2025.10.259","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.procs.2025.10.259","pdf_url":null,"source":{"id":"https://openalex.org/S120348307","display_name":"Procedia Computer Science","issn_l":"1877-0509","issn":["1877-0509"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","cwts-core","jufo-1","norway-1"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Procedia Computer Science","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G7010533145","display_name":null,"funder_award_id":"BR24992852","funder_id":"https://openalex.org/F4320322726","funder_display_name":"Ministry of Education and Science of the Republic of Kazakhstan"}],"funders":[{"id":"https://openalex.org/F4320322726","display_name":"Ministry of Education and Science of the Republic of Kazakhstan","ror":"https://ror.org/03pj6ge82"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":8,"referenced_works":["https://openalex.org/W1945616565","https://openalex.org/W2640329709","https://openalex.org/W2750384547","https://openalex.org/W2784986255","https://openalex.org/W2996974038","https://openalex.org/W3017949972","https://openalex.org/W4390886812","https://openalex.org/W4396753400"],"related_works":["https://openalex.org/W4417398612","https://openalex.org/W7147269827","https://openalex.org/W4409078086","https://openalex.org/W4412939403","https://openalex.org/W4410594272","https://openalex.org/W7133557874","https://openalex.org/W4412811394","https://openalex.org/W4413886303","https://openalex.org/W4412589076","https://openalex.org/W7167799153"],"abstract_inverted_index":{"Federated":[0],"Learning":[1],"(FL)":[2],"enables":[3],"decentralized":[4],"training":[5],"across":[6,39],"multiple":[7],"clients":[8],"while":[9],"preserving":[10],"data":[11,89,110],"privacy,":[12],"but":[13],"remains":[14],"vulnerable":[15],"to":[16,36,84,88],"adversarial":[17],"attacks.":[18,150],"This":[19],"paper":[20],"investigates":[21],"the":[22,67,78,118,144],"threat":[23,47],"of":[24,43,114,120,146],"Universal":[25],"Adversarial":[26],"Perturbations":[27],"(UAPs)":[28],"in":[29,51,139],"FL,":[30],"which":[31,52],"are":[32],"input-agnostic":[33,149],"perturbations":[34],"designed":[35],"mislead":[37],"models":[38],"a":[40,53,60,128,136],"wide":[41],"range":[42],"inputs.":[44],"A":[45],"practical":[46],"model":[48],"is":[49,95],"introduced":[50],"single":[54,129],"malicious":[55],"client":[56],"generates":[57],"and":[58,86,100,104,106,117,142],"injects":[59],"universal":[61],"perturbation":[62,74],"during":[63],"local":[64],"training.":[65],"Using":[66],"MNIST":[68],"dataset,":[69],"experiments":[70],"demonstrate":[71,125],"that":[72,126],"this":[73],"can":[75,131],"significantly":[76],"degrade":[77],"global":[79,133],"model\u2019s":[80],"accuracy":[81],"from":[82,90],"91%":[83],"64.8%":[85],"generalizes":[87],"honest":[91],"clients.":[92],"The":[93,123],"attack":[94],"evaluated":[96],"under":[97],"both":[98],"independent":[99],"identically":[101,107],"distributed":[102,108],"(IID)":[103],"non-independent":[105],"(non-IID)":[109],"partitions,":[111],"with":[112],"analysis":[113],"cross-client":[115],"transferability":[116],"impact":[119],"injection":[121],"timing.":[122],"results":[124],"even":[127],"UAP":[130],"disrupt":[132],"performance,":[134],"revealing":[135],"critical":[137],"vulnerability":[138],"federated":[140],"settings":[141],"motivating":[143],"development":[145],"defenses":[147],"against":[148]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2025-11-25T00:00:00"}