{"id":"https://openalex.org/W7204091015","doi":"https://doi.org/10.48550/arxiv.2608.21137","title":"BackDFL: A Unified Benchmark For Backdoor Attacks and Defenses In Decentralized Federated Learning","display_name":"BackDFL: A Unified Benchmark For Backdoor Attacks and Defenses In Decentralized Federated Learning","publication_year":2026,"publication_date":"2026-08-21","ids":{"openalex":"https://openalex.org/W7204091015","doi":"https://doi.org/10.48550/arxiv.2608.21137"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2608.21137","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.21137","pdf_url":"https://arxiv.org/pdf/2608.21137","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2608.21137","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5092532204","display_name":"Mouhamed Amine Bouchiha","orcid":"https://orcid.org/0000-0001-6142-6855","observed_orcids":["https://orcid.org/0000-0001-6142-6855"]},"institutions":[{"id":"https://openalex.org/I4210145102","display_name":"Institut Polytechnique de Paris","ror":"https://ror.org/042tfbd02","country_code":"FR","type":"education","lineage":["https://openalex.org/I4210145102"]},{"id":"https://openalex.org/I4387153010","display_name":"T\u00e9l\u00e9com SudParis","ror":"https://ror.org/05xvk4r52","country_code":"FR","type":"education","lineage":["https://openalex.org/I205703379","https://openalex.org/I4210145102","https://openalex.org/I4387153010"]},{"id":"https://openalex.org/I4405261500","display_name":"Services r\u00e9partis, Architectures, MOd\u00e9lisation, Validation, Administration des R\u00e9seaux","ror":"https://ror.org/05d29yv45","country_code":"FR","type":"facility","lineage":["https://openalex.org/I205703379","https://openalex.org/I4210145102","https://openalex.org/I4387153010","https://openalex.org/I4405261500"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Bouchiha, Mouhamed Amine","raw_affiliation_strings":["SAMOVAR , T\u00e9l\u00e9com SudParis , Institut Polytechnique de Paris"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SAMOVAR , T\u00e9l\u00e9com SudParis , Institut Polytechnique de Paris","institution_ids":["https://openalex.org/I4210145102","https://openalex.org/I4387153010","https://openalex.org/I4405261500"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043016218","display_name":"Gr\u00e9gory Blanc","orcid":"https://orcid.org/0000-0001-8150-6617","observed_orcids":["https://orcid.org/0000-0001-8150-6617"]},"institutions":[{"id":"https://openalex.org/I4210145102","display_name":"Institut Polytechnique de Paris","ror":"https://ror.org/042tfbd02","country_code":"FR","type":"education","lineage":["https://openalex.org/I4210145102"]},{"id":"https://openalex.org/I4387153010","display_name":"T\u00e9l\u00e9com SudParis","ror":"https://ror.org/05xvk4r52","country_code":"FR","type":"education","lineage":["https://openalex.org/I205703379","https://openalex.org/I4210145102","https://openalex.org/I4387153010"]},{"id":"https://openalex.org/I4405261500","display_name":"Services r\u00e9partis, Architectures, MOd\u00e9lisation, Validation, Administration des R\u00e9seaux","ror":"https://ror.org/05d29yv45","country_code":"FR","type":"facility","lineage":["https://openalex.org/I205703379","https://openalex.org/I4210145102","https://openalex.org/I4387153010","https://openalex.org/I4405261500"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Blanc, Gregory","raw_affiliation_strings":["SAMOVAR , T\u00e9l\u00e9com SudParis , Institut Polytechnique de Paris"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SAMOVAR , T\u00e9l\u00e9com SudParis , Institut Polytechnique de Paris","institution_ids":["https://openalex.org/I4210145102","https://openalex.org/I4387153010","https://openalex.org/I4405261500"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5071053999","display_name":"Yufei Han","orcid":"https://orcid.org/0000-0002-9035-6718","observed_orcids":["https://orcid.org/0000-0002-9035-6718"]},"institutions":[{"id":"https://openalex.org/I1326498283","display_name":"Institut national de recherche en sciences et technologies du num\u00e9rique","ror":"https://ror.org/02kvxyf05","country_code":"FR","type":"government","lineage":["https://openalex.org/I1326498283"]},{"id":"https://openalex.org/I4405260814","display_name":"PIRAT: Protection de l'information et r\u00e9sistances aux attaques","ror":"https://ror.org/04abbt041","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1326498283","https://openalex.org/I205703379","https://openalex.org/I2802204017","https://openalex.org/I2802519937","https://openalex.org/I28221208","https://openalex.org/I4210127572","https://openalex.org/I4210133778","https://openalex.org/I4210159245","https://openalex.org/I4405260814","https://openalex.org/I56067802"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Han, Yufei","raw_affiliation_strings":["PIRAT , INRIA Rennes , Rennes , France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"PIRAT , INRIA Rennes , Rennes , France","institution_ids":["https://openalex.org/I1326498283","https://openalex.org/I4405260814"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9018999934196472,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9018999934196472,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.09709999710321426,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/decentralized-federated-learning","display_name":"decentralized federated learning","score":0.9079999923706055},{"id":"https://openalex.org/keywords/backdoor-attacks","display_name":"backdoor attacks","score":0.9990000128746033},{"id":"https://openalex.org/keywords/backdoor-defense","display_name":"backdoor defense","score":0.8740000128746033},{"id":"https://openalex.org/keywords/benchmark","display_name":"benchmark","score":0.6179999709129333},{"id":"https://openalex.org/keywords/byzantine-robustness","display_name":"Byzantine robustness","score":0.8349999785423279},{"id":"https://openalex.org/keywords/adaptive-adversaries","display_name":"adaptive adversaries","score":0.6759999990463257},{"id":"https://openalex.org/keywords/communication-topology","display_name":"communication topology","score":0.75},{"id":"https://openalex.org/keywords/data-heterogeneity","display_name":"data heterogeneity","score":0.5230000019073486}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9934999942779541},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7839000225067139},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.7361999750137329},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7049999833106995},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.45820000767707825},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.4212999939918518},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.4059000015258789},{"id":"https://openalex.org/C94523657","wikidata":"https://www.wikidata.org/wiki/Q4085781","display_name":"Wireless ad hoc network","level":3,"score":0.37459999322891235},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.3407000005245209},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2953000068664551},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.27900001406669617},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.27649998664855957},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.26910001039505005},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.26589998602867126}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2608.21137","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.21137","pdf_url":"https://arxiv.org/pdf/2608.21137","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2608.21137","doi":"https://doi.org/10.48550/arxiv.2608.21137","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2608.21137","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2608.21137","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.21137","pdf_url":"https://arxiv.org/pdf/2608.21137","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7204091015.pdf","grobid_xml":"https://content.openalex.org/works/W7204091015.grobid-xml"},"referenced_works_count":9,"referenced_works":["https://openalex.org/W2734358244","https://openalex.org/W2750384547","https://openalex.org/W2990595670","https://openalex.org/W3138597937","https://openalex.org/W4221129260","https://openalex.org/W4221142740","https://openalex.org/W4406779110","https://openalex.org/W4415348436","https://openalex.org/W7161965298"],"related_works":["https://openalex.org/W2995164118","https://openalex.org/W7139965534","https://openalex.org/W7125096264","https://openalex.org/W4413887434","https://openalex.org/W4415348436","https://openalex.org/W7130482282","https://openalex.org/W4401687264","https://openalex.org/W4415428616","https://openalex.org/W4400121396","https://openalex.org/W4409091885"],"abstract_inverted_index":{"Decentralized":[0],"Federated":[1],"Learning":[2],"(DFL)":[3],"promises":[4],"trust-free":[5],"collaborative":[6],"learning":[7],"by":[8],"replacing":[9],"the":[10,24,57],"centralized":[11],"parameter":[12],"server":[13],"with":[14],"peer-to-peer":[15],"model":[16],"exchange.":[17],"However,":[18],"this":[19,52],"architectural":[20],"shift":[21],"fundamentally":[22],"reshapes":[23],"threat":[25,70],"landscape.":[26],"Without":[27],"globally":[28],"coordinated":[29],"aggregation,":[30],"DFL":[31,60,91,106,131],"becomes":[32],"particularly":[33],"susceptible":[34],"to":[35,86],"backdoor":[36,111,136],"attacks,":[37],"in":[38,149],"which":[39],"malicious":[40,141],"participants":[41],"implant":[42],"persistent":[43],"hidden":[44],"behaviors":[45],"while":[46,152],"maintaining":[47],"high":[48],"clean-task":[49],"performance.":[50],"In":[51],"paper,":[53],"we":[54,97],"argue":[55],"that":[56,127],"robustness":[58,154],"of":[59,90,121],"has":[61],"been":[62],"significantly":[63],"overestimated.":[64],"Existing":[65],"studies":[66],"rely":[67],"on":[68],"simplified":[69],"models,":[71],"non-adaptive":[72],"adversaries,":[73],"fragmented":[74],"evaluation":[75],"protocols,":[76],"inconsistent":[77],"communication":[78,158],"topologies,":[79],"and":[80,109,133],"ad":[81],"hoc":[82],"training":[83],"configurations,":[84],"leading":[85],"an":[87],"incomplete":[88],"understanding":[89],"security.":[92],"To":[93],"address":[94],"these":[95],"limitations,":[96],"present":[98],"BackDFL,":[99],"a":[100],"unified":[101],"benchmark":[102],"for":[103],"systematically":[104],"evaluating":[105],"under":[107,139],"realistic":[108],"adaptive":[110],"attacks.":[112],"Through":[113],"extensive":[114],"experiments,":[115],"BackDFL":[116],"exposes":[117],"critical":[118],"failure":[119],"modes":[120],"decentralized":[122],"learning.":[123],"Our":[124],"results":[125],"demonstrate":[126],"both":[128],"state-of-the-art":[129],"Byzantine-robust":[130],"methods":[132],"adapted":[134],"FL":[135],"defenses":[137],"fail":[138],"modest":[140],"participation":[142],"rates":[143],"(as":[144],"low":[145],"as":[146],"15%),":[147],"especially":[148],"heterogeneous":[150],"settings,":[151],"their":[153],"varies":[155],"substantially":[156],"across":[157],"graph":[159],"topologies.":[160]},"counts_by_year":[],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2026-08-25T00:00:00"}