{"id":"https://openalex.org/W7155638773","doi":"https://doi.org/10.1007/s11227-026-08527-0","title":"Faros: robust federated learning with adaptive scaling against backdoor attacks","display_name":"Faros: robust federated learning with adaptive scaling against backdoor attacks","publication_year":2026,"publication_date":"2026-04-26","ids":{"openalex":"https://openalex.org/W7155638773","doi":"https://doi.org/10.1007/s11227-026-08527-0"},"language":"en","primary_location":{"id":"doi:10.1007/s11227-026-08527-0","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s11227-026-08527-0","pdf_url":"https://link.springer.com/content/pdf/10.1007/s11227-026-08527-0.pdf","source":{"id":"https://openalex.org/S32326811","display_name":"The Journal of Supercomputing","issn_l":"0920-8542","issn":["0920-8542","1573-0484"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"The Journal of Supercomputing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s11227-026-08527-0.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5123402749","display_name":"Chenyu Hu","orcid":null},"institutions":[{"id":"https://openalex.org/I142108993","display_name":"Southwest University","ror":"https://ror.org/01kj4z117","country_code":"CN","type":"education","lineage":["https://openalex.org/I142108993"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chenyu Hu","raw_affiliation_strings":["Southwest University, Chongqing, 400715, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Southwest University, Chongqing, 400715, China","institution_ids":["https://openalex.org/I142108993"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115603467","display_name":"Qiming Hu","orcid":"https://orcid.org/0009-0009-3647-296X"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiming Hu","raw_affiliation_strings":["University of Electronic Science and Technology of China, Chengdu, 611731, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Electronic Science and Technology of China, Chengdu, 611731, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5122093804","display_name":"Sinan Chen","orcid":null},"institutions":[{"id":"https://openalex.org/I65837984","display_name":"Kobe University","ror":"https://ror.org/03tgsfw79","country_code":"JP","type":"education","lineage":["https://openalex.org/I65837984"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Sinan Chen","raw_affiliation_strings":["Kobe University, Kobe, 657-8501, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kobe University, Kobe, 657-8501, Japan","institution_ids":["https://openalex.org/I65837984"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052040242","display_name":"Nianyu Li","orcid":"https://orcid.org/0000-0001-8960-7770"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Nianyu Li","raw_affiliation_strings":["Zhongguancun Laboratory, Beijing, 100085, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhongguancun Laboratory, Beijing, 100085, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134604548","display_name":"Mingyue Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I142108993","display_name":"Southwest University","ror":"https://ror.org/01kj4z117","country_code":"CN","type":"education","lineage":["https://openalex.org/I142108993"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingyue Zhang","raw_affiliation_strings":["Southwest University, Chongqing, 400715, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Southwest University, Chongqing, 400715, China","institution_ids":["https://openalex.org/I142108993"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5134610173","display_name":"Jialong Li","orcid":null},"institutions":[{"id":"https://openalex.org/I150744194","display_name":"Waseda University","ror":"https://ror.org/00ntfnx83","country_code":"JP","type":"education","lineage":["https://openalex.org/I150744194"]}],"countries":["JP"],"is_corresponding":true,"raw_author_name":"Jialong Li","raw_affiliation_strings":["Waseda University, Tokyo, 169-8555, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Waseda University, Tokyo, 169-8555, Japan","institution_ids":["https://openalex.org/I150744194"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5134610173"],"corresponding_institution_ids":["https://openalex.org/I150744194"],"apc_list":{"value":2990,"currency":"USD","value_usd":2990},"apc_paid":{"value":2990,"currency":"USD","value_usd":2990},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.48271656,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"82","issue":"6","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.46950000524520874,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.46950000524520874,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.08420000225305557,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.04019999876618385,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.8539000153541565},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.7095999717712402},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6833999752998352},{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.6431999802589417},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.47760000824928284},{"id":"https://openalex.org/keywords/federated-learning","display_name":"Federated learning","score":0.44760000705718994},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.4239000082015991},{"id":"https://openalex.org/keywords/computation","display_name":"Computation","score":0.42100000381469727}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8978000283241272},{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.8539000153541565},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.7095999717712402},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6833999752998352},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.6431999802589417},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.5910999774932861},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.47760000824928284},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.44760000705718994},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.4239000082015991},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.42100000381469727},{"id":"https://openalex.org/C23130292","wikidata":"https://www.wikidata.org/wiki/Q5275358","display_name":"Differential privacy","level":2,"score":0.40369999408721924},{"id":"https://openalex.org/C146599234","wikidata":"https://www.wikidata.org/wiki/Q511093","display_name":"Centroid","level":2,"score":0.3880000114440918},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.3450999855995178},{"id":"https://openalex.org/C99844830","wikidata":"https://www.wikidata.org/wiki/Q102441924","display_name":"Scaling","level":2,"score":0.3427000045776367},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.33009999990463257},{"id":"https://openalex.org/C21200559","wikidata":"https://www.wikidata.org/wiki/Q7451068","display_name":"Sensitivity (control systems)","level":2,"score":0.30799999833106995},{"id":"https://openalex.org/C67226441","wikidata":"https://www.wikidata.org/wiki/Q1665389","display_name":"Robust statistics","level":3,"score":0.304500013589859},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2825999855995178},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.2791000008583069},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2775000035762787},{"id":"https://openalex.org/C2776654903","wikidata":"https://www.wikidata.org/wiki/Q2601463","display_name":"SAFER","level":2,"score":0.27079999446868896},{"id":"https://openalex.org/C63540848","wikidata":"https://www.wikidata.org/wiki/Q3140932","display_name":"Fault tolerance","level":2,"score":0.265500009059906},{"id":"https://openalex.org/C148047603","wikidata":"https://www.wikidata.org/wiki/Q1014612","display_name":"Parallelizable manifold","level":2,"score":0.26100000739097595},{"id":"https://openalex.org/C138959212","wikidata":"https://www.wikidata.org/wiki/Q1806783","display_name":"Load balancing (electrical power)","level":3,"score":0.25440001487731934}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/s11227-026-08527-0","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s11227-026-08527-0","pdf_url":"https://link.springer.com/content/pdf/10.1007/s11227-026-08527-0.pdf","source":{"id":"https://openalex.org/S32326811","display_name":"The Journal of Supercomputing","issn_l":"0920-8542","issn":["0920-8542","1573-0484"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"The Journal of Supercomputing","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1007/s11227-026-08527-0","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s11227-026-08527-0","pdf_url":"https://link.springer.com/content/pdf/10.1007/s11227-026-08527-0.pdf","source":{"id":"https://openalex.org/S32326811","display_name":"The Journal of Supercomputing","issn_l":"0920-8542","issn":["0920-8542","1573-0484"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"The Journal of Supercomputing","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.6195962429046631,"display_name":"Industry, innovation and infrastructure"}],"awards":[{"id":"https://openalex.org/G2256173322","display_name":"\u4eba\u9593\u3068\u81ea\u5f8b\u30b7\u30b9\u30c6\u30e0\u306e\u9ad8\u5ea6\u306a\u5354\u8abf\u4f5c\u696d\u306e\u305f\u3081\u306e\u4f5c\u696d\u914d\u5206\u3068\u4f5c\u696d\u652f\u63f4\u306e\u63a8\u8ad6\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af","funder_award_id":"25K15290","funder_id":"https://openalex.org/F4320334764","funder_display_name":"Japan Society for the Promotion of Science"}],"funders":[{"id":"https://openalex.org/F4320322638","display_name":"Waseda University","ror":"https://ror.org/00ntfnx83"},{"id":"https://openalex.org/F4320334764","display_name":"Japan Society for the Promotion of Science","ror":"https://ror.org/00hhkn466"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7155638773.pdf","grobid_xml":"https://content.openalex.org/works/W7155638773.grobid-xml"},"referenced_works_count":28,"referenced_works":["https://openalex.org/W2112796928","https://openalex.org/W2734358244","https://openalex.org/W3175919946","https://openalex.org/W4205228770","https://openalex.org/W4213446860","https://openalex.org/W4226047321","https://openalex.org/W4312403348","https://openalex.org/W4379233546","https://openalex.org/W4385187226","https://openalex.org/W4389076776","https://openalex.org/W4390874361","https://openalex.org/W4392477550","https://openalex.org/W4392905305","https://openalex.org/W4393973474","https://openalex.org/W4404489694","https://openalex.org/W4406610396","https://openalex.org/W4406794207","https://openalex.org/W4407247944","https://openalex.org/W4408519647","https://openalex.org/W4408861280","https://openalex.org/W4409536892","https://openalex.org/W4409762138","https://openalex.org/W4411336968","https://openalex.org/W4411484260","https://openalex.org/W4411948672","https://openalex.org/W4412081698","https://openalex.org/W4412107049","https://openalex.org/W4413146189"],"related_works":[],"abstract_inverted_index":{"Abstract":[0],"Federated":[1],"Learning":[2],"(FL)":[3],"enables":[4],"multiple":[5,203],"clients":[6],"to":[7,54,68,121,161],"collaboratively":[8],"train":[9],"a":[10,19,35,50,135,177,182],"shared":[11],"model":[12,83],"without":[13],"exposing":[14],"local":[15],"data,":[16],"making":[17],"it":[18],"fundamental":[20],"paradigm":[21],"for":[22],"large-scale":[23],"distributed":[24,228],"intelligence.":[25],"However,":[26],"in":[27,216],"practical":[28],"edge-cloud":[29],"deployments,":[30],"the":[31,65,81,97,143,162],"server":[32],"must":[33],"inspect":[34],"large":[36],"volume":[37],"of":[38,164],"high-dimensional":[39],"client":[40,165],"updates":[41],"within":[42],"tight":[43],"communication":[44],"windows,":[45],"which":[46,155,172],"makes":[47],"secure":[48],"aggregation":[49],"problem":[51],"closely":[52],"tied":[53],"parallel":[55],"processing,":[56],"real-time":[57],"response,":[58],"and":[59,116,137,167,197,206,220],"high-performance":[60],"computing":[61],"(HPC)":[62],"resources.":[63],"Among":[64],"major":[66],"threats":[67],"FL,":[69],"backdoor":[70],"attacks":[71],"are":[72,95,111],"particularly":[73],"insidious":[74],"because":[75],"they":[76],"implant":[77],"malicious":[78],"behaviors":[79],"into":[80],"global":[82],"while":[84,189,223],"preserving":[85,190],"benign-task":[86,221],"performance.":[87],"Although":[88],"pre-aggregation":[89],"defenses":[90,215],"based":[91],"on":[92,202],"gradient":[93],"analysis":[94],"promising,":[96],"current":[98],"state-of-the-art":[99],"methods":[100],"such":[101],"as":[102],"Scope":[103],"suffer":[104],"from":[105,181],"two":[106,148],"key":[107,149],"limitations:":[108],"fixed":[109],"parameters":[110],"ineffective":[112],"against":[113],"adaptive":[114],"attackers,":[115],"single-point":[117,174],"clustering":[118,175],"is":[119],"vulnerable":[120],"failure":[122],"under":[123],"heterogeneous":[124],"(non-IID)":[125],"data":[126],"distributions.":[127],"To":[128],"address":[129],"these":[130],"limitations,":[131],"we":[132],"propose":[133],"FAROS,":[134],"robust":[136],"HPC-friendly":[138],"defense":[139,158],"framework":[140],"that":[141,210],"generalizes":[142],"transform-and-cluster":[144],"paradigm.":[145],"FAROS":[146,211],"incorporates":[147],"components:":[150],"Adaptive":[151],"Differential":[152],"Scaling":[153],"(ADS),":[154],"dynamically":[156],"adjusts":[157],"sensitivity":[159],"according":[160],"dispersion":[163],"gradients,":[166],"Robust":[168],"Core-set":[169],"Computing":[170],"(RCC),":[171],"replaces":[173],"with":[176,226],"consensus-based":[178],"centroid":[179],"derived":[180],"stable":[183],"core-set.":[184],"This":[185],"design":[186],"improves":[187],"robustness":[188],"server-side":[191],"efficiency":[192],"through":[193],"vectorizable":[194],"similarity":[195],"computation":[196],"parallelizable":[198],"filtering.":[199],"Extensive":[200],"experiments":[201],"datasets,":[204],"models,":[205],"attack":[207,218],"settings":[208],"show":[209],"consistently":[212],"outperforms":[213],"existing":[214],"both":[217],"suppression":[219],"accuracy,":[222],"remaining":[224],"compatible":[225],"scalable":[227],"FL":[229],"infrastructures.":[230]},"counts_by_year":[],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2026-04-26T00:00:00"}