{"id":"https://openalex.org/W4385327089","doi":"https://doi.org/10.1109/coins57856.2023.10189281","title":"PerDoor: Persistent Backdoors in Federated Learning using Adversarial Perturbations","display_name":"PerDoor: Persistent Backdoors in Federated Learning using Adversarial Perturbations","publication_year":2023,"publication_date":"2023-07-23","ids":{"openalex":"https://openalex.org/W4385327089","doi":"https://doi.org/10.1109/coins57856.2023.10189281"},"language":"en","primary_location":{"id":"doi:10.1109/coins57856.2023.10189281","is_oa":false,"landing_page_url":"https://doi.org/10.1109/coins57856.2023.10189281","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE International Conference on Omni-layer Intelligent Systems (COINS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5053280523","display_name":"Manaar Alam","orcid":"https://orcid.org/0000-0002-3338-2944"},"institutions":[{"id":"https://openalex.org/I120250893","display_name":"New York University Abu Dhabi","ror":"https://ror.org/00e5k0821","country_code":"AE","type":"education","lineage":["https://openalex.org/I120250893","https://openalex.org/I57206974"]},{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["AE","US"],"is_corresponding":false,"raw_author_name":"Manaar Alam","raw_affiliation_strings":["Center for Cyber Security, New York University Abu Dhabi,UAE","Center for Cyber Security, New York University Abu Dhabi, UAE"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Center for Cyber Security, New York University Abu Dhabi,UAE","institution_ids":["https://openalex.org/I120250893"]},{"raw_affiliation_string":"Center for Cyber Security, New York University Abu Dhabi, UAE","institution_ids":["https://openalex.org/I57206974"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054288765","display_name":"Esha Sarkar","orcid":"https://orcid.org/0000-0002-4473-7368"},"institutions":[{"id":"https://openalex.org/I1343180700","display_name":"Intel (United States)","ror":"https://ror.org/01ek73717","country_code":"US","type":"company","lineage":["https://openalex.org/I1343180700"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Esha Sarkar","raw_affiliation_strings":["Intel Corporation,USA","Intel Corporation, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Intel Corporation,USA","institution_ids":["https://openalex.org/I1343180700"]},{"raw_affiliation_string":"Intel Corporation, USA","institution_ids":["https://openalex.org/I1343180700"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5043325974","display_name":"Michail Maniatakos","orcid":"https://orcid.org/0000-0001-6899-0651"},"institutions":[{"id":"https://openalex.org/I120250893","display_name":"New York University Abu Dhabi","ror":"https://ror.org/00e5k0821","country_code":"AE","type":"education","lineage":["https://openalex.org/I120250893","https://openalex.org/I57206974"]},{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["AE","US"],"is_corresponding":false,"raw_author_name":"Michail Maniatakos","raw_affiliation_strings":["Center for Cyber Security, New York University Abu Dhabi,UAE","Center for Cyber Security, New York University Abu Dhabi, UAE"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Center for Cyber Security, New York University Abu Dhabi,UAE","institution_ids":["https://openalex.org/I120250893"]},{"raw_affiliation_string":"Center for Cyber Security, New York University Abu Dhabi, UAE","institution_ids":["https://openalex.org/I57206974"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.6135,"has_fulltext":false,"cited_by_count":12,"citation_normalized_percentile":{"value":0.91765442,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.904699981212616,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9981208443641663},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.836559534072876},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8073111772537231},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7162833213806152},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5365216135978699},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4496048092842102},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.44250357151031494},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.420958012342453},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.18474525213241577},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.14727085828781128}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9981208443641663},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.836559534072876},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8073111772537231},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7162833213806152},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5365216135978699},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4496048092842102},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.44250357151031494},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.420958012342453},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.18474525213241577},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.14727085828781128},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/coins57856.2023.10189281","is_oa":false,"landing_page_url":"https://doi.org/10.1109/coins57856.2023.10189281","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE International Conference on Omni-layer Intelligent Systems (COINS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W2543927648","https://openalex.org/W2767079719","https://openalex.org/W2963456518","https://openalex.org/W2990595670","https://openalex.org/W3090898103","https://openalex.org/W3135970545","https://openalex.org/W3178326529","https://openalex.org/W4312877401","https://openalex.org/W6728757088","https://openalex.org/W6738383168","https://openalex.org/W6743821447","https://openalex.org/W6752600739","https://openalex.org/W6761472960","https://openalex.org/W6771533808","https://openalex.org/W6780640148","https://openalex.org/W6780897730","https://openalex.org/W6787633081","https://openalex.org/W6810095145","https://openalex.org/W6839074529"],"related_works":["https://openalex.org/W4320018150","https://openalex.org/W4328053081","https://openalex.org/W4239582170","https://openalex.org/W2918664383","https://openalex.org/W106056076","https://openalex.org/W4320855730","https://openalex.org/W2135200719","https://openalex.org/W4401407399","https://openalex.org/W4387985143","https://openalex.org/W4362599004"],"abstract_inverted_index":{"Federated":[0],"Learning":[1],"(FL)":[2],"enables":[3],"numerous":[4],"par-ticipants":[5],"to":[6,28,62,119,131,137],"train":[7],"deep":[8],"learning":[9],"models":[10],"collaboratively":[11],"without":[12],"exposing":[13],"sensitive":[14],"personal":[15],"data.":[16],"However,":[17],"distributed":[18],"nature":[19],"of":[20,105],"FL":[21,55,85,113,142],"and":[22,102,115,143],"unvetted":[23],"data":[24],"makes":[25],"it":[26],"vulnerable":[27],"backdoor":[29,93,139,149],"attacks":[30,140],"by":[31,99,134],"injecting":[32],"malicious":[33],"functionality":[34,66],"into":[35],"the":[36,71,78,106,117],"centralized":[37,79,107],"model":[38,80,108],"during":[39,83],"training,":[40],"causing":[41],"desired":[42],"misclassifications":[43],"for":[44,96],"specific":[45],"adversary-chosen":[46],"inputs.":[47],"Prior":[48],"works":[49],"established":[50],"successful":[51],"back-door":[52],"injection":[53,94],"in":[54,111,141],"systems;":[56],"however,":[57],"these":[58],"are":[59],"not":[60,68],"demon-strated":[61],"be":[63],"long-lasting.":[64],"Backdoor":[65],"does":[67],"survive":[69],"if":[70],"adversary":[72],"is":[73],"prevented":[74],"from":[75],"training":[76],"since":[77],"continuously":[81],"mutates":[82],"successive":[84,112],"rounds.":[86],"This":[87],"work":[88],"proposes":[89],"PerDoor,":[90],"a":[91],"persistent-by-construction":[92],"technique":[95],"FL,":[97],"driven":[98],"adversarial":[100],"perturbation":[101],"targeting":[103],"parameters":[104],"deviating":[109],"less":[110],"rounds":[114],"contributing":[116],"least":[118],"main":[120],"task":[121],"accuracy.":[122],"Exhaustive":[123],"evaluation":[124],"considering":[125],"image":[126],"classification":[127],"scenarios":[128],"portrays":[129],"up":[130],"8.2x":[132],"persistence":[133],"PerDoor":[135],"compared":[136],"state-of-the-art":[138,148],"exhibits":[144],"its":[145],"potency":[146],"against":[147],"prevention":[150],"methods.":[151]},"counts_by_year":[{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}