{"id":"https://openalex.org/W4405363144","doi":"https://doi.org/10.1109/spw63631.2024.10795458","title":"LayerDBA: Circumventing Similarity-Based Defenses in Federated Learning","display_name":"LayerDBA: Circumventing Similarity-Based Defenses in Federated Learning","publication_year":2024,"publication_date":"2024-05-23","ids":{"openalex":"https://openalex.org/W4405363144","doi":"https://doi.org/10.1109/spw63631.2024.10795458"},"language":"en","primary_location":{"id":"doi:10.1109/spw63631.2024.10795458","is_oa":false,"landing_page_url":"https://doi.org/10.1109/spw63631.2024.10795458","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE Security and Privacy Workshops (SPW)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5115429325","display_name":"Javor Nikolov","orcid":null},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technical University of Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Javor Nikolov","raw_affiliation_strings":["Technical University of Darmstadt"],"affiliations":[{"raw_affiliation_string":"Technical University of Darmstadt","institution_ids":["https://openalex.org/I31512782"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050517596","display_name":"Alessandro Pegoraro","orcid":"https://orcid.org/0009-0007-1904-095X"},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technical University of Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Alessandro Pegoraro","raw_affiliation_strings":["Technical University of Darmstadt"],"affiliations":[{"raw_affiliation_string":"Technical University of Darmstadt","institution_ids":["https://openalex.org/I31512782"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051694999","display_name":"Phillip Rieger","orcid":"https://orcid.org/0000-0001-6216-7285"},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technical University of Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Phillip Rieger","raw_affiliation_strings":["Technical University of Darmstadt"],"affiliations":[{"raw_affiliation_string":"Technical University of Darmstadt","institution_ids":["https://openalex.org/I31512782"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5079497016","display_name":"Ahmad\u2010Reza Sadeghi","orcid":"https://orcid.org/0000-0001-6833-3598"},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technical University of Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Ahmad-Reza Sadeghi","raw_affiliation_strings":["Technical University of Darmstadt"],"affiliations":[{"raw_affiliation_string":"Technical University of Darmstadt","institution_ids":["https://openalex.org/I31512782"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5115429325"],"corresponding_institution_ids":["https://openalex.org/I31512782"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.21095639,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"299","last_page":"305"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9962000250816345,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9962000250816345,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9866999983787537,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9544000029563904,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7729463577270508},{"id":"https://openalex.org/keywords/similarity","display_name":"Similarity (geometry)","score":0.49469229578971863},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.35195988416671753},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.3359297215938568},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2664991021156311}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7729463577270508},{"id":"https://openalex.org/C103278499","wikidata":"https://www.wikidata.org/wiki/Q254465","display_name":"Similarity (geometry)","level":3,"score":0.49469229578971863},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.35195988416671753},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.3359297215938568},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2664991021156311},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/spw63631.2024.10795458","is_oa":false,"landing_page_url":"https://doi.org/10.1109/spw63631.2024.10795458","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE Security and Privacy Workshops (SPW)","raw_type":"proceedings-article"},{"id":"pmh:oai:tubiblio.ulb.tu-darmstadt.de:152677","is_oa":false,"landing_page_url":"http://tubiblio.ulb.tu-darmstadt.de/view/person/Nikolov=3AJavor=3A=3A.html>","pdf_url":null,"source":{"id":"https://openalex.org/S4377196390","display_name":"TUbilio (Technical University of Darmstadt)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I31512782","host_organization_name":"Technische Universit\u00e4t Darmstadt","host_organization_lineage":["https://openalex.org/I31512782"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"NonPeerReviewed"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3369498996","display_name":null,"funder_award_id":"101093126","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W2559840118","https://openalex.org/W2753783305","https://openalex.org/W3030742901","https://openalex.org/W3127520698","https://openalex.org/W3175919946","https://openalex.org/W3200840849","https://openalex.org/W3203600060","https://openalex.org/W3204548896","https://openalex.org/W3215037005","https://openalex.org/W4214564822","https://openalex.org/W4221129260","https://openalex.org/W4226272105","https://openalex.org/W4229801112","https://openalex.org/W4281398987","https://openalex.org/W4292084264","https://openalex.org/W4385679828","https://openalex.org/W4388214751","https://openalex.org/W4390874361","https://openalex.org/W4391724779","https://openalex.org/W6728757088","https://openalex.org/W6729007826","https://openalex.org/W6743821447","https://openalex.org/W6752600739","https://openalex.org/W6771533808","https://openalex.org/W6780640148","https://openalex.org/W6787633081","https://openalex.org/W6789325072","https://openalex.org/W6845998782","https://openalex.org/W6846031079"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Federated":[0],"Learning":[1],"(FL)":[2],"allows":[3,61,137],"multiple":[4],"parties":[5],"to":[6,29,64,99,128,139,187],"jointly":[7],"train":[8],"a":[9,20,49],"Deep":[10],"Neural":[11],"Network":[12],"(DNN).":[13],"Instead":[14],"of":[15,44,108,157,201,215],"collecting":[16],"all":[17],"data":[18,86],"at":[19],"single":[21],"central":[22,50],"entity,":[23],"the":[24,42,45,54,66,83,106,115,120,133,180,183],"training":[25,55],"process":[26],"is":[27],"outsourced":[28],"individual":[30,134],"clients.":[31,216],"Each":[32],"client":[33],"trains":[34],"its":[35],"own":[36],"model":[37,68,126,162],"locally":[38],"and":[39,69,77,91,205],"shares":[40],"only":[41],"parameters":[43],"trained":[46],"DNN":[47],"with":[48,182],"server.":[51],"Although":[52],"outsourcing":[53],"strengthens":[56],"clients'":[57,85],"privacy,":[58],"it":[59],"also":[60],"malicious":[62],"clients":[63],"manipulate":[65],"resulting":[67],"inject":[70],"backdoors.":[71],"While":[72],"most":[73],"existing":[74],"backdoor":[75,193],"attacks":[76],"defenses":[78,142,211],"focus":[79,149],"on":[80,150],"scenarios":[81],"where":[82],"benign":[84],"are":[87],"similar,":[88],"therefore,":[89],"independently":[90],"identically":[92],"distributed":[93],"(IID),":[94],"less":[95],"attention":[96],"was":[97],"given":[98],"more":[100],"challenging":[101],"non-IID":[102,111,151],"scenarios.":[103,152],"To":[104],"demonstrate":[105],"vulnerability":[107],"FL":[109],"for":[110,203,207],"scenarios,":[112],"we":[113],"propose":[114],"LayerDBA":[116,138,153,195],"attack":[117,198],"that":[118,166],"splits":[119],"poisoned":[121,161,176],"parameter":[122],"values":[123],"across":[124],"different":[125,175],"updates":[127],"ensure":[129,171],"high":[130,158,172],"distances":[131,173],"between":[132,160,174],"updates.":[135,177],"This":[136],"circumvent":[140],"state-of-the-art":[141,210],"such":[143],"as":[144],"FoolsGold":[145],"or":[146],"Contra,":[147],"which":[148],"exploits":[154],"their":[155],"assumption":[156],"similarities":[159],"updates,":[163],"thereby":[164],"showing":[165],"sophisticated":[167],"adversaries":[168],"can":[169],"always":[170],"We":[178],"combine":[179],"approach":[181],"dynamic":[184],"Marksman":[185],"trigger":[186],"create":[188],"an":[189,197],"effective":[190],"but":[191],"stealthy":[192],"attack.":[194],"achieves":[196],"success":[199],"rate":[200],"50%":[202],"CIFAR-10":[204],"80%":[206],"MNIST":[208],"against":[209],"by":[212],"controlling":[213],"5%":[214]},"counts_by_year":[],"updated_date":"2026-02-26T08:16:20.718346","created_date":"2025-10-10T00:00:00"}