{"id":"https://openalex.org/W4402742360","doi":"https://doi.org/10.1109/tai.2024.3465441","title":"<i>Get Rid of Your Trail</i>: Remotely Erasing Backdoors in Federated Learning","display_name":"<i>Get Rid of Your Trail</i>: Remotely Erasing Backdoors in Federated Learning","publication_year":2024,"publication_date":"2024-09-23","ids":{"openalex":"https://openalex.org/W4402742360","doi":"https://doi.org/10.1109/tai.2024.3465441"},"language":"en","primary_location":{"id":"doi:10.1109/tai.2024.3465441","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tai.2024.3465441","pdf_url":null,"source":{"id":"https://openalex.org/S4210169448","display_name":"IEEE Transactions on Artificial Intelligence","issn_l":"2691-4581","issn":["2691-4581"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Artificial Intelligence","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5053280523","display_name":"Manaar Alam","orcid":"https://orcid.org/0000-0002-3338-2944"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Manaar Alam","raw_affiliation_strings":["Center for Cyber Security, New York University Abu Dhabi, Abu Dhabi, UAE"],"raw_orcid":"https://orcid.org/0000-0002-3338-2944","affiliations":[{"raw_affiliation_string":"Center for Cyber Security, New York University Abu Dhabi, Abu Dhabi, UAE","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056363895","display_name":"Hithem Lamri","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hithem Lamri","raw_affiliation_strings":["Center for Cyber Security, New York University Abu Dhabi, Abu Dhabi, UAE"],"raw_orcid":"https://orcid.org/0009-0008-5269-8718","affiliations":[{"raw_affiliation_string":"Center for Cyber Security, New York University Abu Dhabi, Abu Dhabi, UAE","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5043325974","display_name":"Michail Maniatakos","orcid":"https://orcid.org/0000-0001-6899-0651"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Michail Maniatakos","raw_affiliation_strings":["Center for Cyber Security, New York University Abu Dhabi, Abu Dhabi, UAE"],"raw_orcid":"https://orcid.org/0000-0001-6899-0651","affiliations":[{"raw_affiliation_string":"Center for Cyber Security, New York University Abu Dhabi, Abu Dhabi, UAE","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.6017,"has_fulltext":false,"cited_by_count":15,"citation_normalized_percentile":{"value":0.93596393,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"5","issue":"12","first_page":"6683","last_page":"6698"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9617999792098999,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11612","display_name":"Stochastic Gradient Optimization Techniques","score":0.9557999968528748,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6384302973747253},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3894188702106476}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6384302973747253},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3894188702106476}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tai.2024.3465441","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tai.2024.3465441","pdf_url":null,"source":{"id":"https://openalex.org/S4210169448","display_name":"IEEE Transactions on Artificial Intelligence","issn_l":"2691-4581","issn":["2691-4581"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Artificial Intelligence","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":52,"referenced_works":["https://openalex.org/W1488996941","https://openalex.org/W2767079719","https://openalex.org/W3035644192","https://openalex.org/W3041048781","https://openalex.org/W3095155273","https://openalex.org/W3107100345","https://openalex.org/W3154155772","https://openalex.org/W3154608090","https://openalex.org/W3174532363","https://openalex.org/W3174842369","https://openalex.org/W3175663678","https://openalex.org/W3193974325","https://openalex.org/W3197363474","https://openalex.org/W3199974954","https://openalex.org/W3204548896","https://openalex.org/W3209576002","https://openalex.org/W3211914450","https://openalex.org/W4214758645","https://openalex.org/W4221129260","https://openalex.org/W4224918093","https://openalex.org/W4225750584","https://openalex.org/W4283208007","https://openalex.org/W4288057793","https://openalex.org/W4312738800","https://openalex.org/W4315779371","https://openalex.org/W4321521256","https://openalex.org/W4383221550","https://openalex.org/W4385187226","https://openalex.org/W4385327089","https://openalex.org/W4385482833","https://openalex.org/W6728757088","https://openalex.org/W6738383168","https://openalex.org/W6743821447","https://openalex.org/W6748786018","https://openalex.org/W6752600739","https://openalex.org/W6756756286","https://openalex.org/W6759226220","https://openalex.org/W6769833289","https://openalex.org/W6771533808","https://openalex.org/W6775330256","https://openalex.org/W6775563089","https://openalex.org/W6780547051","https://openalex.org/W6780640148","https://openalex.org/W6786748584","https://openalex.org/W6787633081","https://openalex.org/W6791907524","https://openalex.org/W6810227880","https://openalex.org/W6811351543","https://openalex.org/W6838779202","https://openalex.org/W6839074529","https://openalex.org/W6840141968","https://openalex.org/W7056673059"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052","https://openalex.org/W2382290278","https://openalex.org/W4395014643"],"abstract_inverted_index":{"Federated":[0],"learning":[1,5],"(FL)":[2],"enables":[3,96],"collaborative":[4],"across":[6,199],"multiple":[7,200],"participants":[8],"without":[9],"exposing":[10],"sensitive":[11],"personal":[12],"data.":[13],"However,":[14],"the":[15,38,63,73,78,88,103,119,127,130,150,157,169,181,184,192],"distributed":[16],"nature":[17],"of":[18,58,112,129,137,152,171,183],"FL":[19,164],"and":[20,133],"unvetted":[21],"participants\u2019":[22],"data":[23],"makes":[24],"it":[25],"vulnerable":[26],"tobackdoor":[27],"attacks.":[28],"In":[29],"these":[30],"attacks,":[31],"adversaries":[32,97,144],"selectively":[33],"inject":[34],"malicious":[35],"functionality":[36],"into":[37],"centralized":[39,74,104,131,193],"model":[40,75,132],"during":[41],"training,":[42],"leading":[43],"to":[44,82,98,125,140,165,168],"intentional":[45],"misclassifications":[46],"for":[47,86,187],"specific":[48],"adversary-chosen":[49],"inputs.":[50],"While":[51],"previous":[52],"research":[53],"has":[54],"demonstrated":[55],"successful":[56],"injections":[57],"persistent":[59],"backdoors":[60,101,167],"in":[61,72,163],"FL,":[62],"persistence":[64],"also":[65],"poses":[66],"a":[67,94],"challenge,":[68],"as":[69],"their":[70,107],"existence":[71],"can":[76],"prompt":[77],"central":[79],"aggregation":[80],"server":[81],"take":[83],"preventive":[84],"measures":[85],"penalizing":[87],"adversaries.":[89,172],"Therefore,":[90],"this":[91,155],"article":[92],"proposes":[93],"methodthat":[95],"effectively":[99],"remove":[100,166],"from":[102,191],"modelupon":[105],"achieving":[106],"objectives":[108],"or":[109],"upon":[110],"suspicion":[111],"possible":[113],"detection.":[114],"The":[115],"proposed":[116,185],"approach":[117],"extends":[118],"concept":[120],"ofmachine":[121],"unlearningand":[122],"presents":[123],"strategies":[124],"preserve":[126],"performance":[128],"simultaneously":[134],"prevent":[135],"over-unlearning":[136],"information":[138],"unrelated":[139],"backdoor":[141,189],"patterns,":[142],"making":[143],"stealthy":[145],"while":[146],"removing":[147],"backdoors.":[148],"To":[149],"best":[151],"our":[153],"knowledge,":[154],"is":[156],"first":[158],"work":[159],"exploring":[160],"machine":[161],"unlearning":[162],"benefit":[170],"Exhaustive":[173],"evaluation":[174],"considering":[175],"various":[176],"image":[177],"classification":[178],"scenarios":[179],"demonstrates":[180],"efficacy":[182],"method":[186],"efficient":[188],"removal":[190],"model,":[194],"injected":[195],"by":[196],"state-of-the-art":[197],"attacks":[198],"configurations.":[201]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":10},{"year":2024,"cited_by_count":2}],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2024-09-24T00:00:00"}