{"id":"https://openalex.org/W4412939433","doi":"https://doi.org/10.1109/tdsc.2025.3595518","title":"General Test-Time Backdoor Detection in Split Neural Network-Based Vertical Federated Learning","display_name":"General Test-Time Backdoor Detection in Split Neural Network-Based Vertical Federated Learning","publication_year":2025,"publication_date":"2025-08-04","ids":{"openalex":"https://openalex.org/W4412939433","doi":"https://doi.org/10.1109/tdsc.2025.3595518"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2025.3595518","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3595518","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://ink.library.smu.edu.sg/cgi/viewcontent.cgi?article=12003&context=sis_research","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5063026980","display_name":"S.W. Yuan","orcid":"https://orcid.org/0000-0003-1874-9792"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shunjie Yuan","raw_affiliation_strings":["State Key Laboratory of Integrated Services Networks, School of Cyber Engineering, Xidian University, Xi’an, China"],"raw_orcid":"https://orcid.org/0000-0003-1874-9792","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Integrated Services Networks, School of Cyber Engineering, Xidian University, Xi’an, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100626958","display_name":"Xinghua Li","orcid":"https://orcid.org/0000-0002-5583-4155"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinghua Li","raw_affiliation_strings":["State Key Laboratory of Integrated Services Networks, School of Cyber Engineering, Xidian University, Xi’an, China","State Key Laboratory of Integrated Services Networks, and the School of Cyber Engineering, Xidian University, Xi'an, China"],"raw_orcid":"https://orcid.org/0000-0002-5583-4155","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Integrated Services Networks, School of Cyber Engineering, Xidian University, Xi’an, China","institution_ids":["https://openalex.org/I149594827"]},{"raw_affiliation_string":"State Key Laboratory of Integrated Services Networks, and the School of Cyber Engineering, Xidian University, Xi'an, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100645992","display_name":"Xuelin Cao","orcid":"https://orcid.org/0000-0002-6221-0754"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xuelin Cao","raw_affiliation_strings":["State Key Laboratory of Integrated Services Networks, School of Cyber Engineering, Xidian University, Xi’an, China"],"raw_orcid":"https://orcid.org/0000-0002-6221-0754","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Integrated Services Networks, School of Cyber Engineering, Xidian University, Xi’an, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Haiyan Zhang","orcid":"https://orcid.org/0000-0001-5647-0958"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haiyan Zhang","raw_affiliation_strings":["State Key Laboratory of Integrated Services Networks, School of Cyber Engineering, Xidian University, Xi’an, China"],"raw_orcid":"https://orcid.org/0000-0001-5647-0958","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Integrated Services Networks, School of Cyber Engineering, Xidian University, Xi’an, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5001712801","display_name":"Robert H. Deng","orcid":"https://orcid.org/0000-0003-3491-8146"},"institutions":[{"id":"https://openalex.org/I79891267","display_name":"Singapore Management University","ror":"https://ror.org/050qmg959","country_code":"SG","type":"education","lineage":["https://openalex.org/I79891267"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Robert H. Deng","raw_affiliation_strings":["School of Information Systems, Singapore Management University, Singapore"],"raw_orcid":"https://orcid.org/0000-0003-3491-8146","affiliations":[{"raw_affiliation_string":"School of Information Systems, Singapore Management University, Singapore","institution_ids":["https://openalex.org/I79891267"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.21821624,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"22","issue":"6","first_page":"7157","last_page":"7171"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12702","display_name":"Brain Tumor Detection and Classification","score":0.9735999703407288,"subfield":{"id":"https://openalex.org/subfields/2808","display_name":"Neurology"},"field":{"id":"https://openalex.org/fields/28","display_name":"Neuroscience"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},"topics":[{"id":"https://openalex.org/T12702","display_name":"Brain Tumor Detection and Classification","score":0.9735999703407288,"subfield":{"id":"https://openalex.org/subfields/2808","display_name":"Neurology"},"field":{"id":"https://openalex.org/fields/28","display_name":"Neuroscience"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},{"id":"https://openalex.org/T14510","display_name":"Medical Imaging and Analysis","score":0.9641000032424927,"subfield":{"id":"https://openalex.org/subfields/2204","display_name":"Biomedical Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12676","display_name":"Machine Learning and ELM","score":0.9379000067710876,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9614496231079102},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7869824171066284},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.6273208856582642},{"id":"https://openalex.org/keywords/test","display_name":"Test (biology)","score":0.5741870403289795},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5049391388893127},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.39621075987815857},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.19907236099243164}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9614496231079102},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7869824171066284},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.6273208856582642},{"id":"https://openalex.org/C2777267654","wikidata":"https://www.wikidata.org/wiki/Q3519023","display_name":"Test (biology)","level":2,"score":0.5741870403289795},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5049391388893127},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.39621075987815857},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.19907236099243164},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tdsc.2025.3595518","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3595518","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},{"id":"pmh:oai:ink.library.smu.edu.sg:sis_research-12003","is_oa":true,"landing_page_url":"https://ink.library.smu.edu.sg/sis_research/11001","pdf_url":"https://ink.library.smu.edu.sg/cgi/viewcontent.cgi?article=12003&context=sis_research","source":{"id":"https://openalex.org/S4306401925","display_name":"Singapore Management University Institutional Knowledge (InK) (Singapore Management University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79891267","host_organization_name":"Singapore Management University","host_organization_lineage":["https://openalex.org/I79891267"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"https://doi.org/10.1109/TDSC.2025.3595518","raw_type":"Journal Article"}],"best_oa_location":{"id":"pmh:oai:ink.library.smu.edu.sg:sis_research-12003","is_oa":true,"landing_page_url":"https://ink.library.smu.edu.sg/sis_research/11001","pdf_url":"https://ink.library.smu.edu.sg/cgi/viewcontent.cgi?article=12003&context=sis_research","source":{"id":"https://openalex.org/S4306401925","display_name":"Singapore Management University Institutional Knowledge (InK) (Singapore Management University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79891267","host_organization_name":"Singapore Management University","host_organization_lineage":["https://openalex.org/I79891267"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"https://doi.org/10.1109/TDSC.2025.3595518","raw_type":"Journal Article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4412939433.pdf","grobid_xml":"https://content.openalex.org/works/W4412939433.grobid-xml"},"referenced_works_count":30,"referenced_works":["https://openalex.org/W798156368","https://openalex.org/W1559506103","https://openalex.org/W1622838444","https://openalex.org/W2000239378","https://openalex.org/W2108598243","https://openalex.org/W2112796928","https://openalex.org/W2194775991","https://openalex.org/W2744999500","https://openalex.org/W2766992028","https://openalex.org/W2807363941","https://openalex.org/W2934843808","https://openalex.org/W2962858109","https://openalex.org/W2986013765","https://openalex.org/W2990270730","https://openalex.org/W3034414373","https://openalex.org/W3103989228","https://openalex.org/W3112288498","https://openalex.org/W3133273835","https://openalex.org/W3177828909","https://openalex.org/W4226047321","https://openalex.org/W4293846201","https://openalex.org/W4312402191","https://openalex.org/W4388206624","https://openalex.org/W4390874361","https://openalex.org/W4391250546","https://openalex.org/W4391529040","https://openalex.org/W4393973474","https://openalex.org/W4402210816","https://openalex.org/W4402264407","https://openalex.org/W4406457997"],"related_works":["https://openalex.org/W2961085424","https://openalex.org/W4306674287","https://openalex.org/W4387369504","https://openalex.org/W4394896187","https://openalex.org/W3170094116","https://openalex.org/W4386462264","https://openalex.org/W3107602296","https://openalex.org/W4364306694","https://openalex.org/W4312192474","https://openalex.org/W4283697347"],"abstract_inverted_index":{"As":[0],"a":[1,38,112,173,176],"new":[2],"distributed":[3],"machine":[4],"learning":[5,9,77],"framework,":[6],"vertical":[7],"federated":[8,76],"(VFL)":[10],"has":[11],"been":[12],"widely":[13],"applied":[14,95],"in":[15,74,99,108,213],"the":[16,55,84,103,127,133,141,170,189],"industry.":[17],"However,":[18],"recent":[19],"studies":[20,40],"have":[21,41],"demonstrated":[22],"that":[23,201],"VFL":[24,46,88],"faces":[25],"serious":[26],"challenges":[27],"from":[28],"backdoor":[29,47,66,72,97,106,114,119,123,130,147,153,177,186,205,214],"attacks,":[30,48],"which":[31,121,165],"significantly":[32],"hinder":[33],"its":[34,211],"further":[35],"development.":[36],"Although":[37],"few":[39],"focused":[42],"on":[43,71,194],"defending":[44],"against":[45],"these":[49,90,181],"defenses":[50],"either":[51],"do":[52],"not":[53],"consider":[54],"latest":[56],"attack":[57],"methods":[58,91],"or":[59],"show":[60,200],"limited":[61],"effectiveness.":[62],"Moreover,":[63],"most":[64],"existing":[65],"defense":[67,98],"efforts":[68],"primarily":[69],"focus":[70],"attacks":[73,107],"horizontal":[75],"(HFL)":[78],"and":[79,132,146,160,197],"centralized":[80],"learning.":[81],"Due":[82],"to":[83,96,168,184],"unique":[85],"architecture":[86],"of":[87,105,172,219],"models,":[89],"cannot":[92],"be":[93],"directly":[94],"VFL.":[100],"To":[101],"mitigate":[102],"threat":[104],"VFL,":[109],"we":[110,150],"propose":[111,151],"general":[113],"detection":[115,154],"(GBD)":[116],"scheme":[117],"for":[118],"defense,":[120],"detects":[122],"samples":[124,131,187,206],"by":[125,139],"analyzing":[126],"correlation":[128],"between":[129,144],"target":[134],"label,":[135],"as":[136,138],"well":[137],"leveraging":[140],"response":[142],"differences":[143],"clean":[145],"samples.":[148],"Specifically,":[149],"two":[152,182],"metrics:":[155],"Class":[156,161],"Activation":[157,162],"Probability":[158],"(CAP)":[159],"Contribution":[163],"(CAC),":[164],"are":[166],"used":[167],"calculate":[169],"likelihood":[171],"sample":[174],"being":[175],"sample.":[178],"We":[179],"leverage":[180],"metrics":[183],"identify":[185],"during":[188],"inference":[190],"stage.":[191],"Evaluation":[192],"results":[193],"both":[195],"tabular":[196],"image":[198],"datasets":[199],"GBD":[202,220],"can":[203],"detect":[204],"with":[207],"high":[208],"accuracy,":[209],"demonstrating":[210],"effectiveness":[212],"defense.":[215],"The":[216],"source":[217],"code":[218],"is":[221],"available":[222],"at":[223],"GitHub:":[224],"https://github.com/YuanShunJie1/GBD.":[225]},"counts_by_year":[],"updated_date":"2025-11-14T23:14:49.485078","created_date":"2025-10-10T00:00:00"}