{"id":"https://openalex.org/W4388206624","doi":"https://doi.org/10.1109/tifs.2023.3327853","title":"Backdoor Attack Against Split Neural Network-Based Vertical Federated Learning","display_name":"Backdoor Attack Against Split Neural Network-Based Vertical Federated Learning","publication_year":2023,"publication_date":"2023-10-26","ids":{"openalex":"https://openalex.org/W4388206624","doi":"https://doi.org/10.1109/tifs.2023.3327853"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2023.3327853","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2023.3327853","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5038314969","display_name":"Ying He","orcid":"https://orcid.org/0000-0002-8851-1010"},"institutions":[{"id":"https://openalex.org/I36399199","display_name":"Nanjing University of Science and Technology","ror":"https://ror.org/00xp9wg62","country_code":"CN","type":"education","lineage":["https://openalex.org/I36399199"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ying He","raw_affiliation_strings":["Computer Science and Technology Department, Nanjing University, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-8851-1010","affiliations":[{"raw_affiliation_string":"Computer Science and Technology Department, Nanjing University, Nanjing, China","institution_ids":["https://openalex.org/I36399199"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083813347","display_name":"Zhili Shen","orcid":"https://orcid.org/0000-0002-5969-0048"},"institutions":[{"id":"https://openalex.org/I36399199","display_name":"Nanjing University of Science and Technology","ror":"https://ror.org/00xp9wg62","country_code":"CN","type":"education","lineage":["https://openalex.org/I36399199"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhili Shen","raw_affiliation_strings":["Computer Science and Technology Department, Nanjing University, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-5969-0048","affiliations":[{"raw_affiliation_string":"Computer Science and Technology Department, Nanjing University, Nanjing, China","institution_ids":["https://openalex.org/I36399199"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101950654","display_name":"Jingyu Hua","orcid":"https://orcid.org/0000-0002-6709-4801"},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jingyu Hua","raw_affiliation_strings":["Sheng Zhong are with the State Key Laboratory for Novel Software Technology and the Computer Science and Technology Department, Nanjing University, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-6709-4801","affiliations":[{"raw_affiliation_string":"Sheng Zhong are with the State Key Laboratory for Novel Software Technology and the Computer Science and Technology Department, Nanjing University, Nanjing, China","institution_ids":["https://openalex.org/I881766915"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103257772","display_name":"Qixuan Dong","orcid":"https://orcid.org/0009-0007-4327-4692"},"institutions":[{"id":"https://openalex.org/I36399199","display_name":"Nanjing University of Science and Technology","ror":"https://ror.org/00xp9wg62","country_code":"CN","type":"education","lineage":["https://openalex.org/I36399199"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qixuan Dong","raw_affiliation_strings":["Computer Science and Technology Department, Nanjing University, Nanjing, China"],"raw_orcid":"https://orcid.org/0009-0001-8465-9237","affiliations":[{"raw_affiliation_string":"Computer Science and Technology Department, Nanjing University, Nanjing, China","institution_ids":["https://openalex.org/I36399199"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109651929","display_name":"Jiacheng Niu","orcid":"https://orcid.org/0009-0002-3276-8017"},"institutions":[{"id":"https://openalex.org/I36399199","display_name":"Nanjing University of Science and Technology","ror":"https://ror.org/00xp9wg62","country_code":"CN","type":"education","lineage":["https://openalex.org/I36399199"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiacheng Niu","raw_affiliation_strings":["Computer Science and Technology Department, Nanjing University, Nanjing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Science and Technology Department, Nanjing University, Nanjing, China","institution_ids":["https://openalex.org/I36399199"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021538603","display_name":"Wei Tong","orcid":"https://orcid.org/0000-0002-8427-6068"},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wei Tong","raw_affiliation_strings":["Sheng Zhong are with the State Key Laboratory for Novel Software Technology and the Computer Science and Technology Department, Nanjing University, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-8427-6068","affiliations":[{"raw_affiliation_string":"Sheng Zhong are with the State Key Laboratory for Novel Software Technology and the Computer Science and Technology Department, Nanjing University, Nanjing, China","institution_ids":["https://openalex.org/I881766915"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Xu Huang","orcid":"https://orcid.org/0009-0005-6085-9639"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xu Huang","raw_affiliation_strings":["Meituan Company, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0005-6085-9639","affiliations":[{"raw_affiliation_string":"Meituan Company, Beijing, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100369950","display_name":"Chen Li","orcid":"https://orcid.org/0009-0003-8206-0962"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen Li","raw_affiliation_strings":["Meituan Company, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0003-8206-0962","affiliations":[{"raw_affiliation_string":"Meituan Company, Beijing, China","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5060268538","display_name":"Sheng Zhong","orcid":"https://orcid.org/0000-0002-6581-8730"},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Sheng Zhong","raw_affiliation_strings":["Sheng Zhong are with the State Key Laboratory for Novel Software Technology and the Computer Science and Technology Department, Nanjing University, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-6581-8730","affiliations":[{"raw_affiliation_string":"Sheng Zhong are with the State Key Laboratory for Novel Software Technology and the Computer Science and Technology Department, Nanjing University, Nanjing, China","institution_ids":["https://openalex.org/I881766915"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.6001,"has_fulltext":false,"cited_by_count":29,"citation_normalized_percentile":{"value":0.95636552,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":"19","issue":null,"first_page":"748","last_page":"763"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11612","display_name":"Stochastic Gradient Optimization Techniques","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9959999918937683,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.97971510887146},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8537894487380981},{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.7214640378952026},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.6271933317184448},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.6113189458847046},{"id":"https://openalex.org/keywords/aggregate","display_name":"Aggregate (composite)","score":0.6044210195541382},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5527054667472839},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5071675777435303},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4871372878551483},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.46956419944763184},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.44235488772392273},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3888500928878784},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.32798460125923157}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.97971510887146},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8537894487380981},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.7214640378952026},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.6271933317184448},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.6113189458847046},{"id":"https://openalex.org/C4679612","wikidata":"https://www.wikidata.org/wiki/Q866298","display_name":"Aggregate (composite)","level":2,"score":0.6044210195541382},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5527054667472839},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5071675777435303},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4871372878551483},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.46956419944763184},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.44235488772392273},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3888500928878784},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.32798460125923157},{"id":"https://openalex.org/C159985019","wikidata":"https://www.wikidata.org/wiki/Q181790","display_name":"Composite material","level":1,"score":0.0},{"id":"https://openalex.org/C187736073","wikidata":"https://www.wikidata.org/wiki/Q2920921","display_name":"Management","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C192562407","wikidata":"https://www.wikidata.org/wiki/Q228736","display_name":"Materials science","level":0,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2023.3327853","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2023.3327853","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1173567262","display_name":"\u79fb\u52a8\u8bbe\u5907\u9762\u5411\u5b9e\u7528\u7684\u7528\u6237\u5730\u7406\u4f4d\u7f6e\u5b89\u5168\u4fdd\u62a4\u7814\u7a76","funder_award_id":"61972195","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4383894844","display_name":null,"funder_award_id":"62372226","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4524432182","display_name":null,"funder_award_id":"62002159","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6207416481","display_name":null,"funder_award_id":"BK20202001","funder_id":"https://openalex.org/F4320322769","funder_display_name":"Natural Science Foundation of Jiangsu Province"},{"id":"https://openalex.org/G7601562830","display_name":"\u591a\u65b9\u8054\u5408\u6df1\u5ea6\u5b66\u4e60\u4e2d\u7528\u6237\u6570\u636e\u9690\u79c1\u6cc4\u9732\u95ee\u9898\u7814\u7a76","funder_award_id":"61872176","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8354524175","display_name":"\u591a\u65b9\u5408\u4f5c\u8ba1\u7b97\u5e94\u7528\u4e2d\u7684\u5b9e\u7528\u9690\u79c1\u4fdd\u62a4\u673a\u5236\u7814\u7a76","funder_award_id":"61872179","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322769","display_name":"Natural Science Foundation of Jiangsu Province","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W1974314988","https://openalex.org/W1989898472","https://openalex.org/W2475334473","https://openalex.org/W2748789698","https://openalex.org/W2753783305","https://openalex.org/W2774423163","https://openalex.org/W2810065831","https://openalex.org/W2912213068","https://openalex.org/W2934843808","https://openalex.org/W2997591727","https://openalex.org/W3106646114","https://openalex.org/W3107337211","https://openalex.org/W3118608800","https://openalex.org/W3130421912","https://openalex.org/W3213008925","https://openalex.org/W4221146017","https://openalex.org/W4221152728","https://openalex.org/W4285821506","https://openalex.org/W4289147263","https://openalex.org/W4310630371","https://openalex.org/W4318619660","https://openalex.org/W4328053081","https://openalex.org/W6728757088","https://openalex.org/W6743581629","https://openalex.org/W6746897123","https://openalex.org/W6752600739","https://openalex.org/W6756436328","https://openalex.org/W6766978945","https://openalex.org/W6771533808","https://openalex.org/W6787972765","https://openalex.org/W6791120749","https://openalex.org/W6810057099","https://openalex.org/W6810931898","https://openalex.org/W6847259359"],"related_works":["https://openalex.org/W4320031223","https://openalex.org/W3015678314","https://openalex.org/W4281902577","https://openalex.org/W4200629851","https://openalex.org/W3009072493","https://openalex.org/W4386185023","https://openalex.org/W4317672133","https://openalex.org/W3140988292","https://openalex.org/W4386080799","https://openalex.org/W4309417370"],"abstract_inverted_index":{"Vertical":[0],"federated":[1],"learning":[2],"(VFL)":[3],"is":[4,20,69,129,178,207,295],"being":[5],"used":[6],"more":[7,9],"and":[8,99,131],"widely":[10],"in":[11,77,188],"industry.":[12],"One":[13],"of":[14,38,55,95,172,197,200,203,251,256],"its":[15,43,96,163],"most":[16],"common":[17],"application":[18],"scenarios":[19],"a":[21,24,56,82,108,137,152,157,167,198,232,252,260],"two-party":[22],"setting:":[23],"participant":[25,51,80],"(i.e.,":[26,52,91],"the":[27,32,53,88,92,104,114,119,127,141,145,173,195,211,220,225,248,290],"host),":[28],"who":[29,106],"exclusively":[30,222],"owns":[31],"labels":[33,196,221,244],"but":[34,245],"possesses":[35],"insufficient":[36],"number":[37,255],"features,":[39],"wants":[40],"to":[41,71,86,103,111,117,147,151,193,216,241,289,298],"improve":[42],"model":[44,85,110,143,291],"performance":[45],"by":[46,160,224],"combining":[47],"features":[48],"from":[49],"another":[50],"client)":[54],"different":[57],"business":[58],"group.":[59],"The":[60,267],"best":[61],"deep":[62],"ML":[63],"architecture":[64],"suits":[65],"for":[66,185],"this":[67,123,228],"scenario":[68],"considered":[70],"be":[72],"Split":[73],"Neural":[74],"Network":[75],"(SplitNN),":[76],"which":[78,206,237],"each":[79],"runs":[81,107],"self-defined":[83],"bottom":[84],"learn":[87],"hidden":[89],"representations":[90],"local":[93,97,115,164,249],"embeddings)":[94],"data":[98,182,234],"then":[100],"forwards":[101],"them":[102],"host,":[105],"top":[109,142],"aggregate":[112],"both":[113],"embeddings":[116,250],"produce":[118],"final":[120],"predicts.":[121],"In":[122],"paper,":[124],"we":[125,230],"assume":[126],"client":[128,212],"malicious":[130],"demonstrate":[132],"that":[133,273],"she/he":[134],"could":[135],"inject":[136],"stealthy":[138,296],"backdoor":[139,186],"into":[140],"during":[144,265],"training":[146],"misclassify":[148],"any":[149,243],"sample":[150],"pre-selected":[153],"target":[154],"class":[155],"with":[156,166,259],"high":[158,282],"probability":[159],"just":[161,246],"replacing":[162],"embedding":[165],"special":[168],"trigger":[169,263],"vector":[170,264],"regardless":[171],"host-side":[174],"embedding.":[175],"This":[176],"task":[177],"non-trivial":[179],"because":[180],"existing":[181],"poison":[183,235],"attacks":[184],"injection":[187],"traditional":[189],"models":[190],"usually":[191],"require":[192,240],"modify":[194,219,242],"set":[199],"trigger-tagged":[201],"samples":[202,258],"non-target":[204],"classes,":[205],"impossible":[208],"here":[209],"as":[210,281,283],"has":[213],"no":[214],"rights":[215],"access":[217],"or":[218],"owned":[223],"host.":[226],"Targeting":[227],"challenge,":[229],"propose":[231],"SplitNN-dedicated":[233],"attack":[236,275,279],"does":[238],"not":[239],"replaces":[247],"very":[253],"small":[254],"target-class":[257],"carefully":[261],"constructed":[262],"training.":[266],"experiments":[268],"on":[269],"four":[270],"datasets":[271],"show":[272],"our":[274],"can":[276],"achieve":[277],"an":[278],"rate":[280],"94%,":[284],"while":[285],"bringing":[286],"negligible":[287],"side-effects":[288],"accuracy.":[292],"Moreover,":[293],"it":[294],"enough":[297],"resist":[299],"various":[300],"anomaly":[301],"detection":[302],"methods.":[303]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":20},{"year":2024,"cited_by_count":4}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}