{"id":"https://openalex.org/W4416961082","doi":"https://doi.org/10.1109/tifs.2025.3639885","title":"Catch Me If You Can: Retain High Stealthiness and Durability of Backdoor Attack in Federated Learning","display_name":"Catch Me If You Can: Retain High Stealthiness and Durability of Backdoor Attack in Federated Learning","publication_year":2025,"publication_date":"2025-12-03","ids":{"openalex":"https://openalex.org/W4416961082","doi":"https://doi.org/10.1109/tifs.2025.3639885"},"language":null,"primary_location":{"id":"doi:10.1109/tifs.2025.3639885","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3639885","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5041981472","display_name":"Yilong Yang","orcid":"https://orcid.org/0000-0002-2811-2667"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yilong Yang","raw_affiliation_strings":["School of Artificial Intelligence, Xidian University, Xi’an, China"],"raw_orcid":"https://orcid.org/0000-0002-2811-2667","affiliations":[{"raw_affiliation_string":"School of Artificial Intelligence, Xidian University, Xi’an, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010848802","display_name":"Xinjing Liu","orcid":"https://orcid.org/0000-0003-0159-0594"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinjing Liu","raw_affiliation_strings":["School of Cyber Engineering, Xidian University, Xi’an, China"],"raw_orcid":"https://orcid.org/0000-0003-0159-0594","affiliations":[{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xi’an, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Zefeng Wu","orcid":"https://orcid.org/0009-0005-0383-2624"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zefeng Wu","raw_affiliation_strings":["School of Cyber Engineering, Xidian University, Xi’an, China"],"raw_orcid":"https://orcid.org/0009-0005-0383-2624","affiliations":[{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xi’an, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056761518","display_name":"Zhuoran Ma","orcid":"https://orcid.org/0000-0002-9476-6386"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhuoran Ma","raw_affiliation_strings":["School of Cyber Engineering, Xidian University, Xi’an, China"],"raw_orcid":"https://orcid.org/0000-0002-9476-6386","affiliations":[{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xi’an, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101932355","display_name":"Yong Zeng","orcid":"https://orcid.org/0000-0003-2551-7009"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yong Zeng","raw_affiliation_strings":["School of Cyber Engineering, Xidian University, Xi’an, China"],"raw_orcid":"https://orcid.org/0000-0003-2551-7009","affiliations":[{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xi’an, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087289367","display_name":"Xianjia Meng","orcid":"https://orcid.org/0000-0003-4485-457X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xianjia Meng","raw_affiliation_strings":["School of Information Science and Technology, Northwestern University, Xi’an, China"],"raw_orcid":"https://orcid.org/0000-0003-4485-457X","affiliations":[{"raw_affiliation_string":"School of Information Science and Technology, Northwestern University, Xi’an, China","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5015787649","display_name":"Zhuo Ma","orcid":"https://orcid.org/0000-0001-6023-2864"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhuo Ma","raw_affiliation_strings":["School of Cyber Engineering, Xidian University, Xi’an, China"],"raw_orcid":"https://orcid.org/0000-0001-6023-2864","affiliations":[{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xi’an, China","institution_ids":["https://openalex.org/I149594827"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.13018957,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"21","issue":null,"first_page":"710","last_page":"724"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.8251000046730042,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.8251000046730042,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.08500000089406967,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.016100000590085983,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9873999953269958},{"id":"https://openalex.org/keywords/metric","display_name":"Metric (unit)","score":0.49880000948905945},{"id":"https://openalex.org/keywords/stability","display_name":"Stability (learning theory)","score":0.4986000061035156},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.4726000130176544},{"id":"https://openalex.org/keywords/evasion","display_name":"Evasion (ethics)","score":0.4577000141143799},{"id":"https://openalex.org/keywords/blacklisting","display_name":"Blacklisting","score":0.4099999964237213},{"id":"https://openalex.org/keywords/attack-model","display_name":"Attack model","score":0.34610000252723694},{"id":"https://openalex.org/keywords/boosting","display_name":"Boosting (machine learning)","score":0.33889999985694885},{"id":"https://openalex.org/keywords/survivability","display_name":"Survivability","score":0.3327000141143799}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9873999953269958},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7835999727249146},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6607999801635742},{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.49880000948905945},{"id":"https://openalex.org/C112972136","wikidata":"https://www.wikidata.org/wiki/Q7595718","display_name":"Stability (learning theory)","level":2,"score":0.4986000061035156},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.4726000130176544},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.4577000141143799},{"id":"https://openalex.org/C2779797433","wikidata":"https://www.wikidata.org/wiki/Q632959","display_name":"Blacklisting","level":2,"score":0.4099999964237213},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.34610000252723694},{"id":"https://openalex.org/C46686674","wikidata":"https://www.wikidata.org/wiki/Q466303","display_name":"Boosting (machine learning)","level":2,"score":0.33889999985694885},{"id":"https://openalex.org/C2781133158","wikidata":"https://www.wikidata.org/wiki/Q1088669","display_name":"Survivability","level":2,"score":0.3327000141143799},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.322299987077713},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.3147999942302704},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3127000033855438},{"id":"https://openalex.org/C104304963","wikidata":"https://www.wikidata.org/wiki/Q5316114","display_name":"Durability","level":2,"score":0.296999990940094},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.2825999855995178},{"id":"https://openalex.org/C2776654903","wikidata":"https://www.wikidata.org/wiki/Q2601463","display_name":"SAFER","level":2,"score":0.28060001134872437},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2721000015735626},{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.27129998803138733},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.2680000066757202},{"id":"https://openalex.org/C2776036281","wikidata":"https://www.wikidata.org/wiki/Q48769818","display_name":"Constraint (computer-aided design)","level":2,"score":0.26409998536109924},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.2603999972343445},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.259799987077713},{"id":"https://openalex.org/C147764199","wikidata":"https://www.wikidata.org/wiki/Q6865248","display_name":"Minification","level":2,"score":0.25949999690055847},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.25}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2025.3639885","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3639885","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1323945101","display_name":null,"funder_award_id":"62261160651","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2215088380","display_name":null,"funder_award_id":"U23A20307","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3590900494","display_name":null,"funder_award_id":"62276211","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4920634705","display_name":null,"funder_award_id":"62302361","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5420252985","display_name":null,"funder_award_id":"B16037","funder_id":"https://openalex.org/F4320336698","funder_display_name":"Overseas Expertise Introduction Center for Discipline Innovation of Food Nutrition and Human Health (111 Center)"},{"id":"https://openalex.org/G5786452238","display_name":null,"funder_award_id":"U23A20306","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7077580569","display_name":null,"funder_award_id":"62436002","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G746094661","display_name":null,"funder_award_id":"62501444","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320336698","display_name":"Overseas Expertise Introduction Center for Discipline Innovation of Food Nutrition and Human Health (111 Center)","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W1979019425","https://openalex.org/W2034996255","https://openalex.org/W2112796928","https://openalex.org/W2194775991","https://openalex.org/W2501101982","https://openalex.org/W2560647685","https://openalex.org/W2807363941","https://openalex.org/W2934843808","https://openalex.org/W2942091739","https://openalex.org/W2996800219","https://openalex.org/W3138597937","https://openalex.org/W3175919946","https://openalex.org/W4213446860","https://openalex.org/W4290948380","https://openalex.org/W4295806247","https://openalex.org/W4382237486","https://openalex.org/W4382463479","https://openalex.org/W4382469137","https://openalex.org/W4385187226","https://openalex.org/W4385327089","https://openalex.org/W4389279128","https://openalex.org/W4390806820","https://openalex.org/W4392931300","https://openalex.org/W4393161237","https://openalex.org/W4401023895","https://openalex.org/W4402215177"],"related_works":[],"abstract_inverted_index":{"Federated":[0],"Learning":[1],"(FL)":[2],"is":[3,185],"vulnerable":[4],"to":[5,17,30,62,94,130],"backdoor":[6,35,102,181],"attacks":[7,36,103],"by":[8,69,146],"design":[9],"since":[10],"it":[11],"cannot":[12],"inspect":[13],"clients\u2019":[14],"local":[15],"data":[16],"protect":[18],"their":[19,64],"privacy.":[20],"This":[21],"privacy-preserving":[22],"feature":[23],"creates":[24],"an":[25,89,121,140],"opportunity":[26],"for":[27,124],"malicious":[28,48,125,151,157],"clients":[29],"introduce":[31],"backdoors.":[32],"However,":[33],"existing":[34],"face":[37],"two":[38],"main":[39],"limitations.":[40],"First,":[41],"brute":[42],"amplification":[43,144],"(i.e.,":[44],"uniformly":[45],"scaling":[46],"up":[47],"parameters)":[49],"can":[50],"be":[51],"easily":[52],"detected,":[53],"hence":[54],"compromising":[55],"attack":[56,78],"stealthiness.":[57],"Second,":[58],"evasion":[59],"strategies":[60],"employed":[61],"prevent":[63],"backdoors":[65],"from":[66],"being":[67],"overwritten":[68],"benign":[70,161],"updates":[71,158],"are":[72],"frequently":[73],"ineffective,":[74],"reducing":[75],"the":[76,97,134,148,174],"overall":[77],"stability":[79,116],"upon":[80],"model":[81],"deployment.":[82],"To":[83,137],"address":[84],"these":[85],"limitations,":[86],"we":[87],"propose":[88],"adaptive":[90],"proactive":[91],"boosting":[92],"strategy":[93],"enhance":[95],"both":[96],"stealthiness":[98],"and":[99,152,169],"durability":[100],"of":[101,118],"in":[104],"FL.":[105],"As":[106],"a":[107,110,160],"concrete":[108],"example,ReBAintroduces":[109],"durable":[111],"importance":[112],"metric":[113],"based":[114],"on":[115,166],"degrees":[117],"parameters":[119,132],"as":[120],"update":[122,135],"mask":[123],"attackers,":[126],"assigning":[127],"higher":[128],"weights":[129],"backdoor-related":[131],"during":[133],"process.":[136],"ensure":[138],"stealthiness,ReBAformulates":[139],"optimization":[141],"problem":[142],"regarding":[143],"factor":[145],"minimizing":[147],"distance":[149,162],"between":[150],"clean":[153],"updates,":[154],"thereby":[155],"correcting":[156],"within":[159],"space.":[163],"Extensive":[164],"evaluations":[165],"3":[167],"datasets":[168],"across":[170],"14":[171],"defenses":[172],"demonstrate":[173],"efficacy":[175],"ofReBA,":[176],"outperforming":[177],"over":[178],"12":[179],"baseline":[180],"attacks.":[182],"Our":[183],"code":[184],"available":[186],"at":[187],"https://anonymous.4open.science/r/ReBA-D82F.":[188]},"counts_by_year":[],"updated_date":"2026-08-13T07:04:57.449891","created_date":"2025-12-03T00:00:00"}