{"id":"https://openalex.org/W4416961239","doi":"https://doi.org/10.1109/tifs.2025.3639936","title":"PFL-ALP: Personalized Federated Learning Against Backdoor Attacks via Attention-Based Local Purification","display_name":"PFL-ALP: Personalized Federated Learning Against Backdoor Attacks via Attention-Based Local Purification","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4416961239","doi":"https://doi.org/10.1109/tifs.2025.3639936"},"language":null,"primary_location":{"id":"doi:10.1109/tifs.2025.3639936","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3639936","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5003608577","display_name":"Yifeng Jiang","orcid":"https://orcid.org/0000-0001-8739-1697"},"institutions":[{"id":"https://openalex.org/I49835588","display_name":"Macao Polytechnic University","ror":"https://ror.org/02sf5td35","country_code":"MO","type":"education","lineage":["https://openalex.org/I49835588"]}],"countries":["MO"],"is_corresponding":false,"raw_author_name":"Yifeng Jiang","raw_affiliation_strings":["Faculty of Applied Sciences, Macao Polytechnic University, Macau, SAR, China","Faculty of Applied Sciences, Macao Polytechnic University, Macao, SAR, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Applied Sciences, Macao Polytechnic University, Macau, SAR, China","institution_ids":["https://openalex.org/I49835588"]},{"raw_affiliation_string":"Faculty of Applied Sciences, Macao Polytechnic University, Macao, SAR, China","institution_ids":["https://openalex.org/I49835588"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051381076","display_name":"Xiaochen Yuan","orcid":"https://orcid.org/0000-0002-7490-6695"},"institutions":[{"id":"https://openalex.org/I49835588","display_name":"Macao Polytechnic University","ror":"https://ror.org/02sf5td35","country_code":"MO","type":"education","lineage":["https://openalex.org/I49835588"]}],"countries":["MO"],"is_corresponding":false,"raw_author_name":"Xiaochen Yuan","raw_affiliation_strings":["Faculty of Applied Sciences, Macao Polytechnic University, Macau, SAR, China","Faculty of Applied Sciences, Macao Polytechnic University, Macao, SAR, China"],"raw_orcid":"https://orcid.org/0000-0002-7490-6695","affiliations":[{"raw_affiliation_string":"Faculty of Applied Sciences, Macao Polytechnic University, Macau, SAR, China","institution_ids":["https://openalex.org/I49835588"]},{"raw_affiliation_string":"Faculty of Applied Sciences, Macao Polytechnic University, Macao, SAR, China","institution_ids":["https://openalex.org/I49835588"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101643168","display_name":"Weiwen Zhang","orcid":"https://orcid.org/0000-0002-5098-6459"},"institutions":[{"id":"https://openalex.org/I139024713","display_name":"Guangdong University of Technology","ror":"https://ror.org/04azbjn80","country_code":"CN","type":"education","lineage":["https://openalex.org/I139024713"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weiwen Zhang","raw_affiliation_strings":["School of Computer Science and Technology, Guangdong University of Technology, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-5098-6459","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Guangdong University of Technology, Guangzhou, China","institution_ids":["https://openalex.org/I139024713"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019419036","display_name":"Wei Ke","orcid":"https://orcid.org/0000-0003-0952-0961"},"institutions":[{"id":"https://openalex.org/I49835588","display_name":"Macao Polytechnic University","ror":"https://ror.org/02sf5td35","country_code":"MO","type":"education","lineage":["https://openalex.org/I49835588"]}],"countries":["MO"],"is_corresponding":false,"raw_author_name":"Wei Ke","raw_affiliation_strings":["Faculty of Applied Sciences, Macao Polytechnic University, Macau, SAR, China","Faculty of Applied Sciences, Macao Polytechnic University, Macao, SAR, China"],"raw_orcid":"https://orcid.org/0000-0003-0952-0961","affiliations":[{"raw_affiliation_string":"Faculty of Applied Sciences, Macao Polytechnic University, Macau, SAR, China","institution_ids":["https://openalex.org/I49835588"]},{"raw_affiliation_string":"Faculty of Applied Sciences, Macao Polytechnic University, Macao, SAR, China","institution_ids":["https://openalex.org/I49835588"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089368710","display_name":"Chan\u2013Tong Lam","orcid":"https://orcid.org/0000-0002-8022-7744"},"institutions":[{"id":"https://openalex.org/I49835588","display_name":"Macao Polytechnic University","ror":"https://ror.org/02sf5td35","country_code":"MO","type":"education","lineage":["https://openalex.org/I49835588"]}],"countries":["MO"],"is_corresponding":false,"raw_author_name":"Chan-Tong Lam","raw_affiliation_strings":["Faculty of Applied Sciences, Macao Polytechnic University, Macau, SAR, China","Faculty of Applied Sciences, Macao Polytechnic University, Macao, SAR, China"],"raw_orcid":"https://orcid.org/0000-0002-8022-7744","affiliations":[{"raw_affiliation_string":"Faculty of Applied Sciences, Macao Polytechnic University, Macau, SAR, China","institution_ids":["https://openalex.org/I49835588"]},{"raw_affiliation_string":"Faculty of Applied Sciences, Macao Polytechnic University, Macao, SAR, China","institution_ids":["https://openalex.org/I49835588"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022394682","display_name":"Sio\u2010Kei Im","orcid":"https://orcid.org/0000-0002-5599-4300"},"institutions":[{"id":"https://openalex.org/I49835588","display_name":"Macao Polytechnic University","ror":"https://ror.org/02sf5td35","country_code":"MO","type":"education","lineage":["https://openalex.org/I49835588"]}],"countries":["MO"],"is_corresponding":false,"raw_author_name":"Sio-Kei Im","raw_affiliation_strings":["Macao Polytechnic University, Macau, SAR, China","Macao Polytechnic University, Macau, S.A.R., China"],"raw_orcid":"https://orcid.org/0000-0002-5599-4300","affiliations":[{"raw_affiliation_string":"Macao Polytechnic University, Macau, SAR, China","institution_ids":["https://openalex.org/I49835588"]},{"raw_affiliation_string":"Macao Polytechnic University, Macau, S.A.R., China","institution_ids":["https://openalex.org/I49835588"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.19260623,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"20","issue":null,"first_page":"12995","last_page":"13010"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.7534999847412109,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.7534999847412109,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.054999999701976776,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.03350000083446503,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.805899977684021},{"id":"https://openalex.org/keywords/federated-learning","display_name":"Federated learning","score":0.6269000172615051},{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.6211000084877014},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5680000185966492},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.39910000562667847},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.37310001254081726},{"id":"https://openalex.org/keywords/data-modeling","display_name":"Data modeling","score":0.35339999198913574},{"id":"https://openalex.org/keywords/matching","display_name":"Matching (statistics)","score":0.3449000120162964}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8331000208854675},{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.805899977684021},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.6269000172615051},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.6211000084877014},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5680000185966492},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.39910000562667847},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.37310001254081726},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.35339999198913574},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.3449000120162964},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.33469998836517334},{"id":"https://openalex.org/C2777303404","wikidata":"https://www.wikidata.org/wiki/Q759757","display_name":"Convergence (economics)","level":2,"score":0.325300008058548},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.3224000036716461},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3199999928474426},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.31150001287460327},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.3091000020503998},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3075000047683716},{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.2888999879360199},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.27730000019073486},{"id":"https://openalex.org/C157764524","wikidata":"https://www.wikidata.org/wiki/Q1383412","display_name":"Throughput","level":3,"score":0.2745000123977661},{"id":"https://openalex.org/C112313634","wikidata":"https://www.wikidata.org/wiki/Q7886648","display_name":"Complement (music)","level":5,"score":0.26820001006126404},{"id":"https://openalex.org/C141513077","wikidata":"https://www.wikidata.org/wiki/Q378542","display_name":"Independent and identically distributed random variables","level":3,"score":0.2671999931335449},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.26080000400543213},{"id":"https://openalex.org/C774472","wikidata":"https://www.wikidata.org/wiki/Q6760393","display_name":"Margin (machine learning)","level":2,"score":0.251800000667572}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2025.3639936","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3639936","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1551300097","display_name":null,"funder_award_id":"RP/FCA-04/2024","funder_id":"https://openalex.org/F4320329146","funder_display_name":"Adama Science and Technology University"},{"id":"https://openalex.org/G4837994069","display_name":null,"funder_award_id":"0033/2023/RIA1","funder_id":"https://openalex.org/F4320321655","funder_display_name":"Science and Technology Development Fund"},{"id":"https://openalex.org/G5640106792","display_name":null,"funder_award_id":"0045/2022/A","funder_id":"https://openalex.org/F4320323893","funder_display_name":"Fundo para o Desenvolvimento das Ci\u00eancias e da Tecnologia"}],"funders":[{"id":"https://openalex.org/F4320321655","display_name":"Science and Technology Development Fund","ror":"https://ror.org/044vr6g03"},{"id":"https://openalex.org/F4320323893","display_name":"Fundo para o Desenvolvimento das Ci\u00eancias e da Tecnologia","ror":"https://ror.org/05vna4324"},{"id":"https://openalex.org/F4320329146","display_name":"Adama Science and Technology University","ror":"https://ror.org/02ccba128"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":37,"referenced_works":["https://openalex.org/W151377110","https://openalex.org/W1821462560","https://openalex.org/W1969009977","https://openalex.org/W1987971958","https://openalex.org/W2112796928","https://openalex.org/W2912213068","https://openalex.org/W2963456518","https://openalex.org/W3016632787","https://openalex.org/W3087391814","https://openalex.org/W3095915292","https://openalex.org/W3138153888","https://openalex.org/W3138597937","https://openalex.org/W4200245155","https://openalex.org/W4226061080","https://openalex.org/W4285554319","https://openalex.org/W4290948380","https://openalex.org/W4311081048","https://openalex.org/W4312252361","https://openalex.org/W4322576473","https://openalex.org/W4382469137","https://openalex.org/W4384499048","https://openalex.org/W4385187226","https://openalex.org/W4387359750","https://openalex.org/W4390871473","https://openalex.org/W4390874361","https://openalex.org/W4391620743","https://openalex.org/W4391769079","https://openalex.org/W4392477550","https://openalex.org/W4392904898","https://openalex.org/W4400075150","https://openalex.org/W4400681791","https://openalex.org/W4402264021","https://openalex.org/W4405304483","https://openalex.org/W4406794207","https://openalex.org/W4409311305","https://openalex.org/W4409364270","https://openalex.org/W4412396154"],"related_works":[],"abstract_inverted_index":{"Federated":[0,75],"learning":[1],"(FL)":[2],"enables":[3],"collaborative":[4],"model":[5,27,97,117,130,137],"training":[6],"with":[7,95,135,153,194,215],"local":[8],"data":[9,51,107],"privacy":[10,154],"preserving,":[11],"but":[12],"is":[13],"vulnerable":[14],"to":[15,28,54,68,156,181,200],"backdoor":[16,178],"attacks":[17,22,179],"from":[18,198],"malicious":[19,30,195],"clients.":[20],"These":[21],"can":[23,203],"manipulate":[24],"the":[25,109,115,119,140,205,216],"global":[26],"produce":[29],"output":[31],"when":[32],"encountering":[33],"specific":[34],"triggers.":[35],"Existing":[36],"defenses,":[37],"categorized":[38],"as":[39,47],"server-side":[40,88],"and":[41,57,61,91,112,132,168],"client-side":[42,92],"approaches,":[43],"have":[44],"limitations":[45],"such":[46],"reliance":[48],"on":[49,108,118],"auxiliary":[50],"availability,":[52],"susceptibility":[53],"inference":[55,158],"attacks,":[56],"instability":[58],"under":[59],"non-independent":[60],"identically":[62],"distributed":[63],"(Non-IID)":[64],"data.":[65],"In":[66],"response":[67],"these":[69],"challenges,":[70],"we":[71,123,161],"propose":[72],"a":[73,83,163],"Personalized":[74],"Learning":[76],"via":[77],"Attention-based":[78],"Local":[79],"Purification":[80],"(PFL-ALP)":[81],"algorithm,":[82],"hybrid":[84],"defense":[85],"mechanism":[86],"integrating":[87],"dynamic":[89],"clustering":[90],"purification":[93,131],"enhanced":[94],"personalized":[96,136],"knowledge.":[98],"This":[99,148],"approach":[100],"effectively":[101],"mitigates":[102],"bias":[103],"introduced":[104],"by":[105,209],"Non-IID":[106,145],"server":[110],"side":[111],"further":[113],"purifies":[114],"backdoored":[116],"client":[120],"side.":[121],"Specifically,":[122],"employ":[124],"neural":[125],"attention":[126],"distillation":[127],"(NAD)":[128],"for":[129,166],"enhance":[133],"it":[134],"knowledge,":[138],"extending":[139],"effectiveness":[141],"of":[142],"NAD":[143],"in":[144,174,218],"FL":[146],"settings.":[147],"design":[149],"makes":[150],"PFL-ALP":[151,167,202],"compatible":[152],"protocols":[155],"mitigate":[157],"attacks.":[159],"Moreover,":[160],"establish":[162],"convergence":[164],"guarantee":[165],"experimentally":[169],"validate":[170],"its":[171],"superior":[172],"performance":[173],"defending":[175],"against":[176],"various":[177],"compared":[180],"multiple":[182],"state-of-the-art":[183],"(SOTA)":[184],"defenses":[185],"across":[186],"three":[187],"datasets.":[188],"The":[189],"results":[190],"show":[191],"that":[192],"even":[193],"rates":[196],"ranging":[197],"30%":[199],"90%,":[201],"reduce":[204],"attack":[206],"success":[207],"rate":[208],"more":[210],"than":[211,223],"69.4":[212],"percentage":[213,225],"points,":[214],"reduction":[217],"main":[219],"task":[220],"accuracy":[221],"less":[222],"12.4":[224],"points.":[226]},"counts_by_year":[],"updated_date":"2025-12-13T23:11:00.310470","created_date":"2025-12-03T00:00:00"}
