{"id":"https://openalex.org/W4414909306","doi":"https://doi.org/10.1109/icdcs63083.2025.00049","title":"FLdetox: Detoxify Persistent Backdoors in Federated Learning","display_name":"FLdetox: Detoxify Persistent Backdoors in Federated Learning","publication_year":2025,"publication_date":"2025-07-21","ids":{"openalex":"https://openalex.org/W4414909306","doi":"https://doi.org/10.1109/icdcs63083.2025.00049"},"language":"en","primary_location":{"id":"doi:10.1109/icdcs63083.2025.00049","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icdcs63083.2025.00049","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 45th International Conference on Distributed Computing Systems (ICDCS)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5085284640","display_name":"Wenjuan Tang","orcid":"https://orcid.org/0000-0001-9252-2575"},"institutions":[{"id":"https://openalex.org/I16609230","display_name":"Hunan University","ror":"https://ror.org/05htk5m33","country_code":"CN","type":"education","lineage":["https://openalex.org/I16609230"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Wenjuan Tang","raw_affiliation_strings":["Hunan University,ChangSha,China"],"affiliations":[{"raw_affiliation_string":"Hunan University,ChangSha,China","institution_ids":["https://openalex.org/I16609230"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102954206","display_name":"Chenkai Liu","orcid":"https://orcid.org/0000-0002-1841-4223"},"institutions":[{"id":"https://openalex.org/I16609230","display_name":"Hunan University","ror":"https://ror.org/05htk5m33","country_code":"CN","type":"education","lineage":["https://openalex.org/I16609230"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chenkai Liu","raw_affiliation_strings":["Hunan University,ChangSha,China"],"affiliations":[{"raw_affiliation_string":"Hunan University,ChangSha,China","institution_ids":["https://openalex.org/I16609230"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019943830","display_name":"Yutong Jiang","orcid":"https://orcid.org/0000-0001-6558-4201"},"institutions":[{"id":"https://openalex.org/I16609230","display_name":"Hunan University","ror":"https://ror.org/05htk5m33","country_code":"CN","type":"education","lineage":["https://openalex.org/I16609230"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yutong Jiang","raw_affiliation_strings":["Hunan University,ChangSha,China"],"affiliations":[{"raw_affiliation_string":"Hunan University,ChangSha,China","institution_ids":["https://openalex.org/I16609230"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103004802","display_name":"Jianan Zhao","orcid":"https://orcid.org/0000-0002-9743-7588"},"institutions":[{"id":"https://openalex.org/I16609230","display_name":"Hunan University","ror":"https://ror.org/05htk5m33","country_code":"CN","type":"education","lineage":["https://openalex.org/I16609230"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianan Zhao","raw_affiliation_strings":["Hunan University,ChangSha,China"],"affiliations":[{"raw_affiliation_string":"Hunan University,ChangSha,China","institution_ids":["https://openalex.org/I16609230"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5089450416","display_name":"Peng Sun","orcid":"https://orcid.org/0000-0001-6221-8142"},"institutions":[{"id":"https://openalex.org/I16609230","display_name":"Hunan University","ror":"https://ror.org/05htk5m33","country_code":"CN","type":"education","lineage":["https://openalex.org/I16609230"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peng Sun","raw_affiliation_strings":["Hunan University,ChangSha,China"],"affiliations":[{"raw_affiliation_string":"Hunan University,ChangSha,China","institution_ids":["https://openalex.org/I16609230"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5085284640"],"corresponding_institution_ids":["https://openalex.org/I16609230"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.14295838,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"428","last_page":"438"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.8440999984741211,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.8440999984741211,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9866999983787537},{"id":"https://openalex.org/keywords/federated-learning","display_name":"Federated learning","score":0.4016000032424927},{"id":"https://openalex.org/keywords/decoy","display_name":"Decoy","score":0.3400000035762787},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.3122999966144562},{"id":"https://openalex.org/keywords/differential-privacy","display_name":"Differential privacy","score":0.3075000047683716}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9866999983787537},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7573999762535095},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.593999981880188},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.4016000032424927},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3971000015735626},{"id":"https://openalex.org/C2779179475","wikidata":"https://www.wikidata.org/wiki/Q3545649","display_name":"Decoy","level":3,"score":0.3400000035762787},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.3122999966144562},{"id":"https://openalex.org/C23130292","wikidata":"https://www.wikidata.org/wiki/Q5275358","display_name":"Differential privacy","level":2,"score":0.3075000047683716},{"id":"https://openalex.org/C774472","wikidata":"https://www.wikidata.org/wiki/Q6760393","display_name":"Margin (machine learning)","level":2,"score":0.2612999975681305},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.24770000576972961}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icdcs63083.2025.00049","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icdcs63083.2025.00049","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 45th International Conference on Distributed Computing Systems (ICDCS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W151377110","https://openalex.org/W2194775991","https://openalex.org/W2934843808","https://openalex.org/W2942091739","https://openalex.org/W3015135076","https://openalex.org/W3087391814","https://openalex.org/W4221129260","https://openalex.org/W4288057793","https://openalex.org/W4382051836","https://openalex.org/W4382237486","https://openalex.org/W4382469137","https://openalex.org/W4385187226","https://openalex.org/W4385679828","https://openalex.org/W4385679845","https://openalex.org/W4390871473","https://openalex.org/W4391724758","https://openalex.org/W4393161237","https://openalex.org/W4402264021","https://openalex.org/W4403937513"],"related_works":[],"abstract_inverted_index":{"Recent":[0],"advanced":[1],"persistent":[2,51,86,148],"backdoor":[3,105],"attacks":[4,128],"pose":[5],"a":[6,26,80],"serious":[7],"security":[8],"challenge":[9],"for":[10],"federated":[11],"learning,":[12],"allowing":[13],"backdoors":[14,87,117],"to":[15,84],"be":[16],"injected":[17],"into":[18],"the":[19,30,64,95,99,144,161],"global":[20,131],"model":[21,72],"with":[22],"lifespans":[23],"of":[24,66,98,146,160],"nearly":[25],"thousand":[27],"rounds":[28],"after":[29],"attack":[31],"ceases.":[32],"Existing":[33],"anomaly":[34],"detection-based":[35],"defenses":[36,54],"can":[37],"effectively":[38,139],"detect":[39],"abnormal":[40],"client":[41],"models,":[42],"but":[43,68],"are":[44],"limited":[45],"in":[46],"actively":[47],"eliminating":[48],"already":[49,115],"implanted":[50,116],"backdoors.":[52],"Other":[53],"such":[55],"as":[56],"norm":[57],"clipping":[58,110],"and":[59,111,122,141,154],"differential":[60],"privacy":[61],"could":[62],"shorten":[63],"lifespan":[65],"backdoors,":[67,149],"they":[69],"would":[70],"affect":[71],"performance.":[73],"In":[74],"this":[75],"work,":[76],"we":[77],"propose":[78],"FLdetox,":[79],"multi-layered":[81],"defensive":[82],"framework":[83],"detoxify":[85],"without":[88],"relying":[89],"on":[90],"auxiliary":[91],"datasets":[92],"while":[93,156],"guaranteeing":[94],"desirable":[96],"performance":[97,159],"main":[100,162],"task.":[101,163],"Specifically,":[102],"FLdetox":[103,138],"slows":[104],"implantation":[106,145],"speed":[107],"through":[108,129],"fine-grained":[109],"weight":[112],"freezing,":[113],"eliminates":[114,143],"by":[118],"retraining":[119],"stable":[120],"weights,":[121],"hinders":[123],"attackers":[124],"from":[125],"optimizing":[126],"their":[127],"decoy":[130],"models.":[132],"Extensive":[133],"experimental":[134],"results":[135],"validate":[136],"that,":[137],"prevents":[140],"rapidly":[142],"state-of-the-art":[147],"including":[150],"Neurotoxin,":[151],"DBA,":[152],"F3BA,":[153],"A3FL":[155],"maintaining":[157],"high":[158]},"counts_by_year":[],"updated_date":"2026-04-09T08:11:56.329763","created_date":"2025-10-10T00:00:00"}