{"id":"https://openalex.org/W4392121135","doi":"https://doi.org/10.1145/3649316","title":"BapFL: You can Backdoor Personalized Federated Learning","display_name":"BapFL: You can Backdoor Personalized Federated Learning","publication_year":2024,"publication_date":"2024-02-23","ids":{"openalex":"https://openalex.org/W4392121135","doi":"https://doi.org/10.1145/3649316"},"language":"en","primary_location":{"id":"doi:10.1145/3649316","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3649316","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3649316","source":{"id":"https://openalex.org/S41523882","display_name":"ACM Transactions on Knowledge Discovery from Data","issn_l":"1556-4681","issn":["1556-4681","1556-472X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Knowledge Discovery from Data","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3649316","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5051708679","display_name":"Tiandi Ye","orcid":"https://orcid.org/0000-0003-0169-457X"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tiandi Ye","raw_affiliation_strings":["School of Data Science and Engineering, East China Normal University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0003-0169-457X","affiliations":[{"raw_affiliation_string":"School of Data Science and Engineering, East China Normal University, Shanghai, China","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114734448","display_name":"Cen Chen","orcid":"https://orcid.org/0000-0003-0325-1705"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Cen Chen","raw_affiliation_strings":["School of Data Science and Engineering & KLATASDS-MOE, East China Normal University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0003-0325-1705","affiliations":[{"raw_affiliation_string":"School of Data Science and Engineering & KLATASDS-MOE, East China Normal University, Shanghai, China","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069108602","display_name":"Yinggui Wang","orcid":"https://orcid.org/0000-0002-6686-6603"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yinggui Wang","raw_affiliation_strings":["Ant Group, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-6686-6603","affiliations":[{"raw_affiliation_string":"Ant Group, Beijing, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026630522","display_name":"Xiang Li","orcid":"https://orcid.org/0000-0003-0945-145X"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiang Li","raw_affiliation_strings":["School of Data Science and Engineering, East China Normal University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0003-0945-145X","affiliations":[{"raw_affiliation_string":"School of Data Science and Engineering, East China Normal University, Shanghai, China","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101472135","display_name":"Ming Gao","orcid":"https://orcid.org/0000-0002-5603-2680"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ming Gao","raw_affiliation_strings":["School of Data Science and Engineering & KLATASDS-MOE, East China Normal University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-5603-2680","affiliations":[{"raw_affiliation_string":"School of Data Science and Engineering & KLATASDS-MOE, East China Normal University, Shanghai, China","institution_ids":["https://openalex.org/I66867065"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.8899,"has_fulltext":true,"cited_by_count":14,"citation_normalized_percentile":{"value":0.93992743,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":"18","issue":"7","first_page":"1","last_page":"17"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9794999957084656,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9938100576400757},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7546851634979248},{"id":"https://openalex.org/keywords/federated-learning","display_name":"Federated learning","score":0.6654217839241028},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.5833746194839478},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5364537835121155},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.49429965019226074},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4640682339668274},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.45550867915153503},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.38406288623809814}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9938100576400757},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7546851634979248},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.6654217839241028},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.5833746194839478},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5364537835121155},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.49429965019226074},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4640682339668274},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.45550867915153503},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.38406288623809814},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3649316","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3649316","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3649316","source":{"id":"https://openalex.org/S41523882","display_name":"ACM Transactions on Knowledge Discovery from Data","issn_l":"1556-4681","issn":["1556-4681","1556-472X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Knowledge Discovery from Data","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3649316","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3649316","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3649316","source":{"id":"https://openalex.org/S41523882","display_name":"ACM Transactions on Knowledge Discovery from Data","issn_l":"1556-4681","issn":["1556-4681","1556-472X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Knowledge Discovery from Data","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.6100000143051147}],"awards":[{"id":"https://openalex.org/G1064312440","display_name":null,"funder_award_id":"62202170, 62377012","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8914462144","display_name":null,"funder_award_id":"62202170","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322370","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67"},{"id":"https://openalex.org/F4320322724","display_name":"Ministry of Education, India","ror":"https://ror.org/048xjjh50"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4392121135.pdf","grobid_xml":"https://content.openalex.org/works/W4392121135.grobid-xml"},"referenced_works_count":32,"referenced_works":["https://openalex.org/W1686810756","https://openalex.org/W2112796928","https://openalex.org/W2750384547","https://openalex.org/W2752689052","https://openalex.org/W2942091739","https://openalex.org/W2963819344","https://openalex.org/W2990595670","https://openalex.org/W2990789643","https://openalex.org/W2995022099","https://openalex.org/W3007548213","https://openalex.org/W3010262580","https://openalex.org/W3034163621","https://openalex.org/W3035668299","https://openalex.org/W3038022836","https://openalex.org/W3041107652","https://openalex.org/W3042368254","https://openalex.org/W3080934299","https://openalex.org/W3106047871","https://openalex.org/W3124293845","https://openalex.org/W3129603732","https://openalex.org/W3133814152","https://openalex.org/W4285071899","https://openalex.org/W4285762978","https://openalex.org/W4285876308","https://openalex.org/W4306317741","https://openalex.org/W4319323572","https://openalex.org/W4385567869","https://openalex.org/W4385749738","https://openalex.org/W6759238902","https://openalex.org/W6774857738","https://openalex.org/W6898611122","https://openalex.org/W7028611299"],"related_works":["https://openalex.org/W4320031223","https://openalex.org/W4200629851","https://openalex.org/W4281902577","https://openalex.org/W4309417370","https://openalex.org/W4292107232","https://openalex.org/W3009072493","https://openalex.org/W4386080799","https://openalex.org/W3140988292","https://openalex.org/W4394671520","https://openalex.org/W3128233162"],"abstract_inverted_index":{"In":[0],"federated":[1,39,73],"learning":[2,40,74],"(FL),":[3],"malicious":[4,139,164],"clients":[5,44,140,159,165],"could":[6],"manipulate":[7],"the":[8,11,22,37,64,71,90,135,150,168,192,197,203,212,225,234,253,256],"predictions":[9],"of":[10,24,67,126,149,211,227,236,255],"trained":[12],"model":[13,83],"through":[14,205],"backdoor":[15,32,68,104,122],"attacks,":[16],"posing":[17],"a":[18,48,81,177,248],"significant":[19,249],"threat":[20,250],"to":[21,46,121,134,208,262],"security":[23],"FL":[25],"systems.":[26],"Existing":[27],"research":[28,265],"primarily":[29],"focuses":[30],"on":[31,85,217,266],"attacks":[33,69],"and":[34,141,160,200,242,268],"defenses":[35],"within":[36,70],"generic":[38],"scenario,":[41,76],"where":[42,77],"all":[43],"collaborate":[45],"train":[47],"single":[49],"global":[50],"model.":[51],"A":[52],"recent":[53],"study":[54,91],"conducted":[55],"by":[56,163],"Qin":[57],"et":[58],"al.":[59],"[":[60],"24":[61],"]":[62],"marks":[63],"initial":[65],"exploration":[66],"personalized":[72,82],"(pFL)":[75],"each":[78],"client":[79],"constructs":[80],"based":[84],"its":[86],"local":[87],"data.":[88],"Notably,":[89],"demonstrates":[92],"that":[93,112,210,244],"pFL":[94,113,127,272],"methods":[95,114,128,241],"with":[96,115,129],"parameter":[97,116,130],"decoupling":[98,117,131],"can":[99],"significantly":[100],"enhance":[101],"robustness":[102],"against":[103],"attacks.":[105,123],"However,":[106],"in":[107,252,271],"this":[108],"article,":[109],"we":[110,175,232],"whistleblow":[111],"are":[118],"still":[119,246],"vulnerable":[120],"The":[124,274],"resistance":[125],"is":[132,276],"attributed":[133],"heterogeneous":[136,151],"classifiers":[137],"between":[138],"benign":[142,213],"counterparts.":[143],"We":[144,260],"analyze":[145],"two":[146,184],"direct":[147],"causes":[148],"classifiers:":[152],"(1)":[153,189],"data":[154,169],"heterogeneity":[155],"inherently":[156],"exists":[157],"among":[158],"(2)":[161,201],"poisoning":[162,190],"further":[166,264],"exacerbates":[167],"heterogeneity.":[170],"To":[171],"address":[172],"these":[173],"issues,":[174],"propose":[176],"two-pronged":[178],"attack":[179,267],"method,":[180],"BapFL,":[181],"which":[182],"comprises":[183],"simple":[185],"yet":[186],"effective":[187],"strategies:":[188],"only":[191],"feature":[193],"encoder":[194],"while":[195],"keeping":[196],"classifier":[198,204],"fixed":[199],"diversifying":[202],"noise":[206],"introduction":[207],"simulate":[209],"clients.":[214],"Extensive":[215],"experiments":[216],"three":[218],"benchmark":[219],"datasets":[220],"under":[221],"varying":[222],"conditions":[223],"demonstrate":[224],"effectiveness":[226,235],"our":[228],"proposed":[229],"attack.":[230],"Additionally,":[231],"evaluate":[233],"six":[237],"widely":[238],"used":[239],"defense":[240,269],"find":[243],"BapFL":[245],"poses":[247],"even":[251],"presence":[254],"best":[257],"defense,":[258],"Multi-Krum.":[259],"hope":[261],"inspire":[263],"strategies":[270],"scenarios.":[273],"code":[275],"available":[277],"at:":[278],"https://github.com/BapFL/code":[279]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":2}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2024-02-24T00:00:00"}