{"id":"https://openalex.org/W4416549506","doi":"https://doi.org/10.1145/3719027.3744805","title":"Sylva: Tailoring Personalized Adversarial Defense in Pre-trained Models via Collaborative Fine-tuning","display_name":"Sylva: Tailoring Personalized Adversarial Defense in Pre-trained Models via Collaborative Fine-tuning","publication_year":2025,"publication_date":"2025-11-19","ids":{"openalex":"https://openalex.org/W4416549506","doi":"https://doi.org/10.1145/3719027.3744805"},"language":null,"primary_location":{"id":"doi:10.1145/3719027.3744805","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3719027.3744805","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5070042485","display_name":"Tianyu Qi","orcid":"https://orcid.org/0000-0001-5484-985X"},"institutions":[{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tianyu Qi","raw_affiliation_strings":["Sun Yat-sen University, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0001-5484-985X","affiliations":[{"raw_affiliation_string":"Sun Yat-sen University, Shenzhen, China","institution_ids":["https://openalex.org/I157773358"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071512410","display_name":"Lei Xue","orcid":"https://orcid.org/0000-0001-5321-5740"},"institutions":[{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lei Xue","raw_affiliation_strings":["Sun Yat-sen University, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0001-5321-5740","affiliations":[{"raw_affiliation_string":"Sun Yat-sen University, Shenzhen, China","institution_ids":["https://openalex.org/I157773358"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058268261","display_name":"Yufeng Zhan","orcid":"https://orcid.org/0000-0002-4528-1489"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yufeng Zhan","raw_affiliation_strings":["Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-4528-1489","affiliations":[{"raw_affiliation_string":"Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5003951925","display_name":"Xiaobo Ma","orcid":"https://orcid.org/0000-0002-0934-5035"},"institutions":[{"id":"https://openalex.org/I87445476","display_name":"Xi'an Jiaotong University","ror":"https://ror.org/017zhmm22","country_code":"CN","type":"education","lineage":["https://openalex.org/I87445476"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaobo Ma","raw_affiliation_strings":["Xi'an Jiaotong University, Xi'an, China"],"raw_orcid":"https://orcid.org/0000-0002-0934-5035","affiliations":[{"raw_affiliation_string":"Xi'an Jiaotong University, Xi'an, China","institution_ids":["https://openalex.org/I87445476"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.33671051,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1679","last_page":"1693"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6973000168800354,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6973000168800354,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.2053000032901764,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.00800000037997961,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8859999775886536},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.8054999709129333},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.6107000112533569},{"id":"https://openalex.org/keywords/upload","display_name":"Upload","score":0.5963000059127808},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.31040000915527344},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.2989000082015991}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8859999775886536},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.8054999709129333},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6851000189781189},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.6107000112533569},{"id":"https://openalex.org/C71901391","wikidata":"https://www.wikidata.org/wiki/Q7126699","display_name":"Upload","level":2,"score":0.5963000059127808},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3573000133037567},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.34790000319480896},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.34540000557899475},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.34299999475479126},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.32850000262260437},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.31040000915527344},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.2989000082015991},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.29429998993873596},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.28619998693466187},{"id":"https://openalex.org/C138236772","wikidata":"https://www.wikidata.org/wiki/Q25098575","display_name":"Edge device","level":3,"score":0.26570001244544983}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3719027.3744805","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3719027.3744805","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G8037786011","display_name":null,"funder_award_id":"2023-JC-JQ-50","funder_id":"https://openalex.org/F4320336567","funder_display_name":"Natural Science Basic Research Program of Shaanxi Province"},{"id":"https://openalex.org/G8988060895","display_name":null,"funder_award_id":"62473047, U23A20332, 62272381, 623B2081, 62372490, W2412110","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320336567","display_name":"Natural Science Basic Research Program of Shaanxi Province","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W2060393849","https://openalex.org/W2117539524","https://openalex.org/W2117876524","https://openalex.org/W2194775991","https://openalex.org/W2765424254","https://openalex.org/W2964152294","https://openalex.org/W3001989995","https://openalex.org/W3034537217","https://openalex.org/W3132107458","https://openalex.org/W3138153888","https://openalex.org/W3189812816","https://openalex.org/W3204009762","https://openalex.org/W3212079419","https://openalex.org/W4210309948","https://openalex.org/W4226047321","https://openalex.org/W4286375442","https://openalex.org/W4296596384","https://openalex.org/W4306317349","https://openalex.org/W4385627126","https://openalex.org/W4385804789","https://openalex.org/W4387544170","https://openalex.org/W4387967929","https://openalex.org/W4399140776","https://openalex.org/W4400076000","https://openalex.org/W4401508637","https://openalex.org/W4402263792","https://openalex.org/W4402754035","https://openalex.org/W4406458349","https://openalex.org/W4415796075"],"related_works":[],"abstract_inverted_index":{"The":[0],"growing":[1],"adoption":[2],"of":[3,41],"large":[4],"pre-trained":[5],"models":[6,114],"in":[7,83,203,218],"edge":[8],"computing":[9],"has":[10,48],"made":[11],"deploying":[12],"model":[13,56,136,182],"inference":[14],"on":[15,164,191],"mobile":[16],"clients":[17,133],"both":[18],"practical":[19],"and":[20,39,76,186,215,221],"popular.":[21],"These":[22],"devices":[23],"are":[24],"inherently":[25],"vulnerable":[26],"to":[27,36,54,72,110,134,161,200,207,213],"direct":[28],"adversarial":[29,45,106,130,219],"attacks,":[30],"which":[31,70],"pose":[32],"a":[33,66,103,119,154,179],"substantial":[34,90],"threat":[35],"the":[37,74,94,169],"robustness":[38,57,137,185,220],"security":[40],"deployed":[42],"models.":[43],"Federated":[44],"training":[46,95,107],"(FAT)":[47],"emerged":[49],"as":[50],"an":[51],"effective":[52],"solution":[53],"enhance":[55,162],"while":[58,87,138,210],"preserving":[59],"client":[60,117,177],"privacy.":[61],"However,":[62],"FAT":[63],"frequently":[64],"produces":[65],"generalized":[67],"global":[68],"model,":[69],"struggles":[71],"address":[73],"diverse":[75],"heterogeneous":[77],"data":[78],"distributions":[79],"across":[80],"clients,":[81],"resulting":[82],"insufficiently":[84],"personalized":[85,104,170],"performance,":[86],"also":[88],"encountering":[89],"communication":[91,141,204],"challenges":[92],"during":[93,148],"process.":[96,121],"In":[97,122,151],"this":[98],"paper,":[99],"we":[100],"propose":[101],"Sylva,":[102],"collaborative":[105],"framework":[108],"designed":[109],"deliver":[111],"customized":[112],"defense":[113,181],"for":[115,128],"each":[116,176],"through":[118],"two-phase":[120],"Phase":[123,152],"1,":[124],"Sylva":[125,196],"employs":[126],"LoRA":[127,146],"local":[129],"fine-tuning,":[131],"enabling":[132],"personalize":[135],"drastically":[139],"reducing":[140],"costs":[142],"by":[143],"uploading":[144],"only":[145],"parameters":[147],"federated":[149],"aggregation.":[150],"2,":[153],"game-based":[155],"layer":[156],"selection":[157],"strategy":[158],"is":[159],"introduced":[160],"accuracy":[163,187],"benign":[165,222],"data,":[166],"further":[167],"refining":[168],"model.":[171],"This":[172],"approach":[173],"ensures":[174],"that":[175,183,195],"receives":[178],"tailored":[180],"balances":[184],"effectively.":[188],"Extensive":[189],"experiments":[190],"benchmark":[192],"datasets":[193],"demonstrate":[194],"can":[197],"achieve":[198],"up":[199,212],"50\u00d7":[201],"improvements":[202],"efficiency":[205],"compared":[206],"state-of-the-art":[208],"algorithms,":[209],"achieving":[211],"29.5%":[214],"50.4%":[216],"enhancements":[217],"accuracy,":[223],"respectively.":[224]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-11-23T00:00:00"}
