{"id":"https://openalex.org/W4415538345","doi":"https://doi.org/10.1145/3746027.3755742","title":"FeatShield: Isolating Malicious Feature Extractors for Backdoor-Robust Federated Learning","display_name":"FeatShield: Isolating Malicious Feature Extractors for Backdoor-Robust Federated Learning","publication_year":2025,"publication_date":"2025-10-25","ids":{"openalex":"https://openalex.org/W4415538345","doi":"https://doi.org/10.1145/3746027.3755742"},"language":null,"primary_location":{"id":"doi:10.1145/3746027.3755742","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3746027.3755742","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 33rd ACM International Conference on Multimedia","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5049937294","display_name":"Zhou Tan","orcid":"https://orcid.org/0009-0000-9030-6406"},"institutions":[{"id":"https://openalex.org/I80947539","display_name":"Fuzhou University","ror":"https://ror.org/011xvna82","country_code":"CN","type":"education","lineage":["https://openalex.org/I80947539"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhou Tan","raw_affiliation_strings":["College of Computer and Data Science, Fuzhou University, Fuzhou, China"],"raw_orcid":"https://orcid.org/0009-0000-9030-6406","affiliations":[{"raw_affiliation_string":"College of Computer and Data Science, Fuzhou University, Fuzhou, China","institution_ids":["https://openalex.org/I80947539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101859275","display_name":"De Li","orcid":"https://orcid.org/0009-0008-0202-4723"},"institutions":[{"id":"https://openalex.org/I29739308","display_name":"Guangxi Normal University","ror":"https://ror.org/02frt9q65","country_code":"CN","type":"education","lineage":["https://openalex.org/I29739308"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"De Li","raw_affiliation_strings":["School of Computer Science and Engineering, Guangxi Normal University, GUi Lin, Gui lin, China"],"raw_orcid":"https://orcid.org/0009-0008-0202-4723","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Guangxi Normal University, GUi Lin, Gui lin, China","institution_ids":["https://openalex.org/I29739308"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068262942","display_name":"Yirui Huang","orcid":"https://orcid.org/0000-0001-5425-6333"},"institutions":[{"id":"https://openalex.org/I80947539","display_name":"Fuzhou University","ror":"https://ror.org/011xvna82","country_code":"CN","type":"education","lineage":["https://openalex.org/I80947539"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yirui Huang","raw_affiliation_strings":["College of Computer and Data Science, Fuzhou University, Fuzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-5425-6333","affiliations":[{"raw_affiliation_string":"College of Computer and Data Science, Fuzhou University, Fuzhou, China","institution_ids":["https://openalex.org/I80947539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079784316","display_name":"Jia-Li Yin","orcid":"https://orcid.org/0000-0002-8087-9769"},"institutions":[{"id":"https://openalex.org/I80947539","display_name":"Fuzhou University","ror":"https://ror.org/011xvna82","country_code":"CN","type":"education","lineage":["https://openalex.org/I80947539"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jia-Li Yin","raw_affiliation_strings":["College of Computer and Data Science, Fuzhou University, Fuzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-8087-9769","affiliations":[{"raw_affiliation_string":"College of Computer and Data Science, Fuzhou University, Fuzhou, China","institution_ids":["https://openalex.org/I80947539"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5058120371","display_name":"Ximeng Liu","orcid":"https://orcid.org/0000-0002-4238-3295"},"institutions":[{"id":"https://openalex.org/I80947539","display_name":"Fuzhou University","ror":"https://ror.org/011xvna82","country_code":"CN","type":"education","lineage":["https://openalex.org/I80947539"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ximeng Liu","raw_affiliation_strings":["College of Computer and Data Science, Fuzhou University, Fuzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-4238-3295","affiliations":[{"raw_affiliation_string":"College of Computer and Data Science, Fuzhou University, Fuzhou, China","institution_ids":["https://openalex.org/I80947539"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.673,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.86480249,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"7045","last_page":"7054"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10751","display_name":"Forensic and Genetic Research","score":0.9560999870300293,"subfield":{"id":"https://openalex.org/subfields/1311","display_name":"Genetics"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9878000020980835},{"id":"https://openalex.org/keywords/federated-learning","display_name":"Federated learning","score":0.6349999904632568},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.6326000094413757},{"id":"https://openalex.org/keywords/generalization","display_name":"Generalization","score":0.6205000281333923},{"id":"https://openalex.org/keywords/consistency","display_name":"Consistency (knowledge bases)","score":0.5627999901771545},{"id":"https://openalex.org/keywords/extractor","display_name":"Extractor","score":0.5169000029563904},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.4936999976634979},{"id":"https://openalex.org/keywords/isolation","display_name":"Isolation (microbiology)","score":0.39590001106262207},{"id":"https://openalex.org/keywords/trojan","display_name":"Trojan","score":0.382999986410141}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9878000020980835},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7621999979019165},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.6349999904632568},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.6326000094413757},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.6205000281333923},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.5627999901771545},{"id":"https://openalex.org/C117978034","wikidata":"https://www.wikidata.org/wiki/Q5422192","display_name":"Extractor","level":2,"score":0.5169000029563904},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.4936999976634979},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.43860000371932983},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4278999865055084},{"id":"https://openalex.org/C2775941552","wikidata":"https://www.wikidata.org/wiki/Q25212305","display_name":"Isolation (microbiology)","level":2,"score":0.39590001106262207},{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.382999986410141},{"id":"https://openalex.org/C66882249","wikidata":"https://www.wikidata.org/wiki/Q169336","display_name":"Homogeneous","level":2,"score":0.3725999891757965},{"id":"https://openalex.org/C196083921","wikidata":"https://www.wikidata.org/wiki/Q7915758","display_name":"Variance (accounting)","level":2,"score":0.36340001225471497},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.36230000853538513},{"id":"https://openalex.org/C25343380","wikidata":"https://www.wikidata.org/wiki/Q277521","display_name":"Relation (database)","level":2,"score":0.3573000133037567},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3571000099182129},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.32850000262260437},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.3264999985694885},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.310699999332428},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.30889999866485596},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.2912999987602234},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.2874000072479248},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.267300009727478},{"id":"https://openalex.org/C117765406","wikidata":"https://www.wikidata.org/wiki/Q5362437","display_name":"Generalization error","level":3,"score":0.2590999901294708},{"id":"https://openalex.org/C23130292","wikidata":"https://www.wikidata.org/wiki/Q5275358","display_name":"Differential privacy","level":2,"score":0.25040000677108765}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3746027.3755742","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3746027.3755742","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 33rd ACM International Conference on Multimedia","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W2112796928","https://openalex.org/W2144499799","https://openalex.org/W2942091739","https://openalex.org/W2995191368","https://openalex.org/W3096831136","https://openalex.org/W3127520698","https://openalex.org/W3138153888","https://openalex.org/W3175919946","https://openalex.org/W3210975694","https://openalex.org/W4213446860","https://openalex.org/W4220822151","https://openalex.org/W4283796083","https://openalex.org/W4287332481","https://openalex.org/W4290948380","https://openalex.org/W4312699393","https://openalex.org/W4312996082","https://openalex.org/W4387449166","https://openalex.org/W4391048150","https://openalex.org/W4395069477","https://openalex.org/W4405235276"],"related_works":[],"abstract_inverted_index":{"Federated":[0],"learning":[1],"remains":[2],"vulnerable":[3],"to":[4,43,109,163],"backdoor":[5,71,164],"attacks":[6,142,165],"through":[7],"malicious":[8,33,144],"parameter":[9],"updates,":[10],"with":[11,51],"existing":[12],"defenses":[13],"limited":[14],"by":[15,157],"homogeneous":[16],"data":[17,137],"assumptions":[18],"or":[19],"reliance":[20],"on":[21,78,116,121],"gradient":[22],"anomaly":[23],"detection.":[24],"We":[25],"reveal":[26],"that":[27,69,126],"FedAvg's":[28],"critical":[29],"flaw":[30],"lies":[31],"in":[32],"feature":[34,101],"extractor":[35],"propagation:":[36],"aggregating":[37],"poisoned":[38,52],"extractors":[39,50,76],"degrades":[40],"defense":[41,59,131,149],"accuracy":[42,150,154],"<70%":[44],"across":[45],"five":[46],"benchmarks,":[47],"while":[48],"benign":[49,169],"headers":[53],"retain":[54],"an":[55],"average":[56],"of":[57],"89.36%":[58],"accuracy.":[60],"Therefore,":[61],"we":[62],"propose":[63],"FeatShield,":[64],"a":[65],"feature-space":[66],"isolation":[67],"framework":[68],"prevents":[70],"propagation":[72],"via":[73,107],"non-aggregated":[74],"local":[75,95],"trained":[77],"clean":[79],"client":[80],"data.":[81],"FeatShield":[82,127,146],"introduces":[83],"1)":[84],"variance-aware":[85],"alignment,":[86],"adaptively":[87],"balancing":[88],"client-specific":[89],"features":[90,106],"and":[91,98,140,151],"global":[92,112],"consistency":[93],"using":[94],"variance":[96],"metrics,":[97],"2)":[99],"adversarial":[100],"synthesis,":[102],"generating":[103],"non-linear":[104],"synthetic":[105],"GAN":[108],"enhance":[110],"the":[111,129,168],"prediction":[113],"header's":[114],"generalization":[115],"main":[117,152],"tasks.":[118],"Extensive":[119],"experiments":[120],"eight":[122],"real-world":[123],"datasets":[124],"show":[125],"achieves":[128,147],"best":[130],"performance.":[132,170],"For":[133],"instance,":[134],"under":[135],"heterogeneous":[136],"(Dirichlet":[138],"\u03b2=0.5)":[139],"strong":[141],"(50%":[143],"clients),":[145],"99.26-99.89%":[148],"task":[153],"exceeding":[155],"FedAvg":[156],"1.32-5.70%,":[158],"demonstrating":[159],"its":[160],"superior":[161],"resistance":[162],"without":[166],"sacrificing":[167]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-25T00:00:00"}