{"id":"https://openalex.org/W7125633964","doi":"https://doi.org/10.1145/3790100","title":"VTarbel: Targeted Label Attack with Minimal Knowledge on Detector-Enhanced Vertical Federated Learning","display_name":"VTarbel: Targeted Label Attack with Minimal Knowledge on Detector-Enhanced Vertical Federated Learning","publication_year":2026,"publication_date":"2026-01-23","ids":{"openalex":"https://openalex.org/W7125633964","doi":"https://doi.org/10.1145/3790100"},"language":"en","primary_location":{"id":"doi:10.1145/3790100","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3790100","pdf_url":null,"source":{"id":"https://openalex.org/S170502224","display_name":"ACM Transactions on Sensor Networks","issn_l":"1550-4859","issn":["1550-4859","1550-4867"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Sensor Networks","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5123789454","display_name":"Juntao Tan","orcid":null},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Juntao Tan","raw_affiliation_strings":["School of Computer Science and Technology, University of Science and Technology of China"],"raw_orcid":"https://orcid.org/0009-0002-4325-9023","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, University of Science and Technology of China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123807123","display_name":"Anran Li","orcid":null},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Anran Li","raw_affiliation_strings":["School of Computer Science and Technology, University of Science and Technology of China"],"raw_orcid":"https://orcid.org/0000-0002-3592-4153","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, University of Science and Technology of China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123789720","display_name":"Quanchao Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I180662265","display_name":"China Mobile (China)","ror":"https://ror.org/05gftfe97","country_code":"CN","type":"company","lineage":["https://openalex.org/I180662265"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Quanchao Liu","raw_affiliation_strings":["Department of Security Technology Research, China Mobile Research Institute"],"raw_orcid":"https://orcid.org/0009-0001-1820-2052","affiliations":[{"raw_affiliation_string":"Department of Security Technology Research, China Mobile Research Institute","institution_ids":["https://openalex.org/I180662265"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074029433","display_name":"Peng Ran","orcid":null},"institutions":[{"id":"https://openalex.org/I180662265","display_name":"China Mobile (China)","ror":"https://ror.org/05gftfe97","country_code":"CN","type":"company","lineage":["https://openalex.org/I180662265"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peng Ran","raw_affiliation_strings":["Department of Security Technology Research, China Mobile Research Institute"],"raw_orcid":"https://orcid.org/0009-0007-7334-8605","affiliations":[{"raw_affiliation_string":"Department of Security Technology Research, China Mobile Research Institute","institution_ids":["https://openalex.org/I180662265"]}]},{"author_position":"last","author":{"id":null,"display_name":"Lan Zhang","orcid":"https://orcid.org/0000-0003-1004-8588"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lan Zhang","raw_affiliation_strings":["School of Computer Science and Technology, University of Science and Technology of China"],"raw_orcid":"https://orcid.org/0000-0003-1004-8588","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, University of Science and Technology of China","institution_ids":["https://openalex.org/I126520041"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":12.1051,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.96277033,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"22","issue":"2","first_page":"1","last_page":"33"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.43790000677108765,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.43790000677108765,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.4359999895095825,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.02800000086426735,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.6518999934196472},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5848000049591064},{"id":"https://openalex.org/keywords/disjoint-sets","display_name":"Disjoint sets","score":0.5139999985694885},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5001000165939331},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.49320000410079956},{"id":"https://openalex.org/keywords/federated-learning","display_name":"Federated learning","score":0.48089998960494995},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.48069998621940613},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.43309998512268066}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.864799976348877},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.6518999934196472},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5848000049591064},{"id":"https://openalex.org/C45340560","wikidata":"https://www.wikidata.org/wiki/Q215382","display_name":"Disjoint sets","level":2,"score":0.5139999985694885},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5001000165939331},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.49320000410079956},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.48089998960494995},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.48069998621940613},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.43309998512268066},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3961000144481659},{"id":"https://openalex.org/C100776233","wikidata":"https://www.wikidata.org/wiki/Q2532492","display_name":"Bridge (graph theory)","level":2,"score":0.38659998774528503},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.37040001153945923},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3594000041484833},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3522999882698059},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3504999876022339},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.35030001401901245},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.34599998593330383},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.3384000062942505},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.3260999917984009},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.2867000102996826},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.27559998631477356},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.2623000144958496},{"id":"https://openalex.org/C24590314","wikidata":"https://www.wikidata.org/wiki/Q336038","display_name":"Wireless sensor network","level":2,"score":0.2574000060558319},{"id":"https://openalex.org/C3019562390","wikidata":"https://www.wikidata.org/wiki/Q4860306","display_name":"Bare metal","level":4,"score":0.25110000371932983}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3790100","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3790100","pdf_url":null,"source":{"id":"https://openalex.org/S170502224","display_name":"ACM Transactions on Sensor Networks","issn_l":"1550-4859","issn":["1550-4859","1550-4867"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Sensor Networks","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.7137009501457214,"display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G4218037261","display_name":null,"funder_award_id":"62441228","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W2103868202","https://openalex.org/W2153290280","https://openalex.org/W2194775991","https://openalex.org/W2295598076","https://openalex.org/W2947874337","https://openalex.org/W2963647337","https://openalex.org/W2979826702","https://openalex.org/W2989885118","https://openalex.org/W2995191368","https://openalex.org/W2998757566","https://openalex.org/W3094542121","https://openalex.org/W3111208380","https://openalex.org/W3192072825","https://openalex.org/W3198511875","https://openalex.org/W3213008925","https://openalex.org/W4285821506","https://openalex.org/W4328006301","https://openalex.org/W4328053081","https://openalex.org/W4391164348","https://openalex.org/W4402264407"],"related_works":[],"abstract_inverted_index":{"Vertical":[0],"federated":[1],"learning":[2],"(VFL)":[3],"enables":[4],"multiple":[5],"parties":[6],"with":[7],"disjoint":[8],"features":[9],"to":[10,42,80,107,115],"collaboratively":[11],"train":[12,116],"models":[13,129],"without":[14],"sharing":[15],"raw":[16],"data.":[17],"While":[18],"privacy":[19],"vulnerabilities":[20],"of":[21,95,133],"VFL":[22,83,105,190],"are":[23],"extensively-studied,":[24],"its":[25],"security":[26,185],"threats\u2014particularly":[27],"targeted":[28,141],"label":[29],"attacks\u2014remain":[30],"underexplored.":[31],"In":[32,125],"such":[33],"attacks,":[34],"a":[35,73,92],"passive":[36],"party":[37],"perturbs":[38],"inputs":[39],"at":[40],"inference":[41],"force":[43],"misclassification":[44],"into":[45],"adversary-chosen":[46],"labels.":[47],"Existing":[48],"methods":[49],"rely":[50],"on":[51,122],"unrealistic":[52],"assumptions":[53],"(e.g.,":[54],"accessing":[55],"VFL-model\u2019s":[56],"outputs)":[57],"and":[58,111,119,143,149,159,173,192],"ignore":[59],"anomaly":[60,161],"detectors":[61],"deployed":[62],"in":[63,188],"real-world":[64],"systems.":[65],"To":[66],"bridge":[67],"this":[68],"gap,":[69],"we":[70],"introduce":[71],"VTarbel,":[72],"two-stage,":[74],"minimal-knowledge":[75],"attack":[76,126],"framework":[77],"explicitly":[78],"designed":[79],"evade":[81,144],"detector-enhanced":[82],"inference.":[84],"During":[85],"the":[86,89],"preparation":[87],"stage,":[88,127],"attacker":[90],"selects":[91],"minimal":[93],"set":[94],"high-expressiveness":[96],"samples":[97],"(via":[98],"maximum":[99],"mean":[100],"discrepancy),":[101],"submits":[102],"them":[103],"through":[104],"protocol":[106],"collect":[108],"predicted":[109],"labels,":[110],"uses":[112],"these":[113,128],"pseudo-labels":[114],"estimated":[117],"detector":[118],"surrogate":[120],"model":[121,154],"local":[123],"features.":[124],"guide":[130],"gradient-based":[131],"perturbations":[132],"remaining":[134],"samples,":[135],"crafting":[136],"adversarial":[137],"instances":[138],"that":[139],"induce":[140],"misclassifications":[142],"detection.":[145],"We":[146],"implement":[147],"VTarbel":[148,166],"evaluate":[150],"it":[151],"against":[152,176],"four":[153,168],"architectures,":[155],"seven":[156],"multimodal":[157],"datasets,":[158],"two":[160],"detectors.":[162],"Across":[163],"all":[164],"settings,":[165],"outperforms":[167],"state-of-the-art":[169],"baselines,":[170],"evades":[171],"detection,":[172],"retains":[174],"effective":[175],"three":[177],"representative":[178],"privacy-preserving":[179],"defenses.":[180,199],"These":[181],"results":[182],"reveal":[183],"critical":[184],"blind":[186],"spots":[187],"current":[189],"deployments":[191],"underscore":[193],"urgent":[194],"need":[195],"for":[196],"robust,":[197],"attack-aware":[198]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2026-01-26T00:00:00"}