{"id":"https://openalex.org/W7168146452","doi":"https://doi.org/10.1186/s42400-026-00625-z","title":"Feddsg: backdoor defense via semantic filter and geometric constraint in federated learning","display_name":"Feddsg: backdoor defense via semantic filter and geometric constraint in federated learning","publication_year":2026,"publication_date":"2026-07-13","ids":{"openalex":"https://openalex.org/W7168146452","doi":"https://doi.org/10.1186/s42400-026-00625-z"},"language":"en","primary_location":{"id":"doi:10.1186/s42400-026-00625-z","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-026-00625-z","pdf_url":"https://link.springer.com/content/pdf/10.1186/s42400-026-00625-z.pdf","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://link.springer.com/content/pdf/10.1186/s42400-026-00625-z.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5140527042","display_name":"Jiabao Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I9086337","display_name":"Taiyuan University of Technology","ror":"https://ror.org/03kv08d37","country_code":"CN","type":"education","lineage":["https://openalex.org/I9086337"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiabao Zhang","raw_affiliation_strings":["Shanxi Key Laboratory of Industrial Internet Security, College of Computer Science and Technology, Taiyuan University of Technology, Taiyuan, Shanxi, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanxi Key Laboratory of Industrial Internet Security, College of Computer Science and Technology, Taiyuan University of Technology, Taiyuan, Shanxi, China","institution_ids":["https://openalex.org/I9086337"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100420034","display_name":"Jianhua Wang","orcid":"https://orcid.org/0000-0002-2773-3429"},"institutions":[{"id":"https://openalex.org/I9086337","display_name":"Taiyuan University of Technology","ror":"https://ror.org/03kv08d37","country_code":"CN","type":"education","lineage":["https://openalex.org/I9086337"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Jianhua Wang","raw_affiliation_strings":["Shanxi Key Laboratory of Industrial Internet Security, College of Computer Science and Technology, Taiyuan University of Technology, Taiyuan, Shanxi, China"],"raw_orcid":"https://orcid.org/0000-0002-2773-3429","affiliations":[{"raw_affiliation_string":"Shanxi Key Laboratory of Industrial Internet Security, College of Computer Science and Technology, Taiyuan University of Technology, Taiyuan, Shanxi, China","institution_ids":["https://openalex.org/I9086337"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100341161","display_name":"Yuhong Li","orcid":"https://orcid.org/0000-0002-3544-4475"},"institutions":[{"id":"https://openalex.org/I9086337","display_name":"Taiyuan University of Technology","ror":"https://ror.org/03kv08d37","country_code":"CN","type":"education","lineage":["https://openalex.org/I9086337"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuhong Li","raw_affiliation_strings":["Shanxi Key Laboratory of Industrial Internet Security, College of Computer Science and Technology, Taiyuan University of Technology, Taiyuan, Shanxi, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanxi Key Laboratory of Industrial Internet Security, College of Computer Science and Technology, Taiyuan University of Technology, Taiyuan, Shanxi, China","institution_ids":["https://openalex.org/I9086337"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140526584","display_name":"Zhuangzhuang Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I168719708","display_name":"City University of Hong Kong","ror":"https://ror.org/03q8dnn23","country_code":"HK","type":"education","lineage":["https://openalex.org/I168719708"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Zhuangzhuang Zhang","raw_affiliation_strings":["Department of Computer Science, City University of Hong Kong, Hong Kong, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, City University of Hong Kong, Hong Kong, China","institution_ids":["https://openalex.org/I168719708"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140519761","display_name":"Zhihui Zhao","orcid":null},"institutions":[{"id":"https://openalex.org/I9086337","display_name":"Taiyuan University of Technology","ror":"https://ror.org/03kv08d37","country_code":"CN","type":"education","lineage":["https://openalex.org/I9086337"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhihui Zhao","raw_affiliation_strings":["Shanxi Key Laboratory of Industrial Internet Security, College of Computer Science and Technology, Taiyuan University of Technology, Taiyuan, Shanxi, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanxi Key Laboratory of Industrial Internet Security, College of Computer Science and Technology, Taiyuan University of Technology, Taiyuan, Shanxi, China","institution_ids":["https://openalex.org/I9086337"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140534798","display_name":"Dan Yu","orcid":null},"institutions":[{"id":"https://openalex.org/I9086337","display_name":"Taiyuan University of Technology","ror":"https://ror.org/03kv08d37","country_code":"CN","type":"education","lineage":["https://openalex.org/I9086337"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dan Yu","raw_affiliation_strings":["Shanxi Key Laboratory of Industrial Internet Security, College of Computer Science and Technology, Taiyuan University of Technology, Taiyuan, Shanxi, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanxi Key Laboratory of Industrial Internet Security, College of Computer Science and Technology, Taiyuan University of Technology, Taiyuan, Shanxi, China","institution_ids":["https://openalex.org/I9086337"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5140553570","display_name":"Yongle Chen","orcid":null},"institutions":[{"id":"https://openalex.org/I9086337","display_name":"Taiyuan University of Technology","ror":"https://ror.org/03kv08d37","country_code":"CN","type":"education","lineage":["https://openalex.org/I9086337"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yongle Chen","raw_affiliation_strings":["Shanxi Key Laboratory of Industrial Internet Security, College of Computer Science and Technology, Taiyuan University of Technology, Taiyuan, Shanxi, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanxi Key Laboratory of Industrial Internet Security, College of Computer Science and Technology, Taiyuan University of Technology, Taiyuan, Shanxi, China","institution_ids":["https://openalex.org/I9086337"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5100420034"],"corresponding_institution_ids":["https://openalex.org/I9086337"],"apc_list":{"value":1230,"currency":"USD","value_usd":1230},"apc_paid":{"value":1230,"currency":"USD","value_usd":1230},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.89724594,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"9","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.30090001225471497,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.30090001225471497,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10273","display_name":"IoT and Edge/Fog Computing","score":0.1485999971628189,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.1054999977350235,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9228000044822693},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7555000185966492},{"id":"https://openalex.org/keywords/discriminator","display_name":"Discriminator","score":0.5823000073432922},{"id":"https://openalex.org/keywords/residual","display_name":"Residual","score":0.412200003862381},{"id":"https://openalex.org/keywords/limiting","display_name":"Limiting","score":0.3905999958515167},{"id":"https://openalex.org/keywords/rendering","display_name":"Rendering (computer graphics)","score":0.38830000162124634},{"id":"https://openalex.org/keywords/safer","display_name":"SAFER","score":0.3864000141620636},{"id":"https://openalex.org/keywords/constraint","display_name":"Constraint (computer-aided design)","score":0.367000013589859}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9228000044822693},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8083999752998352},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7555000185966492},{"id":"https://openalex.org/C2779803651","wikidata":"https://www.wikidata.org/wiki/Q5282088","display_name":"Discriminator","level":3,"score":0.5823000073432922},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4296000003814697},{"id":"https://openalex.org/C155512373","wikidata":"https://www.wikidata.org/wiki/Q287450","display_name":"Residual","level":2,"score":0.412200003862381},{"id":"https://openalex.org/C188198153","wikidata":"https://www.wikidata.org/wiki/Q1613840","display_name":"Limiting","level":2,"score":0.3905999958515167},{"id":"https://openalex.org/C205711294","wikidata":"https://www.wikidata.org/wiki/Q176953","display_name":"Rendering (computer graphics)","level":2,"score":0.38830000162124634},{"id":"https://openalex.org/C2776654903","wikidata":"https://www.wikidata.org/wiki/Q2601463","display_name":"SAFER","level":2,"score":0.3864000141620636},{"id":"https://openalex.org/C2776036281","wikidata":"https://www.wikidata.org/wiki/Q48769818","display_name":"Constraint (computer-aided design)","level":2,"score":0.367000013589859},{"id":"https://openalex.org/C106131492","wikidata":"https://www.wikidata.org/wiki/Q3072260","display_name":"Filter (signal processing)","level":2,"score":0.3634999990463257},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.3499999940395355},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3179999887943268},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.31290000677108765},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.3061999976634979},{"id":"https://openalex.org/C141513077","wikidata":"https://www.wikidata.org/wiki/Q378542","display_name":"Independent and identically distributed random variables","level":3,"score":0.3034999966621399},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.2924000024795532},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.28940001130104065},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.28299999237060547},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.27880001068115234},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2687000036239624},{"id":"https://openalex.org/C2988773926","wikidata":"https://www.wikidata.org/wiki/Q25104379","display_name":"Generative adversarial network","level":3,"score":0.2662000060081482},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.2655999958515167},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.265500009059906},{"id":"https://openalex.org/C193519340","wikidata":"https://www.wikidata.org/wiki/Q891179","display_name":"Data loss","level":2,"score":0.25619998574256897},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.2526000142097473}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1186/s42400-026-00625-z","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-026-00625-z","pdf_url":"https://link.springer.com/content/pdf/10.1186/s42400-026-00625-z.pdf","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:00d1b9cdc8eb411dae7e38433a364c1c","is_oa":false,"landing_page_url":"https://doaj.org/article/00d1b9cdc8eb411dae7e38433a364c1c","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Cybersecurity, Vol 9, Iss 1 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1186/s42400-026-00625-z","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-026-00625-z","pdf_url":"https://link.springer.com/content/pdf/10.1186/s42400-026-00625-z.pdf","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.7291112542152405,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7168146452.pdf","grobid_xml":"https://content.openalex.org/works/W7168146452.grobid-xml"},"referenced_works_count":20,"referenced_works":["https://openalex.org/W2112796928","https://openalex.org/W3138597937","https://openalex.org/W3157680283","https://openalex.org/W4210960727","https://openalex.org/W4311081048","https://openalex.org/W4319996481","https://openalex.org/W4386702636","https://openalex.org/W4387757717","https://openalex.org/W4390660272","https://openalex.org/W4391895311","https://openalex.org/W4392251605","https://openalex.org/W4392979550","https://openalex.org/W4401634133","https://openalex.org/W4407127070","https://openalex.org/W4412536341","https://openalex.org/W4413146478","https://openalex.org/W4413371421","https://openalex.org/W4414360327","https://openalex.org/W4416400638","https://openalex.org/W7160028136"],"related_works":[],"abstract_inverted_index":{"Abstract":[0],"Backdoor":[1],"attacks":[2],"pose":[3],"a":[4,72,77,82,93,128,132,235],"serious":[5],"threat":[6],"to":[7,27,55,86,105,213],"Internet-of-Things":[8],"(IoT)":[9],"federated":[10],"learning.":[11],"In":[12],"IoT":[13,38],"deployments,":[14],"pronounced":[15],"non-independent":[16],"and":[17,46,64,81,156,182,193,217,225,240,243,254],"identically":[18],"distributed":[19],"(non-IID)":[20],"data":[21,244,253],"heterogeneity":[22],"causes":[23],"benign":[24,114,171],"client":[25,103,178],"updates":[26,54,104,123,155],"exhibit":[28],"substantial":[29],"variability":[30,51],"across":[31,119],"devices.":[32],"Meanwhile,":[33],"the":[34,41,99,150,157,160,203,209,228,250],"physical":[35],"exposure":[36],"of":[37,43,102,170,205,252],"devices":[39],"increases":[40],"risk":[42],"large-scale":[44],"compromise":[45],"elevated":[47],"malicious":[48,200],"participation.":[49],"Such":[50],"allows":[52],"poisoned":[53],"blend":[56],"into":[57],"natural":[58],"fluctuations,":[59],"rendering":[60],"many":[61],"robust":[62],"aggregation":[63],"detection-based":[65],"defenses":[66],"unreliable.":[67],"We":[68],"propose":[69],"FedDSG":[70,90],",":[71],"server-side":[73,185],"defense":[74],"that":[75],"combines":[76],"semantic":[78,96,144],"bias":[79,101,115],"filter":[80],"geometric":[83,147],"direction":[84],"constraint":[85],"counter":[87],"backdoor":[88],"manipulation.":[89],"first":[91],"extracts":[92],"novel":[94],"scale-invariant":[95],"cue":[97],"from":[98,131],"last-layer":[100],"identify":[106],"abnormal":[107],"target-class":[108],"reinforcement,":[109],"staying":[110],"effective":[111],"even":[112],"when":[113],"patterns":[116],"differ":[117],"substantially":[118],"clients.":[120],"The":[121,173],"remaining":[122],"are":[124],"then":[125],"constrained":[126],"using":[127],"reference":[129],"derived":[130],"small":[133],"trusted":[134],"anchor":[135],"set,":[136],"limiting":[137],"adversarial":[138],"drift.":[139],"This":[140],"sequential":[141],"design":[142],"links":[143],"cues":[145],"with":[146,198,220],"structure,":[148],"where":[149],"former":[151],"removes":[152],"clearly":[153],"suspicious":[154],"latter":[158],"stabilizes":[159],"residual":[161],"ones,":[162],"preventing":[163],"misdetection-induced":[164],"drift":[165],"amplification":[166],"while":[167],"avoiding":[168],"distortion":[169],"updates.":[172],"method":[174],"does":[175],"not":[176],"alter":[177],"behavior":[179],"or":[180],"communication":[181],"adds":[183],"minimal":[184],"overhead.":[186],"Extensive":[187],"experiments":[188],"on":[189],"MNIST,":[190],"Fashion-MNIST,":[191],"CIFAR-10,":[192],"SVHN":[194],"under":[195],"non-IID":[196],"distributions":[197],"high":[199],"participation":[201],"demonstrate":[202],"robustness":[204,239],"FedDSG.":[206],"It":[207],"reduces":[208],"attack":[210],"success":[211],"rate":[212],"0.003,":[214],"0.006,":[215],"0.007,":[216],"0.091,":[218],"respectively,":[219],"only":[221],"marginal":[222],"accuracy":[223],"loss":[224],"consistently":[226],"achieves":[227],"highest":[229],"Overall":[230],"Performance":[231],"Score":[232],"(OPS),":[233],"reflecting":[234],"superior":[236],"trade-off":[237],"between":[238],"accuracy.":[241],"Code":[242],"availability":[245],"information":[246],"is":[247],"provided":[248],"in":[249],"Availability":[251],"materials":[255],"section.":[256]},"counts_by_year":[],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2026-07-14T00:00:00"}