{"id":"https://openalex.org/W7137972602","doi":"https://doi.org/10.1609/aaai.v40i30.39778","title":"DoBlock: Blocking Malicious Association Propagation for Backdoor-Robust Federated Learning Under Domain Skew","display_name":"DoBlock: Blocking Malicious Association Propagation for Backdoor-Robust Federated Learning Under Domain Skew","publication_year":2026,"publication_date":"2026-03-14","ids":{"openalex":"https://openalex.org/W7137972602","doi":"https://doi.org/10.1609/aaai.v40i30.39778"},"language":"en","primary_location":{"id":"doi:10.1609/aaai.v40i30.39778","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v40i30.39778","pdf_url":null,"source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://doi.org/10.1609/aaai.v40i30.39778","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5049937294","display_name":"Zhou Tan","orcid":"https://orcid.org/0009-0000-9030-6406"},"institutions":[{"id":"https://openalex.org/I80947539","display_name":"Fuzhou University","ror":"https://ror.org/011xvna82","country_code":"CN","type":"education","lineage":["https://openalex.org/I80947539"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhou Tan","raw_affiliation_strings":["College of Computer and Data Science, Fuzhou University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer and Data Science, Fuzhou University","institution_ids":["https://openalex.org/I80947539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129743622","display_name":"De Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"De Li","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129718593","display_name":"Yirui Huang","orcid":null},"institutions":[{"id":"https://openalex.org/I80947539","display_name":"Fuzhou University","ror":"https://ror.org/011xvna82","country_code":"CN","type":"education","lineage":["https://openalex.org/I80947539"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yirui Huang","raw_affiliation_strings":["College of Computer and Data Science, Fuzhou University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer and Data Science, Fuzhou University","institution_ids":["https://openalex.org/I80947539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113179037","display_name":"Duanshu Fang","orcid":null},"institutions":[{"id":"https://openalex.org/I29739308","display_name":"Guangxi Normal University","ror":"https://ror.org/02frt9q65","country_code":"CN","type":"education","lineage":["https://openalex.org/I29739308"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Duanshu Fang","raw_affiliation_strings":["School of Computer Science and Engineering, Guangxi Normal University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Guangxi Normal University","institution_ids":["https://openalex.org/I29739308"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079784316","display_name":"Jia-Li Yin","orcid":"https://orcid.org/0000-0002-8087-9769"},"institutions":[{"id":"https://openalex.org/I80947539","display_name":"Fuzhou University","ror":"https://ror.org/011xvna82","country_code":"CN","type":"education","lineage":["https://openalex.org/I80947539"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jia-Li Yin","raw_affiliation_strings":["College of Computer and Data Science, Fuzhou University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer and Data Science, Fuzhou University","institution_ids":["https://openalex.org/I80947539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129651066","display_name":"Xiaolei Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I4210111326","display_name":"National College","ror":"https://ror.org/02rzd6x38","country_code":"US","type":"education","lineage":["https://openalex.org/I4210111326"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xiaolei Liu","raw_affiliation_strings":["National Interdisciplinary Research Center of Engineering Physics"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Interdisciplinary Research Center of Engineering Physics","institution_ids":["https://openalex.org/I4210111326"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129640845","display_name":"Songze Li","orcid":null},"institutions":[{"id":"https://openalex.org/I4210090971","display_name":"Southeast University","ror":"https://ror.org/00cf0ab87","country_code":"BD","type":"education","lineage":["https://openalex.org/I4210090971"]}],"countries":["BD"],"is_corresponding":false,"raw_author_name":"Songze Li","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University","institution_ids":["https://openalex.org/I4210090971"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5129738923","display_name":"Shouling Ji","orcid":null},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shouling Ji","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University","institution_ids":["https://openalex.org/I168879160"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.19348172,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"40","issue":"30","first_page":"25796","last_page":"25804"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.6007000207901001,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.6007000207901001,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.18809999525547028,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.09309999644756317,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9138000011444092},{"id":"https://openalex.org/keywords/skew","display_name":"Skew","score":0.7415000200271606},{"id":"https://openalex.org/keywords/federated-learning","display_name":"Federated learning","score":0.6984000205993652},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6380000114440918},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.5753999948501587},{"id":"https://openalex.org/keywords/blocking","display_name":"Blocking (statistics)","score":0.4731000065803528},{"id":"https://openalex.org/keywords/domain-knowledge","display_name":"Domain knowledge","score":0.45649999380111694},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.42500001192092896},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.4068000018596649}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9138000011444092},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8216999769210815},{"id":"https://openalex.org/C43711488","wikidata":"https://www.wikidata.org/wiki/Q7534783","display_name":"Skew","level":2,"score":0.7415000200271606},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.6984000205993652},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6380000114440918},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.5753999948501587},{"id":"https://openalex.org/C144745244","wikidata":"https://www.wikidata.org/wiki/Q4927286","display_name":"Blocking (statistics)","level":2,"score":0.4731000065803528},{"id":"https://openalex.org/C207685749","wikidata":"https://www.wikidata.org/wiki/Q2088941","display_name":"Domain knowledge","level":2,"score":0.45649999380111694},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.42500001192092896},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.4068000018596649},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.39980000257492065},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.3849000036716461},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.37450000643730164},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.37400001287460327},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3637000024318695},{"id":"https://openalex.org/C142853389","wikidata":"https://www.wikidata.org/wiki/Q744778","display_name":"Association (psychology)","level":2,"score":0.35530000925064087},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.35269999504089355},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.33250001072883606},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3246000111103058},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3133000135421753},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3116999864578247},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.3012999892234802},{"id":"https://openalex.org/C2779582901","wikidata":"https://www.wikidata.org/wiki/Q21013010","display_name":"Distributed learning","level":2,"score":0.3003999888896942},{"id":"https://openalex.org/C193524817","wikidata":"https://www.wikidata.org/wiki/Q386780","display_name":"Association rule learning","level":2,"score":0.2833000123500824},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.2782999873161316},{"id":"https://openalex.org/C2779797433","wikidata":"https://www.wikidata.org/wiki/Q632959","display_name":"Blacklisting","level":2,"score":0.2773999869823456},{"id":"https://openalex.org/C2780186347","wikidata":"https://www.wikidata.org/wiki/Q11414","display_name":"Subnetwork","level":2,"score":0.26840001344680786},{"id":"https://openalex.org/C5111613","wikidata":"https://www.wikidata.org/wiki/Q3799443","display_name":"Inter-domain","level":4,"score":0.25929999351501465},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.2531999945640564}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1609/aaai.v40i30.39778","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v40i30.39778","pdf_url":null,"source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},{"id":"pmh:oai:ojs.aaai.org:article/39778","is_oa":false,"landing_page_url":"https://ojs.aaai.org/index.php/AAAI/article/view/39778","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"2159-5399","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.1609/aaai.v40i30.39778","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v40i30.39778","pdf_url":null,"source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5569390654563904}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Federated":[0],"Learning":[1],"(FL)":[2],"enables":[3],"privacy-preserving":[4],"distributed":[5],"training":[6,100],"but":[7],"remains":[8],"vulnerable":[9],"to":[10,70,101],"backdoor":[11,35],"attacks.":[12],"Attackers":[13],"can":[14],"embed":[15],"malicious":[16,41,72,96,109],"trigger-label":[17],"associations":[18],"into":[19],"the":[20,26,154],"global":[21],"model":[22],"by":[23,37,112],"participating":[24],"in":[25],"aggregation":[27],"process.":[28],"Existing":[29],"defense":[30,86],"methods":[31],"typically":[32],"defend":[33],"against":[34],"attacks":[36],"detecting":[38],"and":[39,123,141],"filtering":[40],"updates":[42,73],"that":[43,51,87,144],"deviate":[44],"from":[45,74,116],"benign":[46,75,164],"ones.":[47,76],"However,":[48],"we":[49,81],"find":[50],"these":[52],"defenses":[53],"fail":[54],"under":[55],"domain":[56,91,134],"skew,":[57],"where":[58],"differing":[59],"feature":[60],"distributions":[61],"across":[62],"clients":[63],"increase":[64],"update":[65],"heterogeneity,":[66],"making":[67],"it":[68],"harder":[69],"distinguish":[71],"To":[77],"address":[78],"this":[79],"challenge,":[80],"propose":[82],"DoBlock,":[83],"a":[84],"novel":[85],"utilizes":[88],"an":[89],"aggregatable":[90],"infuser":[92],"incapable":[93],"of":[94],"embedding":[95],"associations,":[97],"through":[98],"federated":[99],"facilitate":[102],"cross-domain":[103],"knowledge":[104],"sharing.":[105],"Moreover,":[106],"DoBlock":[107,145],"prevents":[108],"association":[110],"propagation":[111],"isolating":[113],"local":[114,119,127],"models":[115,120],"aggregation,":[117],"as":[118],"remain":[121],"client-specific":[122],"rely":[124],"solely":[125],"on":[126,132],"data":[128],"for":[129],"training.":[130],"Experiments":[131],"five":[133],"skew":[135],"datasets":[136],"(Digits,":[137],"PACS,":[138],"VLCS,":[139],"Office-Caltech10,":[140],"DomainNet)":[142],"show":[143],"maintains":[146],"attack":[147],"success":[148],"rates":[149],"below":[150],"2.5%,":[151],"while":[152],"achieving":[153],"highest":[155],"main":[156],"task":[157],"accuracy,":[158],"demonstrating":[159],"superior":[160],"robustness":[161],"without":[162],"sacrificing":[163],"performance.":[165]},"counts_by_year":[],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2026-03-18T00:00:00"}