{"id":"https://openalex.org/W7128798727","doi":"https://doi.org/10.48550/arxiv.2602.12138","title":"BlackCATT: Black-box Collusion Aware Traitor Tracing in Federated Learning","display_name":"BlackCATT: Black-box Collusion Aware Traitor Tracing in Federated Learning","publication_year":2026,"publication_date":"2026-02-12","ids":{"openalex":"https://openalex.org/W7128798727","doi":"https://doi.org/10.48550/arxiv.2602.12138"},"language":null,"primary_location":{"id":"pmh:doi:10.48550/arxiv.2602.12138","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"type":"article","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":null,"any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5030408181","display_name":"Elena Rodr\u00edguez-Lois","orcid":"https://orcid.org/0000-0002-7683-4381"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Rodr\u00edguez-Lois, Elena","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085865626","display_name":"Fabio Brau","orcid":"https://orcid.org/0000-0002-9948-111X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Brau, Fabio","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115060116","display_name":"Maura Pintor","orcid":"https://orcid.org/0000-0003-3287-7352"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Pintor, Maura","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008367647","display_name":"Battista Biggio","orcid":"https://orcid.org/0000-0001-7752-509X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Biggio, Battista","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":null,"display_name":"P\u00e9rez-Gonz\u00e1lez, Fernando","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"P\u00e9rez-Gonz\u00e1lez, Fernando","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.1886876,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.8539999723434448,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.8539999723434448,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.05169999971985817,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.00930000003427267,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/traitor-tracing","display_name":"Traitor tracing","score":0.8180999755859375},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.6100999712944031},{"id":"https://openalex.org/keywords/tracing","display_name":"Tracing","score":0.602400004863739},{"id":"https://openalex.org/keywords/collusion","display_name":"Collusion","score":0.57669997215271},{"id":"https://openalex.org/keywords/federated-learning","display_name":"Federated learning","score":0.45969998836517334},{"id":"https://openalex.org/keywords/trace","display_name":"TRACE (psycholinguistics)","score":0.45329999923706055},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.4300000071525574},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.41679999232292175},{"id":"https://openalex.org/keywords/anonymity","display_name":"Anonymity","score":0.37630000710487366}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8578000068664551},{"id":"https://openalex.org/C2781411299","wikidata":"https://www.wikidata.org/wiki/Q7833043","display_name":"Traitor tracing","level":4,"score":0.8180999755859375},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.6100999712944031},{"id":"https://openalex.org/C138673069","wikidata":"https://www.wikidata.org/wiki/Q322229","display_name":"Tracing","level":2,"score":0.602400004863739},{"id":"https://openalex.org/C2781198186","wikidata":"https://www.wikidata.org/wiki/Q701521","display_name":"Collusion","level":2,"score":0.57669997215271},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.45969998836517334},{"id":"https://openalex.org/C75291252","wikidata":"https://www.wikidata.org/wiki/Q1315756","display_name":"TRACE (psycholinguistics)","level":2,"score":0.45329999923706055},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.4300000071525574},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.41679999232292175},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4108000099658966},{"id":"https://openalex.org/C178005623","wikidata":"https://www.wikidata.org/wiki/Q308859","display_name":"Anonymity","level":2,"score":0.37630000710487366},{"id":"https://openalex.org/C2776135515","wikidata":"https://www.wikidata.org/wiki/Q17143721","display_name":"Regularization (linguistics)","level":2,"score":0.3682999908924103},{"id":"https://openalex.org/C150817343","wikidata":"https://www.wikidata.org/wiki/Q875932","display_name":"Digital watermarking","level":3,"score":0.3594000041484833},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.35569998621940613},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.35420000553131104},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.33809998631477356},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.334199994802475},{"id":"https://openalex.org/C774472","wikidata":"https://www.wikidata.org/wiki/Q6760393","display_name":"Margin (machine learning)","level":2,"score":0.31290000677108765},{"id":"https://openalex.org/C85847156","wikidata":"https://www.wikidata.org/wiki/Q59015987","display_name":"Verifiable secret sharing","level":3,"score":0.2976999878883362},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.29649999737739563},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.2806999981403351},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.28049999475479126},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2761000096797943},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.27160000801086426},{"id":"https://openalex.org/C83665646","wikidata":"https://www.wikidata.org/wiki/Q42139305","display_name":"Feature vector","level":2,"score":0.2711000144481659},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.26739999651908875},{"id":"https://openalex.org/C59577422","wikidata":"https://www.wikidata.org/wiki/Q10265143","display_name":"False accusation","level":2,"score":0.26649999618530273},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2632000148296356},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.2612000107765198},{"id":"https://openalex.org/C61797465","wikidata":"https://www.wikidata.org/wiki/Q1188986","display_name":"Term (time)","level":2,"score":0.26100000739097595},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.25360000133514404},{"id":"https://openalex.org/C136886441","wikidata":"https://www.wikidata.org/wiki/Q926129","display_name":"Normalization (sociology)","level":2,"score":0.250900000333786}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:doi:10.48550/arxiv.2602.12138","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},{"id":"doi:10.48550/arxiv.2602.12138","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2602.12138","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:doi:10.48550/arxiv.2602.12138","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Federated":[0,153],"Learning":[1],"has":[2,112],"been":[3,113,120],"popularized":[4],"in":[5,152],"recent":[6],"years":[7],"for":[8,148,198],"applications":[9],"involving":[10],"personal":[11],"or":[12,47,61],"sensitive":[13],"data,":[14],"as":[15,90],"it":[16],"allows":[17],"the":[18,29,36,39,43,52,64,131,139,174,186,189,208,234],"collaborative":[19],"training":[20],"of":[21,38,45,51,66,93,98,133,166,188,230],"machine":[22],"learning":[23,212],"models":[24,199],"through":[25,70,227],"local":[26],"updates":[27],"at":[28,233],"data-owners'":[30],"premises,":[31],"which":[32,156],"does":[33],"not":[34],"require":[35],"sharing":[37],"data":[40],"itself.":[41],"Considering":[42],"risk":[44],"leakage":[46],"misuse":[48],"by":[49],"any":[50],"data-owners,":[53],"many":[54],"works":[55,118],"attempt":[56],"to":[57,107,122,141,176],"protect":[58],"their":[59],"copyright,":[60],"even":[62],"trace":[63],"origin":[65],"a":[67,82,91,143,158,168,228,237],"potential":[68],"leak":[69],"unique":[71],"watermarks":[72,86,214],"identifying":[73],"each":[74],"participant's":[75],"model":[76,242],"copy.":[77],"Realistic":[78],"accusation":[79],"scenarios":[80],"impose":[81],"black-box":[83,149],"setting,":[84],"where":[85,101],"are":[87],"typically":[88],"embedded":[89],"set":[92,229],"sample-label":[94],"pairs.":[95],"The":[96],"threat":[97],"collusion,":[99],"however,":[100],"multiple":[102],"bad":[103],"actors":[104],"conspire":[105],"together":[106],"produce":[108],"an":[109],"untraceable":[110],"model,":[111],"rarely":[114],"addressed,":[115],"and":[116,125,179,195],"previous":[117],"have":[119],"limited":[121],"shallow":[123],"networks":[124],"near-linearly":[126],"separable":[127],"main":[128,209],"tasks.":[129],"To":[130],"best":[132],"our":[134,221],"knowledge,":[135],"this":[136],"work":[137],"is":[138],"first":[140],"present":[142],"general":[144],"collusion-resistant":[145],"embedding":[146,161],"method":[147],"traitor":[150,180,246],"tracing":[151,181,247],"Learning:":[154],"BlackCATT,":[155],"introduces":[157],"novel":[159],"collusion-aware":[160],"loss":[162],"term":[163],"and,":[164],"instead":[165],"using":[167],"fixed":[169],"trigger":[170],"set,":[171],"iteratively":[172],"optimizes":[173],"triggers":[175],"aid":[177],"convergence":[178],"performance.":[182,248],"Experimental":[183],"results":[184],"confirm":[185],"efficacy":[187],"proposed":[190,222],"scheme":[191],"across":[192],"different":[193,213],"architectures":[194,216],"datasets.":[196],"Furthermore,":[197],"that":[200],"would":[201],"otherwise":[202],"suffer":[203],"from":[204],"update":[205],"incompatibility":[206],"on":[207],"task":[210],"after":[211],"(e.g.,":[215],"including":[217],"batch":[218],"normalization":[219],"layers),":[220],"BlackCATT+FR":[223],"incorporates":[224],"functional":[225],"regularization":[226],"auxiliary":[231],"examples":[232],"aggregator,":[235],"promoting":[236],"shared":[238],"feature":[239],"space":[240],"among":[241],"copies":[243],"without":[244],"compromising":[245]},"counts_by_year":[],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2026-02-14T00:00:00"}