{"id":"https://openalex.org/W7130390824","doi":"https://doi.org/10.48550/arxiv.2602.15161","title":"Exploiting Layer-Specific Vulnerabilities to Backdoor Attack in Federated Learning","display_name":"Exploiting Layer-Specific Vulnerabilities to Backdoor Attack in Federated Learning","publication_year":2026,"publication_date":"2026-02-16","ids":{"openalex":"https://openalex.org/W7130390824","doi":"https://doi.org/10.48550/arxiv.2602.15161"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2602.15161","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2602.15161","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2602.15161","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5012980588","display_name":"Mohammad Hadi Foroughi","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Foroughi, Mohammad Hadi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087433925","display_name":"Seyed Hamed Rastegar","orcid":"https://orcid.org/0000-0001-8138-6360"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Rastegar, Seyed Hamed","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012207220","display_name":"Mohammad Sabokrou","orcid":"https://orcid.org/0000-0002-9409-2799"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sabokrou, Mohammad","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5126336402","display_name":"Ahmad Khonsari","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Khonsari, Ahmad","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7218999862670898,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7218999862670898,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.2249000072479248,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0035000001080334187,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9991000294685364},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7508000135421753},{"id":"https://openalex.org/keywords/federated-learning","display_name":"Federated learning","score":0.5073999762535095},{"id":"https://openalex.org/keywords/enhanced-data-rates-for-gsm-evolution","display_name":"Enhanced Data Rates for GSM Evolution","score":0.40790000557899475},{"id":"https://openalex.org/keywords/layer","display_name":"Layer (electronics)","score":0.37549999356269836},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.36579999327659607},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.3321000039577484}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9991000294685364},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7508000135421753},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7398999929428101},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6388000249862671},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.5073999762535095},{"id":"https://openalex.org/C162307627","wikidata":"https://www.wikidata.org/wiki/Q204833","display_name":"Enhanced Data Rates for GSM Evolution","level":2,"score":0.40790000557899475},{"id":"https://openalex.org/C2779227376","wikidata":"https://www.wikidata.org/wiki/Q6505497","display_name":"Layer (electronics)","level":2,"score":0.37549999356269836},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.36579999327659607},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.3321000039577484},{"id":"https://openalex.org/C3770464","wikidata":"https://www.wikidata.org/wiki/Q775963","display_name":"Smoothing","level":2,"score":0.31450000405311584},{"id":"https://openalex.org/C138236772","wikidata":"https://www.wikidata.org/wiki/Q25098575","display_name":"Edge device","level":3,"score":0.2924000024795532},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.2906000018119812},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.26570001244544983},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.2639000117778778},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.2538999915122986},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.250900000333786}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2602.15161","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2602.15161","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2602.15161","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2602.15161","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.6722713112831116,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Federated":[0],"learning":[1,25],"(FL)":[2],"enables":[3],"distributed":[4],"model":[5,55,121,141],"training":[6],"across":[7,119],"edge":[8],"devices":[9],"while":[10,110,138],"preserving":[11],"data":[12],"locality.":[13],"This":[14],"decentralized":[15,42],"approach":[16],"has":[17],"emerged":[18],"as":[19],"a":[20,70,82,129],"promising":[21],"solution":[22],"for":[23],"collaborative":[24],"on":[26,143],"sensitive":[27],"user":[28],"data,":[29],"effectively":[30],"addressing":[31],"the":[32,41,65,144],"longstanding":[33],"privacy":[34],"concerns":[35],"inherent":[36],"in":[37,78,157],"centralized":[38],"systems.":[39],"However,":[40],"nature":[43],"of":[44,134],"FL":[45,150,159],"exposes":[46],"new":[47],"security":[48,160],"vulnerabilities,":[49],"especially":[50],"backdoor":[51,72,97,131],"attacks":[52],"that":[53,74,92,126,163],"threaten":[54],"integrity.":[56],"To":[57],"investigate":[58],"this":[59,62],"critical":[60],"concern,":[61],"paper":[63],"presents":[64],"Layer":[66,83],"Smoothing":[67],"Attack":[68],"(LSA),":[69],"novel":[71],"attack":[73],"exploits":[75],"layer-specific":[76],"vulnerabilities":[77,156],"neural":[79],"networks.":[80],"First,":[81],"Substitution":[84],"Analysis":[85],"methodology":[86],"systematically":[87],"identifies":[88],"backdoor-critical":[89],"(BC)":[90],"layers":[91,105],"contribute":[93],"most":[94],"significantly":[95],"to":[96,106,136],"success.":[98],"Subsequently,":[99],"LSA":[100,127],"strategically":[101],"manipulates":[102],"these":[103],"BC":[104],"inject":[107],"persistent":[108],"backdoors":[109],"remaining":[111],"undetected":[112],"by":[113],"state-of-the-art":[114],"defense":[115],"mechanisms.":[116],"Extensive":[117],"experiments":[118],"diverse":[120],"architectures":[122],"and":[123,170],"datasets":[124],"demonstrate":[125],"achieves":[128],"remarkably":[130],"success":[132],"rate":[133],"up":[135],"97%":[137],"maintaining":[139],"high":[140],"accuracy":[142],"primary":[145],"task,":[146],"consistently":[147],"bypassing":[148],"modern":[149],"defenses.":[151],"These":[152],"findings":[153],"uncover":[154],"fundamental":[155],"current":[158],"frameworks,":[161],"demonstrating":[162],"future":[164],"defenses":[165],"must":[166],"incorporate":[167],"layer-aware":[168],"detection":[169],"mitigation":[171],"strategies.":[172]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-02-19T00:00:00"}
