{"id":"https://openalex.org/W7130348191","doi":"https://doi.org/10.48550/arxiv.2602.15671","title":"Revisiting Backdoor Threat in Federated Instruction Tuning from a Signal Aggregation Perspective","display_name":"Revisiting Backdoor Threat in Federated Instruction Tuning from a Signal Aggregation Perspective","publication_year":2026,"publication_date":"2026-02-17","ids":{"openalex":"https://openalex.org/W7130348191","doi":"https://doi.org/10.48550/arxiv.2602.15671"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2602.15671","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2602.15671","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2602.15671","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5126309665","display_name":"Haodong Zhao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhao, Haodong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126285650","display_name":"Jinming Hu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hu, Jinming","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5126333913","display_name":"Gongshen Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Gongshen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9046000242233276,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9046000242233276,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.016699999570846558,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.01590000092983246,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9994000196456909},{"id":"https://openalex.org/keywords/perspective","display_name":"Perspective (graphical)","score":0.649399995803833},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5273000001907349},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.4878999888896942},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.47290000319480896}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9994000196456909},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.739300012588501},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.664900004863739},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.649399995803833},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5273000001907349},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.4878999888896942},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.47290000319480896},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.3294999897480011},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.3224000036716461},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.24529999494552612}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2602.15671","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2602.15671","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2602.15671","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2602.15671","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Federated":[0],"learning":[1],"security":[2],"research":[3],"has":[4],"predominantly":[5],"focused":[6],"on":[7,62],"backdoor":[8,73,96,114,156],"threats":[9],"from":[10,36,99,161],"a":[11,28],"minority":[12],"of":[13,44,72,111,121,129,184],"malicious":[14,162],"clients":[15],"that":[16,154],"intentionally":[17],"corrupt":[18],"model":[19,94],"updates.":[20],"This":[21,47],"paper":[22],"challenges":[23],"this":[24,91,122,168],"paradigm":[25],"by":[26],"investigating":[27],"more":[29],"pervasive":[30],"and":[31,65,133],"insidious":[32],"threat:":[33,123],"\\textit{backdoor":[34],"vulnerabilities":[35],"low-concentration":[37],"poisoned":[38,132],"data":[39,74,131,187],"distributed":[40,113,134],"across":[41,135],"the":[42,95,103,109,112,119,137,144,182],"datasets":[43],"benign":[45],"clients.}":[46],"scenario":[48],"is":[49],"increasingly":[50],"common":[51],"in":[52],"federated":[53],"instruction":[54],"tuning":[55],"for":[56,159,176],"language":[57],"models,":[58],"which":[59],"often":[60],"rely":[61],"unverified":[63],"third-party":[64],"crowd-sourced":[66],"data.":[67],"We":[68],"analyze":[69,90],"two":[70],"forms":[71],"through":[75],"real":[76],"cases:":[77],"1)":[78],"\\textit{natural":[79],"trigger":[80],"(inherent":[81],"features":[82],"as":[83],"implicit":[84],"triggers)};":[85],"2)":[86],"\\textit{adversary-injected":[87],"trigger}.":[88],"To":[89],"threat,":[92],"we":[93,152],"implantation":[97],"process":[98],"signal":[100],"aggregation,":[101],"proposing":[102],"Backdoor":[104],"Signal-to-Noise":[105],"Ratio":[106],"to":[107,181],"quantify":[108],"dynamics":[110],"signal.":[115],"Extensive":[116],"experiments":[117],"reveal":[118],"severity":[120],"With":[124],"just":[125],"less":[126],"than":[127],"10\\%":[128],"training":[130],"clients,":[136,163],"attack":[138],"success":[139],"rate":[140],"exceeds":[141],"85\\%,":[142],"while":[143],"primary":[145],"task":[146],"performance":[147],"remains":[148],"largely":[149],"intact.":[150],"Critically,":[151],"demonstrate":[153],"state-of-the-art":[155],"defenses,":[157],"designed":[158],"attacks":[160],"are":[164],"fundamentally":[165],"ineffective":[166],"against":[167],"threat.":[169],"Our":[170],"findings":[171],"highlight":[172],"an":[173],"urgent":[174],"need":[175],"new":[177],"defense":[178],"mechanisms":[179],"tailored":[180],"realities":[183],"modern,":[185],"decentralized":[186],"ecosystems.":[188]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-02-19T00:00:00"}