{"id":"https://openalex.org/W7131378429","doi":"https://doi.org/10.48550/arxiv.2602.20593","title":"Is the Trigger Essential? A Feature-Based Triggerless Backdoor Attack in Vertical Federated Learning","display_name":"Is the Trigger Essential? A Feature-Based Triggerless Backdoor Attack in Vertical Federated Learning","publication_year":2026,"publication_date":"2026-02-24","ids":{"openalex":"https://openalex.org/W7131378429","doi":"https://doi.org/10.48550/arxiv.2602.20593"},"language":null,"primary_location":{"id":"pmh:doi:10.48550/arxiv.2602.20593","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"type":"article","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":null,"any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5126800083","display_name":"Yige Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Yige","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031432933","display_name":"Yiwei Lou","orcid":"https://orcid.org/0000-0002-5618-3366"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lou, Yiwei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126812167","display_name":"Che Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Che","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126796049","display_name":"Yongzhi Cao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Cao, Yongzhi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5123159583","display_name":"Hanpin Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Hanpin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.23203233,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.8411999940872192,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.8411999940872192,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.0737999975681305,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.028599999845027924,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9983999729156494},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.4699000120162964},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.3617999851703644},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.33340001106262207},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.32690000534057617}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9983999729156494},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6884999871253967},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6470999717712402},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.4699000120162964},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.3617999851703644},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.33340001106262207},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.32690000534057617},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.30149999260902405},{"id":"https://openalex.org/C6295992","wikidata":"https://www.wikidata.org/wiki/Q976521","display_name":"Cryptosystem","level":3,"score":0.2842000126838684},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.267300009727478},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.25999999046325684}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:doi:10.48550/arxiv.2602.20593","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},{"id":"doi:10.48550/arxiv.2602.20593","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2602.20593","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:doi:10.48550/arxiv.2602.20593","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.7019055485725403}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"As":[0],"a":[1,27,56,102,111,120],"distributed":[2],"collaborative":[3],"machine":[4],"learning":[5,9],"paradigm,":[6],"vertical":[7],"federated":[8],"(VFL)":[10],"allows":[11],"multiple":[12],"passive":[13,194],"parties":[14,195],"with":[15,22,150,192,211],"distinct":[16,212],"features":[17],"and":[18,42,65,152,155,196,220,246,253],"one":[19,198],"active":[20],"party":[21],"labels":[23],"to":[24,73,158,179,239,249],"collaboratively":[25],"train":[26],"model.":[28],"Although":[29],"it":[30],"is":[31,128],"known":[32],"for":[33,91,143],"the":[34,59,62,67,71,74,77,126,134,144,160,185,227,237],"privacy-preserving":[35],"capabilities,":[36],"VFL":[37,108,190,244],"still":[38],"faces":[39],"significant":[40],"privacy":[41],"security":[43,123,241],"threats":[44,242],"from":[45],"backdoor":[46,49,92,104,114,146,156,175,232],"attacks.":[47],"Existing":[48],"attacks":[50,93,176],"typically":[51],"involve":[52],"an":[53],"attacker":[54,127],"implanting":[55],"trigger":[57,72],"into":[58],"model":[60],"during":[61,76,133],"training":[63,135],"phase":[64],"executing":[66],"attack":[68,105,117,171,204,216,233],"by":[69,109,177],"adding":[70],"samples":[75],"inference":[78,142],"phase.":[79,136],"However,":[80],"in":[81,94,107,189,243],"this":[82,230],"paper,":[83],"we":[84,100],"find":[85],"that":[86,169,226],"triggers":[87],"are":[88],"not":[89],"essential":[90],"VFL.":[95],"In":[96],"light":[97],"of":[98,200,229],"this,":[99],"disclose":[101],"new":[103],"pathway":[106,234],"introducing":[110],"feature-based":[112],"triggerless":[113,231],"attack.":[115,161],"This":[116],"operates":[118],"under":[119],"more":[121,251],"stringent":[122],"assumption,":[124],"where":[125],"honest-but-curious":[129],"rather":[130],"than":[131],"malicious":[132],"It":[137],"comprises":[138],"three":[139,173],"modules:":[140],"label":[141],"targeted":[145],"attack,":[147],"poison":[148],"generation":[149],"amplification":[151],"perturbation":[153],"mechanisms,":[154],"execution":[157],"implement":[159],"Extensive":[162],"experiments":[163],"on":[164],"five":[165],"benchmark":[166],"datasets":[167],"demonstrate":[168],"our":[170,203,215],"outperforms":[172],"baseline":[174],"2":[178],"50":[180],"times":[181],"while":[182],"minimally":[183],"impacting":[184],"main":[186],"task.":[187],"Even":[188],"scenarios":[191,245],"32":[193],"only":[197],"set":[199],"auxiliary":[201],"data,":[202],"maintains":[205],"high":[206],"performance.":[207],"Moreover,":[208],"when":[209],"confronted":[210],"defense":[213,255],"strategies,":[214],"remains":[217],"largely":[218],"unaffected":[219],"exhibits":[221],"strong":[222],"robustness.":[223],"We":[224],"hope":[225],"disclosure":[228],"will":[235],"encourage":[236],"community":[238],"revisit":[240],"inspire":[247],"researchers":[248],"develop":[250],"robust":[252],"practical":[254],"strategies.":[256]},"counts_by_year":[],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2026-02-26T00:00:00"}