{"id":"https://openalex.org/W7150939263","doi":"https://doi.org/10.48550/arxiv.2604.02372","title":"Backdoor Attacks on Decentralised Post-Training","display_name":"Backdoor Attacks on Decentralised Post-Training","publication_year":2026,"publication_date":"2026-03-31","ids":{"openalex":"https://openalex.org/W7150939263","doi":"https://doi.org/10.48550/arxiv.2604.02372"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.02372","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.02372","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.02372","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5133039214","display_name":"O\u011fuzhan Ersoy","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ersoy, O\u011fuzhan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133006083","display_name":"Nikolay Blagoev","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Blagoev, Nikolay","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5093917340","display_name":"Jona te Lintelo","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lintelo, Jona te","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101725689","display_name":"Stefanos Koffas","orcid":"https://orcid.org/0000-0001-6543-4801"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Koffas, Stefanos","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133060110","display_name":"Marina Kr\u010dek","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kr\u010dek, Marina","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5133053399","display_name":"Stjepan Picek","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Picek, Stjepan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9162999987602234,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9162999987602234,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.02319999970495701,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.009999999776482582,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9807999730110168},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7325000166893005},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.720300018787384},{"id":"https://openalex.org/keywords/attack-model","display_name":"Attack model","score":0.41819998621940613},{"id":"https://openalex.org/keywords/parallelism","display_name":"Parallelism (grammar)","score":0.2953999936580658}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9807999730110168},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7325000166893005},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.720300018787384},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7085999846458435},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5688999891281128},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.41819998621940613},{"id":"https://openalex.org/C2781172179","wikidata":"https://www.wikidata.org/wiki/Q853109","display_name":"Parallelism (grammar)","level":2,"score":0.2953999936580658},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.2906999886035919},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.28360000252723694},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.24369999766349792}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.02372","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.02372","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.02372","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.02372","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/4","display_name":"Quality Education","score":0.45534321665763855}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Decentralised":[0],"post-training":[1,21],"of":[2,58,69,97,133,139,150,167,189],"large":[3],"language":[4],"models":[5],"utilises":[6],"data":[7,15,47,113],"and":[8,16,27,43,130,179],"pipeline":[9,59,80,99],"parallelism":[10,48,60],"techniques":[11],"to":[12,25,63,83,160],"split":[13],"the":[14,17,56,67,75,85,91,98,102,106,128,134,140,148,151,155,165,176],"model.":[18,87],"Unfortunately,":[19],"decentralised":[20,46],"can":[22,126],"be":[23],"vulnerable":[24],"poisoning":[26,64],"backdoor":[28,77,129,183],"attacks":[29,42],"by":[30,170],"one":[31],"or":[32,49,105,143],"more":[33],"malicious":[34],"participants.":[35],"There":[36],"have":[37],"been":[38],"several":[39],"works":[40,54],"on":[41,55,79,175],"defenses":[44],"against":[45],"federated":[50],"learning.":[51],"However,":[52],"existing":[53,109],"robustness":[57,166],"are":[61],"limited":[62,124],"attacks.":[65],"To":[66],"best":[68],"our":[70,89,146,168,182],"knowledge,":[71],"this":[72],"paper":[73],"presents":[74],"first":[76],"attack":[78,169,184],"parallelism,":[81],"designed":[82],"misalign":[84],"trained":[86],"In":[88],"setup,":[90],"adversary":[92,125],"controls":[93],"an":[94],"intermediate":[95],"stage":[96],"rather":[100],"than":[101],"whole":[103],"model":[104,135],"dataset,":[107],"making":[108],"attacks,":[110],"such":[111,122],"as":[112],"poisoning,":[114],"inapplicable.":[115],"Our":[116],"experimental":[117],"results":[118],"show":[119],"that":[120,181],"even":[121],"a":[123],"inject":[127],"cause":[131],"misalignment":[132],"during":[136],"post-training,":[137],"independent":[138],"learned":[141],"domain":[142],"dataset.":[144],"With":[145],"attack,":[147],"inclusion":[149],"trigger":[152],"word":[153],"reduces":[154],"alignment":[156,173],"percentage":[157],"from":[158],"$80\\%$":[159],"$6\\%$.":[161],"We":[162],"further":[163],"test":[164],"applying":[171],"safety":[172],"training":[174],"final":[177],"model,":[178],"demonstrate":[180],"still":[185],"succeeds":[186],"in":[187],"$60\\%$":[188],"cases.":[190]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-04-07T00:00:00"}