{"id":"https://openalex.org/W7165611680","doi":"https://doi.org/10.48550/arxiv.2606.22700","title":"SCRUB-FL: Sanitizing and Cleansing Representations via Unlearning of Backdoors","display_name":"SCRUB-FL: Sanitizing and Cleansing Representations via Unlearning of Backdoors","publication_year":2026,"publication_date":"2026-06-21","ids":{"openalex":"https://openalex.org/W7165611680","doi":"https://doi.org/10.48550/arxiv.2606.22700"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.22700","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.22700","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.22700","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5001753157","display_name":"Osama Wehbi","orcid":"https://orcid.org/0000-0002-2121-218X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wehbi, Osama","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029454859","display_name":"Sarhad Arisdakessian","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Arisdakessian, Sarhad","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139135910","display_name":"Omar Abdel Wahab","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wahab, Omar Abdel","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005269467","display_name":"Azzam Mourad","orcid":"https://orcid.org/0000-0001-9434-5322"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mourad, Azzam","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5049846737","display_name":"Hadi Otrok","orcid":"https://orcid.org/0000-0002-9574-5384"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Otrok, Hadi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5716999769210815,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5716999769210815,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.35370001196861267,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.006599999964237213,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9890000224113464},{"id":"https://openalex.org/keywords/construct","display_name":"Construct (python library)","score":0.5529000163078308},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.4187000095844269},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.3977999985218048},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.39719998836517334},{"id":"https://openalex.org/keywords/residual","display_name":"Residual","score":0.3580000102519989},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.34709998965263367}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9890000224113464},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7641000151634216},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.5529000163078308},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5001999735832214},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.4187000095844269},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.40389999747276306},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.3977999985218048},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.39719998836517334},{"id":"https://openalex.org/C155512373","wikidata":"https://www.wikidata.org/wiki/Q287450","display_name":"Residual","level":2,"score":0.3580000102519989},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.34709998965263367},{"id":"https://openalex.org/C119770614","wikidata":"https://www.wikidata.org/wiki/Q5516347","display_name":"Gadget","level":2,"score":0.32910001277923584},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.3181000053882599},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3109000027179718},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.29010000824928284},{"id":"https://openalex.org/C2780560020","wikidata":"https://www.wikidata.org/wiki/Q79719","display_name":"License","level":2,"score":0.2745000123977661},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.2741999924182892},{"id":"https://openalex.org/C132964779","wikidata":"https://www.wikidata.org/wiki/Q2110223","display_name":"Raw data","level":2,"score":0.2705000042915344},{"id":"https://openalex.org/C65682993","wikidata":"https://www.wikidata.org/wiki/Q1056451","display_name":"Reflection (computer programming)","level":2,"score":0.26159998774528503}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.22700","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.22700","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.22700","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.22700","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.4269031584262848,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Federated":[0],"Learning":[1],"(FL)":[2],"enables":[3],"collaborative":[4],"model":[5,42],"training":[6,38],"without":[7,166,233],"sharing":[8],"raw":[9,168],"data,":[10],"making":[11],"it":[12,24],"a":[13,115,160,190,239],"promising":[14],"paradigm":[15],"for":[16,118],"privacy-sensitive":[17],"applications.":[18],"However,":[19],"its":[20],"decentralized":[21],"nature":[22],"makes":[23],"inherently":[25],"vulnerable":[26],"to":[27,40,97,148,158,181,205,218],"backdoor":[28,56,91,120,214],"attacks,":[29],"where":[30],"malicious":[31,207],"clients":[32,85,126],"embed":[33],"hidden":[34],"triggers":[35],"into":[36],"local":[37],"data":[39],"manipulate":[41],"predictions.":[43],"Existing":[44],"defenses":[45,232],"mainly":[46],"operate":[47],"during":[48,51],"before":[49],"and":[50,108,133,177,197,203],"aggregation":[52],"cannot":[53],"fully":[54],"eliminate":[55],"behaviors":[57,92],"that":[58,210],"persist":[59],"in":[60,89,122],"the":[61,66,75,172,183,213,245],"converged":[62],"global":[63,161],"model.":[64],"Moreover,":[65],"effectiveness":[67],"of":[68,78,80,113,163],"post-training":[69,119],"sanitization":[70],"is":[71],"often":[72],"limited":[73],"by":[74,186],"server's":[76],"lack":[77],"knowledge":[79,237],"trigger":[81,236],"patterns":[82,165],"or":[83,93,238],"poisoned":[84],"after":[86],"convergence,":[87,171],"resulting":[88],"residual":[90],"accuracy":[94],"degradation":[95],"due":[96],"neuron":[98],"entanglement.":[99],"To":[100],"address":[101],"this":[102],"limitation,":[103],"we":[104],"propose":[105],"SCRUB-FL":[106,211],"(Sanitizing":[107],"Cleansing":[109],"Representations":[110],"via":[111],"Unlearning":[112],"Backdoors),":[114],"two-phase":[116],"solution":[117],"removal":[121],"FL.":[123],"During":[124],"training,":[125],"identify":[127],"suspicious":[128,164],"samples":[129,176],"using":[130],"spectral":[131],"analysis":[132],"activation":[134],"clustering,":[135],"then":[136],"train":[137],"lightweight":[138],"Wasserstein":[139],"Generative":[140],"Adversarial":[141],"Network":[142],"with":[143],"Gradient":[144],"Penalty":[145],"(WGAN-GP)":[146],"models":[147],"capture":[149],"trigger-related":[150],"distributions.":[151],"The":[152],"generator":[153],"parameters":[154],"are":[155],"aggregated":[156],"server-side":[157],"construct":[159],"representation":[162],"exposing":[167],"data.":[169],"After":[170],"server":[173],"synthesizes":[174],"trigger-approximating":[175],"applies":[178],"machine":[179],"unlearning":[180],"erase":[182],"trigger-target":[184],"association":[185],"redistributing":[187],"predictions":[188],"toward":[189],"uniform":[191],"distribution.":[192],"Experimental":[193],"evaluations":[194],"on":[195],"CIFAR-10":[196],"GTSRB":[198],"across":[199],"three":[200],"attack":[201,215],"types":[202],"up":[204],"40%":[206],"participation":[208],"demonstrate":[209],"reduces":[212],"success":[216],"rate":[217],"as":[219,221],"low":[220],"3.88%":[222],"while":[223],"maintaining":[224],"over":[225],"91%":[226],"normal":[227],"task":[228],"accuracy,":[229],"outperforming":[230],"state-of-the-art":[231],"requiring":[234],"prior":[235],"large":[240],"clean":[241],"proxy":[242],"dataset":[243],"at":[244],"server.":[246]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-24T00:00:00"}