{"id":"https://openalex.org/W7165901686","doi":"https://doi.org/10.48550/arxiv.2606.25858","title":"Color Matters: Trigger Color Affects Success in Federated Backdoor Attacks","display_name":"Color Matters: Trigger Color Affects Success in Federated Backdoor Attacks","publication_year":2026,"publication_date":"2026-06-24","ids":{"openalex":"https://openalex.org/W7165901686","doi":"https://doi.org/10.48550/arxiv.2606.25858"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.25858","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.25858","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.25858","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5139347155","display_name":"Kavindu Herath","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Herath, Kavindu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054002059","display_name":"Joshua C. Zhao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhao, Joshua C.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5047310442","display_name":"Saurabh Bagchi","orcid":"https://orcid.org/0000-0002-4239-5632"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bagchi, Saurabh","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8151000142097473,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8151000142097473,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.04569999873638153,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.02370000071823597,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9790999889373779},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.38190001249313354},{"id":"https://openalex.org/keywords/attack-model","display_name":"Attack model","score":0.32330000400543213},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.30300000309944153},{"id":"https://openalex.org/keywords/construct","display_name":"Construct (python library)","score":0.29490000009536743}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9790999889373779},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7311000227928162},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5440000295639038},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3889999985694885},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.38190001249313354},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.32330000400543213},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.30300000309944153},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.29490000009536743},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.287200003862381},{"id":"https://openalex.org/C132010649","wikidata":"https://www.wikidata.org/wiki/Q189222","display_name":"Intuition","level":2,"score":0.2721000015735626}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.25858","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.25858","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.25858","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.25858","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Federated":[0],"learning":[1,73],"is":[2,216],"vulnerable":[3],"to":[4,84,90,135,140,149],"backdoor":[5,25,228],"attacks":[6,189,200],"in":[7,27,60,69,128,220,230],"which":[8,28],"malicious":[9,137],"clients":[10,76,97],"inject":[11],"poisoned":[12,78],"updates":[13,138],"while":[14,42,95,152],"preserving":[15],"benign-task":[16],"performance.":[17],"In":[18],"this":[19,105],"paper,":[20],"we":[21],"study":[22],"a":[23,70,82,109,114,159,217],"semantics-driven":[24],"mechanism":[26,106],"attackers":[29],"use":[30],"natural":[31],"visual":[32],"accessories":[33],"as":[34,55],"triggers":[35,184,196],"and":[36,57,62,65,87,113,133,178,224],"manipulate":[37],"only":[38,99],"the":[39,44,129,141,147,191,202,221],"trigger":[40,52,83,166,175,214],"color":[41,167,215],"keeping":[43],"attack":[45,148,170],"pipeline":[46],"fixed.":[47],"Our":[48],"framework":[49],"considers":[50],"semantic":[51,227],"objects":[53],"such":[54],"masks":[56],"sunglasses,":[58],"instantiated":[59],"black":[61,195,203],"white":[63],"variants,":[64],"evaluates":[66],"their":[67],"effect":[68],"controlled":[71],"federated":[72,231],"setting.":[74],"Malicious":[75],"construct":[77],"samples":[79],"by":[80],"applying":[81],"source-class":[85],"images":[86],"relabeling":[88],"them":[89],"an":[91],"attacker-chosen":[92],"target":[93,124],"class,":[94,193],"benign":[96],"train":[98],"on":[100,158],"clean":[101,120],"data.":[102],"We":[103],"analyze":[104],"under":[107,209],"both":[108],"standard":[110],"poisoning":[111,179],"objective":[112,117],"stronger":[115],"SABLE-based":[116],"that":[118,165,213],"combines":[119],"classification":[121],"loss,":[122,125],"triggered":[123],"feature-separation":[126],"loss":[127],"penultimate":[130],"representation":[131],"space,":[132],"regularization":[134],"keep":[136],"close":[139],"global":[142],"model.":[143],"This":[144],"design":[145],"enables":[146],"remain":[150],"effective":[151,187],"reducing":[153],"excessive":[154],"update":[155],"drift.":[156],"Experiments":[157],"four-class":[160],"CelebA":[161],"hair-color":[162],"task":[163],"show":[164],"significantly":[168],"changes":[169],"success":[171],"rate":[172],"even":[173],"when":[174],"semantics,":[176],"placement,":[177],"budget":[180],"are":[181,185],"unchanged.":[182],"White":[183],"more":[186],"for":[188,199],"targeting":[190,201],"blond":[192],"whereas":[194],"perform":[197],"better":[198],"class.":[204],"The":[205],"same":[206],"trend":[207],"persists":[208],"robust":[210],"aggregation,":[211],"showing":[212],"meaningful":[218],"factor":[219],"operation,":[222],"persistence,":[223],"evaluation":[225],"of":[226],"mechanisms":[229],"learning.":[232]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-26T00:00:00"}