Coupled Trigger Optimization and Vulnerable Parameter Alignment for Persistent Backdoor Attacks on Federated Learning
zhixuan ma, Haichang Gao, Shangwen Li, Ping Wang, Han Yu
摘要
Federated learning (FL) is vulnerable to backdoor attacks. Yet sustaining backdoor effectiveness under repeated aggregation remains challenging. Existing methods often rely on heuristic trigger designs or indiscriminant parameter manipulation, leading to rapid decay or detectable anomalies. In this work, we view FL backdoor persistence through the lens of optimization dynamics, and argue that long-lasting attacks require alignment between trigger-induced representations and aggregation-stable parameter directions. Based on this insight, we propose the Coupled Trigger Optimization and Vulnerable Parameter Alignment (CTO-VPA) FL backdoor attack method. By constraining updates to this coupled subspace, backdoor behaviors can be embedded into optimization-stable directions while preserving benign performance. Experiments across multiple datasets and defense settings show that CTO-VPA achieves substantially improved persistence and robustness compared to prior attacks, highlighting the importance of trigger–parameter coupling in FL settings. The code is available at https://github.com/SwLi415/COVERT.
问问这篇 Paper
智能体会读完全文。
Lune 把这篇 Paper 索引到了每一个公式,引用它的顶会 Paper 也一样。你提问,回答直接引用原文。
它引用的顶会 Paper11
- Attack of the Tails: Yes, You Really Can Backdoor Federated LearningHongyi Wang, Kartik Sreenivasan, Shashank Rajput, Harit Vishwakarma 等NeurIPS 2020 · 被引用 862 次
- Lockdown: Backdoor Defense for Federated Learning with Isolated Subspace TrainingTiansheng Huang, Sihao Hu, Ka-Ho Chow, Fatih Ilhan 等NeurIPS 2023 · 被引用 46 次
- Backdoor Federated Learning by Poisoning Backdoor-Critical LayersHaomin Zhuang, Mingxian Yu, Hao Wang, Yang Hua 等ICLR 2024 · 被引用 40 次
- Cross-Silo Feature Space Alignment for Federated Learning on Clients with Imbalanced DataZhuang Qi, Lei Meng, Zhaochuan Li, Han Hu 等AAAI 2025 · 被引用 39 次
- Lurking in the shadows: Unveiling Stealthy Backdoor Attacks against Personalized Federated LearningXiaoting Lyu, Yufei Han, Wei Wang, Jingkai Liu 等USENIX Security 2024 · 被引用 20 次
相关 Paper
- A3FL: Adversarially Adaptive Backdoor Attacks to Federated LearningHangfan Zhang, Jinyuan Jia, Jinghui Chen, Lu Lin 等NeurIPS 2023 · 被引用 102 次
- FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated LearningXinhai Yan, Libing Wu, Zhuangzhuang Zhang, Bingyi Liu 等ACM MM 2025 · 被引用 2 次
- Less is More: Persistent Low-Frequency Backdoor Injection in Federated LearningPei Ye, Yuqing Li, Kun He, Haoran Wang 等INFOCOM 2026
- Batman: Benign Knowledge Alignment Through Malicious Null Space in Federated Backdoor AttackWenwen He, Wenke Huang, Yiyang Fang, Wenjie Qu 等CVPR 2026
- FLIP: A Provable Defense Framework for Backdoor Mitigation in Federated LearningKaiyuan Zhang, Guanhong Tao, Qiuling Xu, Siyuan Cheng 等ICLR 2023 · 被引用 17 次
