{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T05:44:47Z","timestamp":1782798287914,"version":"3.54.5"},"reference-count":41,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,5,18]]},"DOI":"10.1109\/infocom59046.2026.11571432","type":"proceedings-article","created":{"date-parts":[[2026,6,29]],"date-time":"2026-06-29T19:38:15Z","timestamp":1782761895000},"page":"1-10","source":"Crossref","is-referenced-by-count":0,"title":["Datura: Durable and Stable Backdoor Attack against Federated Learning"],"prefix":"10.1109","author":[{"given":"Xiaoxue","family":"Song","sequence":"first","affiliation":[{"name":"Ocean University of China,School of Computer Science and Technology,Qingdao,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hui","family":"Xia","sequence":"additional","affiliation":[{"name":"Ocean University of China,School of Computer Science and Technology,Qingdao,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shuo","family":"Xu","sequence":"additional","affiliation":[{"name":"Ocean University of China,School of Computer Science and Technology,Qingdao,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yuyao","family":"Zhu","sequence":"additional","affiliation":[{"name":"Ocean University of China,School of Computer Science and Technology,Qingdao,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Le","family":"Li","sequence":"additional","affiliation":[{"name":"Ocean University of China,School of Computer Science and Technology,Qingdao,China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1561\/2200000083"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/BigData62323.2024.10825853"},{"key":"ref3","first-page":"1273","article-title":"Communication-efficient learning of deep networks from decentralized data","volume-title":"Proceedings of the 20th International Conference on Artificial Intelligence and Statistics","author":"McMahan"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TSC.2023.3332955"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2023.3324962"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/ICWS62655.2024.00027"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.52202\/075280-2675"},{"key":"ref8","first-page":"26429","article-title":"Neurotoxin: Durable backdoors in federated learning","volume-title":"International Conference on Machine Learning","author":"Zhang"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.011.2000783"},{"key":"ref10","article-title":"Dba: Distributed backdoor attacks against federated learning","volume-title":"International Conference on Learning Representations","author":"Xie"},{"key":"ref11","article-title":"Concealing backdoor model updates in federated learning by trigger-optimized data poisoning","author":"Zhang","year":"2024"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i10.26393"},{"key":"ref13","first-page":"2938","article-title":"How to backdoor federated learning","volume-title":"International conference on artificial intelligence and statistics","author":"Bagdasaryan"},{"key":"ref14","first-page":"16070","article-title":"Attack of the tails: Yes, you really can backdoor federated learning","volume-title":"Proceedings of the 34th International Conference on Neural Information Processing Systems","author":"Wang"},{"key":"ref15","article-title":"Maximal jacobian-based saliency map attack","author":"Wiyatno","year":"2018"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2021\/591"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v39i3.32300"},{"key":"ref18","first-page":"2206","article-title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","volume-title":"Proceedings of the 37th International Conference on Machine Learning","author":"Croce"},{"key":"ref19","first-page":"119","article-title":"Machine learning with adversaries: Byzantine tolerant gradient descent","volume-title":"Proceedings of the 30th International Conference on Neural Information Processing Systems","author":"Blanchard"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2022.23156"},{"key":"ref21","first-page":"1415","article-title":"{FLAME}: Taming backdoors in federated learning","volume-title":"31st USENIX Security Symposium","author":"Nguyen"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2021.3118347"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3534678.3539231"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i10.17118"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TSP.2022.3153135"},{"key":"ref26","article-title":"FLIP: A provable defense framework for backdoor mitigation in federated learning","volume-title":"International Conference on Learning Representations","author":"Zhang"},{"key":"ref27","article-title":"Can you really backdoor federated learning?","author":"Sun","year":"2019"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3384846"},{"key":"ref29","article-title":"The lottery ticket hypothesis: Finding sparse, trainable neural networks","volume-title":"International Conference on Learning Representations","author":"Frankle"},{"key":"ref30","article-title":"Drawing early-bird tickets: Toward more efficient training of deep networks","volume-title":"International Conference on Learning Representations","author":"You"},{"key":"ref31","first-page":"3491","article-title":"Learning compact representations of neural networks using discriminative masking (DAM)","volume-title":"Proceedings of the 34th International Conference on Neural Information Processing Systems","author":"Bu"},{"key":"ref32","article-title":"Fashion-mnist: a novel image dataset for benchmarking machine learning algorithms","author":"Xiao","year":"2017"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2017.7966217"},{"key":"ref34","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.2118\/18761-MS"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2011.6033395"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01167"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00140"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TAI.2022.3185179"},{"key":"ref41","article-title":"A tutorial on principal component analysis","author":"Shlens","year":"2014"}],"event":{"name":"IEEE INFOCOM 2026 - IEEE Conference on Computer Communications","location":"Tokyo, Japan","start":{"date-parts":[[2026,5,18]]},"end":{"date-parts":[[2026,5,21]]}},"container-title":["IEEE INFOCOM 2026 - IEEE Conference on Computer Communications"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11571071\/11571169\/11571432.pdf?arnumber=11571432","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T05:15:50Z","timestamp":1782796550000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11571432\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,18]]},"references-count":41,"URL":"https:\/\/doi.org\/10.1109\/infocom59046.2026.11571432","relation":{},"subject":[],"published":{"date-parts":[[2026,5,18]]}}}