{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T05:44:36Z","timestamp":1782798276744,"version":"3.54.5"},"reference-count":51,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,5,18]]},"DOI":"10.1109\/infocom59046.2026.11571624","type":"proceedings-article","created":{"date-parts":[[2026,6,29]],"date-time":"2026-06-29T19:38:15Z","timestamp":1782761895000},"page":"1-10","source":"Crossref","is-referenced-by-count":0,"title":["Less is More: Persistent Low-Frequency Backdoor Injection in Federated Learning"],"prefix":"10.1109","author":[{"given":"Pei","family":"Ye","sequence":"first","affiliation":[{"name":"Wuhan University,Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering,Wuhan,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yuqing","family":"Li","sequence":"additional","affiliation":[{"name":"Wuhan University,Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering,Wuhan,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kun","family":"He","sequence":"additional","affiliation":[{"name":"Wuhan University,Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering,Wuhan,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Haoran","family":"Wang","sequence":"additional","affiliation":[{"name":"Wuhan University,Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering,Wuhan,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ruiying","family":"Du","sequence":"additional","affiliation":[{"name":"Wuhan University,Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering,Wuhan,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wei","family":"Wang","sequence":"additional","affiliation":[{"name":"Hong Kong University of Science and Technology,Department of Computer Science and Engineering"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Federated learning: Collaborative machine learning without centralized training data","author":"McMahan","year":"2017"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3420126"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.52202\/079017-3528"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3720539"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM52122.2024.10621440"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2024.3394528"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-78841-3_2"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1016\/j.iot.2024.101061"},{"key":"ref9","first-page":"2938","article-title":"How to backdoor federated learning","volume-title":"Proc. AISTATS","author":"Bagdasaryan"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179401"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.52202\/075280-2675"},{"key":"ref12","first-page":"4443","article-title":"Darkfed: A data-free backdoor attack in federated learning","volume-title":"Proc. IJCAI","author":"Li"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/CNS62487.2024.10735501"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3715014.3724042"},{"key":"ref15","first-page":"26 429","article-title":"Neurotoxin: Durable backdoors in federated learning","volume-title":"Proc. ICML","author":"Zhang"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i19.30131"},{"key":"ref17","article-title":"A little is enough: Circumventing defenses for distributed learning","volume-title":"Proc. NeurIPS","author":"Baruch"},{"key":"ref18","first-page":"1","article-title":"Dba: Distributed backdoor attacks against federated learning","volume-title":"Proc. ICLR","author":"Xie"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3625558"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TCE.2024.3385440"},{"key":"ref21","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref22","article-title":"Cinic-10 is not imagenet or cifar-10","author":"Darlow","year":"2018"},{"issue":"7","key":"ref23","first-page":"3","article-title":"Tiny imagenet visual recognition challenge","volume":"7","author":"Le","year":"2015","journal-title":"CS 231N"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i10.26393"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52734.2025.02400"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1016\/j.engappai.2023.107166"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2024.3361451"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2025.3643155"},{"key":"ref29","first-page":"1415","article-title":"Flame: Taming backdoors in federated learning","volume-title":"Proc. USENIX Security","author":"Nguyen"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.21105\/joss.00205"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2024.24620"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3534678.3539231"},{"key":"ref33","volume-title":"A Second Course in Calculus","volume":"4197","author":"Lang","year":"1968"},{"key":"ref34","first-page":"119","article-title":"Machine learning with adversaries: Byzantine tolerant gradient descent","volume-title":"Proc. NeurIPS","author":"Blanchard"},{"key":"ref35","first-page":"3521","article-title":"The hidden vulnerability of distributed learning in byzantium","volume-title":"Proc. ICML","author":"Guerraoui"},{"key":"ref36","first-page":"5650","article-title":"Byzantine-robust distributed learning: Towards optimal statistical rates","volume-title":"Proc. ICML","author":"Yin"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2022.23054"},{"key":"ref38","article-title":"Ensemble distillation for robust model fusion in federated learning","volume-title":"Proc. NeurIPS","author":"Lin"},{"key":"ref39","article-title":"Fedrad: Federated robust adaptive distillation","author":"Sturluson","year":"2021"},{"key":"ref40","article-title":"Mitigating backdoor attacks in federated learning","author":"Wu","year":"2020"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v39i16.33820"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/TBDATA.2025.3527202"},{"key":"ref43","article-title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain","author":"Gu","year":"2017"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2024.3418862"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i10.28971"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2025.3586943"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i7.26083"},{"key":"ref49","article-title":"Estimating a dirichlet distribution","author":"Minka","year":"2000"},{"key":"ref50","first-page":"4193","article-title":"Backdoorindicator: Leveraging ood data for proactive backdoor detection in federated learning","volume-title":"Proc. USENIX Security","author":"Li"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1016\/0169-7439(87)80084-9"}],"event":{"name":"IEEE INFOCOM 2026 - IEEE Conference on Computer Communications","location":"Tokyo, Japan","start":{"date-parts":[[2026,5,18]]},"end":{"date-parts":[[2026,5,21]]}},"container-title":["IEEE INFOCOM 2026 - IEEE Conference on Computer Communications"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11571071\/11571169\/11571624.pdf?arnumber=11571624","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T05:13:11Z","timestamp":1782796391000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11571624\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,18]]},"references-count":51,"URL":"https:\/\/doi.org\/10.1109\/infocom59046.2026.11571624","relation":{},"subject":[],"published":{"date-parts":[[2026,5,18]]}}}