{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,13]],"date-time":"2026-07-13T21:07:45Z","timestamp":1783976865411,"version":"3.55.0"},"reference-count":36,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U25B2026"],"award-info":[{"award-number":["U25B2026"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62472114"],"award-info":[{"award-number":["62472114"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62002077"],"award-info":[{"award-number":["62002077"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100021171","name":"Guangdong Basic and Applied Basic Research Foundation","doi-asserted-by":"crossref","award":["2026A1515011322"],"award-info":[{"award-number":["2026A1515011322"]}],"id":[{"id":"10.13039\/501100021171","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100021171","name":"Guangdong Basic and Applied Basic Research Foundation","doi-asserted-by":"crossref","award":["2024A1515011492"],"award-info":[{"award-number":["2024A1515011492"]}],"id":[{"id":"10.13039\/501100021171","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Joint Funding Special Project for Guangdong-Hong Kong Science and Technology Innovation","award":["2024A0505040027"],"award-info":[{"award-number":["2024A0505040027"]}]},{"name":"Guangdong Provincial Key Research Project for Regular Universities in Priority Area","award":["2025ZDZX3019"],"award-info":[{"award-number":["2025ZDZX3019"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62472186"],"award-info":[{"award-number":["62472186"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62402363"],"award-info":[{"award-number":["62402363"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Hubei Provincial Natural Science Foundation of China","award":["2024AFD413"],"award-info":[{"award-number":["2024AFD413"]}]},{"name":"Natural Science Foundation of Wuhan","award":["2024040801020213"],"award-info":[{"award-number":["2024040801020213"]}]},{"name":"Shaanxi Province Postdoctoral Research Funding","award":["2024BSHSDZZ106"],"award-info":[{"award-number":["2024BSHSDZZ106"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1109\/tdsc.2026.3687550","type":"journal-article","created":{"date-parts":[[2026,4,28]],"date-time":"2026-04-28T19:50:47Z","timestamp":1777405847000},"page":"8777-8793","source":"Crossref","is-referenced-by-count":0,"title":["Triggers Magic Mirror: Trigger Inversion for Backdoor Detection in Non-IID Federated Learning"],"prefix":"10.1109","volume":"23","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4633-7675","authenticated-orcid":false,"given":"Zhe","family":"Sun","sequence":"first","affiliation":[{"name":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yufu","family":"Zou","sequence":"additional","affiliation":[{"name":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8829-4442","authenticated-orcid":false,"given":"Lihua","family":"Yin","sequence":"additional","affiliation":[{"name":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3411-7947","authenticated-orcid":false,"given":"Tianqing","family":"Zhu","sequence":"additional","affiliation":[{"name":"Faculty of Data Science, City University of Macau, Macau, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0151-1991","authenticated-orcid":false,"given":"Xu","family":"Zhang","sequence":"additional","affiliation":[{"name":"Department of Computer Science, University of Chicago, Chicago, IL, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1839-1607","authenticated-orcid":false,"given":"Xiaoguang","family":"Li","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Integrated Services Networks, School of Cyber Engineering, Xidian University, Xi’an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6706-4859","authenticated-orcid":false,"given":"Yuanyuan","family":"He","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3711896.3736954"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/j.inffus.2025.103084"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1038\/s41467-025-56510-9"},{"key":"ref4","article-title":"Federated learning based on dynamic regularization","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Acar","year":"2021"},{"key":"ref5","article-title":"A fourier perspective on model robustness in computer vision","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"32","author":"Yin","year":"2019"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2022.23156"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2024.23233"},{"key":"ref8","first-page":"11372","article-title":"CRFL: Certifiably robust federated learning against backdoor attacks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Xie","year":"2021"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i10.17118"},{"key":"ref10","first-page":"1415","article-title":"Flame: Taming backdoors in federated learning","volume-title":"Proc. 31st USENIX Secur. Symp. (USENIX Secur. 22)","author":"Nguyen","year":"2022"},{"key":"ref11","first-page":"16070","article-title":"Attack of the tails: Yes, you really can backdoor federated learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"33","author":"Wang","year":"2020"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2024.3354736"},{"key":"ref13","article-title":"Machine learning with adversaries: Byzantine tolerant gradient descent","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"30","author":"Blanchard","year":"2017"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3280032"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i13.29385"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i19.30131"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2024.3445637"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2024.3354049"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3394171.3413546"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484818"},{"key":"ref22","first-page":"6712","article-title":"Chameleon: Adapting to peer images for planting durable backdoors in federated learning","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Dai","year":"2023"},{"key":"ref23","article-title":"Understanding the effective receptive field in deep convolutional neural networks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"29","author":"Luo","year":"2016"},{"key":"ref24","article-title":"IDLG: Improved deep leakage from gradients","author":"Zhao","year":"2020"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/BF01589116"},{"key":"ref26","article-title":"Deep leakage from gradients","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"32","author":"Zhu","year":"2019"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i18.29975"},{"key":"ref28","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.5244\/C.21.54"},{"key":"ref30","first-page":"2938","article-title":"How to backdoor federated learning","volume-title":"Proc. Int. Conf. Artif. Intell. Statist.","author":"Bagdasaryan","year":"2020"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"ref32","article-title":"Label-consistent backdoor attacks","author":"Turner","year":"2019"},{"key":"ref33","first-page":"3454","article-title":"Input-aware dynamic backdoor attack","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"33","author":"Nguyen","year":"2020"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i2.16201"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2019.8802997"},{"key":"ref36","article-title":"Mitigating sybils in federated learning poisoning","author":"Fung","year":"2018"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8858\/11603880\/11498573.pdf?arnumber=11498573","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,13]],"date-time":"2026-07-13T20:08:45Z","timestamp":1783973325000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11498573\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7]]},"references-count":36,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2026.3687550","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,7]]}}}