{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,24]],"date-time":"2026-10-24T17:38:06Z","timestamp":1792863486897,"version":"4.5.0"},"publisher-location":"New York, NY, USA","reference-count":63,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,8,4]],"date-time":"2023-08-04T00:00:00Z","timestamp":1691107200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,8,6]]},"DOI":"10.1145\/3580305.3599898","type":"proceedings-article","created":{"date-parts":[[2023,8,4]],"date-time":"2023-08-04T14:13:58Z","timestamp":1691158438000},"page":"4743-4755","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":30,"title":["Revisiting Personalized Federated Learning: Robustness Against Backdoor Attacks"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1733-7892","authenticated-orcid":false,"given":"Zeyu","family":"Qin","sequence":"first","affiliation":[{"name":"Hong Kong University of Science and Technology, Hong Kong, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3828-796X","authenticated-orcid":false,"given":"Liuyi","family":"Yao","sequence":"additional","affiliation":[{"name":"Alibaba Group, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8015-2121","authenticated-orcid":false,"given":"Daoyuan","family":"Chen","sequence":"additional","affiliation":[{"name":"Alibaba Group, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4204-6096","authenticated-orcid":false,"given":"Yaliang","family":"Li","sequence":"additional","affiliation":[{"name":"Alibaba Group, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1535-9692","authenticated-orcid":false,"given":"Bolin","family":"Ding","sequence":"additional","affiliation":[{"name":"Alibaba Group, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3965-4215","authenticated-orcid":false,"given":"Minhao","family":"Cheng","sequence":"additional","affiliation":[{"name":"Hong Kong University of Science and Technology, Hong Kong, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2023,8,4]]},"reference":[{"key":"e_1_3_2_2_1_1","volume-title":"27th {USENIX} Security Symposium ({USENIX} Security. 1615--1631.","author":"Adi Yossi","unstructured":"Yossi Adi , Carsten Baum , Moustapha Cisse , Benny Pinkas , and Joseph Keshet . 2018. Turning your weakness into a strength: Watermarking deep neural networks by backdooring . In 27th {USENIX} Security Symposium ({USENIX} Security. 1615--1631. Yossi Adi, Carsten Baum, Moustapha Cisse, Benny Pinkas, and Joseph Keshet. 2018. Turning your weakness into a strength: Watermarking deep neural networks by backdooring. In 27th {USENIX} Security Symposium ({USENIX} Security. 1615--1631."},{"key":"e_1_3_2_2_2_1","volume-title":"Aaditya Kumar Singh, and Sunav Choudhary","author":"Arivazhagan Manoj Ghuhan","year":"2019","unstructured":"Manoj Ghuhan Arivazhagan , Vinay Aggarwal , Aaditya Kumar Singh, and Sunav Choudhary . 2019 . Federated learning with personalization layers. arXiv preprint arXiv:1912.00818 (2019). Manoj Ghuhan Arivazhagan, Vinay Aggarwal, Aaditya Kumar Singh, and Sunav Choudhary. 2019. Federated learning with personalization layers. arXiv preprint arXiv:1912.00818 (2019)."},{"key":"e_1_3_2_2_3_1","volume-title":"International Conference on Artificial Intelligence and Statistics. PMLR, 2938--2948","author":"Bagdasaryan Eugene","year":"2020","unstructured":"Eugene Bagdasaryan , Andreas Veit , Yiqing Hua , Deborah Estrin , and Vitaly Shmatikov . 2020 . How to backdoor federated learning . In International Conference on Artificial Intelligence and Statistics. PMLR, 2938--2948 . Eugene Bagdasaryan, Andreas Veit, Yiqing Hua, Deborah Estrin, and Vitaly Shmatikov. 2020. How to backdoor federated learning. In International Conference on Artificial Intelligence and Statistics. PMLR, 2938--2948."},{"key":"e_1_3_2_2_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2019.8802997"},{"key":"e_1_3_2_2_5_1","volume-title":"A little is enough: Circumventing defenses for distributed learning. Advances in Neural Information Processing Systems 32","author":"Baruch Gilad","year":"2019","unstructured":"Gilad Baruch , Moran Baruch , and Yoav Goldberg . 2019. A little is enough: Circumventing defenses for distributed learning. Advances in Neural Information Processing Systems 32 ( 2019 ). Gilad Baruch, Moran Baruch, and Yoav Goldberg. 2019. A little is enough: Circumventing defenses for distributed learning. Advances in Neural Information Processing Systems 32 (2019)."},{"key":"e_1_3_2_2_6_1","volume-title":"International Conference on Machine Learning. PMLR, 634--643","author":"Bhagoji Arjun Nitin","year":"2019","unstructured":"Arjun Nitin Bhagoji , Supriyo Chakraborty , Prateek Mittal , and Seraphin Calo . 2019 . Analyzing federated learning through an adversarial lens . In International Conference on Machine Learning. PMLR, 634--643 . Arjun Nitin Bhagoji, Supriyo Chakraborty, Prateek Mittal, and Seraphin Calo. 2019. Analyzing federated learning through an adversarial lens. In International Conference on Machine Learning. PMLR, 634--643."},{"key":"e_1_3_2_2_7_1","volume-title":"Rachid Guerraoui, and Julien Stainer.","author":"Blanchard Peva","year":"2017","unstructured":"Peva Blanchard , El Mahdi El Mhamdi , Rachid Guerraoui, and Julien Stainer. 2017 . Machine learning with adversaries: Byzantine tolerant gradient descent. Advances in Neural Information Processing Systems 30 (2017). Peva Blanchard, El Mahdi El Mhamdi, Rachid Guerraoui, and Julien Stainer. 2017. Machine learning with adversaries: Byzantine tolerant gradient descent. Advances in Neural Information Processing Systems 30 (2017)."},{"key":"e_1_3_2_2_8_1","volume-title":"Peter Wu, Tian Li, Jakub Kone\u010dn\u1ef4, H Brendan McMahan, Virginia Smith, and Ameet Talwalkar.","author":"Caldas Sebastian","year":"2018","unstructured":"Sebastian Caldas , Sai Meher Karthik Duddu , Peter Wu, Tian Li, Jakub Kone\u010dn\u1ef4, H Brendan McMahan, Virginia Smith, and Ameet Talwalkar. 2018 . Leaf : A benchmark for federated settings. arXiv preprint arXiv:1812.01097 (2018). Sebastian Caldas, Sai Meher Karthik Duddu, Peter Wu, Tian Li, Jakub Kone\u010dn\u1ef4, H Brendan McMahan, Virginia Smith, and Ameet Talwalkar. 2018. Leaf: A benchmark for federated settings. arXiv preprint arXiv:1812.01097 (2018)."},{"key":"e_1_3_2_2_9_1","volume-title":"pFL-Bench: A Comprehensive Benchmark for Personalized Federated Learning. Neural Information Processing Systems (NeurIPS) Track on Datasets and Benchmarks","author":"Chen Daoyuan","year":"2022","unstructured":"Daoyuan Chen , Dawei Gao , Weirui Kuang , Yaliang Li , and Bolin Ding . 2022. pFL-Bench: A Comprehensive Benchmark for Personalized Federated Learning. Neural Information Processing Systems (NeurIPS) Track on Datasets and Benchmarks ( 2022 ). Daoyuan Chen, Dawei Gao, Weirui Kuang, Yaliang Li, and Bolin Ding. 2022. pFL-Bench: A Comprehensive Benchmark for Personalized Federated Learning. Neural Information Processing Systems (NeurIPS) Track on Datasets and Benchmarks (2022)."},{"key":"e_1_3_2_2_10_1","volume-title":"International Conference on Machine Learning.","author":"Chen Daoyuan","year":"2023","unstructured":"Daoyuan Chen , Liuyi Yao , Dawei Gao , Bolin Ding , and Yaliang Li . 2023 . Efficient Personalized Federated Learning via Sparse Model-Adaptation . In International Conference on Machine Learning. Daoyuan Chen, Liuyi Yao, Dawei Gao, Bolin Ding, and Yaliang Li. 2023. Efficient Personalized Federated Learning via Sparse Model-Adaptation. In International Conference on Machine Learning."},{"key":"e_1_3_2_2_11_1","volume-title":"Targeted backdoor attacks on deep learning systems using data poisoning. arXiv preprint arXiv:1712.05526","author":"Chen Xinyun","year":"2017","unstructured":"Xinyun Chen , Chang Liu , Bo Li , Kimberly Lu , and Dawn Song . 2017. Targeted backdoor attacks on deep learning systems using data poisoning. arXiv preprint arXiv:1712.05526 ( 2017 ). Xinyun Chen, Chang Liu, Bo Li, Kimberly Lu, and Dawn Song. 2017. Targeted backdoor attacks on deep learning systems using data poisoning. arXiv preprint arXiv:1712.05526 (2017)."},{"key":"e_1_3_2_2_12_1","volume-title":"EMNIST: Extending MNIST to handwritten letters. In 2017 international joint conference on neural networks (IJCNN)","author":"Cohen Gregory","year":"2017","unstructured":"Gregory Cohen , Saeed Afshar , Jonathan Tapson , and Andre Van Schaik . 2017 . EMNIST: Extending MNIST to handwritten letters. In 2017 international joint conference on neural networks (IJCNN) . IEEE , 2921--2926. Gregory Cohen, Saeed Afshar, Jonathan Tapson, and Andre Van Schaik. 2017. EMNIST: Extending MNIST to handwritten letters. In 2017 international joint conference on neural networks (IJCNN). IEEE, 2921--2926."},{"key":"e_1_3_2_2_13_1","volume-title":"PMLR","author":"Collins Liam","year":"2021","unstructured":"Liam Collins , Hamed Hassani , Aryan Mokhtari , and Sanjay Shakkottai . 2021 . Exploiting shared representations for personalized federated learning. In Inter- national Conference on Machine Learning . PMLR , 2089--2099. Liam Collins, Hamed Hassani, Aryan Mokhtari, and Sanjay Shakkottai. 2021. Exploiting shared representations for personalized federated learning. In Inter- national Conference on Machine Learning. PMLR, 2089--2099."},{"key":"e_1_3_2_2_14_1","volume-title":"International Conference on Learning Representations.","author":"Du Min","year":"2020","unstructured":"Min Du , Ruoxi Jia , and Dawn Song . 2020 . Robust anomaly detection and backdoor attack detection via differential privacy . In International Conference on Learning Representations. Min Du, Ruoxi Jia, and Dawn Song. 2020. Robust anomaly detection and backdoor attack detection via differential privacy. In International Conference on Learning Representations."},{"key":"e_1_3_2_2_15_1","unstructured":"European Commission. 2016. Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95\/46\/EC (General Data Protection Regulation) (Text with EEA relevance). https:\/\/eur-lex.europa.eu\/eli\/reg\/2016\/679\/oj  European Commission. 2016. Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95\/46\/EC (General Data Protection Regulation) (Text with EEA relevance). https:\/\/eur-lex.europa.eu\/eli\/reg\/2016\/679\/oj"},{"key":"e_1_3_2_2_16_1","volume-title":"Personalized federated learning: A meta-learning approach. arXiv preprint arXiv:2002.07948","author":"Fallah Alireza","year":"2020","unstructured":"Alireza Fallah , Aryan Mokhtari , and Asuman Ozdaglar . 2020. Personalized federated learning: A meta-learning approach. arXiv preprint arXiv:2002.07948 ( 2020 ). Alireza Fallah, Aryan Mokhtari, and Asuman Ozdaglar. 2020. Personalized federated learning: A meta-learning approach. arXiv preprint arXiv:2002.07948 (2020)."},{"key":"e_1_3_2_2_17_1","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Fang Minghong","year":"2020","unstructured":"Minghong Fang , Xiaoyu Cao , Jinyuan Jia , and Neil Gong . 2020 . Local model poisoning attacks to {Byzantine-Robust} federated learning . In 29th USENIX Security Symposium (USENIX Security 20) . 1605--1622. Minghong Fang, Xiaoyu Cao, Jinyuan Jia, and Neil Gong. 2020. Local model poisoning attacks to {Byzantine-Robust} federated learning. In 29th USENIX Security Symposium (USENIX Security 20). 1605--1622."},{"key":"e_1_3_2_2_18_1","volume-title":"Dataset security for machine learning: Data poisoning, backdoor attacks, and defenses","author":"Goldblum Micah","year":"2022","unstructured":"Micah Goldblum , Dimitris Tsipras , Chulin Xie , Xinyun Chen , Avi Schwarzschild , Dawn Song , Aleksander Madry , Bo Li , and Tom Goldstein . 2022. Dataset security for machine learning: Data poisoning, backdoor attacks, and defenses . IEEE Transactions on Pattern Analysis and Machine Intelligence ( 2022 ). Micah Goldblum, Dimitris Tsipras, Chulin Xie, Xinyun Chen, Avi Schwarzschild, Dawn Song, Aleksander Madry, Bo Li, and Tom Goldstein. 2022. Dataset security for machine learning: Data poisoning, backdoor attacks, and defenses. IEEE Transactions on Pattern Analysis and Machine Intelligence (2022)."},{"key":"e_1_3_2_2_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"e_1_3_2_2_20_1","volume-title":"Personalized federated learning: A unified framework and universal optimization techniques. arXiv preprint arXiv:2102.09743","author":"Hanzely Filip","year":"2021","unstructured":"Filip Hanzely , Boxin Zhao , and Mladen Kolar . 2021. Personalized federated learning: A unified framework and universal optimization techniques. arXiv preprint arXiv:2102.09743 ( 2021 ). Filip Hanzely, Boxin Zhao, and Mladen Kolar. 2021. Personalized federated learning: A unified framework and universal optimization techniques. arXiv preprint arXiv:2102.09743 (2021)."},{"key":"e_1_3_2_2_21_1","volume-title":"Federated learning for mobile keyboard prediction. arXiv preprint arXiv:1811.03604","author":"Hard Andrew","year":"2018","unstructured":"Andrew Hard , Kanishka Rao , Rajiv Mathews , Swaroop Ramaswamy , Fran\u00e7oise Beaufays , Sean Augenstein , Hubert Eichner , Chlo\u00e9 Kiddon , and Daniel Ramage . 2018. Federated learning for mobile keyboard prediction. arXiv preprint arXiv:1811.03604 ( 2018 ). Andrew Hard, Kanishka Rao, Rajiv Mathews, Swaroop Ramaswamy, Fran\u00e7oise Beaufays, Sean Augenstein, Hubert Eichner, Chlo\u00e9 Kiddon, and Daniel Ramage. 2018. Federated learning for mobile keyboard prediction. arXiv preprint arXiv:1811.03604 (2018)."},{"key":"e_1_3_2_2_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.123"},{"key":"e_1_3_2_2_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"e_1_3_2_2_24_1","volume-title":"International Conference on Learning Representations.","author":"Huang Kunzhe","year":"2022","unstructured":"Kunzhe Huang , Yiming Li , Baoyuan Wu , Zhan Qin , and Kui Ren . 2022 . Backdoor Defense via Decoupling the Training Process . In International Conference on Learning Representations. Kunzhe Huang, Yiming Li, Baoyuan Wu, Zhan Qin, and Kui Ren. 2022. Backdoor Defense via Decoupling the Training Process. In International Conference on Learning Representations."},{"key":"e_1_3_2_2_25_1","first-page":"7232","article-title":"Evaluating gradient inversion attacks and defenses in federated learning","volume":"34","author":"Huang Yangsibo","year":"2021","unstructured":"Yangsibo Huang , Samyak Gupta , Zhao Song , Kai Li , and Sanjeev Arora . 2021 . Evaluating gradient inversion attacks and defenses in federated learning . Advances in Neural Information Processing Systems 34 (2021), 7232 -- 7241 . Yangsibo Huang, Samyak Gupta, Zhao Song, Kai Li, and Sanjeev Arora. 2021. Evaluating gradient inversion attacks and defenses in federated learning. Advances in Neural Information Processing Systems 34 (2021), 7232--7241.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_2_26_1","volume-title":"Kallista Bonawitz, Zachary Charles, Graham Cormode, Rachel Cummings, et al.","author":"Kairouz Peter","year":"2021","unstructured":"Peter Kairouz , H Brendan McMahan , Brendan Avent , Aur\u00e9lien Bellet , Mehdi Bennis , Arjun Nitin Bhagoji , Kallista Bonawitz, Zachary Charles, Graham Cormode, Rachel Cummings, et al. 2021 . Advances and open problems in federated learning. Foundations and Trends\u00ae in Machine Learning 14, 1--2 (2021), 1--210. Peter Kairouz, H Brendan McMahan, Brendan Avent, Aur\u00e9lien Bellet, Mehdi Bennis, Arjun Nitin Bhagoji, Kallista Bonawitz, Zachary Charles, Graham Cormode, Rachel Cummings, et al. 2021. Advances and open problems in federated learning. Foundations and Trends\u00ae in Machine Learning 14, 1--2 (2021), 1--210."},{"key":"e_1_3_2_2_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2021.3090430"},{"key":"e_1_3_2_2_28_1","unstructured":"Alex Krizhevsky et al. 2009. Learning multiple layers of features from tiny images. (2009).  Alex Krizhevsky et al. 2009. Learning multiple layers of features from tiny images. (2009)."},{"key":"e_1_3_2_2_29_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-019-04163-3"},{"key":"e_1_3_2_2_30_1","volume-title":"Hyperband: Bandit-Based Configuration Evaluation for Hyper-parameter Optimization. In International Conference on Learning Representations. https:\/\/openreview.net\/forum?id=ry18Ww5ee","author":"Li Lisha","year":"2017","unstructured":"Lisha Li , Kevin Jamieson , Giulia DeSalvo , Afshin Rostamizadeh , and Ameet Talwalkar . 2017 . Hyperband: Bandit-Based Configuration Evaluation for Hyper-parameter Optimization. In International Conference on Learning Representations. https:\/\/openreview.net\/forum?id=ry18Ww5ee Lisha Li, Kevin Jamieson, Giulia DeSalvo, Afshin Rostamizadeh, and Ameet Talwalkar. 2017. Hyperband: Bandit-Based Configuration Evaluation for Hyper-parameter Optimization. In International Conference on Learning Representations. https:\/\/openreview.net\/forum?id=ry18Ww5ee"},{"key":"e_1_3_2_2_31_1","volume-title":"International Conference on Machine Learning. PMLR, 6357--6368","author":"Li Tian","year":"2021","unstructured":"Tian Li , Shengyuan Hu , Ahmad Beirami , and Virginia Smith . 2021 . Ditto: Fair and robust federated learning through personalization . In International Conference on Machine Learning. PMLR, 6357--6368 . Tian Li, Shengyuan Hu, Ahmad Beirami, and Virginia Smith. 2021. Ditto: Fair and robust federated learning through personalization. In International Conference on Machine Learning. PMLR, 6357--6368."},{"key":"e_1_3_2_2_32_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.media.2020.101765"},{"key":"e_1_3_2_2_33_1","volume-title":"International Conference on Learning Representations. https:\/\/openreview.net\/ forum?id=6YEQUn0QICG","author":"Li Xiaoxiao","year":"2021","unstructured":"Xiaoxiao Li , Meirui JIANG , Xiaofei Zhang , Michael Kamp , and Qi Dou . 2021 . FedBN: Federated Learning on Non-IID Features via Local Batch Normalization . In International Conference on Learning Representations. https:\/\/openreview.net\/ forum?id=6YEQUn0QICG Xiaoxiao Li, Meirui JIANG, Xiaofei Zhang, Michael Kamp, and Qi Dou. 2021. FedBN: Federated Learning on Non-IID Features via Local Batch Normalization. In International Conference on Learning Representations. https:\/\/openreview.net\/ forum?id=6YEQUn0QICG"},{"key":"e_1_3_2_2_34_1","volume-title":"International Conference on Learning Representations.","author":"Li Yige","year":"2021","unstructured":"Yige Li , Xixiang Lyu , Nodens Koren , Lingjuan Lyu , Bo Li , and Xingjun Ma . 2021 . Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks . In International Conference on Learning Representations. Yige Li, Xixiang Lyu, Nodens Koren, Lingjuan Lyu, Bo Li, and Xingjun Ma. 2021. Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks. In International Conference on Learning Representations."},{"key":"e_1_3_2_2_35_1","volume-title":"Think locally, act globally: Federated learning with local and global representations. arXiv preprint arXiv:2001.01523","author":"Liang Paul Pu","year":"2020","unstructured":"Paul Pu Liang , Terrance Liu , Liu Ziyin , Nicholas B Allen , Randy P Auerbach , David Brent , Ruslan Salakhutdinov , and Louis-Philippe Morency . 2020. Think locally, act globally: Federated learning with local and global representations. arXiv preprint arXiv:2001.01523 ( 2020 ). Paul Pu Liang, Terrance Liu, Liu Ziyin, Nicholas B Allen, Randy P Auerbach, David Brent, Ruslan Salakhutdinov, and Louis-Philippe Morency. 2020. Think locally, act globally: Federated learning with local and global representations. arXiv preprint arXiv:2001.01523 (2020)."},{"key":"e_1_3_2_2_36_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_13"},{"key":"e_1_3_2_2_37_1","volume-title":"Privacy and robustness in federated learning: Attacks and defenses. arXiv preprint arXiv:2012.06337","author":"Lyu Lingjuan","year":"2020","unstructured":"Lingjuan Lyu , Han Yu , Xingjun Ma , Lichao Sun , Jun Zhao , Qiang Yang , and Philip S Yu. 2020. Privacy and robustness in federated learning: Attacks and defenses. arXiv preprint arXiv:2012.06337 ( 2020 ). Lingjuan Lyu, Han Yu, Xingjun Ma, Lichao Sun, Jun Zhao, Qiang Yang, and Philip S Yu. 2020. Privacy and robustness in federated learning: Attacks and defenses. arXiv preprint arXiv:2012.06337 (2020)."},{"key":"e_1_3_2_2_38_1","first-page":"15434","article-title":"Federated multi-task learning under a mixture of distributions","volume":"34","author":"Marfoq Othmane","year":"2021","unstructured":"Othmane Marfoq , Giovanni Neglia , Aur\u00e9lien Bellet , Laetitia Kameni , and Richard Vidal . 2021 . Federated multi-task learning under a mixture of distributions . Advances in Neural Information Processing Systems 34 (2021), 15434 -- 15447 . Othmane Marfoq, Giovanni Neglia, Aur\u00e9lien Bellet, Laetitia Kameni, and Richard Vidal. 2021. Federated multi-task learning under a mixture of distributions. Advances in Neural Information Processing Systems 34 (2021), 15434--15447.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_2_39_1","volume-title":"An Empirical Study of Personalized Federated Learning. arXiv preprint arXiv:2206.13190","author":"Matsuda Koji","year":"2022","unstructured":"Koji Matsuda , Yuya Sasaki , Chuan Xiao , and Makoto Onizuka . 2022. An Empirical Study of Personalized Federated Learning. arXiv preprint arXiv:2206.13190 ( 2022 ). Koji Matsuda, Yuya Sasaki, Chuan Xiao, and Makoto Onizuka. 2022. An Empirical Study of Personalized Federated Learning. arXiv preprint arXiv:2206.13190 (2022)."},{"key":"e_1_3_2_2_40_1","unstructured":"Brendan McMahan Eider Moore Daniel Ramage Seth Hampson and Blaise Aguera y Arcas. 2017. Communication-efficient learning of deep networks from decentralized data. In Artificial intelligence and statistics. PMLR 1273--1282.  Brendan McMahan Eider Moore Daniel Ramage Seth Hampson and Blaise Aguera y Arcas. 2017. Communication-efficient learning of deep networks from decentralized data. In Artificial intelligence and statistics. PMLR 1273--1282."},{"key":"e_1_3_2_2_41_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00029"},{"key":"e_1_3_2_2_42_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00065"},{"key":"e_1_3_2_2_43_1","unstructured":"Adam Paszke Sam Gross Soumith Chintala Gregory Chanan Edward Yang Zachary DeVito Zeming Lin Alban Desmaison Luca Antiga and Adam Lerer. 2017. Automatic differentiation in pytorch. (2017).  Adam Paszke Sam Gross Soumith Chintala Gregory Chanan Edward Yang Zachary DeVito Zeming Lin Alban Desmaison Luca Antiga and Adam Lerer. 2017. Automatic differentiation in pytorch. (2017)."},{"key":"e_1_3_2_2_44_1","volume-title":"Proceedings of the 39th International Conference on Machine Learning (Proceedings of Machine Learning Research","volume":"17758","author":"Pillutla Krishna","year":"2022","unstructured":"Krishna Pillutla , Kshitiz Malik , Abdel-Rahman Mohamed , Mike Rabbat , Maziar Sanjabi , and Lin Xiao . 2022 . Federated Learning with Partial Model Personalization . In Proceedings of the 39th International Conference on Machine Learning (Proceedings of Machine Learning Research , Vol. 162), Kamalika Chaudhuri, Stefanie Jegelka, Le Song, Csaba Szepesvari, Gang Niu, and Sivan Sabato (Eds.). PMLR, 17716-- 17758 . Krishna Pillutla, Kshitiz Malik, Abdel-Rahman Mohamed, Mike Rabbat, Maziar Sanjabi, and Lin Xiao. 2022. Federated Learning with Partial Model Personalization. In Proceedings of the 39th International Conference on Machine Learning (Proceedings of Machine Learning Research, Vol. 162), Kamalika Chaudhuri, Stefanie Jegelka, Le Song, Csaba Szepesvari, Gang Niu, and Sivan Sabato (Eds.). PMLR, 17716--17758."},{"key":"e_1_3_2_2_45_1","doi-asserted-by":"crossref","unstructured":"Virat Shejwalkar and Amir Houmansadr. 2021. Manipulating the byzantine: Optimizing model poisoning attacks and defenses for federated learning. In NDSS.  Virat Shejwalkar and Amir Houmansadr. 2021. Manipulating the byzantine: Optimizing model poisoning attacks and defenses for federated learning. In NDSS.","DOI":"10.14722\/ndss.2021.24498"},{"key":"e_1_3_2_2_46_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833647"},{"key":"e_1_3_2_2_47_1","volume-title":"Federated multi-task learning. Advances in neural information processing systems 30","author":"Smith Virginia","year":"2017","unstructured":"Virginia Smith , Chao-Kai Chiang , Maziar Sanjabi , and Ameet S Talwalkar . 2017. Federated multi-task learning. Advances in neural information processing systems 30 ( 2017 ). Virginia Smith, Chao-Kai Chiang, Maziar Sanjabi, and Ameet S Talwalkar. 2017. Federated multi-task learning. Advances in neural information processing systems 30 (2017)."},{"key":"e_1_3_2_2_48_1","volume-title":"Ananda Theertha Suresh, and H Brendan McMahan","author":"Sun Ziteng","year":"2019","unstructured":"Ziteng Sun , Peter Kairouz , Ananda Theertha Suresh, and H Brendan McMahan . 2019 . Can you really backdoor federated learning? arXiv preprint arXiv:1911.07963 (2019). Ziteng Sun, Peter Kairouz, Ananda Theertha Suresh, and H Brendan McMahan. 2019. Can you really backdoor federated learning? arXiv preprint arXiv:1911.07963 (2019)."},{"key":"e_1_3_2_2_49_1","first-page":"21394","article-title":"Personalized federated learning with moreau envelopes","volume":"33","author":"Dinh Canh T","year":"2020","unstructured":"Canh T Dinh , Nguyen Tran , and Josh Nguyen . 2020 . Personalized federated learning with moreau envelopes . Advances in Neural Information Processing Systems 33 (2020), 21394 -- 21405 . Canh T Dinh, Nguyen Tran, and Josh Nguyen. 2020. Personalized federated learning with moreau envelopes. Advances in Neural Information Processing Systems 33 (2020), 21394--21405.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_2_50_1","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2022.3160699"},{"key":"e_1_3_2_2_51_1","volume-title":"ESORICS 2020, Guildford, UK, September 14--18, 2020, Proceedings, Part I 25","author":"Tolpegin Vale","year":"2020","unstructured":"Vale Tolpegin , Stacey Truex , Mehmet Emre Gursoy , and Ling Liu . 2020 . Data poisoning attacks against federated learning systems. In Computer Security-ESORICS 2020: 25th European Symposium on Research in Computer Security , ESORICS 2020, Guildford, UK, September 14--18, 2020, Proceedings, Part I 25 . Springer, 480--501. Vale Tolpegin, Stacey Truex, Mehmet Emre Gursoy, and Ling Liu. 2020. Data poisoning attacks against federated learning systems. In Computer Security-ESORICS 2020: 25th European Symposium on Research in Computer Security, ESORICS 2020, Guildford, UK, September 14--18, 2020, Proceedings, Part I 25. Springer, 480--501."},{"key":"e_1_3_2_2_52_1","article-title":"Visualizing data using t-SNE","volume":"9","author":"der Maaten Laurens Van","year":"2008","unstructured":"Laurens Van der Maaten and Geoffrey Hinton . 2008 . Visualizing data using t-SNE . Journal of machine learning research 9 , 11 (2008). Laurens Van der Maaten and Geoffrey Hinton. 2008. Visualizing data using t-SNE. Journal of machine learning research 9, 11 (2008).","journal-title":"Journal of machine learning research"},{"key":"e_1_3_2_2_53_1","first-page":"16070","article-title":"Attack of the tails: Yes, you really can backdoor federated learning","volume":"33","author":"Wang Hongyi","year":"2020","unstructured":"Hongyi Wang , Kartik Sreenivasan , Shashank Rajput , Harit Vishwakarma , Saurabh Agarwal , Jy-yong Sohn, Kangwook Lee , and Dimitris Papailiopoulos . 2020 . Attack of the tails: Yes, you really can backdoor federated learning . Advances in Neural Information Processing Systems 33 (2020), 16070 -- 16084 . Hongyi Wang, Kartik Sreenivasan, Shashank Rajput, Harit Vishwakarma, Saurabh Agarwal, Jy-yong Sohn, Kangwook Lee, and Dimitris Papailiopoulos. 2020. Attack of the tails: Yes, you really can backdoor federated learning. Advances in Neural Information Processing Systems 33 (2020), 16070--16084.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_2_54_1","volume-title":"Backdoorbench: A comprehensive benchmark of backdoor learning. arXiv preprint arXiv:2206.12654","author":"Wu Baoyuan","year":"2022","unstructured":"Baoyuan Wu , Hongrui Chen , Mingda Zhang , Zihao Zhu , Shaokui Wei , Danni Yuan , Chao Shen , and Hongyuan Zha . 2022 . Backdoorbench: A comprehensive benchmark of backdoor learning. arXiv preprint arXiv:2206.12654 (2022). Baoyuan Wu, Hongrui Chen, Mingda Zhang, Zihao Zhu, Shaokui Wei, Danni Yuan, Chao Shen, and Hongyuan Zha. 2022. Backdoorbench: A comprehensive benchmark of backdoor learning. arXiv preprint arXiv:2206.12654 (2022)."},{"key":"e_1_3_2_2_55_1","first-page":"16913","article-title":"Adversarial neuron pruning purifies backdoored deep models","volume":"34","author":"Wu Dongxian","year":"2021","unstructured":"Dongxian Wu and Yisen Wang . 2021 . Adversarial neuron pruning purifies backdoored deep models . Advances in Neural Information Processing Systems 34 (2021), 16913 -- 16925 . Dongxian Wu and Yisen Wang. 2021. Adversarial neuron pruning purifies backdoored deep models. Advances in Neural Information Processing Systems 34 (2021), 16913--16925.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_2_56_1","volume-title":"Motley: Benchmarking heterogeneity and personalization in federated learning. arXiv preprint arXiv:2206.09262","author":"Wu Shanshan","year":"2022","unstructured":"Shanshan Wu , Tian Li , Zachary Charles , Yu Xiao , Ziyu Liu , Zheng Xu , and Virginia Smith . 2022 . Motley: Benchmarking heterogeneity and personalization in federated learning. arXiv preprint arXiv:2206.09262 (2022). Shanshan Wu, Tian Li, Zachary Charles, Yu Xiao, Ziyu Liu, Zheng Xu, and Virginia Smith. 2022. Motley: Benchmarking heterogeneity and personalization in federated learning. arXiv preprint arXiv:2206.09262 (2022)."},{"key":"e_1_3_2_2_57_1","volume-title":"International Conference on Learning Representations. https:\/\/openreview.net\/forum?id=rkgyS0VFvr","author":"Xie Chulin","year":"2020","unstructured":"Chulin Xie , Keli Huang , Pin-Yu Chen , and Bo Li . 2020 . DBA: Distributed Backdoor Attacks against Federated Learning . In International Conference on Learning Representations. https:\/\/openreview.net\/forum?id=rkgyS0VFvr Chulin Xie, Keli Huang, Pin-Yu Chen, and Bo Li. 2020. DBA: Distributed Backdoor Attacks against Federated Learning. In International Conference on Learning Representations. https:\/\/openreview.net\/forum?id=rkgyS0VFvr"},{"key":"e_1_3_2_2_58_1","doi-asserted-by":"publisher","DOI":"10.14778\/3579075.3579081"},{"key":"e_1_3_2_2_59_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i12.17291"},{"key":"e_1_3_2_2_60_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.00993"},{"key":"e_1_3_2_2_61_1","volume-title":"International Conference on Machine Learning. PMLR, 26429--26446","author":"Zhang Zhengming","year":"2022","unstructured":"Zhengming Zhang , Ashwinee Panda , Linyue Song , Yaoqing Yang , Michael Mahoney , Prateek Mittal , Ramchandran Kannan , and Joseph Gonzalez . 2022 . Neurotoxin: durable backdoors in federated learning . In International Conference on Machine Learning. PMLR, 26429--26446 . Zhengming Zhang, Ashwinee Panda, Linyue Song, Yaoqing Yang, Michael Mahoney, Prateek Mittal, Ramchandran Kannan, and Joseph Gonzalez. 2022. Neurotoxin: durable backdoors in federated learning. In International Conference on Machine Learning. PMLR, 26429--26446."},{"key":"e_1_3_2_2_62_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-20065-6_11"},{"key":"e_1_3_2_2_63_1","volume-title":"Deep leakage from gradients. Advances in neural information processing systems 32","author":"Zhu Ligeng","year":"2019","unstructured":"Ligeng Zhu , Zhijian Liu , and Song Han . 2019. Deep leakage from gradients. Advances in neural information processing systems 32 ( 2019 ). Ligeng Zhu, Zhijian Liu, and Song Han. 2019. Deep leakage from gradients. Advances in neural information processing systems 32 (2019)."}],"event":{"name":"KDD '23: The 29th ACM SIGKDD Conference on Knowledge Discovery and Data Mining","location":"Long Beach CA USA","acronym":"KDD '23","sponsor":["SIGMOD ACM Special Interest Group on Management of Data","SIGKDD ACM Special Interest Group on Knowledge Discovery in Data"]},"container-title":["Proceedings of the 29th ACM SIGKDD Conference on Knowledge Discovery and Data Mining"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3580305.3599898","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3580305.3599898","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T12:37:41Z","timestamp":1750163861000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3580305.3599898"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,8,4]]},"references-count":63,"alternative-id":["10.1145\/3580305.3599898","10.1145\/3580305"],"URL":"https:\/\/doi.org\/10.1145\/3580305.3599898","relation":{},"subject":[],"published":{"date-parts":[[2023,8,4]]},"assertion":[{"value":"2023-08-04","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}