{"id":"W4404820372","doi":"10.3390/math12233751","title":"FLARE: A Backdoor Attack to Federated Learning with Refined Evasion","year":2024,"lang":"en","type":"article","venue":"Mathematics","topic":"Privacy-Preserving Technologies in Data","field":"Computer Science","cited_by":2,"is_retracted":false,"has_abstract":true,"ca_institutions":"Université de Montréal","funders":"Ministry of Industry and Information Technology of the People's Republic of China; National Natural Science Foundation of China","keywords":"Backdoor; Evasion (ethics); Computer security; Computer science; Criminology; Psychology; Biology; Immunology","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001766149,0.000776253,0.0007711959,0.0005691973,0.0005064674,0.0008814054,0.001218199,0.001364981,0.0008109721],"category_scores_gemma":[0.006032782,0.0002211693,0.0007900843,0.0003101252,0.001385593,0.00184405,0.002650866,0.001589851,0.0002170791],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0005977098,"about_ca_system_score_gemma":0.0007483577,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0007083764,"about_ca_topic_score_gemma":0.0006098996,"domain_scores_codex":[0.9982902,0.0004776635,0.00009388975,0.0003219528,0.0005233904,0.0002927991],"domain_scores_gemma":[0.997109,0.001012945,0.0003784643,0.001048355,0.0003065786,0.0001446866],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0006953452,0.0003533183,0.006245831,0.0001754161,0.0002852722,0.0005827167,0.0004390295,0.6030952,0.05436404,0.05515061,0.003052664,0.2755605],"study_design_scores_gemma":[0.00002148866,0.0002382357,0.0003431749,0.00001299715,0.00001677556,0.000169626,0.00002688433,0.9687627,0.01257473,0.01670567,0.001106361,0.00002130046],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.07498197,0.0001721213,0.9212419,0.0002413097,0.00004131766,0.00008069617,0.00003411414,0.001908748,0.001297707],"genre_scores_gemma":[0.9496828,0.00005226012,0.04893517,0.0001910521,0.00001098681,0.00005237907,0.00003952634,0.00004100559,0.0009948375],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.001766149,"threshold_uncertainty_score":0.009340405,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.04444829195666155,"score_gpt":0.2963721466499147,"score_spread":0.2519238546932531,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}