{"id":"W4417064347","doi":"10.48550/arxiv.2509.08089","title":"Hammer and Anvil: Toward a Theory of Backdoors in Federated Learning","year":2025,"lang":"en","type":"preprint","venue":"ArXiv.org","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":1,"is_retracted":false,"has_abstract":true,"ca_institutions":"","funders":"Natural Sciences and Engineering Research Council of Canada; Government of Ontario; Royal Bank of Canada","keywords":"Backdoor; Adversary; Set (abstract data type); Inference; Federated learning; Adversarial system","routes":{"ca_aff":false,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":true},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.001121373,0.0003115958,0.0005225365,0.0003264252,0.0001160793,0.0001024246,0.0009025125,0.0003256114,0.00004407339],"category_scores_gemma":[0.0008086397,0.0003242822,0.0000954397,0.0004453634,0.000123958,0.0002498091,0.003228173,0.001689982,0.00001142596],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00006794987,"about_ca_system_score_gemma":0.0002548856,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0002732393,"about_ca_topic_score_gemma":0.00002582608,"domain_scores_codex":[0.9974782,0.0006531712,0.0004833672,0.0008095728,0.0002345048,0.0003411294],"domain_scores_gemma":[0.9985113,0.0004684168,0.0003308214,0.0005185939,0.0001019365,0.00006891423],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"observational","study_design_gemma":"observational","study_design_scores_codex":[0.00006354515,0.00007071465,0.8410122,0.0004545108,0.0001254497,0.00007011129,0.005375525,0.09980035,0.000190437,0.01199892,0.00004759061,0.04079067],"study_design_scores_gemma":[0.001947871,0.0001503336,0.6632708,0.001990294,0.00008582187,0.00001406391,0.001057162,0.3155856,0.001963731,0.009928244,0.002574269,0.001431711],"study_design_candidate":"observational","study_design_consensus":"observational","genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.6627248,0.0004801603,0.3297808,0.0006338318,0.0006171524,0.0002373533,0.000001876932,0.000153697,0.005370349],"genre_scores_gemma":[0.9907243,0.0001041894,0.007908517,0.0001485757,0.00005675431,0.00001968243,0.000008585326,0.00001866331,0.001010757],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.3279995,"threshold_uncertainty_score":0.9999209,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.03834422189501694,"score_gpt":0.2868456534938301,"score_spread":0.2485014315988132,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}