{"id":"W7081935511","doi":"10.1016/j.jisa.2025.104223","title":"FedESP: Effective, Stealthy, and Persistent backdoor attack on federated learning","year":2025,"lang":"en","type":"article","venue":"Journal of Information Security and Applications","topic":"Geochemistry and Geologic Mapping","field":"Computer Science","cited_by":0,"is_retracted":false,"has_abstract":false,"ca_institutions":"Brock University","funders":"National Natural Science Foundation of China","keywords":"Backdoor; Adversarial system; Benchmark (surveying); Key (lock); Federated learning; Term (time)","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0003595948,0.00006422737,0.0001055185,0.0000926953,0.000357406,0.00021436,0.0001238591,0.00004983393,0.00000344273],"category_scores_gemma":[0.0000839356,0.00005499617,0.00003621683,0.000205093,0.00003012069,0.0005422418,0.00006423184,0.0002306712,0.00000514028],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00002252933,"about_ca_system_score_gemma":0.00003945371,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.000001862284,"about_ca_topic_score_gemma":5.481763e-7,"domain_scores_codex":[0.9994488,0.00003579811,0.0002696229,0.00006643566,0.00009778501,0.00008155833],"domain_scores_gemma":[0.9992589,0.0001259288,0.0002373312,0.00007469529,0.0002452388,0.00005795536],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"not_applicable","study_design_scores_codex":[0.0001561716,0.0003219466,0.002946354,0.0011419,0.0002715508,0.000003073046,0.01113224,0.008539164,0.0006466376,0.4354703,0.01004173,0.5293289],"study_design_scores_gemma":[0.001470092,0.0004034633,0.009573935,0.000219358,0.00003177497,0.0001463656,0.003159365,0.07180578,0.001562665,0.008181062,0.9032097,0.0002363791],"study_design_candidate":"not_applicable","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.2692799,0.0007028994,0.5714765,0.03568532,0.0002020216,0.001068404,0.000006302919,0.0001151632,0.1214634],"genre_scores_gemma":[0.998482,0.00009900777,0.000696984,0.000563886,0.00002062311,0.00001606278,0.000002810892,4.258466e-7,0.0001182245],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.893168,"threshold_uncertainty_score":0.2748914,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.009542818081515341,"score_gpt":0.2563799620951395,"score_spread":0.2468371440136241,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}