{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2025:XJR4N5GQTHD5EBACCT6TQ7EUPW","short_pith_number":"pith:XJR4N5GQ","schema_version":"1.0","canonical_sha256":"ba63c6f4d099c7d2040214fd387c947d9ef71f635de2eff29465baf648538bf8","source":{"kind":"arxiv","id":"2507.21177","version":1},"attestation_state":"computed","paper":{"title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Bingyi Liu, Jing Wang, Libing Wu, Lijuan Huo, XinHai Yan, Zhuangzhuang Zhang","submitted_at":"2025-07-26T07:00:32Z","abstract_excerpt":"Federated Learning (FL) enables collaborative model training while preserving data privacy, but it is highly vulnerable to backdoor attacks. Most existing defense methods in FL have limited effectiveness due to their neglect of the model's over-reliance on backdoor triggers, particularly as the proportion of malicious clients increases. In this paper, we propose FedBAP, a novel defense framework for mitigating backdoor attacks in FL by reducing the model's reliance on backdoor triggers. Specifically, first, we propose a perturbed trigger generation mechanism that creates perturbation triggers "},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2507.21177","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-26T07:00:32Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"92d6487ce02e2616b0d90e79e27929e24cd8873b60fa86c3d2e5cb20fbf0fedc","abstract_canon_sha256":"d21befdbc69a67e71dfcca6d88c84417fda3ae8d7efe7f494d0a1ce3069319c6"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:47:27.224858Z","signature_b64":"KxJuA1RbaAscSxHQKl3uz+hZXuaPX6PNVmnorwW/AIvZvwdrNqOQaRq+UnPXIiegcmKaCYXbNnoKAwN2TvjzDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ba63c6f4d099c7d2040214fd387c947d9ef71f635de2eff29465baf648538bf8","last_reissued_at":"2026-07-05T11:47:27.224373Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:47:27.224373Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Bingyi Liu, Jing Wang, Libing Wu, Lijuan Huo, XinHai Yan, Zhuangzhuang Zhang","submitted_at":"2025-07-26T07:00:32Z","abstract_excerpt":"Federated Learning (FL) enables collaborative model training while preserving data privacy, but it is highly vulnerable to backdoor attacks. Most existing defense methods in FL have limited effectiveness due to their neglect of the model's over-reliance on backdoor triggers, particularly as the proportion of malicious clients increases. In this paper, we propose FedBAP, a novel defense framework for mitigating backdoor attacks in FL by reducing the model's reliance on backdoor triggers. Specifically, first, we propose a perturbed trigger generation mechanism that creates perturbation triggers "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.21177","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.21177/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2507.21177","created_at":"2026-07-05T11:47:27.224432+00:00"},{"alias_kind":"arxiv_version","alias_value":"2507.21177v1","created_at":"2026-07-05T11:47:27.224432+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.21177","created_at":"2026-07-05T11:47:27.224432+00:00"},{"alias_kind":"pith_short_12","alias_value":"XJR4N5GQTHD5","created_at":"2026-07-05T11:47:27.224432+00:00"},{"alias_kind":"pith_short_16","alias_value":"XJR4N5GQTHD5EBAC","created_at":"2026-07-05T11:47:27.224432+00:00"},{"alias_kind":"pith_short_8","alias_value":"XJR4N5GQ","created_at":"2026-07-05T11:47:27.224432+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/XJR4N5GQTHD5EBACCT6TQ7EUPW","json":"https://pith.science/pith/XJR4N5GQTHD5EBACCT6TQ7EUPW.json","graph_json":"https://pith.science/api/pith-number/XJR4N5GQTHD5EBACCT6TQ7EUPW/graph.json","events_json":"https://pith.science/api/pith-number/XJR4N5GQTHD5EBACCT6TQ7EUPW/events.json","paper":"https://pith.science/paper/XJR4N5GQ"},"agent_actions":{"view_html":"https://pith.science/pith/XJR4N5GQTHD5EBACCT6TQ7EUPW","download_json":"https://pith.science/pith/XJR4N5GQTHD5EBACCT6TQ7EUPW.json","view_paper":"https://pith.science/paper/XJR4N5GQ","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2507.21177&json=true","fetch_graph":"https://pith.science/api/pith-number/XJR4N5GQTHD5EBACCT6TQ7EUPW/graph.json","fetch_events":"https://pith.science/api/pith-number/XJR4N5GQTHD5EBACCT6TQ7EUPW/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/XJR4N5GQTHD5EBACCT6TQ7EUPW/action/timestamp_anchor","attest_storage":"https://pith.science/pith/XJR4N5GQTHD5EBACCT6TQ7EUPW/action/storage_attestation","attest_author":"https://pith.science/pith/XJR4N5GQTHD5EBACCT6TQ7EUPW/action/author_attestation","sign_citation":"https://pith.science/pith/XJR4N5GQTHD5EBACCT6TQ7EUPW/action/citation_signature","submit_replication":"https://pith.science/pith/XJR4N5GQTHD5EBACCT6TQ7EUPW/action/replication_record"}},"created_at":"2026-07-05T11:47:27.224432+00:00","updated_at":"2026-07-05T11:47:27.224432+00:00"}