Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This paper introduces CACTUS, a novel approach to implanting clean-label backdoors in decentralized federated learning (DFL) by utilizing mask-guided semantic pairs to create targeted representation shifts. The method effectively isolates trigger effects and applies them counterfactually to non-target embeddings, allowing for successful backdoor propagation even in the presence of multiple malicious nodes. Experimental results demonstrate that CACTUS achieves a mean attack success rate of 51.2% across various tasks, outperforming existing methods in three out of four modalities under different aggregation rules.
CACTUS reveals that backdoors can be effectively propagated in decentralized federated learning, achieving over 51% attack success even with 30% malicious nodes.
Semantic triggers in federated learning (FL) can be less conspicuous than synthetic patches, but sample-dependent placement may weaken backdoor implantation across aggregation rounds. This challenge is compounded in decentralized FL (DFL), where topology-dependent peer aggregation repeatedly mixes local models. CACTUS converts label-consistent semantic pairs into target-directed representation shifts. Mask-guided, modality-specific operators isolate trigger effects, couple them across samples, and apply the shifts counterfactually to clean non-target embeddings before peer aggregation. Experiments cover speech, text, tabular, and image tasks under nine aggregation rules. With 30\% malicious nodes, CACTUS reaches a nine-rule mean attack success rate (ASR) of 51.2\% on Speech Commands and the highest nine-rule mean ASR among evaluated attacks on three of four modalities. Sensitivity analyses show that ASR varies with network topology and increases with the malicious-node ratio. These results indicate that CACTUS can propagate backdoors through repeated DFL aggregation.