Demo Data from SIGIR 2026 / reviewers in the wild / expert
Duanshu Fang
dblp:430/1623
· DBLP profile ↗
1ranked-venue papers
0as first author
1since 2021 · last 2026
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Artificial intelligence and machine learning · 1 · 1 since 2021Graphics, computer vision, multimedia, augmented reality and games · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Artificial intelligence
1 paper |
Efficient and distributed learning · 50% Trustworthy machine learning · 50% |
Topics — the 4 heaviest of 4, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Machine learning › Trustworthy machine learning › robustness
backdoor defense |
1.0 | 1 | 2026 | DoBlock: Blocking Malicious Association Propagation for Backdoor-Robust Federated Learning Under Domain Skew · AAAI 2026 |
Machine learning › Efficient and distributed learning › federated learning › robust federated learning
backdoor-robust federated learning |
1.0 | 1 | 2026 | DoBlock: Blocking Malicious Association Propagation for Backdoor-Robust Federated Learning Under Domain Skew · AAAI 2026 |
Machine learning › Efficient and distributed learning
federated learning |
1.0 | 1 | 2026 | DoBlock: Blocking Malicious Association Propagation for Backdoor-Robust Federated Learning Under Domain Skew · AAAI 2026 |
Machine learning › Trustworthy machine learning
robustness |
1.0 | 1 | 2026 | DoBlock: Blocking Malicious Association Propagation for Backdoor-Robust Federated Learning Under Domain Skew · AAAI 2026 |
Methods — techniques the papers use, named apart from their topics
domain infuser · 1.0aggregation isolation · 1.0
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2026 | DoBlock: Blocking Malicious Association Propagation for Backdoor-Robust Federated Learning Under Domain SkewabstractFederated Learning (FL) enables privacy-preserving distributed training but remains vulnerable to backdoor attacks. Attackers can embed malicious trigger-label associations into the global model by participating in the aggregation process. Existing defense methods typically defend against backdoor attacks by detecting and filtering malicious updates that deviate from benign ones. However, we find that these defenses fail under domain skew, where differing feature distributions across clients increase update heterogeneity, making it harder to distinguish malicious updates from benign ones. To address this challenge, we propose DoBlock, a novel defense that utilizes an aggregatable domain infuser incapable of embedding malicious associations, through federated training to facilitate cross-domain knowledge sharing. Moreover, DoBlock prevents malicious association propagation by isolating local models from aggregation, as local models remain client-specific and rely solely on local data for training. Experiments on five domain skew datasets (Digits, PACS, VLCS, Office-Caltech10, and DomainNet) show that DoBlock maintains attack success rates below 2.5%, while achieving the highest main task accuracy, demonstrating superior robustness without sacrificing benign performance. Zhou Tan, Yirui Huang, Duanshu Fang, Jia-Li Yin, Shouling Ji |
AAAI | 4 |