Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Duanshu Fang

dblp:430/1623 · DBLP profile ↗
← Back
1ranked-venue papers
0as first author
1since 2021 · last 2026
—ORCID · none

Domains — the database's venue-derived domains; a paper can count in several

Artificial intelligence and machine learning · 1 · 1 since 2021Graphics, computer vision, multimedia, augmented reality and games · 1 · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Artificial intelligence
1 paper
Efficient and distributed learning · 50% Trustworthy machine learning · 50%

Topics — the 4 heaviest of 4, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Machine learning › Trustworthy machine learning › robustness
backdoor defense
1.012026
DoBlock: Blocking Malicious Association Propagation for Backdoor-Robust Federated Learning Under Domain Skew · AAAI 2026
Machine learning › Efficient and distributed learning › federated learning › robust federated learning
backdoor-robust federated learning
1.012026
DoBlock: Blocking Malicious Association Propagation for Backdoor-Robust Federated Learning Under Domain Skew · AAAI 2026
Machine learning › Efficient and distributed learning
federated learning
1.012026
DoBlock: Blocking Malicious Association Propagation for Backdoor-Robust Federated Learning Under Domain Skew · AAAI 2026
Machine learning › Trustworthy machine learning
robustness
1.012026
DoBlock: Blocking Malicious Association Propagation for Backdoor-Robust Federated Learning Under Domain Skew · AAAI 2026

Methods — techniques the papers use, named apart from their topics

domain infuser · 1.0aggregation isolation · 1.0
YearPublicationVenuePosition
2026 DoBlock: Blocking Malicious Association Propagation for Backdoor-Robust Federated Learning Under Domain Skew
abstract
Federated Learning (FL) enables privacy-preserving distributed training but remains vulnerable to backdoor attacks. Attackers can embed malicious trigger-label associations into the global model by participating in the aggregation process. Existing defense methods typically defend against backdoor attacks by detecting and filtering malicious updates that deviate from benign ones. However, we find that these defenses fail under domain skew, where differing feature distributions across clients increase update heterogeneity, making it harder to distinguish malicious updates from benign ones. To address this challenge, we propose DoBlock, a novel defense that utilizes an aggregatable domain infuser incapable of embedding malicious associations, through federated training to facilitate cross-domain knowledge sharing. Moreover, DoBlock prevents malicious association propagation by isolating local models from aggregation, as local models remain client-specific and rely solely on local data for training. Experiments on five domain skew datasets (Digits, PACS, VLCS, Office-Caltech10, and DomainNet) show that DoBlock maintains attack success rates below 2.5%, while achieving the highest main task accuracy, demonstrating superior robustness without sacrificing benign performance.
Zhou Tan, Yirui Huang, Duanshu Fang, Jia-Li Yin, Shouling Ji
AAAI4