arXiv subjects

Song Ma

Publications and source records attributed to Song Ma.

5 recordsLinked to original sources

arXiv2026

FedIDM: Achieving Fast and Stable Convergence in Byzantine Federated Learning through Iterative Distribution Matching

Most existing Byzantine-robust federated learning (FL) methods suffer from slow and unstable convergence. Moreover, when handling a substantial proportion of colluded malicious clients, achieving robustness typically entails compromising model utility. To address these issues, this work introduces FedIDM, which employs distribution matching to construct trustworthy condensed data for identifying and filtering abnormal clients. FedIDM consists of two main components: (1) attack-tolerant condensed data generation, and (2) robust aggregation with negative contribution-based rejection. These components exclude local updates that (1) deviate from the update direction derived from condensed data, or (2) cause a significant loss on the condensed dataset. Comprehensive evaluations on three benchmark datasets demonstrate that FedIDM achieves fast and stable convergence while maintaining acceptable model utility, under multiple state-of-the-art Byzantine attacks involving a large number of malicious clients.

cs.LG↗

arXiv2026

InkDrop: Invisible Backdoor Attacks Against Dataset Condensation

Dataset Condensation (DC) is a data-efficient learning paradigm that synthesizes small yet informative datasets, enabling models to match the performance of full-data training. However, recent work exposes a critical vulnerability of DC to backdoor attacks, where malicious patterns (\textit{e.g.}, triggers) are implanted into the condensation dataset, inducing targeted misclassification on specific inputs. Existing attacks always prioritize attack effectiveness and model utility, overlooking the crucial dimension of stealthiness. To bridge this gap, we propose InkDrop, which enhances the imperceptibility of malicious manipulation without degrading attack effectiveness and model utility. InkDrop leverages the inherent uncertainty near model decision boundaries, where minor input perturbations can induce semantic shifts, to construct a stealthy and effective backdoor attack. Specifically, InkDrop first selects candidate samples near the target decision boundary that exhibit latent semantic affinity to the target class. It then learns instance-dependent perturbations constrained by perceptual and spatial consistency, embedding targeted malicious behavior into the condensed dataset. Extensive experiments across diverse datasets validate the overall effectiveness of InkDrop, demonstrating its ability to integrate adversarial intent into condensed datasets while preserving model utility and minimizing detectability. Our code is available at https://github.com/lvdongyi/InkDrop.

cs.LG↗

arXiv2026

SNEAKDOOR: Stealthy Backdoor Attacks against Distribution Matching-based Dataset Condensation

Dataset condensation aims to synthesize compact yet informative datasets that retain the training efficacy of full-scale data, offering substantial gains in efficiency. Recent studies reveal that the condensation process can be vulnerable to backdoor attacks, where malicious triggers are injected into the condensation dataset, manipulating model behavior during inference. While prior approaches have made progress in balancing attack success rate and clean test accuracy, they often fall short in preserving stealthiness, especially in concealing the visual artifacts of condensed data or the perturbations introduced during inference. To address this challenge, we introduce Sneakdoor, which enhances stealthiness without compromising attack effectiveness. Sneakdoor exploits the inherent vulnerability of class decision boundaries and incorporates a generative module that constructs input-aware triggers aligned with local feature geometry, thereby minimizing detectability. This joint design enables the attack to remain imperceptible to both human inspection and statistical detection. Extensive experiments across multiple datasets demonstrate that Sneakdoor achieves a compelling balance among attack success rate, clean test accuracy, and stealthiness, substantially improving the invisibility of both the synthetic data and triggered samples while maintaining high attack efficacy. The code is available at https://github.com/XJTU-AI-Lab/SneakDoor.

cs.CR↗

arXiv2025

Active Tracking of Marine Pollution Sources: An Uncertainty-Aware Categorical Bayesian Framework for Unmanned Surface Vehicles

This paper presents an uncertainty-aware framework for the active tracking of marine pollution sources using Unmanned Surface Vehicles (USVs). The proposed framework employs an Informative Path Planning (IPP) strategy driven by Bayesian inference, modelling the belief of source location as a categorical distribution. This work presents a high-fidelity simulation pipeline, coupling Computational Fluid Dynamics (CFD) for realistic pollutant dispersion with Gazebo-based hydrodynamics and ArduPilot for USV control. Furthermore, this paper introduces the Smallest Credible Interval (SCI) as a metric to quantify estimation uncertainty and to serve as an autonomous termination criterion. Extensive simulations across diverse wave conditions and source locations demonstrate that the proposed framework achieves a 95.8% success rate, significantly outperforming baseline methods in both localisation accuracy and environmental adaptability. This framework provides a scalable and ROS-compatible foundation for fully autonomous environmental monitoring and rapid incident response.

cs.RO↗

arXiv2018

Broken mirror symmetry tuned topological transport in PbTe/SnTe heterostructures

The tunability of topological surface states and controllable opening of the Dirac gap are of great importance to the application of topological materials. In topological crystalline insulators (TCIs), crystal symmetry and topology of electronic bands intertwine to create topological surface states and thus the Dirac gap can be modulated by symmetry breaking structural changes of lattice. By transport measurement on heterostructures composed of p-type topological crystalline insulator SnTe and n-type conventional semiconductor PbTe, here we show a giant linear magnetoresistance (up to 2150% under 14 T at 2 K) induced by the Dirac Fermions at the PbTe/SnTe interface. In contrast, PbTe/SnTe samples grown at elevated temperature exhibit a cubic-to-rhombohedral structural phase transition of SnTe lattice below 100 K and weak antilocalization effect. Such distinctive magneto-resistance behavior is attributed to the broken mirror symmetry and gapping of topological surface states. Our work provides a promising application for future magneto-electronics and spintronics based on TCI heterostructures.

cond-mat.mtrl-sci↗