← Search

Wenwen He

5 accepted papers

2026

Batman: Benign Knowledge Alignment Through Malicious Null Space in Federated Backdoor Attack

CVPR 2026

Federated Learning (FL), a distributed learning paradigm that enables local training on user-held data across decentralized devices, is vulnerable to backdoor attacks due to limited visibility into client updates. Exploiting this opacity, adversaries induce targeted misbehavior on trigger inputs wit

Cited by 0SourcecodeScholar
2026

FedHarmony: Harmonizing Heterogeneous Label Correlations in Federated Multi-Label Learning

CVPR 2026

Federated Multi-Label Learning is a distributed paradigm where multiple clients possess heterogeneous multi-label data and perform collaborative learning under privacy constraints without sharing raw data. However, modeling label correlations under heterogeneous distributions remains challenging. Du

Cited by 0SourceScholar
2026

FedPissa: Towards Federated Personalized Adaptation of Foundation Models via LoRA Subspace Mapping

ICML 2026spotlight

LoRA efficiently adapts large pre-trained models via low-rank updates, making it a strong parameter-efficient fine-tuning (PEFT) method. When integrated with Federated Learning (FL), it enables collaborative fine-tuning across distributed clients, leveraging rich downstream data without exposing pri…

Cited by 0SourceScholar
2026

Shift-Dependent Asymmetry: Orthogonal Inverse Low-Rank Adaptation for Federated Medical Segmentation

ICML 2026poster

Low-Rank Adaptation (LoRA) enables efficient federated fine-tuning of segmentation foundation models for medical imaging. However, most federated LoRA methods adopt a uniform aggregation rule, which breaks under the encoder–decoder asymmetry in medical segmentation: the encoder is dominated by appea…

Cited by 0SourceScholar
2025

SPMC: Self-Purifying Federated Backdoor Defense via Margin Contribution

ICML 2025poster

Federated Learning (FL) enables collaborative training with privacy preservation but is vulnerable to backdoor attacks, where malicious clients degrade model performance on targeted inputs. These attacks exploit FL decentralized nature, while existing defenses, based on isolated behaviors and fixed…