Backdoor attacks and defenses in feature-partitioned collaborative learning