Cited by 929Privacy-Preserving Technologies in DataAdversarial Robustness in Machine LearningDigital Media Forensic Detection

The DOI matches its Crossref record; 47 of the 52 references it cites were found in a registry or an index.

Data Poisoning Attacks Against Federated Learning Systems

Open access
Tolpegin, Vale, Truex, Stacey, Gursoy, Mehmet Emre, Liu, Ling·2020·Lecture Notes in Computer Science

Overview

Integrity signals

Registry

Crossref · 10.1007/978-3-030-58951-6_24

Cites

47 of 47 references verified0 citation errors · 0 not checkable

Statistics

Recomputing p-values needs the paper’s full text.

Verification

Claims the paper makes

We couldn’t retrieve this paper’s full text, so its claims and self-check weren’t run. The registry and citation checks still apply.

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

Citations

Cites

Show all 52 references

Research works printed but not linked: 10

  1. Bagdasaryan, E., Veit, A., Hua, Y., Estrin, D., Shmatikov, V.: How to backdoor federated learning. arXiv preprint arXiv:1807.00459 (2018) · arXiv
  2. Fung, C., Yoon, C.J., Beschastnikh, I.: Mitigating sybils in federated learning poisoning. arXiv preprint arXiv:1808.04866 (2018) · arXiv
  3. Hard, A., et al.: Federated learning for mobile keyboard prediction. arXiv preprint arXiv:1811.03604 (2018) · arXiv
  4. Kairouz, P., et al.: Advances and open problems in federated learning. arXiv preprint arXiv:1912.04977 (2019) · arXiv
  5. Mhamdi, E.M.E., Guerraoui, R., Rouault, S.: The hidden vulnerability of distributed learning in byzantium. arXiv preprint arXiv:1802.07927 (2018) · arXiv
  6. General Data Protection Regulation: Regulation (EU) 2016/679 of the European parliament and of the council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing directive 95/46. Off. J. Eur. Union (OJ) 59(1–88), 294 (2016)
  7. Ryffel, T., et al.: A generic framework for privacy preserving deep learning. arXiv preprint arXiv:1811.04017 (2018) · arXiv
  8. Sun, Z., Kairouz, P., Suresh, A.T., McMahan, H.B.: Can you really backdoor federated learning? arXiv preprint arXiv:1911.07963 (2019) · arXiv
  9. Truex, S., Liu, L., Gursoy, M.E., Yu, L., Wei, W.: Towards demystifying membership inference attacks. arXiv preprint arXiv:1807.09173 (2018) · arXiv
  10. Yang, C., Wu, Q., Li, H., Chen, Y.: Generative poisoning attack method against neural networks. arXiv preprint arXiv:1703.01340 (2017) · arXiv

Cited by

Sorted by citations

Metadata

Authors
Tolpegin, V., Truex, S., Gursoy, M. E., & Liu, L.
Affiliations
Georgia Institute of Technology (US)
Corresponding author
Truex, Stacey
Venue
Lecture Notes in Computer Science
Published
2020
Pages
480-501
ISSN
  • 0302-9743 (ISSN-L)
  • 1611-3349
OpenAlex
W3087391814
Cited by
927
References
52
Citations by year
2026: 124 · 2025: 219 · 2024: 243 · 2023: 160 · 2022: 113 · 2021: 62 · 2020: 6
FWCI
32.57
Type
conference paper
Language
en
Open access
Locations
  • Lecture notes in computer science (publishedVersion)
  • arXiv (Cornell University) (submittedVersion)
  • arXiv (Cornell University)
Funders
  • National Science Foundation (1564097)
  • Directorate for Computer and Information Science and Engineering (1564097)
Topics
  • Physical Sciences › Computer Science › Artificial Intelligence › Privacy-Preserving Technologies in Data
  • Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
  • Physical Sciences › Computer Science › Computer Vision and Pattern Recognition › Digital Media Forensic Detection
Keywords
data poisoning, federated learning, targeted attacks, malicious participants, mislabeled data, model updating

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review