Cited by 929Privacy-Preserving Technologies in DataAdversarial Robustness in Machine LearningDigital Media Forensic Detection

The DOI matches its Crossref record; 47 of the 52 references it cites were found in a registry or an index.

Data Poisoning Attacks Against Federated Learning Systems

Open access

Tolpegin, Vale, Truex, Stacey, Gursoy, Mehmet Emre, Liu, Ling·2020·Lecture Notes in Computer Science

DOI 10.1007/978-3-030-58951-6_24

Open this paper in CoChat — free account Open PDF

Integrity signals

Registry

Crossref · 10.1007/978-3-030-58951-6_24

Cites

47 of 47 references verified0 citation errors · 0 not checkable

Statistics

Recomputing p-values needs the paper’s full text.

Claims the paper makes

We couldn’t retrieve this paper’s full text, so its claims and self-check weren’t run. The registry and citation checks still apply.

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

ImageNet: A large-scale hierarchical image database
Deng, J., Dong, W., Socher, R., Li, L.-J., Li, K., & Fei-Fei, L. (2009) · 2009 IEEE Conference on Computer Vision and Pattern Recognition · doi:10.1109/cvpr.2009.5206848 · Cited by 65,333
PyTorch: An Imperative Style, High-Performance Deep Learning Library
Paszke, A., Gross, S., Massa, F., Lerer, A., Bradbury, J., Chanan, G., Killeen, T., Lin, Z., Gimelshein, N., Antiga, L., et al. (2019) · arXiv · doi:10.48550/arxiv.1912.01703 · Cited by 31,473
Learning Multiple Layers of Features from Tiny Images
Krizhevsky, A. (2024) · doi:10.57702/zp44cu3g · Cited by 23,889
Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithms
Xiao, H., Rasul, K., & Vollgraf, R. (2017) · arXiv · doi:10.48550/arxiv.1708.07747 · Cited by 6,108
Towards Federated Learning at Scale: System Design
Bonawitz, K., Eichner, H., Grieskamp, W., Huba, D., Ingerman, A., Ivanov, V., Kiddon, C., Konečný, J., Mazzocchi, S., McMahan, H. B., et al. (2019) · arXiv · doi:10.48550/arxiv.1902.01046 · Cited by 2,334
Deep Leakage from Gradients
Zhu, L., & Han, S. (2020) · Lecture Notes in Computer Science · doi:10.1007/978-3-030-63076-8_2 · Cited by 1,906
Comprehensive Privacy Analysis of Deep Learning: Passive and Active White-box Inference Attacks against Centralized and Federated Learning
Nasr, M., Shokri, R., & Houmansadr, A. (2019) · 2019 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2019.00065 · Cited by 1,760
Exploiting Unintended Feature Leakage in Collaborative Learning
Melis, L., Song, C., De Cristofaro, E., & Shmatikov, V. (2019) · 2019 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2019.00029 · Cited by 1,734
Untitled work
(2017) · neural information processing systems · Cited by 1,413
Deep Models Under the GAN: Information Leakage from Collaborative Deep Learning
Hitaj, B., Ateniese, G., & Perez-Cruz, F. (2017) · Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/3133956.3134012 · Cited by 1,377

Show all 52 references

Research works printed but not linked: 10

Bagdasaryan, E., Veit, A., Hua, Y., Estrin, D., Shmatikov, V.: How to backdoor federated learning. arXiv preprint arXiv:1807.00459 (2018) · arXiv
Fung, C., Yoon, C.J., Beschastnikh, I.: Mitigating sybils in federated learning poisoning. arXiv preprint arXiv:1808.04866 (2018) · arXiv
Hard, A., et al.: Federated learning for mobile keyboard prediction. arXiv preprint arXiv:1811.03604 (2018) · arXiv
Kairouz, P., et al.: Advances and open problems in federated learning. arXiv preprint arXiv:1912.04977 (2019) · arXiv
Mhamdi, E.M.E., Guerraoui, R., Rouault, S.: The hidden vulnerability of distributed learning in byzantium. arXiv preprint arXiv:1802.07927 (2018) · arXiv
General Data Protection Regulation: Regulation (EU) 2016/679 of the European parliament and of the council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing directive 95/46. Off. J. Eur. Union (OJ) 59(1–88), 294 (2016)
Ryffel, T., et al.: A generic framework for privacy preserving deep learning. arXiv preprint arXiv:1811.04017 (2018) · arXiv
Sun, Z., Kairouz, P., Suresh, A.T., McMahan, H.B.: Can you really backdoor federated learning? arXiv preprint arXiv:1911.07963 (2019) · arXiv
Truex, S., Liu, L., Gursoy, M.E., Yu, L., Wei, W.: Towards demystifying membership inference attacks. arXiv preprint arXiv:1807.09173 (2018) · arXiv
Yang, C., Wu, Q., Li, H., Chen, Y.: Generative poisoning attack method against neural networks. arXiv preprint arXiv:1703.01340 (2017) · arXiv

Sorted by citations

Items 101–200 of 929

Romoa: Robust Model Aggregation for the Resistance of Federated Learning to Model Poisoning Attacks
Mao, Y., Yuan, X., Zhao, X., & Zhong, S. (2021) · Lecture Notes in Computer Science · doi:10.1007/978-3-030-88418-5_23 · Cited by 48
Defense against backdoor attack in federated learning
Lu, S., Li, R., Liu, W., & Chen, X. (2022) · Computers & Security · doi:10.1016/j.cose.2022.102819 · Cited by 48
Data Poisoning Attacks in Internet-of-Vehicle Networks: Taxonomy, State-of-The-Art, and Future Directions
Chen, Y., Zhu, X., Gong, X., Yi, X., & Li, S. X. (2022) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2022.3198481 · Cited by 51
LAFED: A lightweight authentication mechanism for blockchain-enabled federated learning system
Ji, S., Zhang, J., Zhang, Y., Han, Z., & Ma, C. (2023) · Future Generation Computer Systems · doi:10.1016/j.future.2023.03.014 · Cited by 55
A Game Theory-Based Incentive Mechanism for Collaborative Security of Federated Learning in Energy Blockchain Environment
He, Y., Luo, M., Wu, B. L., Sun, L., Wu, Y., Liu, Z., & Xiao, K. (2023) · IEEE Internet of Things Journal · doi:10.1109/jiot.2023.3282732 · Cited by 49
Model Orthogonalization: Class Distance Hardening in Neural Networks for Better Security
Tao, G., Liu, Y., Shen, G., Xu, Q., An, S., Zhang, Z., & Zhang, X. (2022) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp46214.2022.9833688 · Cited by 49
Backdoor attack and defense in federated generative adversarial network-based medical image synthesis
Jin, R., & Li, X. (2023) · Medical Image Analysis · doi:10.1016/j.media.2023.102965 · Cited by 50
Defending Against Poisoning Attacks in Federated Learning With Blockchain
Dong, N., Wang, Z., Sun, J., Kampffmeyer, M., Knottenbelt, W. J., & Xing, E. P. (2024) · IEEE Transactions on Artificial Intelligence · doi:10.1109/tai.2024.3376651 · Cited by 52
Verifiable Federated Learning With Privacy-Preserving Data Aggregation for Consumer Electronics
Xie, H., Wang, Y., Ding, Y., Yang, C., Zheng, H., & Qin, B. (2023) · IEEE Transactions on Consumer Electronics · doi:10.1109/tce.2023.3323206 · Cited by 46
A comprehensive review on deep learning algorithms: Security and privacy issues
Tayyab, M. A., Marjani, M., Jhanjhi, N. Z., Hashem, M., Usmani, R. S. A., & Qamar, F. (2023) · Computers & Security · doi:10.1016/j.cose.2023.103297 · Cited by 50
FedGT: Identification of Malicious Clients in Federated Learning With Secure Aggregation
Xhemrishi, M., Östman, J., Wachter-Zeh, A., & Amat, A. G. I. (2025) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2025.3539964 · Cited by 55
Towards Communication-Efficient and Attack-Resistant Federated Edge Learning for Industrial Internet of Things
Liu, Y., Zhao, R., Kang, J., Yassine, A., Niyato, D. T., & Peng, J. (2021) · ACM Transactions on Internet Technology · doi:10.1145/3453169 · Cited by 49
DeSMP: Differential Privacy-exploited Stealthy Model Poisoning Attacks in Federated Learning
Hossain, M. T., Islam, S., Badsha, S., & Shen, H. (2021) · 2021 17th International Conference on Mobility, Sensing and Networking (MSN) · doi:10.1109/msn53354.2021.00038 · Cited by 44
Personalized and privacy-preserving federated heterogeneous medical image analysis with PPPML-HMI
Zhou, J., Zhou, L., Wang, D., Xu, X., Li, H., Chu, Y., Han, W., & Gao, X. (2023) · Computers in Biology and Medicine · doi:10.1016/j.compbiomed.2023.107861 · Cited by 49
FedSecurity: A Benchmark for Attacks and Defenses in Federated Learning and Federated LLMs
Han, S., Buyukates, B., Hu, Z., Jin, H., Jin, W., Sun, L., Wang, X., Wu, W., Xie, C., Yao, Y., et al. (2024) · ACM SIGKDD Conference on Knowledge Discovery and Data Mining (KDD) · doi:10.1145/3637528.3671545 · Cited by 55
A Resource-Efficient Federated Learning Framework for Intrusion Detection in IoMT Networks
Fahim-Ul-Islam, M., Chakrabarty, A., Alam, M. G. R., & Maidin, S. S. (2025) · IEEE Transactions on Consumer Electronics · doi:10.1109/tce.2025.3544885 · Cited by 42
Data-Agnostic Model Poisoning Against Federated Learning: A Graph Autoencoder Approach
Li, K., Zheng, J., Yuan, X., Ni, W., Akan, O. B., & Poor, H. V. (2024) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3362147 · Cited by 41
Defense Strategies Toward Model Poisoning Attacks in Federated Learning: A Survey
Wang, Z., Kang, Q., Zhang, X., & Hu, Q. (2022) · 2022 IEEE Wireless Communications and Networking Conference (WCNC) · doi:10.1109/wcnc51071.2022.9771619 · Cited by 41
Overview of Distributed Machine Learning Techniques for 6G Networks
Muscinelli, E., Shinde, S. S., & Tarchi, D. (2022) · Algorithms · doi:10.3390/a15060210 · Cited by 44
Data Privacy Threat Modelling for Autonomous Systems: A Survey From the GDPR's Perspective
Azam, N., Michala, A. L., Ansari, S., & Truong, N. B. (2022) · IEEE Transactions on Big Data · doi:10.1109/tbdata.2022.3227336 · Cited by 49
Security for Machine Learning-based Software Systems: A Survey of Threats, Practices, and Challenges
Chen, H., & Babar, M. A. (2023) · ACM Computing Surveys · doi:10.1145/3638531 · Cited by 66
Permissioned Blockchain Frame for Secure Federated Learning
Sun, J. D., Wu, Y. N., Wang, S., Fu, Y., & Chang, X. (2021) · IEEE Communications Letters · doi:10.1109/lcomm.2021.3121297 · Cited by 40
Security of Federated Learning: Attacks, Defensive Mechanisms, and Challenges
Benmalek, M., Benrekia, M. A., & Challal, Y. (2022) · Revue d intelligence artificielle · doi:10.18280/ria.360106 · Cited by 39
Unraveling Attacks to Machine-Learning-Based IoT Systems: A Survey and the Open Libraries Behind Them
Liu, C., Chen, B., Shao, W., Zhang, W., Wong, K. K. L., & Zhang, Y. (2024) · IEEE Internet of Things Journal · doi:10.1109/jiot.2024.3377730 · Cited by 45
Threats and Defenses in the Federated Learning Life Cycle: A Comprehensive Survey and Challenges
Li, Y., Guo, Z., Yang, N., Chen, H., Yuan, D., & Ding, W. (2025) · IEEE Transactions on Neural Networks and Learning Systems · doi:10.1109/tnnls.2025.3563537 · Cited by 38
A Multi-Shuffler Framework to Establish Mutual Confidence for Secure Federated Learning
Zhou, Z., Xu, C., Wang, M., Kuang, X., Zhuang, Y., & Yu, S. (2022) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2022.3215574 · Cited by 40
Efficiently Achieving Privacy Preservation and Poisoning Attack Resistance in Federated Learning
Li, X.-Y., Yang, X. S., Zhou, Z., & Lu, R. (2024) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3378006 · Cited by 40
FLShield: A Validation Based Federated Learning Framework to Defend Against Poisoning Attacks
Kabir, E., Song, Z., Rashid, M. R. U., & Mehnaz, S. (2024) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp54263.2024.00141 · Cited by 41
Threats on Machine Learning Technique by Data Poisoning Attack: A Survey
Ahmed, I. M., & Kashmoola, M. Y. (2021) · Communications in computer and information science · doi:10.1007/978-981-16-8059-5_36 · Cited by 38
Making federated learning robust to adversarial attacks by learning data and model association
Qayyum, A., Janjua, M. U., & Qadir, J. (2022) · Computers & Security · doi:10.1016/j.cose.2022.102827 · Cited by 40
Model Poisoning Defense on Federated Learning: A Validation Based Approach
Wang, Y., Zhu, T., Chang, W., Shen, S., & Ren, W. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-65745-1_12 · Cited by 37
Long-Short History of Gradients Is All You Need: Detecting Malicious and Unreliable Clients in Federated Learning
Gupta, A., Luo, T., Ngo, M. V., & Das, S. K. (2022) · Lecture notes in computer science · doi:10.1007/978-3-031-17143-7_22 · Cited by 37
Complex Backdoor Detection by Symmetric Feature Differencing
Liu, Y., Shen, G., Tao, G., Wang, Z., Ma, S., & Zhang, X. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.01458 · Cited by 42
Edge intelligence secure frameworks: Current state and future challenges
Villar-Rodríguez, E., Arostegi, M., Torre-Bastida, A. I., Regueiro, C., & López-de-Armentia, J. (2023) · Computers & Security · doi:10.1016/j.cose.2023.103278 · Cited by 40
FLIBD: A Federated Learning-Based IoT Big Data Management Approach for Privacy-Preserving over Apache Spark with FATE
Karras, A., Γιάνναρος, Α., Theodorakopoulos, L., Krimpas, G. A., Kalogeratos, G., Karras, C., & Sioutas, S. (2023) · Electronics · doi:10.3390/electronics12224633 · Cited by 43
FL-SiCNN: An improved brain tumor diagnosis using siamese convolutional neural network in a peer-to-peer federated learning approach
Onaizah, A. N., Xia, Y., & Hussain, K. (2024) · Alexandria Engineering Journal · doi:10.1016/j.aej.2024.11.063 · Cited by 40
Recent Advancements in Federated Learning: State of the Art, Fundamentals, Principles, IoT Applications and Future Trends
Papadopoulos, C., Kollias, K.-F., & Fragulis, G. F. (2024) · Future Internet · doi:10.3390/fi16110415 · Cited by 35
Security of federated learning in 6G era: A review on conceptual techniques and software platforms used for research and analysis
Kazmi, S. H. A., Qamar, F., Hassan, R. B., Nisar, K., & Al‐Betar, M. A. (2024) · Computer Networks · doi:10.1016/j.comnet.2024.110358 · Cited by 40
Privacy-Enhancing Technologies in Biomedical Data Science
Cho, H., Froelicher, D., Dokmai, N., Nandi, A., Sadhuka, S., Hong, M. M., & Berger, B. (2024) · Annual Review of Biomedical Data Science · doi:10.1146/annurev-biodatasci-120423-120107 · Cited by 39
Open problems in medical federated learning
Yoo, J. H., Jeong, H., Lee, J., & Chung, T. (2022) · International Journal of Web Information Systems · doi:10.1108/ijwis-04-2022-0080 · Cited by 40
Safeguarding Connected Health: Leveraging Trustworthy AI Techniques to Harden Intrusion Detection Systems Against Data Poisoning Threats in IoMT Environments
Aljanabi, M. (2023) · Babylonian Journal of Internet of Things · doi:10.58496/bjiot/2023/005 · Cited by 34
Federated learning vulnerabilities, threats and defenses: A systematic review and future directions
Almutairi, S., & Barnawi, A. (2023) · Internet of Things · doi:10.1016/j.iot.2023.100947 · Cited by 35
Applications and Challenges of Federated Learning Paradigm in the Big Data Era with Special Emphasis on COVID-19
Majeed, A., Zhang, X., & Hwang, S. O. (2022) · Big Data and Cognitive Computing · doi:10.3390/bdcc6040127 · Cited by 37
Defending Against Data Poisoning Attack in Federated Learning With Non-IID Data
Yin, C., & Zeng, Q. (2023) · IEEE Transactions on Computational Social Systems · doi:10.1109/tcss.2023.3296885 · Cited by 34
An Exploratory Analysis on Users’ Contributions in Federated Learning
Huang, J., Talbi, R., Zhao, Z., Bouchenak, S., Chen, L. Y., & Roos, S. (2020) · IEEE International Conference on Trust, Privacy and Security in Intelligent Systems and Applications (TPS-ISA) · doi:10.1109/tps-isa50397.2020.00014 · Cited by 35
Trustworthy Federated Learning Against Malicious Attacks in Web 3.0
Zheng, Y., Tian, Y., Zhou, Z., Li, T., Wang, S., & Xiong, J. (2024) · IEEE Transactions on Network Science and Engineering · doi:10.1109/tnse.2024.3350365 · Cited by 33
Enhancing federated learning robustness in adversarial environment through clustering Non-IID features
Li, Y., Yuan, D., Sani, A. S., & Bao, W. (2023) · Computers & Security · doi:10.1016/j.cose.2023.103319 · Cited by 32
Enhance membership inference attacks in federated learning
He, X., Xu, Y., Zhang, S., Xu, W., & Yan, J. (2023) · Computers & Security · doi:10.1016/j.cose.2023.103535 · Cited by 35
A survey on privacy-preserving federated learning against poisoning attacks
Feng, X., & Cheng, W. (2024) · Cluster Computing · doi:10.1007/s10586-024-04629-7 · Cited by 34
Resource-Constrained Federated Edge Learning With Heterogeneous Data: Formulation and Analysis
Liu, Y., Zhu, Y., & Yu, J. J. Q. (2021) · IEEE Transactions on Network Science and Engineering · doi:10.1109/tnse.2021.3126021 · Cited by 32
PEPPER
Belal, Y., Bellet, A., Mokhtar, S. B., & Nitu, V. (2022) · Proceedings of the ACM on Interactive Mobile Wearable and Ubiquitous Technologies · doi:10.1145/3550302 · Cited by 32
How to Promote AI in the US Federal Government: Insights from Policy Process Frameworks
Khan, M. S., Shoaib, A., & Arledge, E. (2023) · Government Information Quarterly · doi:10.1016/j.giq.2023.101908 · Cited by 41
Federated and transfer learning for cancer detection based on image analysis
Bechar, A., Medjoudj, R., Elmir, Y., Himeur, Y., & Amira, A. (2025) · Neural Computing and Applications · doi:10.1007/s00521-024-10956-y · Cited by 38
Mitigating Poisoning Attack in Federated Learning
Uprety, A., & Rawat, D. B. (2021) · IEEE Symposium Series on Computational Intelligence (SSCI) · doi:10.1109/ssci50451.2021.9659839 · Cited by 31
Security of federated learning for cloud‐edge intelligence collaborative computing
Yang, J., Zheng, J., Zhang, Z., Chen, Q., Wong, D. S., & Li, Y. (2022) · International Journal of Intelligent Systems · doi:10.1002/int.22992 · Cited by 32
A Four-Pronged Defense Against Byzantine Attacks in Federated Learning
Wan, W., Hu, S., Li, M., Lu, J., Zhang, L., Zhang, L. Y., & Jin, H. (2023) · ACM International Conference on Multimedia (ACM MM) · doi:10.1145/3581783.3612474 · Cited by 31
A systematic review of federated learning incentive mechanisms and associated security challenges
Ali, A., Ilahi, I., Qayyum, A., Mohammed, I., Al‐Fuqaha, A., & Qadir, J. (2023) · Computer Science Review · doi:10.1016/j.cosrev.2023.100593 · Cited by 34
A zero-knowledge proof federated learning on DLT for healthcare data
Petrosino, L., Masi, L., D’Antoni, F., Merone, M., & Vollero, L. (2024) · Journal of Parallel and Distributed Computing · doi:10.1016/j.jpdc.2024.104992 · Cited by 33
Towards Resilient Artificial Intelligence: Survey and Research Issues
Eigner, O., Eresheim, S., Kieseberg, P., Klausner, L. D., Pirker, M., Priebe, T., Tjoa, S., Marulli, F., & Mercaldo, F. (2021) · IEEE International Conference on Cyber Security and Resilience (CSR) · doi:10.1109/csr51186.2021.9527986 · Cited by 31
Manipulating vulnerability: Poisoning attacks and countermeasures in federated cloud–edge–client learning for image classification
Zhao, Y., Zhang, J., & Cao, Y. (2022) · Knowledge-Based Systems · doi:10.1016/j.knosys.2022.110072 · Cited by 30
Privacy preserving and secure robust federated learning: A survey
Han, Q., Lu, S., Wang, W., Qu, H., Li, J., & Gao, Y. (2024) · Concurrency and Computation: Practice and Experience · doi:10.1002/cpe.8084 · Cited by 29
Federated Learning for Urban Sensing Systems: A Comprehensive Survey on Attacks, Defences, Incentive Mechanisms, and Applications
Kapoor, A., & Kumar, D. (2024) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2024.3434510 · Cited by 32
Federated learning-based natural language processing: a systematic literature review
Khan, Y., Sánchez, D., & Domingo‐Ferrer, J. (2024) · Artificial Intelligence Review · doi:10.1007/s10462-024-10970-5 · Cited by 35
When Federated Learning Meets Watermarking: A Comprehensive Overview of Techniques for Intellectual Property Protection
Lansari, M., Bellafqira, R., Kapusta, K., Thouvenot, V., Bettan, O., & Coatrieux, G. (2023) · Machine Learning and Knowledge Extraction · doi:10.3390/make5040070 · Cited by 29
DPFLA: Defending Private Federated Learning Against Poisoning Attacks
Feng, X., Cheng, W., Cao, C., Wang, L., & Sheng, V. S. (2024) · IEEE Transactions on Services Computing · doi:10.1109/tsc.2024.3376255 · Cited by 29
Computer Security – ESORICS 2020
(2020) · Lecture notes in computer science · doi:10.1007/978-3-030-58951-6 · Cited by 28
ModularFed: Leveraging modularity in federated learning frameworks
Arafeh, M., Otrok, H., Ould‐Slimane, H., Mourad, A., Talhi, C., & Damiani, E. (2023) · Internet of Things · doi:10.1016/j.iot.2023.100694 · Cited by 29
Distributed private preserving learning based chaotic encryption framework for cognitive healthcare IoT systems
Nabi, S. A., Kalpana, P., Chandra, N. S., Smitha, L., Naresh, K., Ezugwu, A. E.-S., & Abualigah, L. (2024) · Informatics in Medicine Unlocked · doi:10.1016/j.imu.2024.101547 · Cited by 27
Securing Federated Diffusion Model With Dynamic Quantization for Generative AI Services in Multiple-Access Artificial Intelligence of Things
He, J., Lai, B., Kang, J., Du, H., Nie, J., Zhang, T., Yuan, Y., Zhang, W., Niyato, D. T., & Jamalipour, A. (2024) · IEEE Internet of Things Journal · doi:10.1109/jiot.2024.3420696 · Cited by 29
Robust and Secure Federated Learning Against Hybrid Attacks: A Generic Architecture
Hao, X., Lin, C., Dong, W., Huang, X., & Xiong, H. (2023) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2023.3336521 · Cited by 27
Towards the Robustness of Differentially Private Federated Learning
Qi, T., Wang, H., & Huang, Y. (2024) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v38i18.29967 · Cited by 27
Unleashing the prospective of blockchain-federated learning fusion for IoT security: A comprehensive review
Gupta, M., Kumar, M., & Dhir, R. (2024) · Computer Science Review · doi:10.1016/j.cosrev.2024.100685 · Cited by 27
Systematic review of privacy-preserving Federated Learning in decentralized healthcare systems
Kumar, K. A. S., Nelson, L., & Jibinsingh, B. R. (2025) · Franklin Open · doi:10.1016/j.fraope.2025.100440 · Cited by 26
An adaptive robust defending algorithm against backdoor attacks in federated learning
Wang, Y., Zhai, D.-H., He, Y., & Xia, Y. (2023) · Future Generation Computer Systems · doi:10.1016/j.future.2023.01.026 · Cited by 25
Batch-Aggregate: Efficient Aggregation for Private Federated Learning in VANETs
Feng, X., Liu, H., Yang, H., Xie, Q., & Wang, L. (2024) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2024.3364371 · Cited by 28
Secure Model Aggregation Against Poisoning Attacks for Cross-Silo Federated Learning With Robustness and Fairness
Mao, Y., Ye, Z., Yuan, X., & Zhong, S. (2024) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3416042 · Cited by 26
Federated RNN for Intrusion Detection System in IoT Environment Under Adversarial Attack
Rezaie, H., Taheri, R., Jordanov, I., & Shojafar, M. (2025) · Journal of Network and Systems Management · doi:10.1007/s10922-025-09963-8 · Cited by 25
FedSPL: federated self-paced learning for privacy-preserving disease diagnosis
Wang, Q., & Zhou, Y. (2021) · Briefings in Bioinformatics · doi:10.1093/bib/bbab498 · Cited by 25
BV-ICVs: A privacy-preserving and verifiable federated learning framework for V2X environments using blockchain and zkSNARKs
Smahi, A., Li, H., Yang, Y., Yang, X., Lu, P., Zhong, Y., & Liu, C. (2023) · Journal of King Saud University - Computer and Information Sciences · doi:10.1016/j.jksuci.2023.03.020 · Cited by 25
Federated learning for Healthcare 5.0: a comprehensive survey, taxonomy, challenges, and solutions
Amin, M., Ahmad, S., & Loh, W.-K. (2025) · Soft Computing · doi:10.1007/s00500-025-10508-z · Cited by 29
Towards Privacy-Preserving Data-Driven Education: The Potential of Federated Learning
Khalil, M., Shakya, R., & Liu, Q. (2025) · International Conference on New Trends in Computing Sciences (ICTCS) · doi:10.1109/ictcs65341.2025.10989403 · Cited by 24
Secure and Trustworthy Open Radio Access Network (O-RAN) Optimization: A Zero-Trust and Federated Learning Framework for 6G Networks
El-Hajj, M. I. (2025) · Future Internet · doi:10.3390/fi17060233 · Cited by 24
Untargeted Poisoning Attack Detection in Federated Learning via Behavior AttestationAl
Mallah, R. A., Lopez, D. L., Badu-Marfo, G., & Farooq, B. (2023) · IEEE Access · doi:10.1109/access.2023.3330144 · Cited by 53
Federated Learning: Issues in Medical Application
Yoo, J. H., Jeong, H., Lee, J., & Chung, T. (2021) · Lecture notes in computer science · doi:10.1007/978-3-030-91387-8_1 · Cited by 26
Get a Model! Model Hijacking Attack Against Machine Learning Models
Salem, A., Michael Backes, A., & Zhang, Y. (2022) · Network and Distributed System Security Symposium · doi:10.14722/ndss.2022.23064 · Cited by 24
Robust Collaborative Fraudulent Transaction Detection using Federated Learning
Myalil, D., Rajan, M. A., Apte, M. M., & Lodha, S. (2021) · International Conference on Machine Learning and Applications · doi:10.1109/icmla52953.2021.00064 · Cited by 24
Analysis of Privacy-Enhancing Technologies in Open-Source Federated Learning Frameworks for Driver Activity Recognition
Novikova, E., Fomichov, D., Kholod, I., & Filippov, E. (2022) · Sensors · doi:10.3390/s22082983 · Cited by 24
SHERPA: Explainable Robust Algorithms for Privacy-Preserved Federated Learning in Future Networks to Defend Against Data Poisoning Attacks
Sandeepa, C., Siniarski, B., Wang, S., & Liyanage, M. (2024) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp54263.2024.00271 · Cited by 23
FLAD: Byzantine-Robust Federated Learning Based on Gradient Feature Anomaly Detection
Tang, P., Zhu, X., Qiu, W., Huang, Z. R., Mu, Z., & Li, S. (2025) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2025.3542437 · Cited by 23
Strategies for protection against adversarial attacks in AI models: An in-depth review
Shayea, G. G., Zabil, M. H. M., Habeeb, M. A., Khaleel, Y. L., & Albahri, A. S. (2025) · Journal of Intelligent Systems · doi:10.1515/jisys-2024-0277 · Cited by 23
Data poisoning attacks on federated learning by using adversarial samples
Shi, L., Chen, Z., Shi, Y., Zhao, G., Wei, L., Tao, Y., & Gao, Y. (2022) · International Conference on Computer Engineering and Artificial Intelligence (ICCEAI) · doi:10.1109/icceai55464.2022.00041 · Cited by 26
Achieving Byzantine-Resilient Federated Learning via Layer-Adaptive Sparsified Model Aggregation
Xu, J., Zhang, Z., & Hu, R. (2025) · IEEE Winter Conference on Applications of Computer Vision · doi:10.1109/wacv61041.2025.00154 · Cited by 22
Federated Learning Attacks Revisited: A Critical Discussion of Gaps, Assumptions, and Evaluation Setups
Wainakh, A., Zimmer, E., Subedi, S., Keim, J., Grube, T., Karuppayah, S., Guinea, A. S., & Mühlhäuser, M. (2022) · Sensors · doi:10.3390/s23010031 · Cited by 26
SBPA: Sybil-Based Backdoor Poisoning Attacks for Distributed Big Data in AIoT-Based Federated Learning System
Xiao, X., Tang, Z., Li, C., Jiang, B., & Li, K. (2022) · IEEE Transactions on Big Data · doi:10.1109/tbdata.2022.3224392 · Cited by 23
Collusive Model Poisoning Attack in Decentralized Federated Learning
TAN, S., Hao, F., Gu, T., Li, L., & Liu, M. (2023) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2023.3342901 · Cited by 22
Federated deep long-tailed learning: A survey
Li, K., Li, Y., Zhang, J., Liu, X., & Ma, Z. (2024) · Neurocomputing · doi:10.1016/j.neucom.2024.127906 · Cited by 21
Securing federated learning: a defense strategy against targeted data poisoning attack
Khraisat, A., Alazab, A., Alazab, M., Jan, T., Singh, S., & Uddin, M. A. (2025) · Discover Internet of Things · doi:10.1007/s43926-025-00108-6 · Cited by 21
Federated learning model with dynamic scoring-based client selection for diabetes diagnosis
Ahmed, S., Kaiser, M. S., Chaki, S., Aloteibi, S., & Moni, M. A. (2025) · Knowledge-Based Systems · doi:10.1016/j.knosys.2025.113662 · Cited by 23
Spatio-temporal Bayesian Learning for Mobile Edge Computing Resource Planning in Smart Cities
Ale, L., Zhang, N., King, S. A., & Guardiola, J. H. (2021) · ACM Transactions on Internet Technology · doi:10.1145/3448613 · Cited by 23
Byzantine-robust Federated Learning through Spatial-temporal Analysis of Local Model Updates
Li, Z., Liu, L., Zhang, J., & Liu, J. (2021) · IEEE International Conference on Parallel and Distributed Systems (ICPADS) · doi:10.1109/icpads53394.2021.00052 · Cited by 25
Self-citation

Authors: Tolpegin, V., Truex, S., Gursoy, M. E., & Liu, L.
Affiliations: Georgia Institute of Technology (US)
Corresponding author: Truex, Stacey
ORCID: Truex, Stacey
Liu, Ling
Venue: Lecture Notes in Computer Science
Publisher: Springer International Publishing
Published: 2020
Pages: 480-501
ISSN: 0302-9743 (ISSN-L)
1611-3349
DOI: 10.1007/978-3-030-58951-6_24
OpenAlex: W3087391814
Cited by: 927
References: 52
Citations by year: 2026: 124 · 2025: 219 · 2024: 243 · 2023: 160 · 2022: 113 · 2021: 62 · 2020: 6
FWCI: 32.57
Type: conference paper
Language: en
Open access: green
arxiv.org
Licence: www.springer.com/tdm (tdm)
www.springer.com/tdm (vor)
Locations: Lecture notes in computer science (publishedVersion)
arXiv (Cornell University) (submittedVersion)
arXiv (Cornell University)
Funders: National Science Foundation (1564097)
Directorate for Computer and Information Science and Engineering (1564097)
Topics: Physical Sciences › Computer Science › Artificial Intelligence › Privacy-Preserving Technologies in Data
Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
Physical Sciences › Computer Science › Computer Vision and Pattern Recognition › Digital Media Forensic Detection
Keywords: data poisoning, federated learning, targeted attacks, malicious participants, mislabeled data, model updating

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review

Data Poisoning Attacks Against Federated Learning Systems

Overview

Integrity signals

Verification

Claims the paper makes

Claims other papers make about this one

Citations

Cites

Cited by

Related

Metadata

Record

About these checks