Cited by 292Adversarial Robustness in Machine LearningPrivacy-Preserving Technologies in DataDigital Media Forensic Detection

The DOI matches its Crossref record; 40 of the 42 references it cites were found in a registry or an index.

PoisonGAN: Generative Poisoning Attacks Against Federated Learning in Edge Computing Systems

Zhang, Jiale, Chen, Bing, Cheng, Xiang, Binh, Huynh Thi Thanh, Yu, Shui·2021·IEEE Internet of Things Journal

DOI 10.1109/jiot.2020.3023126

Open this paper in CoChat — free account

Abstract

Edge computing is a key-enabling technology that meets continuously increasing requirements for the intelligent Internet-of-Things (IoT) applications. To cope with the increasing privacy leakages of machine learning while benefiting from unbalanced data distributions, federated learning has been wildly adopted as a novel intelligent edge computing framework with a localized training mechanism. However, recent studies found that the federated learning framework exhibits inherent vulnerabilities on active attacks, and poisoning attack is one of the most powerful and secluded attacks where the functionalities of the global model could be damaged through attacker's well-crafted local updates. In this article, we give a comprehensive exploration of the poisoning attack mechanisms in the context of federated learning. We first present a poison data generation method, named Data_Gen, based on the generative adversarial networks (GANs). This method mainly relies upon the iteratively updated global model parameters to regenerate samples of interested victims. Second, we further propose a novel generative poisoning attack model, named PoisonGAN, against the federated learning framework. This model utilizes the designed Data_Gen method to efficiently reduce the attack assumptions and make attacks feasible in practice. We finally evaluate our data generation and attack models by implementing two types of typical poisoning attack strategies, label flipping and backdoor, on a federated learning prototype. The experimental results demonstrate that these two attack models are effective in federated learning.

Integrity signals

Registry

Crossref · 10.1109/jiot.2020.3023126

Cites

40 of 40 references verified0 citation errors · 0 not checkable

Statistics

Recomputing p-values needs the paper’s full text.

Claims the paper makes

This paper’s full text isn’t openly available, so its claims and self-check weren’t run. The registry and citation checks still apply.

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

Generative Adversarial Nets
Labaca-Castro, R. (2023) · Springer eBooks · doi:10.1007/978-3-658-40442-0_9 · Cited by 21,119
GAN（Generative Adversarial Nets）
淳司, 柴. (2017) · Journal of Japan Society for Fuzzy Theory and Intelligent Informatics · doi:10.3156/jsoft.29.5_177_2 · Cited by 20,507
Communication-Efficient Learning of Deep Networks from Decentralized Data
McMahan, H. B., Moore, E., Ramage, D., Hampson, S., & Arcas, B. A. Y. (2016) · arXiv · doi:10.48550/arxiv.1602.05629 · Cited by 14,215
Federated Machine Learning: Concept and Applications
Yang, Q., Liu, Y., Chen, T., & Tong, Y. (2019) · ACM Transactions on Intelligent Systems and Technology · doi:10.1145/3298981 · Cited by 6,322
Practical Secure Aggregation for Privacy-Preserving Machine Learning
Bonawitz, K., Ivanov, V., Kreuter, B., Marcedone, A., McMahan, H. B., Patel, S., Ramage, D., Segal, A., & Seth, K. (2017) · Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/3133956.3133982 · Cited by 3,956
A Survey on Internet of Things: Architecture, Enabling Technologies, Security and Privacy, and Applications
Lin, J., Yu, W., Zhang, N., Yang, X., Zhang, H., & Zhao, W. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2017.2683200 · Cited by 2,793
Privacy-preserving deep learning
Shokri, R., & Shmatikov, V. (2015) · Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/2810103.2813687 · Cited by 2,356
Federated Learning with Non-IID Data
Zhao, Y., Li, M., Lai, L., Suda, N., Civin, D., & Chandra, V. (2018) · arXiv · doi:10.48550/arxiv.1806.00582 · Cited by 2,077
Comprehensive Privacy Analysis of Deep Learning: Passive and Active White-box Inference Attacks against Centralized and Federated Learning
Nasr, M., Shokri, R., & Houmansadr, A. (2019) · 2019 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2019.00065 · Cited by 1,760
Exploiting Unintended Feature Leakage in Collaborative Learning
Melis, L., Song, C., De Cristofaro, E., & Shmatikov, V. (2019) · 2019 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2019.00029 · Cited by 1,734

Show all 42 references

Sorted by citations

Items 201–292 of 292

Adversarial Attacks on Network Intrusion Detection Systems Based on Federated Learning
Yang, Z., Qu, H., Hua, Y., Zhang, X., & Lin, X.-J. (2024) · Lecture notes in computer science · doi:10.1007/978-981-97-5606-3_13 · Cited by 3
Fedeval: Defending Against Lazybone Attack via Multi-dimension Evaluation in Federated Learning
Wang, H., Zhang, H., Wang, L., Xuan, S., & Zhang, Q. (2024) · ACM Transactions on Sensor Networks · doi:10.1145/3703631 · Cited by 3
Evading model poisoning attacks in federated learning by a long-short-term-memory-based approach
Arazzi, M., Lax, G., & Nocera, A. (2024) · Integrated Computer-Aided Engineering · doi:10.1177/10692509241301588 · Cited by 3
Dual Perspectives on GAN-Based Data Poisoning in Federated Learning: VagueGAN Attacks and Data Poisoning Detection
Nowroozi, E., Habibi, Y., Naveed, M. S., Saedi, M., & Jafari, M. (2026) · Springer eBooks · doi:10.1007/978-3-031-99447-0_18 · Cited by 2
AI-Enhanced Cybersecurity in Edge Computing: Threats, Solutions, and Future Directions
Alamir, R. H., Noor, A., Almukhalfi, H. M., Almukhlifi, R., & Noor, T. H. (2026) · ACM Computing Surveys · doi:10.1145/3801741 · Cited by 3
Anonymous federated learning framework in the internet of things
Du, R., Chuan, L., & Gao, Y. (2023) · Concurrency and Computation Practice and Experience · doi:10.1002/cpe.7901 · Cited by 2
Heterogeneous Personalized Privacy Protection for Internet of Medical Things: A Blockchain-based Federated Learning Approach
Gao, P., Su, J., Xu, Z., Yuan, X., & Fu, Y. (2023) · IEEE International Conference on Internet of Things (iThings) and IEEE Green Computing and Communications (GreenCom) and IEEE Cyber, Physical and Social Computing (CPSCom) and IEEE Smart Data (SmartData) · doi:10.1109/ithings-greencom-cpscom-smartdata-cybermatics60724.2023.00081 · Cited by 2
Privacy Preservation Using Blockchain and Machine Learning
Solunke, H. B., Bhaladhare, P., & Potgantwar, A. D. (2024) · Advances in logistics, operations, and management science book series · doi:10.4018/979-8-3693-3494-2.ch017 · Cited by 2
SecDefender: Detecting low-quality models in multidomain federated learning systems
Sameera, K. M., Sgueglia, A., Vinod, P., A., R. R. K., Visaggio, C. A., Sorbo, A. D., & Conti, M. (2024) · Future Generation Computer Systems · doi:10.1016/j.future.2024.107587 · Cited by 2
Defending against diverse attacks in federated learning through consensus-based bi-level optimization
Trillos, N. G., Akash, A. K., Li, S., Riedl, K., & Zhu, Y. (2025) · Philosophical Transactions of the Royal Society A Mathematical Physical and Engineering Sciences · doi:10.1098/rsta.2024.0235 · Cited by 2
Challenges, Opportunities, and Future Prospects
Abdel‐Basset, M., Moustafa, N., Hawash, H., & Ding, W. (2021) · Studies in computational intelligence · doi:10.1007/978-3-030-89025-4_10 · Cited by 2
A Modular Encryption Framework in Cloud and Mobile Environments for Cybersecurity Solutions in Health Information
Gyawali, Y. P., & Karyakarte, M. S. (2023) · Research Journal of Computer Systems and Engineering · doi:10.52710/rjcse.64 · Cited by 2
The Client-Level GAN-Based Data Reconstruction Attack and Defense in Clustered Federated Learning
Wu, H., Shi, L., Ye, J., Fan, Y., & Lv, Z. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-71464-1_38 · Cited by 1
Graph neural networks adversarial attacks based on node gradient and importance score
Sun, Y., Ju, J., Cheng, S., Yang, J., Cao, Y., Zhang, A., & Shi, W. (2025) · Information Sciences · doi:10.1016/j.ins.2025.122168 · Cited by 1
Security and Credit evaluation mechanism federated learning privacy protection scheme
Guan, G., Zhi, T., Cai, Y., Cao, Y., Dong, H., & Zhou, W. (2025) · International Conference on Computer Research and Development · doi:10.1109/iccrd64588.2025.10963257 · Cited by 1
FedOPCS: An Optimized Poisoning Countermeasure for Non-IID Federated Learning with Privacy-Preserving Stability
Bai, F., Zhao, Y., Shen, T., Zeng, K., Zhang, X., & Zhang, C. (2025) · Symmetry · doi:10.3390/sym17050782 · Cited by 1
PQC-Enhanced Privacy-Preserving Federated Learning for Edge-Based IoT Ecosystems
Zhang, W., Wei, J., & Khan, M. K. (2025) · IEEE Transactions on Consumer Electronics · doi:10.1109/tce.2025.3601395 · Cited by 1
Shielding federated learning: mitigating label transferability against poisoning attacks in cloud-edge-client system
Zhao, Y., Cao, Y., Zhang, J., Zhang, Z., & Wang, W. (2025) · Expert Systems with Applications · doi:10.1016/j.eswa.2025.129502 · Cited by 1
Self-citation
A Comparative Analysis of Label Flipping and Backdoor Data Poisoning Attacks in Federated Learning
Bisna, N. D., Navaneeth, D., & James, A. (2025) · International Conference on Soft Computing for Security Applications (ICSCSA) · doi:10.1109/icscsa66339.2025.11171343 · Cited by 1
The Built-In Robustness of Decentralized Federated Averaging to Bad Data
Sabella, S., Boldrini, C., Valerio, L., Passarella, A., & Conti, M. (2025) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn64981.2025.11229161 · Cited by 1
A Robust Federated Learning System Against Data Poisoning Attacks in IoT Networks
Vu, L., & Tran, T. P. (2025) · Journal of Reliable Intelligent Environments · doi:10.1007/s40860-025-00263-1 · Cited by 1
FedD2: Data Poisoning Robust Defense Strategy in Federated Learning
Wu, J. F., Liu, Y., Ni, T., Zheng, X., Luo, Y., & Hu, P. (2025) · IEEE International Conference on Parallel and Distributed Systems (ICPADS) · doi:10.1109/icpads67057.2025.11323206 · Cited by 1
Clean-Label Data Poisoning Attack based on Representation-Conditioned Data Generation
Zhang, W., Li, X., Yu, J., Vijayakumar, P., Obaidat, M. S., & Zhang, X. (2025) · Globecom · doi:10.1109/globecom59602.2025.11431666 · Cited by 1
Defending federated learning against adversarial attacks: A systematic literature review
Babar, F. F., Khan, S., & Parkinson, S. (2026) · Cyber Security and Applications · doi:10.1016/j.csa.2026.100127 · Cited by 1
From data heterogeneity to convergence: A data-centric review of federated learning
Nguyen, H. T., Bettinelli, M., Ghaffari, A., Benoît, A., Nguyen, T., Pirttikangas, S., & Lovén, L. (2026) · Neurocomputing · doi:10.1016/j.neucom.2026.135005 · Cited by 1
An Adversarial Defense Scheme for Federated Learning Based on GAN
Peng, Y., Niu, Z., & Wang, P. (2022) · IEEE International Conference on Civil Aviation Safety and Information Technology (ICCASIT) · doi:10.1109/iccasit55263.2022.9987214 · Cited by 1
DMRA: Model Usability Detection Scheme Against Model-Reuse Attacks in the Internet of Things
Dong, Q., Zheng, X., Fu, A., Su, M., Zhou, L., & Yu, S. (2023) · IEEE Internet of Things Journal · doi:10.1109/jiot.2023.3271223 · Cited by 1
Self-citation
CLMD:Detection and Prevention of Poisoning Attacks for Federated Learning in Maritime Communication Network
Han, C., Yang, T., Sun, X., & Ning, J. (2023) · International Conference on Communications · doi:10.1109/icc45041.2023.10279179 · Cited by 1
FedLS: An Anti-poisoning Attack Mechanism for Federated Network Intrusion Detection Systems Using Autoencoder-Based Latent Space Representations
Luong, T. D., Tien, V. M., Duy, P. T., & Pham, V.-H. (2023) · Lecture notes in computer science · doi:10.1007/978-981-99-7032-2_2 · Cited by 1
A new federated learning system with attention-aware aggregation method for intrusion detection systems
Vu, L., Tran, T. P., & Nguyen, Q. U. (2025) · Elsevier eBooks · doi:10.1016/b978-0-44-329032-9.00014-2 · Cited by 1
Introduction to Federated Learning
Yu, S., & Cui, L. (2022) · Digital Privacy and Security · doi:10.1007/978-981-19-8692-5_1 · Cited by 1
Self-citation
Data Poisoning Attack Against Federated Learning Based Autonomous Driving ModelPreprint
Wang, S., Li, Q., Cui, Z., Hou, J., & Huang, C. (2022) · SSRN Electronic Journal · doi:10.2139/ssrn.4195982 · Cited by 1
Dleep Learning based Regularization as defense against Clean Label Targeted Data Poisoning
Parihar, A. S., Kalra, J., & Java, A. (2022) · International Conference on Intelligent Computing and Control Systems (ICICCS) · doi:10.1109/iciccs53718.2022.9788129
Privacy Preservation using Federated Learning and Homomorphic Encryption: A Study
Ajay, D. M. (2022) · IEEE Intl Conf on Dependable, Autonomic and Secure Computing, Intl Conf on Pervasive Intelligence and Computing, Intl Conf on Cloud and Big Data Computing, Intl Conf on Cyber Science and Technology Congress (DASC/PiCom/CBDCom/CyberSciTech) · doi:10.1109/dasc/picom/cbdcom/cy55231.2022.9927802 · Cited by 1
Analysis on the Security of Federated Learning
张, 建. (2022) · Software Engineering and Applications · doi:10.12677/sea.2022.116151
Targeted Clean-Label Poisoning Attacks on Federated Learning
Patel, A. S., & Singh, P. (2023) · Communications in computer and information science · doi:10.1007/978-3-031-23599-3_17
FedTA: Locally-Differential Federated Learning with Top-k Mechanism and Adam Optimization
Li, Y., Wang, G., Peng, T., & Feng, G. (2023) · Communications in computer and information science · doi:10.1007/978-981-99-0272-9_26
GAN Attacks and Counterattacks in Federated Learning
Yu, S., & Cui, L. (2022) · Digital Privacy and Security · doi:10.1007/978-981-19-8692-5_4
Self-citation
Bayes and Laplace Versus the World: A New Label Attack Approach in Federated Environments Based on Bayesian Neural Networks
Barros, P. H., Murai, F., & Ramos, H. S. (2023) · Lecture notes in computer science · doi:10.1007/978-3-031-45368-7_29
Detecting Low-Quality Models in Multidomain Federated Learning SystemsPreprint
Sameera, K. M., Sgueglia, A., Vinod, P., Rehiman, K. A. R., Visaggio, C. A., & Sorbo, A. D. (2023) · SSRN Electronic Journal · doi:10.2139/ssrn.4604411
Federated Learning for IoT Applications, Attacks and Defense Methods
Qu, Z., Duan, R., Liu, Y., & Lu, Z. (2023) · Springer eBooks · doi:10.1007/978-3-031-42637-7_9
Machine learning frameworks in IoT systems: A survey, case study, and future research directions
Chen, Z., Tian, P., Qian, C., Liao, W., Hussaini, A., & Yu, W. (2024) · Elsevier eBooks · doi:10.1016/b978-0-443-13462-3.00015-7
Implementing a Multitarget Backdoor Attack Algorithm Based on Procedural Noise Texture Features
Liu, Q. B., Kang, C., Zou, Q., & Guan, Q. (2024) · IEEE Access · doi:10.1109/access.2024.3401848 · Cited by 1
A Survey of Federated Learning: Review, Attacks, Defenses
Yao, Z., Cheng, J., Fu, C., & Huang, Z. (2024) · Communications in computer and information science · doi:10.1007/978-981-97-4387-2_13
Secure Federated Learning
Tang, B., & Li, X. (2024) · Springer optimization and its applications · doi:10.1007/978-3-031-58923-2_2
Evaluating Language Model Vulnerability to Poisoning Attacks in Low-Resource Settings
Plant, R., Giuffrida, M. V., Pitropakis, N., & Gkatzia, D. (2024) · IEEE Transactions on Audio Speech and Language Processing · doi:10.1109/taslp.2024.3507565 · Cited by 1
Mitigating Iterative Fast Gradient Adversarial Poisoning in Archaeological Image Datasets using Generative Adversarial Networks and Denoising Autoencoders
Bai, K. V. S., Pradeep, K., Harini, G. V. N. L., & Reddy, N. Y. (2025) · International Conference on Electronics and Renewable Systems (ICEARS) · doi:10.1109/icears64219.2025.10940731
Adaptive GAN-Based Defense Against Data Poisoning in Federated Learning
Pathak, P., & Sreekumari, P. (2025) · Advances in intelligent systems and computing · doi:10.1007/978-3-031-89063-5_1
Popular Content Prediction Through Adversarial Autoencoder Using Anonymised Data
Maia, D. V. D. A., Vilela, J. P., & Curado, M. (2025) · IEEE Wireless Communications and Networking Conference · doi:10.1109/wcnc61545.2025.10978648
Federated Learning: An Overview of Attacks and Defense Methods
Sameera, K. M., Arikkat, D. R., Vinod, P., A., R. R. K., Aneez, A., & Conti, M. (2025) · Springer eBooks · doi:10.1007/978-3-031-83157-7_14
Secured edge intelligence in smart transportation CPS
Tian, P., Wang, Q., Chen, Y., & Yu, W. (2025) · Elsevier eBooks · doi:10.1016/b978-0-44-326572-3.00023-1
A lightweight dual-server aggregation federated learning framework with malicious client identification
Chen, Z., Zhong, Y., & Li, P. (2026) · Computer Networks · doi:10.1016/j.comnet.2026.112429
Safeguarding Creativity: The Impacts and Countermeasures of Data Poisoning in Generative AI Systems
Thomas, P., Asha, V., Diman, D., Yashwanth, M. B., Pandey, V., & Arun, J. (2025) · International Conference on Data Intelligence and Cognitive Informatics (ICDICI) · doi:10.1109/icdici66477.2025.11135090
Single-client GAN-based backdoor attacks for Asynchronous Federated Learning
Guan, S., Huang, C., & Cheng, H. (2025) · Neurocomputing · doi:10.1016/j.neucom.2025.131580
Hidden Threats to Federated Learning: A Comprehensive Survey of Attack Paradigms, Defense Strategies, and Research DirectionsPreprint
su, Q., Zhang, G., li, H., & Ge, L. (2025) · SSRN Electronic Journal · doi:10.2139/ssrn.5506730
Securing Collaborative Model Training: Navigating Privacy Challenges in Federated Learning for Industrial IoT
Babu, C. V. S., & Suruthi, G. (2025) · Studies in systems, decision and control · doi:10.1007/978-3-031-99270-4_6
Advanced adversarial defense mechanisms in edge computing
Akinyemi, L. A., Teferi, M. B., Ekundayo, O., Agbo-Ajala, J. O., Mnkandla, E., & Sumbwanyambe, M. (2025) · Elsevier eBooks · doi:10.1016/b978-0-443-34109-0.00016-4
Anti-traceable backdoor: Blaming malicious poisoning on innocents in non-IID federated learning
Chen, B., Li, G., Mei, H., Li, J., Chen, M., & Debbah, M. A. (2025) · Journal of Information Security and Applications · doi:10.1016/j.jisa.2025.104240
Self-citation
Detection of GAN Generated Images Related Poisoning Attacks in Federated Learning Systems
Sivarajah, M., Mohamed, R., Thayaparan, A., Sandeepa, C., Moremada, C., & Liyanage, M. (2025) · IEEE International Black Sea Conference on Communications and Networking · doi:10.1109/blackseacom65655.2025.11193919
Digital Watermarking for Secure Federated Learning in the Internet of Vehicles
Hang, B., Deng, Q., & Wen, Q. (2025) · International Conference on Transportation Information and Safety · doi:10.1109/ictis68762.2025.11214857
A Federated Learning Data Poisoning Attacker Detection Method based on Credibility and Data Quality
Song, H., Shi, S., Zhao, X., Xu, C., Zhang, S., & Xu, X. (2025) · International Conference on Cyber-Enabled Distributed Computing and Knowledge Discovery (CyberC) · doi:10.1109/cyberc66434.2025.00012
Toward Secure Federated Partial Label Learning Against Poisoning Attacks
Chen, X., Yang, Z., Sheng, X., Fu, S., & Bao, W. (2025) · ACM International Conference on Information and Knowledge Management (CIKM) · doi:10.1145/3746252.3760849
From Heterogeneous Data to Secure Convergence: A Data-Centric Review of Federated LearningPreprint
Nguyen, H. Q., Bettinelli, M., Ghaffari, A., Benoît, A., Nguyen, T., Pirttikangas, S., & Lovén, L. (2025) · SSRN Electronic Journal · doi:10.2139/ssrn.5856890
FingerMarks: Robust Multi-Bit Watermarking for Remote Deep Neural Networks
Li, Q., Xu, G., & Qi, X. (2025) · Electronics · doi:10.3390/electronics14244818
Research on Online Monitoring System of Generator Slip Ring Temperature Based on the Internet of Things and Edge Computing
Li, T. (2025) · Internet Technology Letters · doi:10.1002/itl2.70115
Implications of Generative AI on IoT Security: A Dual Perspective
Pimpalkar, Y., Ravindran, S., Bapat, J. L., & Das, D. (2026) · Smart sensors, measurement and instrumentation · doi:10.1007/978-3-032-05507-1_3
Visual security defense for industrial inspection based on computer vision
Jiang, Z., Yuan, H., Zeng, C., & Fu, L. (2026) · PLoS ONE · doi:10.1371/journal.pone.0338835
A Model Consistency-Based Countermeasure to GAN-Based Data Poisoning Attack in Federated Learning
Sun, W. J., Gao, B., Xiong, K., Wang, Y., Fan, P., & Letaief, K. B. (2026) · IEEE Transactions on Mobile Computing · doi:10.1109/tmc.2026.3665336 · Cited by 2
Taxonomy of Cybersecurity Challenges and Solutions for the Superintelligent Systems
Khan, Z., Khan, S. U., Niazi, M., Malik, A., Qaisar, S. M., & Khan, A. A. (2026) · Information and Software Technology · doi:10.1016/j.infsof.2026.108152
Hybrid Poisoning Attacks Leveraging Fake Identities in Cross-Device Federated Learning-Edge Consumer IoT Networks
Xiao, X., Tang, Z., Song, Y., Tan, J., Wang, X., Chen, L. N., Liang, Z., & Li, K. (2026) · IEEE Transactions on Consumer Electronics · doi:10.1109/tce.2026.3686756
Edge AI: A Comprehensive Survey on Applications, Challenges, and Future Directions
Phuc, T. V., & Pham‐Quoc, C. (2026) · Lecture notes in networks and systems · doi:10.1007/978-3-032-14935-0_5
Reviewing Model Collapse and Countermeasures
Xie, X., & Hu, B. (2026) · International Conference on Advances in Artificial Intelligence and Machine Learning (AAIML) · doi:10.1109/aaiml67890.2026.11498213 · Cited by 1
Data-Agnostic MP Techniques
Li, K., Yuan, X., & Ni, W. (2026) · Springer series in reliability engineering · doi:10.1007/978-3-032-23959-4_6
Model Poisoning via Variational Graph Representations
Li, K., Yuan, X., & Ni, W. (2026) · Springer series in reliability engineering · doi:10.1007/978-3-032-23959-4_4
Trustworthy privacy-preserving federated learning for urban sensing: Simultaneous mitigation of inference and poisoning attacks
Kumar, L. S. R., & Kumar, D. (2026) · Knowledge-Based Systems · doi:10.1016/j.knosys.2026.116242
A Privacy-Preserving Step-Size Collection Against Poisoning Attacks for Federated Learning in IoT
Song, J., Wang, J., Guan, X., & Hu, J. (2026) · Lecture notes in computer science · doi:10.1007/978-3-032-20080-8_2
Tricking Dynamic Neural Networks on The Edge: Adversarial Attacks Targeting System ResourcesPreprint
Ayyat, M., & Nadeem, T. (2026) · SSRN Electronic Journal · doi:10.2139/ssrn.6829890
Model Poisoning Efficiency Evaluation in Non-IID Federated Learning
Crispo, B., Cristiano, G. M., D’Antonio, S., Mazzeo, G., & Romano, L. (2026) · Lecture notes on data engineering and communications technologies · doi:10.1007/978-3-032-23341-7_6
TrustFed-IDS: A trust-aware federated hybrid MLP-LSTM framework for robust intrusion detection in wireless sensor networks
Sankeawthong, S., Cao, X., Zhao, S., & Zhang, Y. (2026) · Computer Networks · doi:10.1016/j.comnet.2026.112430
Resilience of federated learning: perspectives on attacks and defenses
Raj, P. V. P., Gupta, A., & Das, S. K. (2026) · Elsevier eBooks · doi:10.1016/b978-0-44-344433-3.00016-2
SADFL: Spectral Anomaly Detection with adversarial learning in Federated Learning for defending malicious client attacks
Ruan, J.-H., Zhang, Z.-L., Liu, W.-A., Ruan, Y.-P., & Xiong, Q. (2026) · Information Processing & Management · doi:10.1016/j.ipm.2026.104973
Poisoning the Swarm: Evaluating data-level vulnerabilities in decentralized Internet of Medical Things-enabled healthcare networks
Son, N. D. H., Ngan, V. D. T., Nha, L. M., Luong, T. D., Pham, V.-H., & Duy, P. T. (2026) · Computers & Electrical Engineering · doi:10.1016/j.compeleceng.2026.111349 · Cited by 1
A comprehensive survey on communication optimization and privacy preservation in federated learning
Kunjumon, A., Sarath, G., & Nair, J. J. (2026) · Discover Computing · doi:10.1007/s10791-026-10272-0 · Cited by 1
Critical Neuron-Based Backdoor Defense for Federated Learning: A Combined Dropout and Local Outlier Factor Approach
Chen, D., Chen, X., Wang, Z., Wang, J., Shi, L., & Zhou, Y. (2026) · Lecture notes in computer science · doi:10.1007/978-981-95-9284-5_3
Adaptive Local Density-based Defense Against Poisoning Attacks in Federated Learning
Ramana, M. V., Nagabharani, C., Krishna, S. G., Mojesh, V. V., & Malathi, A. (2026) · International Conference on Computer Networks, Big Data and IoT (ICCBI) · doi:10.1109/iccbi68589.2026.11619730
Poisoning Attacks in Federated Learning: An Accountability- Oriented Survey with Centralized Learning as a Baseline
Mohammed, S., Alhadidi, D., & Ngom, A. (2026) · Journal of Cybersecurity and Privacy · doi:10.3390/jcp6040133
Data poisoning attack classification with ConvNeXT-GAN
Vedavathi, N., & Kumar, K. M. A. (2026) · Information Security Journal A Global Perspective · doi:10.1080/19393555.2026.2711104
Retain useful knowledge from compromised clients: Reliability-aware federated learning against data poisoning attacks
Gao, C., Wang, H., Lou, J., Deng, W., Zhou, N., Liang, X., & Cui, W. (2026) · Information Sciences · doi:10.1016/j.ins.2026.124097
Cross-Modal Multi-Level Backdoor Poisioning in Multimodal Federated Learning
Ibrar, K., Xhafa, F., & Palmieri, F. (2026) · Lecture notes on data engineering and communications technologies · doi:10.1007/978-3-032-29561-3_15
Federated Generative AI for Privacy-Preserving Large-Scale Model Training at the Edge
Sabah, S., Alnajar, H. R., Mohammed, I. A., Al-Bayati, H. N. A., & Shumyk, S. (2026) · Communications in computer and information science · doi:10.1007/978-3-032-39708-9_2
Leveraging federated learning for smart grids: A comprehensive survey
Husnoo, M. A., Anwar, A., & Rahman, M. A. (2026) · Cyber-Physical Energy Systems · doi:10.1016/j.cpes.2026.07.002
Strategic Client-Level Defense Placement in Mobile Federated Learning
Ambreth, A., Kumar, K. N., & Guizani, M. (2026) · ACM International Symposium on Theory, Algorithmic Foundations, and Protocol Design for Mobile Networks and Mobile Computing (MobiHoc) · doi:10.1145/3842721.3850221

Authors: Zhang, J., Chen, B., Cheng, X., Binh, H. T. T., & Yu, S.
Affiliations: Nanjing University of Aeronautics and Astronautics (CN)
School of Information and Communication Technology, Hanoi University of Science and Technology, Hanoi, Vietnam
University of Technology Sydney (AU)
ORCID: Zhang, Jiale
Chen, Bing
Cheng, Xiang
Binh, Huynh Thi Thanh
Yu, Shui
Venue: IEEE Internet of Things Journal
Publisher: Institute of Electrical and Electronics Engineers (IEEE)
Published: 2021-03-01
Volume: 8
Issue: 5
Pages: 3310-3322
ISSN: 2327-4662 (ISSN-L)
2372-2541
DOI: 10.1109/jiot.2020.3023126
OpenAlex: W3084847664
Cited by: 291
References: 42
Citations by year: 2026: 34 · 2025: 61 · 2024: 72 · 2023: 63 · 2022: 43 · 2021: 18
FWCI: 12.18
Type: journal article
Language: en
Open access: closed
Licence: ieeexplore.ieee.org/Xplorehelp/downloads/license-information/IEEE.html (vor)
doi.org/10.15223/policy-029 (stm-asf)
doi.org/10.15223/policy-037 (stm-asf)
Locations: IEEE Internet of Things Journal (publishedVersion)
UTS ePRESS (University of Technology Sydney) (submittedVersion)
Funders: National Key Research and Development Program of China (2019YFB2102000)
National Natural Science Foundation of China (61672283)
Science and Technology on Avionics Integration Laboratory and the National Aeronautical Science Foundation of China (20175552039)
Postgraduate Research and Practice Innovation Program of Jiangsu Province (KYCX18_0308)
Topics: Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
Physical Sciences › Computer Science › Artificial Intelligence › Privacy-Preserving Technologies in Data
Physical Sciences › Computer Science › Computer Vision and Pattern Recognition › Digital Media Forensic Detection
Keywords: federated learning, generative adversarial networks, data poisoning, edge computing, Internet of Things, label flipping, backdoor attacks, privacy leakage

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review

PoisonGAN: Generative Poisoning Attacks Against Federated Learning in Edge Computing Systems

Abstract

Overview

Integrity signals

Verification

Claims the paper makes

Claims other papers make about this one

Citations

Cites

Cited by

Related

Metadata

Record

About these checks