Cited by 371Privacy-Preserving Technologies in DataAdversarial Robustness in Machine LearningCryptography and Data Security

The DOI matches its Crossref record; 39 of the 39 references it cites were found in a registry or an index.

ShieldFL: Mitigating Model Poisoning Attacks in Privacy-Preserving Federated Learning

Ma, Zhuoran, Ma, Jianfeng, Miao, Yinbin, Li, Yingjiu, Deng, Robert H.·2022·IEEE Transactions on Information Forensics and Security

DOI 10.1109/tifs.2022.3169918

Open this paper in CoChat — free account

Abstract

Privacy-Preserving Federated Learning (PPFL) is an emerging secure distributed learning paradigm that aggregates user-trained local gradients into a federated model through a cryptographic protocol. Unfortunately, PPFL is vulnerable to model poisoning attacks launched by a Byzantine adversary, who crafts malicious local gradients to harm the accuracy of the federated model. To resist model poisoning attacks, existing defense strategies focus on identifying suspicious local gradients over plaintexts. However, the Byzantine adversary submits encrypted poisonous gradients to circumvent existing defense strategies in PPFL, resulting in encrypted model poisoning. To address the issue, in this paper we design a privacy-preserving defense strategy using two-trapdoor homomorphic encryption (referred to as ShieldFL), which can resist encrypted model poisoning without compromising privacy in PPFL. Specially, we first present the secure cosine similarity method aiming to measure the distance between two encrypted gradients. Then, we propose the Byzantine-tolerance aggregation using cosine similarity, which can achieve robustness for both Independently Identically Distribution (IID) and non-IID data. Extensive evaluations on three benchmark datasets (i.e.,MNIST, KDDCup99, and Amazon) show that ShieldFL outperforms existing defense strategies. Especially, ShieldFL can achieve 30%-80% accuracy improvement to defend two state-of-the-art model poisoning attacks in both non-IID and IID settings.

Integrity signals

Registry

Crossref · 10.1109/tifs.2022.3169918

Cites

39 of 39 references verified0 citation errors · 0 not checkable

Statistics

Recomputing p-values needs the paper’s full text.

Claims the paper makes

This paper’s full text isn’t openly available, so its claims and self-check weren’t run. The registry and citation checks still apply.

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

Communication-Efficient Learning of Deep Networks from Decentralized Data
McMahan, H. B., Moore, E., Ramage, D., Hampson, S., & Arcas, B. A. Y. (2016) · arXiv · doi:10.48550/arxiv.1602.05629 · Cited by 14,215
Membership Inference Attacks Against Machine Learning Models
Shokri, R., Stronati, M., Song, C., & Shmatikov, V. (2017) · 2017 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2017.41 · Cited by 4,754
Practical Secure Aggregation for Privacy-Preserving Machine Learning
Bonawitz, K., Ivanov, V., Kreuter, B., Marcedone, A., McMahan, H. B., Patel, S., Ramage, D., Segal, A., & Seth, K. (2017) · Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/3133956.3133982 · Cited by 3,956
Privacy-preserving deep learning
Shokri, R., & Shmatikov, V. (2015) · Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/2810103.2813687 · Cited by 2,356
Federated Learning with Non-IID Data
Zhao, Y., Li, M., Lai, L., Suda, N., Civin, D., & Chandra, V. (2018) · arXiv · doi:10.48550/arxiv.1806.00582 · Cited by 2,077
SecureML: A System for Scalable Privacy-Preserving Machine Learning
Mohassel, P., & Zhang, Y. (2017) · 2017 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2017.12 · Cited by 1,936
Comprehensive Privacy Analysis of Deep Learning: Passive and Active White-box Inference Attacks against Centralized and Federated Learning
Nasr, M., Shokri, R., & Houmansadr, A. (2019) · 2019 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2019.00065 · Cited by 1,760
Exploiting Unintended Feature Leakage in Collaborative Learning
Melis, L., Song, C., De Cristofaro, E., & Shmatikov, V. (2019) · 2019 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2019.00029 · Cited by 1,734
On the Convergence of FedAvg on Non-IID Data
Li, X., Huang, K., Yang, W., Wang, S., & Zhang, Z. (2019) · arXiv · doi:10.48550/arxiv.1907.02189 · Cited by 1,575
How to backdoor federated learning
Bagdasaryan, E., Veit, A., Hua, Y., Estrin, D., & Shmatikov, V. (2018) · arXiv · doi:10.48550/arxiv.1807.00459 · Cited by 1,495

Show all 39 references

Research works printed but not linked: 4

Shen, AUROR: Defending against poisoning attacks in collaborative deep learning systems, 508
LeCun, 1998, MNIST Database
1999, KDD Cup 1999 Data
2003, Amazon Networks

Sorted by citations

A robust privacy-preserving federated learning model against model poisoning attacks
Yazdinejad, A., Dehghantanha, A., Karimipour, H., Srivastava, G., & Parizi, R. M. (2024) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3420126 · Cited by 380
Domain generalization for rotating machinery fault diagnosis: A survey
Xiao, Y., Shao, H., Yan, S., Wang, J., Peng, Y., & Liu, B. (2024) · Advanced Engineering Informatics · doi:10.1016/j.aei.2024.103063 · Cited by 249
Poisoning attacks in federated learning: A survey
Xia, G., Chen, J., Yu, C., & Ma, J. (2023) · IEEE Access · doi:10.1109/access.2023.3238823 · Cited by 212
Self-citation
Efficiency Optimization Techniques in Privacy-Preserving Federated Learning With Homomorphic Encryption: A Brief Survey
Xie, Q., Jiang, S., Jiang, L., Huang, Y., Zhao, Z., Khan, S., Dai, W., Liu, Z., & Wu, K. (2024) · IEEE Internet of Things Journal · doi:10.1109/jiot.2024.3382875 · Cited by 222
The Impact of Adversarial Attacks on Federated Learning: A Survey
Kumar, K. N., Mohan, C. K., & Cenkeramaddi, L. R. (2023) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2023.3322785 · Cited by 209
Blockchain Meets Federated Learning in Healthcare: A Systematic Review With Challenges and Opportunities
Myrzashova, R., Alsamhi, S. H., Shvetsov, A. V., Hawbani, A., & Wei, X. (2023) · IEEE Internet of Things Journal · doi:10.1109/jiot.2023.3263598 · Cited by 178
Federated Learning for IoT: A Survey of Techniques, Challenges, and Applications
Dritsas, E., & Τρίγκα, Μ. (2025) · Journal of Sensor and Actuator Networks · doi:10.3390/jsan14010009 · Cited by 177
An overview of implementing security and privacy in federated learning
Hu, K., Gong, S., Zhang, Q., Seng, C., Xia, M., & Jiang, S. (2024) · Artificial Intelligence Review · doi:10.1007/s10462-024-10846-8 · Cited by 175
LSFL: A Lightweight and Secure Federated Learning Scheme for Edge Computing
Zhang, Z., Wu, L., Ma, C., Li, J., Wang, J., Wang, Q., & Yu, S. (2022) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2022.3221899 · Cited by 143
PPFLHE: A privacy-preserving federated learning scheme with homomorphic encryption for healthcare data
Wang, B., Li, H., Guo, Y., & Wang, J. (2023) · Applied Soft Computing · doi:10.1016/j.asoc.2023.110677 · Cited by 112
BCE-FL: A Secure and Privacy-Preserving Federated Learning System for Device Fault Diagnosis Under Non-IID Condition in IIoT
Xiao, Y., Shao, H., Lin, J., Huo, Z., & Liu, B. (2023) · IEEE Internet of Things Journal · doi:10.1109/jiot.2023.3340745 · Cited by 101
Efficient Verifiable Protocol for Privacy-Preserving Aggregation in Federated Learning
Eltaras, T., Sabry, F., Labda, W., Alzoubi, K., & AHMEDELTARAS, Q. (2023) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2023.3273914 · Cited by 100
Privacy-Preserving Federated Learning for Intrusion Detection in IoT Environments: A Survey
Vyas, A., Lin, P., Hwang, R., & Tripathi, M. (2024) · IEEE Access · doi:10.1109/access.2024.3454211 · Cited by 115
Trustworthy federated learning: privacy, security, and beyond
Chen, C., Liu, J., Tan, H., Li, X., Wang, K. I., Li, P., Sakurai, K., & Dou, D. (2024) · Knowledge and Information Systems · doi:10.1007/s10115-024-02285-2 · Cited by 110
Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance
Wei, W., & Liu, L. (2024) · ACM Computing Surveys · doi:10.1145/3645102 · Cited by 105
FedComm: A Privacy-Enhanced and Efficient Authentication Protocol for Federated Learning in Vehicular Ad-Hoc Networks
Yuan, X., Liu, J., Wang, B., Wang, W., Wang, B., Li, T., Ma, X., & Witold Pedrycz, C. (2023) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2023.3324747 · Cited by 77
Blockchain-Based Federated Learning With Enhanced Privacy and Security Using Homomorphic Encryption and Reputation
Yang, R., Zhao, T., Yu, F. R., Li, M., Zhang, D., & Zhao, X. (2024) · IEEE Internet of Things Journal · doi:10.1109/jiot.2024.3379395 · Cited by 71
RFL-APIA: A Comprehensive Framework for Mitigating Poisoning Attacks and Promoting Model Aggregation in IIoT Federated Learning
Li, C., He, A., Liu, G., Wen, Y., Chronopoulos, A. T., & Giannakos, A. (2024) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2024.3431020 · Cited by 63
Zero-Trust Foundation Models: A New Paradigm for Secure and Collaborative Artificial Intelligence for Internet of Things
Li, K., Li, C., Yuan, X., Li, S., Zou, S., Ahmed, S. S., Ni, W., Niyato, D. T., Jamalipour, A., Dressler, F., et al. (2025) · IEEE Internet of Things Journal · doi:10.1109/jiot.2025.3603957 · Cited by 61
SafeFL: MPC-friendly Framework for Private and Robust Federated Learning
Gehlhar, T., Marx, F., Schneider, T. H., Suresh, A., Wehrle, T., & Yalame, H. (2023) · IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw59333.2023.00012 · Cited by 60
Enhanced Model Poisoning Attack and Multi-Strategy Defense in Federated Learning
Yang, L., Miao, Y., Liu, Z., Liu, Z., Li, X., Kuang, D., Li, H., & Deng, R. H. (2025) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2025.3555193 · Cited by 64
Self-citation
Privacy-Preserving Federated Learning of Remote Sensing Image Classification With Dishonest Majority
Zhu, J., Wu, J., Bashir, A. K., Pan, Q., & Yang, W. (2023) · IEEE Journal of Selected Topics in Applied Earth Observations and Remote Sensing · doi:10.1109/jstars.2023.3276781 · Cited by 59
A Survey of Security Strategies in Federated Learning: Defending Models, Data, and Privacy
Manzoor, H. U., Shabbir, A., Chen, A., Flynn, D., & Zoha, A. (2024) · Future Internet · doi:10.3390/fi16100374 · Cited by 58
SAFELearning: Secure Aggregation in Federated Learning With Backdoor Detectability
Zhang, Z., Li, J., Yu, S., & Makaya, C. (2023) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2023.3280032 · Cited by 54
APFed: Anti-Poisoning Attacks in Privacy-Preserving Heterogeneous Federated Learning
Chen, X., Yu, H., Jia, X., & Yu, X. (2023) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2023.3315125 · Cited by 50
RoseAgg: Robust Defense Against Targeted Collusion Attacks in Federated Learning
Yang, H., Xi, W., Shen, Y., Wu, C., & Zhao, J. (2024) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3352415 · Cited by 48
Enhanced Security and Privacy via Fragmented Federated Learning
Jebreel, N., Domingo‐Ferrer, J., Blanco-Justicia, A., & Sánchez, D. (2022) · IEEE Transactions on Neural Networks and Learning Systems · doi:10.1109/tnnls.2022.3212627 · Cited by 50
Federated Learning Survey: A Multi-Level Taxonomy of Aggregation Techniques, Experimental Insights, and Future Frontiers
Arbaoui, M., Brahmia, M., Rahmoun, A., & Zghal, M. (2024) · ACM Transactions on Intelligent Systems and Technology · doi:10.1145/3678182 · Cited by 54
EGIA: An External Gradient Inversion Attack in Federated Learning
Liang, H., Li, Y., Zhang, C., Liu, X., & Zhu, L. (2023) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2023.3302161 · Cited by 46
Self-citation
Verifying in the Dark: Verifiable Machine Unlearning by Using Invisible Backdoor Triggers
Guo, Y., Zhao, Y., Hou, S., Wang, C., & Jia, X. (2023) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2023.3328269 · Cited by 47
Toward Efficient and Certified Recovery From Poisoning Attacks in Federated Learning
Jiang, Y., Shen, J., Liu, Z., Tan, C. W., & Lam, K. (2025) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2025.3533907 · Cited by 48
RPIFL: Reliable and Privacy-Preserving Federated Learning for the Internet of Things
Wang, R., Lai, J., Li, X., He, D., & Khan, M. K. (2023) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2023.103768 · Cited by 42
FedSecurity: A Benchmark for Attacks and Defenses in Federated Learning and Federated LLMs
Han, S., Buyukates, B., Hu, Z., Jin, H., Jin, W., Sun, L., Wang, X., Wu, W., Xie, C., Yao, Y., et al. (2024) · ACM SIGKDD Conference on Knowledge Discovery and Data Mining (KDD) · doi:10.1145/3637528.3671545 · Cited by 55
A review on client-server attacks and defenses in federated learning
Sharma, A., & Marchang, N. (2024) · Computers & Security · doi:10.1016/j.cose.2024.103801 · Cited by 46
Privacy-preserving and Byzantine-robust Federated Learning Framework using Permissioned Blockchain
Kasyap, H., & Tripathy, S. (2023) · Expert Systems with Applications · doi:10.1016/j.eswa.2023.122210 · Cited by 41
A multi-center federated learning mechanism based on consortium blockchain for data secure sharing
Wang, B., Tian, Z., Liu, X., Xia, Y., Liu, W., & Liu, W. (2025) · Knowledge-Based Systems · doi:10.1016/j.knosys.2025.112962 · Cited by 41
Efficiently Achieving Privacy Preservation and Poisoning Attack Resistance in Federated Learning
Li, X.-Y., Yang, X. S., Zhou, Z., & Lu, R. (2024) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3378006 · Cited by 40
BPFL: Blockchain-based privacy-preserving federated learning against poisoning attack
Ren, Y., Hu, M., Yang, Z., Feng, G., & Zhang, X. (2024) · Information Sciences · doi:10.1016/j.ins.2024.120377 · Cited by 34
A comprehensive review on Federated Learning for Data-Sensitive Application: Open issues & challenges
Narula, M., Meena, J., & Vishwakarma, D. K. (2024) · Engineering Applications of Artificial Intelligence · doi:10.1016/j.engappai.2024.108128 · Cited by 38
rFedFW: Secure and trustable aggregation scheme for Byzantine-robust federated learning in Internet of Things
Ni, L., Gong, X., Li, J., Tang, Y. A., Luan, Z., & Zhang, J. (2023) · Information Sciences · doi:10.1016/j.ins.2023.119784 · Cited by 41
Decentralized and robust privacy-preserving model using blockchain-enabled Federated Deep Learning in intelligent enterprises
Fotohi, R., Aliee, F. S., & Farahani, B. (2024) · Applied Soft Computing · doi:10.1016/j.asoc.2024.111764 · Cited by 35
Defending Against Data Poisoning Attack in Federated Learning With Non-IID Data
Yin, C., & Zeng, Q. (2023) · IEEE Transactions on Computational Social Systems · doi:10.1109/tcss.2023.3296885 · Cited by 34
PBFL: A Privacy-Preserving Blockchain-Based Federated Learning Framework With Homomorphic Encryption and Single Masking
Han, B., Li, B., Jurdak, R., Zhang, P., Zhang, H. Y., Feng, P., & Yuen, C. (2025) · IEEE Internet of Things Journal · doi:10.1109/jiot.2024.3524632 · Cited by 33
Enhanced Federated Learning for Edge Data Security in Intelligent Transportation Systems
Zhu, R., Li, M., Yin, J., Sun, L., & Liu, H. (2023) · IEEE Transactions on Intelligent Transportation Systems · doi:10.1109/tits.2023.3243088 · Cited by 34
Trustworthy Federated Learning Against Malicious Attacks in Web 3.0
Zheng, Y., Tian, Y., Zhou, Z., Li, T., Wang, S., & Xiong, J. (2024) · IEEE Transactions on Network Science and Engineering · doi:10.1109/tnse.2024.3350365 · Cited by 33
Enhancing federated learning robustness in adversarial environment through clustering Non-IID features
Li, Y., Yuan, D., Sani, A. S., & Bao, W. (2023) · Computers & Security · doi:10.1016/j.cose.2023.103319 · Cited by 32
Self-citation
Towards robust and privacy-preserving federated learning in edge computing
Zhou, H., Zheng, Y., & Jia, X. (2024) · Computer Networks · doi:10.1016/j.comnet.2024.110321 · Cited by 38
A survey on privacy-preserving federated learning against poisoning attacks
Feng, X., & Cheng, W. (2024) · Cluster Computing · doi:10.1007/s10586-024-04629-7 · Cited by 34
DefendFL: A Privacy-Preserving Federated Learning Scheme Against Poisoning Attacks
Liu, J., Li, X., Liu, X., Zhang, H., Miao, Y., & Deng, R. H. (2024) · IEEE Transactions on Neural Networks and Learning Systems · doi:10.1109/tnnls.2024.3423397 · Cited by 29
Self-citation
Split Aggregation: Lightweight Privacy-Preserving Federated Learning Resistant to Byzantine Attacks
Lu, Z. G., Lu, S., Cui, Y., Tang, X., & Wu, J. (2024) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3402993 · Cited by 30
Federated Learning in Healthcare Ethics: A Systematic Review of Privacy-Preserving and Equitable Medical AI
Mir, B. A., Abbas, S. R., & Lee, S. W. (2026) · Healthcare · doi:10.3390/healthcare14030306 · Cited by 42
Federated Learning for 6G Networks: Navigating Privacy Benefits and Challenges
Sandeepa, C., Zeydan, E., Samarasinghe, T., & Liyanage, M. (2024) · IEEE Open Journal of the Communications Society · doi:10.1109/ojcoms.2024.3513832 · Cited by 33
PRoT-FL: A privacy-preserving and robust Training Manager for Federated Learning
Gamiz, I., Regueiro, C., Jacob, E., Lage, Ó., & Higuero, M. (2024) · Information Processing & Management · doi:10.1016/j.ipm.2024.103929 · Cited by 23
FedCCW: a privacy-preserving Byzantine-robust federated learning with local differential privacy for healthcare
Zhang, L., Fang, G., & Tan, Z. (2025) · Cluster Computing · doi:10.1007/s10586-024-04894-6 · Cited by 21
VPPFL: A verifiable privacy-preserving federated learning scheme against poisoning attacks
Huang, Y., Yang, G., Zhou, H., Dai, H., Yuan, D., & Yu, S. (2023) · Computers & Security · doi:10.1016/j.cose.2023.103562 · Cited by 21
Secure Decentralized Aggregation to Prevent Membership Privacy Leakage in Edge-Based Federated Learning
Shen, M., Wang, J., Zhang, J., Zhao, Q., Peng, B., Wu, T., Zhu, L., & Xu, K. (2024) · IEEE Transactions on Network Science and Engineering · doi:10.1109/tnse.2024.3360311 · Cited by 21
Secure Federated Learning for Cloud-Fog Automation: Vulnerabilities, Challenges, Solutions, and Future Directions
Zhang, Z., Wu, L., Jin, J., Wang, E., Liu, B., & Han, Q. (2025) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2025.3528569 · Cited by 20
Lightweight Privacy-Preserving Cross-Cluster Federated Learning With Heterogeneous Data
Chen, Z., Yu, S., Chen, F., Wang, F., Liu, X., & Deng, R. H. (2024) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3435476 · Cited by 21
Self-citation
Backdoor attacks and defense mechanisms in federated learning: A survey
Li, Z., Lan, J., Yan, Z., & Erol Gelenbe, A. (2025) · Information Fusion · doi:10.1016/j.inffus.2025.103248 · Cited by 20
MR-FFL: A Stratified Community-Based Mutual Reliability Framework for Fairness-Aware Federated Learning in Heterogeneous UAV Networks
Zhou, Z., Zhuang, Y., Li, H., Huang, S., Yang, S., Guo, P., Zhong, L., Yuan, Z., & Xu, C. (2024) · IEEE Internet of Things Journal · doi:10.1109/jiot.2024.3357779 · Cited by 21
Efficient and Privacy-Preserving Federated Learning Against Poisoning Adversaries
Zhao, J., Zhu, H., Wang, F., Zheng, Y., Lu, R., & Li, H. (2024) · IEEE Transactions on Services Computing · doi:10.1109/tsc.2024.3377931 · Cited by 23
FlocOff: Data Heterogeneity Resilient Federated Learning With Communication-Efficient Edge Offloading
Ma, M., Gong, C., Zeng, L., Yang, Y., & Wu, L. (2024) · IEEE Journal on Selected Areas in Communications · doi:10.1109/jsac.2024.3431526 · Cited by 19
Defending against model poisoning attack in federated learning: A variance-minimization approach
Xu, H., & Shu, T. (2024) · Journal of Information Security and Applications · doi:10.1016/j.jisa.2024.103744 · Cited by 20
Evaluating Security and Robustness for Split Federated Learning Against Poisoning Attacks
Wu, X., Yuan, H., Li, X., Ni, J., & Lu, R. (2024) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3490861 · Cited by 17
SecureDyn-FL: A Robust Privacy-Preserving Federated Learning Framework for Intrusion Detection in IoT Networks
Soomro, I. A., Rehman, H. U., Hussain, S. J., Iqbal, A., Khalid, W., & Yu, H. (2025) · IEEE Transactions on Network and Service Management · doi:10.1109/tnsm.2025.3647642 · Cited by 19
Exploring Threats, Defenses, and Privacy-Preserving Techniques in Federated Learning: A Survey
Huang, R.-Y., Samaraweera, D., & Chang, J. M. (2024) · Computer · doi:10.1109/mc.2023.3324975 · Cited by 17
SF-CABD: Secure Byzantine fault tolerance federated learning on Non-IID data
Lin, X., Li, Y., Xie, X., Ding, Y., Wu, X., & Ge, C. (2024) · Knowledge-Based Systems · doi:10.1016/j.knosys.2024.111851 · Cited by 18
Self-citation
Auction-based client selection for online Federated Learning
Guo, J., Li-na, S., Liu, J., Ding, J., Liu, X., Huang, B., & Li, L. (2024) · Information Fusion · doi:10.1016/j.inffus.2024.102549 · Cited by 19
One-Shot Backdoor Removal for Federated Learning
Pan, Z., Ying, Z., Wang, Y., Zhang, C., Li, C., & Zhu, L. (2024) · IEEE Internet of Things Journal · doi:10.1109/jiot.2024.3438150 · Cited by 16
Toward Secure and Verifiable Hybrid Federated Learning
Du, R., Li, X., He, D., & Choo, K. R. (2024) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3357288 · Cited by 16
FlexibleFL: Mitigating poisoning attacks with contributions in cloud-edge federated learning systems
Zhao, Y., Cao, Y., Zhang, J., Huang, H., & Liu, Y. (2024) · Information Sciences · doi:10.1016/j.ins.2024.120350 · Cited by 18
Privacy-preserving federated learning compatible with robust aggregators
Alebouyeh, Z., & Bidgoly, A. J. (2025) · Engineering Applications of Artificial Intelligence · doi:10.1016/j.engappai.2025.110078 · Cited by 19
SPFL: A Self-Purified Federated Learning Method Against Poisoning Attacks
Liu, Z., He, W., Chang, C.-H., Ye, J., Li, H., & Li, X. (2024) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3420135 · Cited by 15
Byzantine-robust Federated Learning via Cosine Similarity Aggregation
Zhu, T., Guo, Z., Yao, C., Tan, J., Dou, S., Wang, W., & Han, Z. (2024) · Computer Networks · doi:10.1016/j.comnet.2024.110730 · Cited by 15
Scope: On Detecting Constrained Backdoor Attacks in Federated Learning
Huang, S., Li, Y., Yan, X., Gao, Y., Chen, C., Shi, L., Chen, B., & Ng, W. W. Y. (2025) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2025.3533899 · Cited by 16
Self-citation
Adaptive protocols for hypervisor security in cloud infrastructure using federated learning-based anomaly detection
Alazab, M., Awajan, A. W., Obeidat, A., Faruqui, N., Bere, A., Ali, S., & Wei, W. (2025) · Engineering Applications of Artificial Intelligence · doi:10.1016/j.engappai.2025.110750 · Cited by 15
A Secure and Privacy-Preserving Approach to Healthcare Data Collaboration
Adnan, A., Kausar, F., Shoaib, M., Iqbal, F., Altaf, A., & Asif, H. M. (2025) · Symmetry · doi:10.3390/sym17071139 · Cited by 17
SPEFL: Efficient Security and Privacy-Enhanced Federated Learning Against Poisoning Attacks
Shen, L., Ke, Z., Shi, J., Zhang, X., Sun, Y., Zhao, J., Wang, X., & Zhao, X. (2023) · IEEE Internet of Things Journal · doi:10.1109/jiot.2023.3339638 · Cited by 17
TICPS: A trustworthy collaborative intrusion detection framework for industrial cyber–physical systems
Zhu, L., Zhao, B., Li, W., Wang, Y., & An, Y. (2024) · Ad Hoc Networks · doi:10.1016/j.adhoc.2024.103517 · Cited by 14
A Practical Federated Learning Framework With Truthful Incentive in UAV-Assisted Crowdsensing
Xie, L., Su, Z., Wang, Y., & Li, Z. (2024) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3484946 · Cited by 17
PriRoAgg: Achieving Robust Model Aggregation With Minimum Privacy Leakage for Federated Learning
Hou, S., Li, S., Jahani-Nezhad, T., & Caire, G. (2025) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2025.3577498 · Cited by 14
Auditable Federated Learning With Byzantine Robustness
Liang, Y., Li, Y., & Shin, B. (2023) · IEEE Transactions on Computational Social Systems · doi:10.1109/tcss.2023.3266019 · Cited by 13
Self-citation
Robust and Verifiable Privacy Federated Learning
Lu, Z. G., Lu, S., Tang, X., & Wu, J. (2023) · IEEE Transactions on Artificial Intelligence · doi:10.1109/tai.2023.3309273 · Cited by 16
BVDFed: Byzantine-resilient and verifiable aggregation for differentially private federated learning
Gao, X., Fu, S., Liu, L., & Luo, Y. (2023) · Frontiers of Computer Science · doi:10.1007/s11704-023-3142-5 · Cited by 13
Robust and privacy-preserving federated learning with distributed additive encryption against poisoning attacks
Zhang, F., Huang, H., Chen, Z., & Huang, Z. (2024) · Computer Networks · doi:10.1016/j.comnet.2024.110383 · Cited by 15
Byzantine-Resilient Secure Aggregation for Federated Learning Without Privacy Compromises
Xia, Y., Hofmeister, C., Egger, M., & Bitar, R. (2024) · IEEE Information Theory Workshop (ITW) · doi:10.1109/itw61385.2024.10807034 · Cited by 13
PPBR: Privacy-Preserving and Byzantine-Robust Edge-Assisted Hierarchical Federated Learning in Mobile Networks
He, Y., Zhang, J., Yang, P., Sun, Z., & Shen, X. (2025) · IEEE Transactions on Mobile Computing · doi:10.1109/tmc.2025.3602911 · Cited by 13
Enhanced Adversarial Attack Resilience in Energy Networks through Energy and Privacy Aware Federated LearningPreprint
Manzoor, H. U., Arshad, K., Assaleh, K. T., & Zoha, A. (2024) · doi:10.36227/techrxiv.171468119.91309905/v1 · Cited by 13
FLOW: A Robust Federated Learning Framework to Defend Against Model Poisoning Attacks in IoT
Liu, S., Li, Z., Sun, Q., Chen, L., Zhang, X., & Li, D. (2023) · IEEE Internet of Things Journal · doi:10.1109/jiot.2023.3341811 · Cited by 13
Bc²FL: Double-Layer Blockchain-Driven Federated Learning Framework for Agricultural IoT
Ding, Q., Yue, X., Zhang, Q., Xiong, Z., Chang, J., & Zheng, H. (2024) · IEEE Internet of Things Journal · doi:10.1109/jiot.2024.3485208 · Cited by 12
Reliable federated learning based on delayed gradient aggregation for intelligent connected vehicles
Yang, Z., Cheng, C., Li, Z., Wang, R., & Zhang, X. (2024) · Engineering Applications of Artificial Intelligence · doi:10.1016/j.engappai.2024.109719 · Cited by 14
Privacy-Preserving Byzantine-Robust Federated Learning via Deep Reinforcement Learning in Vehicular Networks
Pan, Y., Su, Z., Wang, Y., Zhou, J., & Mahmoud, M. M. E. A. (2025) · IEEE Transactions on Vehicular Technology · doi:10.1109/tvt.2024.3524834 · Cited by 15
FedID: Enhancing Federated Learning Security Through Dynamic Identification
Huang, S., Li, Y., Chen, C., Gao, Y., & Hu, X. (2025) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2025.3581555 · Cited by 12
Self-citation
G 2 uardFL: Safeguarding Federated Learning Against Backdoor Attacks via Attributed Client Graph Clustering
Yu, H., Ma, C., Liu, M., Du, T., Ding, M., Xiang, T., Ji, S., & Liu, X. (2025) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2025.3639985 · Cited by 24
Detection of Model Poisson Attack in Federated Learning System Using AAE in IIoT Systems
Natrayan, L. (2025) · International Conference on Electronic Circuits and Signaling Technologies (ICECST) · doi:10.1109/icecst66106.2025.11307370 · Cited by 11
SVFLC: Secure and Verifiable Federated Learning With Chain Aggregation
Li, N., Zhou, M. L., Yu, H., Chen, Y., & Yang, Z. (2023) · IEEE Internet of Things Journal · doi:10.1109/jiot.2023.3330813 · Cited by 12
An incentive compatible ZD strategy-based data sharing model for federated learning: A perspective of iterated prisoner's dilemma
Jie, Y., Liu, C. Z., Choo, K. R., & Guo, C. (2023) · European Journal of Operational Research · doi:10.1016/j.ejor.2023.12.013 · Cited by 11
A Secure Object Detection Technique for Intelligent Transportation Systems
Mia, M. J., & Amini, M. H. (2024) · IEEE Open Journal of Intelligent Transportation Systems · doi:10.1109/ojits.2024.3440876 · Cited by 11
TPFL: Privacy-preserving personalized federated learning mitigates model poisoning attacks
Zuo, S., Xie, Y., Yao, H., & Zhijie, K. (2025) · Information Sciences · doi:10.1016/j.ins.2025.121901 · Cited by 12
An Optimal Two-Step Approach for Defense Against Poisoning Attacks in Federated Learning
Ali, Y., Han, K., Majeed, A., Lim, J. S., & Hwang, S. O. (2025) · IEEE Access · doi:10.1109/access.2025.3556906 · Cited by 13

Authors: Ma, Z., Ma, J., Miao, Y., Li, Y., & Deng, R. H.
Affiliations: Xidian University (CN)
University of Oregon (US)
Singapore Management University (SG)
ORCID: Ma, Zhuoran
Ma, Jianfeng
Miao, Yinbin
Li, Yingjiu
Deng, Robert H.
Venue: IEEE Transactions on Information Forensics and Security
Publisher: Institute of Electrical and Electronics Engineers (IEEE)
Published: 2022
Volume: 17
Pages: 1639-1654
ISSN: 1556-6013 (ISSN-L)
1556-6021
DOI: 10.1109/tifs.2022.3169918
OpenAlex: W4226047321
Cited by: 371
References: 39
Citations by year: 2026: 98 · 2025: 123 · 2024: 94 · 2023: 50 · 2022: 6
FWCI: 22.45
Type: journal article
Language: en
Open access: closed
Licence: ieeexplore.ieee.org/Xplorehelp/downloads/license-information/IEEE.html (vor)
doi.org/10.15223/policy-029 (stm-asf)
doi.org/10.15223/policy-037 (stm-asf)
Locations: IEEE Transactions on Information Forensics and Security (publishedVersion)
Singapore Management University Institutional Knowledge (InK) (Singapore Management University) (submittedVersion)
Funders: National Key Research and Development Program of China (2021YFB3101100)
Foundation for Innovative Research Groups of the National Natural Science Foundation of China (62121001)
National Natural Science Foundation of China (62072361, U1804263, 62072352)
Key Research and Development Program of Shaanxi Province (2019ZDLGY12-04, 2020ZDLGY09-06)
Fundamental Research Funds for the Central Universities (JB211505)
Guangxi Key Laboratory of Cryptography and Information Security (GCIS201917)
Guangxi Key Laboratory of Trusted Software (KX202028)
Ripple University Blockchain Research Initiative
Topics: Physical Sciences › Computer Science › Artificial Intelligence › Privacy-Preserving Technologies in Data
Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
Physical Sciences › Computer Science › Computer Networks and Communications › Cryptography and Data Security
Keywords: privacy-preserving federated learning, model poisoning, Byzantine attacks, gradient aggregation, non-IID data

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review

ShieldFL: Mitigating Model Poisoning Attacks in Privacy-Preserving Federated Learning

Abstract

Overview

Integrity signals

Verification

Claims the paper makes

Claims other papers make about this one

Citations

Cites

Cited by

Related

Metadata

Record

About these checks