The DOI matches its Crossref record; 39 of the 39 references it cites were found in a registry or an index.
ShieldFL: Mitigating Model Poisoning Attacks in Privacy-Preserving Federated Learning
Abstract
Privacy-Preserving Federated Learning (PPFL) is an emerging secure distributed learning paradigm that aggregates user-trained local gradients into a federated model through a cryptographic protocol. Unfortunately, PPFL is vulnerable to model poisoning attacks launched by a Byzantine adversary, who crafts malicious local gradients to harm the accuracy of the federated model. To resist model poisoning attacks, existing defense strategies focus on identifying suspicious local gradients over plaintexts. However, the Byzantine adversary submits encrypted poisonous gradients to circumvent existing defense strategies in PPFL, resulting in encrypted model poisoning. To address the issue, in this paper we design a privacy-preserving defense strategy using two-trapdoor homomorphic encryption (referred to as ShieldFL), which can resist encrypted model poisoning without compromising privacy in PPFL. Specially, we first present the secure cosine similarity method aiming to measure the distance between two encrypted gradients. Then, we propose the Byzantine-tolerance aggregation using cosine similarity, which can achieve robustness for both Independently Identically Distribution (IID) and non-IID data. Extensive evaluations on three benchmark datasets (i.e.,MNIST, KDDCup99, and Amazon) show that ShieldFL outperforms existing defense strategies. Especially, ShieldFL can achieve 30%-80% accuracy improvement to defend two state-of-the-art model poisoning attacks in both non-IID and IID settings.
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“To solve this problem, [38], [49], [51] used homomorphic encryption to evaluate the local model securely.”
From Poisoning attacks in federated learning: A survey (2023) · cites this paper as [38]
Citations
Cites
Communication-Efficient Learning of Deep Networks from Decentralized Data
McMahan, H. B., Moore, E., Ramage, D., Hampson, S., & Arcas, B. A. Y. (2016) · arXiv · doi:10.48550/arxiv.1602.05629 · Cited by 14,215
Membership Inference Attacks Against Machine Learning Models
Shokri, R., Stronati, M., Song, C., & Shmatikov, V. (2017) · 2017 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2017.41 · Cited by 4,754
Practical Secure Aggregation for Privacy-Preserving Machine Learning
Bonawitz, K., Ivanov, V., Kreuter, B., Marcedone, A., McMahan, H. B., Patel, S., Ramage, D., Segal, A., & Seth, K. (2017) · Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/3133956.3133982 · Cited by 3,956
Privacy-preserving deep learning
Shokri, R., & Shmatikov, V. (2015) · Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/2810103.2813687 · Cited by 2,356
Federated Learning with Non-IID Data
Zhao, Y., Li, M., Lai, L., Suda, N., Civin, D., & Chandra, V. (2018) · arXiv · doi:10.48550/arxiv.1806.00582 · Cited by 2,077
SecureML: A System for Scalable Privacy-Preserving Machine Learning
Mohassel, P., & Zhang, Y. (2017) · 2017 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2017.12 · Cited by 1,936
Nasr, M., Shokri, R., & Houmansadr, A. (2019) · 2019 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2019.00065 · Cited by 1,760
Exploiting Unintended Feature Leakage in Collaborative Learning
Melis, L., Song, C., De Cristofaro, E., & Shmatikov, V. (2019) · 2019 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2019.00029 · Cited by 1,734
On the Convergence of FedAvg on Non-IID Data
Li, X., Huang, K., Yang, W., Wang, S., & Zhang, Z. (2019) · arXiv · doi:10.48550/arxiv.1907.02189 · Cited by 1,575
How to backdoor federated learning
Bagdasaryan, E., Veit, A., Hua, Y., Estrin, D., & Shmatikov, V. (2018) · arXiv · doi:10.48550/arxiv.1807.00459 · Cited by 1,495
Research works printed but not linked: 4
- Shen, AUROR: Defending against poisoning attacks in collaborative deep learning systems, 508
- LeCun, 1998, MNIST Database
- 1999, KDD Cup 1999 Data
- 2003, Amazon Networks
Cited by
Sorted by citations
Items 101–200 of 371
Privacy-Preserving Medical Data-Sharing System with Symmetric Encryption Based on Blockchain
Hu, M., Ren, Y., & Chen, C. (2023) · Symmetry · doi:10.3390/sym15051010 · Cited by 11
TMT-FL: Enabling Trustworthy Model Training of Federated Learning With Malicious Participants
Lu, Z., Wang, L., Zhang, Z., Huang, M., Wang, J., & Li, M. (2024) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2024.3521377 · Cited by 10
FedG2L: a privacy-preserving federated learning scheme base on “G2L” against poisoning attack
Xu, M., & Li, X. (2023) · Connection Science · doi:10.1080/09540091.2023.2197173 · Cited by 10
Yu, C., Meng, Z., Zhang, W., Lei, L., Ni, J., Zhang, K., & Hai, Z. (2024) · IEEE Transactions on Neural Networks and Learning Systems · doi:10.1109/tnnls.2024.3486028 · Cited by 9
Biasing Federated Learning With a New Adversarial Graph Attention Network
Li, K., Zheng, J., Ni, W., Huang, H., Lió, P., Dressler, F., & Akan, Ö. B. (2024) · IEEE Transactions on Mobile Computing · doi:10.1109/tmc.2024.3499371 · Cited by 9
DBFL: Dynamic Byzantine-Robust Privacy Preserving Federated Learning in Heterogeneous Data Scenario
Chen, X., Tian, Y., Wang, S., Yang, K., Zhao, W., & Xiong, J. (2025) · Information Sciences · doi:10.1016/j.ins.2024.121849 · Cited by 11
FedSSuper: A Secure and Private Federated Learning Under Trusted Supervision
Zhao, P., Jiang, J., & Zhang, G. (2025) · IEEE Transactions on Network Science and Engineering · doi:10.1109/tnse.2025.3572493 · Cited by 9
Ullah, I., Deng, X., Pei, X., Mushtaq, H., Uzair, M., & Qayyum, S. (2025) · Computer Networks · doi:10.1016/j.comnet.2025.111705 · Cited by 12
Ma, H., Li, Q., Zheng, Y., Zhang, Z., Liu, X., Gao, Y., Al-Sarawi, S. F., & Abbott, D. (2023) · Computers & Security · doi:10.1016/j.cose.2023.103406 · Cited by 14
PRIMϵ: Novel Privacy-Preservation Model With Pattern Mining and Genetic Algorithm
Madhusudhanan, S., Jose, A. C., Sahoo, J., & Malekian, R. (2023) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2023.3324769 · Cited by 9
Client-specific Property Inference against Secure Aggregation in Federated Learning
Kerkouche, R., Ács, G., & Fritz, M. (2023) · Workshop on Privacy in the Electronic Society · doi:10.1145/3603216.3624964 · Cited by 9
FL-PTD: A Privacy Preserving Defense Strategy Against Poisoning Attacks in Federated Learning
Xia, G., Chen, J., Huang, X., Yu, C., & Zhang, Z. (2023) · IEEE Annual International Computer Software and Applications Conference (COMPSAC) · doi:10.1109/compsac57700.2023.00101 · Cited by 8
Byzantine-Robust Hierarchical Aggregation for Cross-Device Federated Learning in Consumer IoT
Liu, J., Wu, Y., Wei, D., Sun, R. X., Xu, G., Liu, L., & Wu, C. (2024) · IEEE Transactions on Consumer Electronics · doi:10.1109/tce.2024.3450649 · Cited by 11
Byzantine-Robust Multimodal Federated Learning Framework for Intelligent Connected Vehicle
Wu, N., Lin, X., Lu, J., Zhang, F., Chen, W., Tang, J., & Xiao, J. (2024) · Electronics · doi:10.3390/electronics13183635 · Cited by 11
Enforcing Differential Privacy in Federated Learning via Long-Term Contribution Incentives
Tang, X., Peng, L., Weng, Y., Shen, M., Zhu, L., & Deng, R. H. (2025) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2025.3550777 · Cited by 9
Self-citationNaresh, V. S., & Ayyappa, D. (2025) · Journal of Information Security and Applications · doi:10.1016/j.jisa.2025.104084 · Cited by 10
Zhang, W., Zhan, D., Yu, H., Zhang, L., Zhao, B., Du, X., & Tian, Z. (2025) · Information Fusion · doi:10.1016/j.inffus.2025.103657 · Cited by 12
Ahmadpanah, S. H., Mirabi, M., Sobhanloo, S., Afsharfarnia, P., Fallah, D., & Bayati, M. (2025) · Ad Hoc Networks · doi:10.1016/j.adhoc.2025.104080 · Cited by 8
SINT: Toward a Blockchain-Based Secure In-Band Network Telemetry Architecture
Zhao, Y., Cheng, G., & Tang, Y. (2023) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2023.3269891 · Cited by 8
Marking the Pace: A Blockchain-Enhanced Privacy-Traceable Strategy for Federated Recommender Systems
Cai, Z., Tang, T., Yu, S., Xiao, Y., & Xia, F. (2023) · IEEE Internet of Things Journal · doi:10.1109/jiot.2023.3329363 · Cited by 9
Guard-FL: An UMAP-Assisted Robust Aggregation for Federated Learning
Song, A., Li, H., Cheng, K., Zhang, T., Sun, A., & Shen, Y. (2024) · IEEE Internet of Things Journal · doi:10.1109/jiot.2024.3399259 · Cited by 13
Poisoning Attack Mitigation for Privacy-Preserving Federated Learning-Based Energy Theft Detection
Srewa, M., Winfree, M. F., Ibrahem, M. I., Nabil, M., Lu, R., & Alsharif, A. (2024) · International Conference on Communications · doi:10.1109/icc51166.2024.10622191 · Cited by 7
Low Complexity Byzantine-Resilient Federated Learning
Gouissem, A., Hassanein, S., Abualsaud, K., Yaacoub, E. E., Mabrok, M. A., Abdallah, M. M., Khattab, T. M., & Guizani, M. (2024) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3482727 · Cited by 9
DualGuard: Obfuscated Federated Learning With Two-Party Secure Robust Aggregation
Pan, H., Bao, H., Guan, M., Li, Z., Huang, C., & Dai, H. (2025) · IEEE Internet of Things Journal · doi:10.1109/jiot.2025.3533087 · Cited by 7
Ren, Y., Yang, Z., Feng, G., & Zhang, X. (2025) · IEEE Transactions on Emerging Topics in Computational Intelligence · doi:10.1109/tetci.2025.3540420 · Cited by 7
Cost-Efficient and Secure Federated Learning for Edge Computing
Zhang, Z., Wu, L., Wang, Z., Hu, J., Ma, C., & Liu, Q. (2025) · IEEE Transactions on Mobile Computing · doi:10.1109/tmc.2025.3590799 · Cited by 7
AMA: Adaptive Model Poisoning Attacks Towards Federated Learning
Wu, D., Guo, Q., Qi, Y., Qi, S., & Li, Q. (2025) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2025.3594175 · Cited by 7
Zhang, S., Ren, F., Liang, W., Li, K., & Ling, N. (2025) · IEEE Transactions on Intelligent Vehicles · doi:10.1109/tiv.2025.3599909 · Cited by 7
Soomro, I. A., Rehman, H. U., Hussain, S. J., Latif, S., Mujlid, H. M., Mohsin, S. M., & Maple, C. R. (2025) · IEEE Internet of Things Journal · doi:10.1109/jiot.2025.3612944 · Cited by 8
Accelerating and Securing Blockchain-Enabled Distributed Machine Learning
Du, Y., Wang, Z., Leung, C., & Leung, V. C. M. (2023) · IEEE Transactions on Mobile Computing · doi:10.1109/tmc.2023.3325334 · Cited by 8
AIFL: Ensuring Unlinkable Anonymity and Robust Incentive in Cross-Device Federated Learning
Chen, X., Gao, Y., & Deng, H. (2024) · IEEE Internet of Things Journal · doi:10.1109/jiot.2024.3417003 · Cited by 8
Li, W., Fan, K., Zhang, J., Li, H., Lim, W. Y. B., & Yang, Q. (2025) · IEEE Transactions on Knowledge and Data Engineering · doi:10.1109/tkde.2025.3539717 · Cited by 9
A Lightweight Homomorphic Encryption Federated Learning Based on Blockchain in IoV
Du, D., Zhao, W., Wei, L., Lu, S., & Wu, X. (2022) · IEEE Smart World Congress (SWC) · doi:10.1109/smartworld-uic-atc-scalcom-digitaltwin-pricomp-metaverse56740.2022.00148 · Cited by 7
Blockchain-based fairness-enhanced federated learning scheme against label flipping attack
Jin, S., Li, Y., Chen, X., Li, R., & Shen, Z. (2023) · Journal of Information Security and Applications · doi:10.1016/j.jisa.2023.103580 · Cited by 7
Self-citationPRFL: Achieving Efficient Robust Aggregation in Privacy-Preserving Federated Learning
Liu, X., Yang, J., Chen, S., He, H., & Jiang, X. (2024) · IEEE Transactions on Network and Service Management · doi:10.1109/tnsm.2024.3514212 · Cited by 6
ESFL: Accelerating Poisonous Model Detection in Privacy-Preserving Federated Learning
Zeng, H., Lou, J., Li, K., Wu, C., Xue, G., Luo, Y., Cheng, F., Zhao, W., & Li, J. (2025) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2025.3541633 · Cited by 6
Liu, J., Zhou, Z., Sun, R. X., Liu, L., Lu, R., Dustdar, S., & Niyato, D. T. (2025) · IEEE Transactions on Mobile Computing · doi:10.1109/tmc.2025.3569547 · Cited by 6
Li, Q., Wu, Z., Xiong, J., Song, A., & Zhang, T. (2025) · IEEE Internet of Things Journal · doi:10.1109/jiot.2025.3584818 · Cited by 6
Securing Federated Learning in IoT: A Survey of Attacks, Defenses, and Frameworks
Atia, O. B., Samara, M. A., Bennis, I., Gaber, J., Abouaïssa, A., & Lorenz, P. (2025) · IEEE Internet of Things Journal · doi:10.1109/jiot.2025.3600617 · Cited by 6
Mao, J., Wei, Z., Li, B., Zhang, R., & Song, L. (2025) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2025.3602226 · Cited by 6
Yu, J., Zhang, H., Xia, Q., Zou, Y., & Liu, Y. (2025) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2025.3623924 · Cited by 6
Liu, X., Sun, H., Sun, N., Jia, B., & Xiao, D. (2025) · Neurocomputing · doi:10.1016/j.neucom.2025.131931 · Cited by 6
Cao, Y., Zhang, J., Zhao, Y., Liu, D., Han, Y., Jiang, W., & Ye, T. (2025) · Information Fusion · doi:10.1016/j.inffus.2025.104037 · Cited by 6
Privacy-Preserving and Verifiable Outsourcing Linear Inference Computing Framework
Liu, J., Li, X., Liu, X., Tang, J., Wang, Y., Tong, Q., & Ma, J. (2023) · IEEE Transactions on Services Computing · doi:10.1109/tsc.2023.3332933 · Cited by 6
Self-citationToward Explainable Multiparty Learning: A Contrastive Knowledge Sharing Framework
Gao, Y., Zhang, Y., Gong, M., Cai, Q., Xie, Y., & Qin, A. K. (2024) · IEEE Transactions on Cybernetics · doi:10.1109/tcyb.2024.3357817 · Cited by 6
Precision Guided Approach to Mitigate Data Poisoning Attacks in Federated Learning
Kumar, K. N., Mohan, C. K., & Machiry, A. (2024) · ACM Conference on Data and Application Security and Privacy (CODASPY) · doi:10.1145/3626232.3653268 · Cited by 6
Xu, S., & Liu, R. (2024) · Entropy · doi:10.3390/e26070590 · Cited by 6
Farooqi, S. A., Rahman, A. B. A., & Saad, A. B. (2025) · International Conference on Ubiquitous Information Management and Communication (IMCOM) · doi:10.1109/imcom64595.2025.10857505 · Cited by 6
Sun, H., Zhang, Y., Zhuang, H., Li, J., Xu, Z., & Wu, L. (2024) · The Computer Journal · doi:10.1093/comjnl/bxae086 · Cited by 7
Can We Trust the Similarity Measurement in Federated Learning?
Wang, Z., Hu, Q., Zou, X., Hu, P., & Cheng, X. (2025) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3516567 · Cited by 6
Alamer, A. M. A., & Basudan, S. (2025) · IEEE Access · doi:10.1109/access.2025.3545786 · Cited by 6
A Verifiable, Privacy-Preserving, and Poisoning Attack-Resilient Federated Learning Framework
Mbonu, W. E., Maple, C. R., Epiphaniou, G., & Panchev, C. (2025) · Big Data and Cognitive Computing · doi:10.3390/bdcc9040085 · Cited by 7
FLBooster: A Unified and Efficient Platform for Federated Learning Acceleration
Zeng, Z., Du, Y., Fang, Z., Chen, L., Pu, S., Chen, G., Wang, H., & Gao, Y. (2023) · IEEE International Conference on Data Engineering (ICDE) · doi:10.1109/icde55515.2023.00241 · Cited by 6
Robust and privacy-preserving collaborative training: a comprehensive survey
Yang, F., Zhang, X., Guo, S., Chen, D., Gan, Y., Xiang, T., & Liu, Y. (2024) · Artificial Intelligence Review · doi:10.1007/s10462-024-10797-0 · Cited by 17
FedGhost: Data-Free Model Poisoning Enhancement in Federated Learning
Ma, Z., Huang, X., Wang, Z., Qin, Z., Wang, X., & Ma, J. (2025) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2025.3539087 · Cited by 5
Self-citationKokate, S., & Shrawankar, U. N. (2025) · Transactions on Emerging Telecommunications Technologies · doi:10.1002/ett.70139 · Cited by 7
Wei, Z., Wang, J., Zhao, Z., & Zhao, Z. (2025) · Information Fusion · doi:10.1016/j.inffus.2025.103345 · Cited by 8
Homomorphic cryptography: Challenges and perspectives
Hariss, K., Yaacoub, J.-P. A., & Noura, H. (2025) · Computer Science Review · doi:10.1016/j.cosrev.2025.100815 · Cited by 5
Wu, J., Luo, F., Sun, T., Wang, H., & Zhang, W. (2025) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2025.3617070 · Cited by 7
Xiong, H., Lv, J., Man, D., Zhu, Y., Liu, T., Wang, H., Xu, C., & Yang, W. (2025) · Computer Communications · doi:10.1016/j.comcom.2025.108272 · Cited by 5
Secure aggregation with verifiability and robustness for privacy-preserving federated learning
Zhang, Y., Wang, Y., Liu, W., Han, G., Cao, J. P., & Tian, Y. (2026) · Knowledge-Based Systems · doi:10.1016/j.knosys.2026.115310 · Cited by 6
Anusuya, R., & Renuka, D. K. (2023) · Bulletin of the Polish Academy of Sciences Technical Sciences · doi:10.24425/bpasts.2024.148944 · Cited by 7
Cao, Y., Zhang, J., Zhao, Y., Shen, H., & Huang, H. (2024) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3463532 · Cited by 5
AntidoteFL: Enhancing defense against poisoning attacks in federated learning
Liu, Y., Zhang, H., Wang, M., Xie, Q., & Sun, Z. (2025) · Computer Networks · doi:10.1016/j.comnet.2025.111427 · Cited by 5
Pu, L., Gu, J., Lin, C., & Huang, X. (2025) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2025.3597223 · Cited by 6
Wang, S., & Zhang, Y. (2023) · Measurement Science and Technology · doi:10.1088/1361-6501/acf7da · Cited by 6
Pappas, C., Papadopoulos, D., & Papamanthou, C. (2025) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp61157.2025.00204 · Cited by 4
Attacks and countermeasures on federated learning via historical knowledge modeling
Zhang, S., Jiang, Z., Gao, H., Gui, S., & Gao, T. (2025) · Journal of King Saud University - Computer and Information Sciences · doi:10.1007/s44443-025-00115-1 · Cited by 5
SurroFL: Sketch-Based Defense Against Poisoning in Privacy-Preserving Federated Learning
Kuang, Y., Liu, W., Han, L., Huang, J., Cao, P., & You, L. (2025) · IEEE Internet of Things Journal · doi:10.1109/jiot.2025.3602453 · Cited by 4
Accountable federated learning against local poisoning attacks
Wang, Y., Gao, Y., Zhang, Y., Geng, H., & Chi, H. (2025) · Knowledge-Based Systems · doi:10.1016/j.knosys.2025.114828 · Cited by 4
FL-MalDrift: a federated learning framework for malware detection under local concept drift
Patel, A., Tomar, D. S., Pateriya, R. K., & Haripriya, R. (2025) · Scientific Reports · doi:10.1038/s41598-025-31592-z · Cited by 4
Badar, H. M. S., Kajla, N. I., Mahmood, K., Khan, M. W., Fan, G., & Zhang, C. (2025) · IEEE Internet of Things Journal · doi:10.1109/jiot.2025.3644701 · Cited by 4
Efficient Byzantine-Robust Privacy-Preserving Federated Learning via Dimension Compression
Qin, X. R., Yang, X. S., & Tang, X. (2026) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2026.3671104 · Cited by 5
Algethami, W., Wu, G., Alshami, F., & Ali, M. A. (2026) · Information Sciences · doi:10.1016/j.ins.2026.123389 · Cited by 4
Xie, Z., & Li, Z. (2024) · Electronics · doi:10.3390/electronics13244926 · Cited by 4
Song, R., Wu, J., Pan, Q., Imran, M. A., Naser, N., Jones, R. K., & Verikoukis, C. V. (2023) · Globecom · doi:10.1109/globecom54140.2023.10437789 · Cited by 4
FedBC: An Efficient and Privacy-Preserving Federated Consensus Scheme
Xu, M., & Li, X. (2022) · Communications in computer and information science · doi:10.1007/978-981-19-7242-3_10 · Cited by 4
Blockchain-Based Fairness-Enhanced Federated Learning Scheme Against Data Poisoning Attack
Jin, S., Li, Y., Chen, X., Li, R., & Shen, Z. (2023) · Lecture notes in computer science · doi:10.1007/978-3-031-28124-2_31 · Cited by 4
Self-citationPrivacy-Preserving and Verifiable Personalized Federated Learning
Xie, D., & Li, D. (2025) · Symmetry · doi:10.3390/sym17030361 · Cited by 4
Mitigating Poisoning Attacks in Federated Learning Through Deep One-Class Classification
Zhang, A., Zhao, P., Lu, W., Zhou, Y., Zhang, W., & Zhang, G. (2025) · IEEE Transactions on Cognitive Communications and Networking · doi:10.1109/tccn.2025.3564476 · Cited by 3
Thuong, D. B., Duc, M. V., An, V. T., Thanh, N. H., Tran, K. P., & Hương, T. T. (2025) · Expert Systems with Applications · doi:10.1016/j.eswa.2025.130237 · Cited by 3
Li, K., Liang, Y., Lió, P., Ni, W., Dressler, F., Crowcroft, J., & Akan, Ö. B. (2025) · IEEE Transactions on Neural Networks and Learning Systems · doi:10.1109/tnnls.2025.3636440 · Cited by 3
Zhang, Y., Wang, L., Li, M., Gai, K., & Wang, J. (2026) · IEEE Transactions on Network Science and Engineering · doi:10.1109/tnse.2026.3654756 · Cited by 3
Two-Dimensional Privacy-Preserving Federated Learning Scheme Against Poisoning Attacks
Gu, K., Zhao, W., Tan, J., Yang, Z., Li, X., & Weijia Jia, B. (2026) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2026.3656703 · Cited by 3
Khedekar, D., Pokarna, H., Sahay, A., Richhariya, B., Mahapatra, T., & Rajput, A. S. (2026) · Smart Health · doi:10.1016/j.smhl.2026.100649 · Cited by 4
Alruwaili, E., & Moulahi, T. (2026) · Frontiers in Public Health · doi:10.3389/fpubh.2026.1762346 · Cited by 3
On the Analysis of Model Poisoning Attacks Against Blockchain-Based Federated Learning
Olapojoye, R., Baza, M., & Salman, T. (2024) · IEEE Consumer Communications and Networking Conference · doi:10.1109/ccnc51664.2024.10454875 · Cited by 4
Assessing the Effect of Model Poisoning Attacks on Federated Learning in Android Malware Detection
Nawshin, F., Arnal, R., Ünal, D., Suganthan, P. N., & Touseau, L. (2024) · Cognitive Models and Artificial Intelligence Conference (AICCONF) · doi:10.1145/3660853.3660887 · Cited by 3
AEPPFL: Accurate and Efficient Privacy Protection Federal Learning in Industrial IoT
Li, G., Lei, H., Liu, F., Li, L., & Jin, H. (2025) · IEEE Internet of Things Journal · doi:10.1109/jiot.2025.3562064 · Cited by 3
LZKSA: Lattice-Based Special Zero-Knowledge Proofs for Secure Aggregation's Input Verification
Lu, Z. G., & Lu, S. (2025) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/3719027.3744812 · Cited by 2
Asynchronous Robust Aggregation Method with Privacy Protection for IoV Federated Learning
Zhou, A., Jiang, N., & Tang, T. (2024) · World Electric Vehicle Journal · doi:10.3390/wevj15010018 · Cited by 5
Blockchain and Edge Computing Enabled Federated Learning Fault Diagnosis Framework
Shao, H., Yiming, X., Zhishan, M., Songyu, H., & Haizhou, Z. (2023) · Journal of Mechanical Engineering · doi:10.3901/jme.2023.21.283 · Cited by 3
Jing, Z., & Wang, R. (2025) · The Journal of Supercomputing · doi:10.1007/s11227-025-07038-8 · Cited by 4
Rattanavipanon, N., & Nunes, I. D. O. (2025) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2025.3555179 · Cited by 5
Zhang, H., Zhou, H., Elsayed, M., Bavand, M., Gaigalas, R., Ozcan, Y., & Erol‐Kantarci, M. (2025) · IEEE Transactions on Wireless Communications · doi:10.1109/twc.2025.3563157 · Cited by 2
A Byzantine-robust federated learning against adversarial–majority attacks
Shi, Y., Hu, X., Bai, S., Liu, Y., & Lin, H. W. (2025) · The Journal of Supercomputing · doi:10.1007/s11227-025-07619-7 · Cited by 2
Efficient verifiable secure aggregation protocols for federated learning
Xu, B., Wang, S., & Tian, Y. (2025) · Journal of Information Security and Applications · doi:10.1016/j.jisa.2025.104161 · Cited by 2
Xue, L., Zhong, L., Zhang, J., Chen, Z., Cheng, H., & Li, J. (2025) · IEEE Transactions on Consumer Electronics · doi:10.1109/tce.2025.3617540 · Cited by 2
Xue, K., Li, J., Xue, R., Xue, Y., & Zhao, J. (2025) · IEEE Transactions on Network Science and Engineering · doi:10.1109/tnse.2025.3632902 · Cited by 3
DamPa: Dynamic Adaptive Model Poisoning Attack in Federated Learning
Hu, F., Zhang, A., Liu, X., & Li, M. (2025) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2025.3631449 · Cited by 2
Metadata
- Authors
- Ma, Z., Ma, J., Miao, Y., Li, Y., & Deng, R. H.
- Affiliations
- Xidian University (CN)
- University of Oregon (US)
- Singapore Management University (SG)
- Venue
- IEEE Transactions on Information Forensics and Security
- Published
- 2022
- Volume
- 17
- Pages
- 1639-1654
- ISSN
- 1556-6013 (ISSN-L)
- 1556-6021
- OpenAlex
- W4226047321
- Cited by
- 371
- References
- 39
- Citations by year
- 2026: 98 · 2025: 123 · 2024: 94 · 2023: 50 · 2022: 6
- FWCI
- 22.45
- Type
- journal article
- Language
- en
- Open access
- closed
- Licence
- Locations
- IEEE Transactions on Information Forensics and Security (publishedVersion)
- Singapore Management University Institutional Knowledge (InK) (Singapore Management University) (submittedVersion)
- Funders
- National Key Research and Development Program of China (2021YFB3101100)
- Foundation for Innovative Research Groups of the National Natural Science Foundation of China (62121001)
- National Natural Science Foundation of China (62072361, U1804263, 62072352)
- Key Research and Development Program of Shaanxi Province (2019ZDLGY12-04, 2020ZDLGY09-06)
- Fundamental Research Funds for the Central Universities (JB211505)
- Guangxi Key Laboratory of Cryptography and Information Security (GCIS201917)
- Guangxi Key Laboratory of Trusted Software (KX202028)
- Ripple University Blockchain Research Initiative
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Privacy-Preserving Technologies in Data
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Computer Networks and Communications › Cryptography and Data Security
- Keywords
- privacy-preserving federated learning, model poisoning, Byzantine attacks, gradient aggregation, non-IID data
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review