The DOI matches its Crossref record; 39 of the 39 references it cites were found in a registry or an index.
ShieldFL: Mitigating Model Poisoning Attacks in Privacy-Preserving Federated Learning
Abstract
Privacy-Preserving Federated Learning (PPFL) is an emerging secure distributed learning paradigm that aggregates user-trained local gradients into a federated model through a cryptographic protocol. Unfortunately, PPFL is vulnerable to model poisoning attacks launched by a Byzantine adversary, who crafts malicious local gradients to harm the accuracy of the federated model. To resist model poisoning attacks, existing defense strategies focus on identifying suspicious local gradients over plaintexts. However, the Byzantine adversary submits encrypted poisonous gradients to circumvent existing defense strategies in PPFL, resulting in encrypted model poisoning. To address the issue, in this paper we design a privacy-preserving defense strategy using two-trapdoor homomorphic encryption (referred to as ShieldFL), which can resist encrypted model poisoning without compromising privacy in PPFL. Specially, we first present the secure cosine similarity method aiming to measure the distance between two encrypted gradients. Then, we propose the Byzantine-tolerance aggregation using cosine similarity, which can achieve robustness for both Independently Identically Distribution (IID) and non-IID data. Extensive evaluations on three benchmark datasets (i.e.,MNIST, KDDCup99, and Amazon) show that ShieldFL outperforms existing defense strategies. Especially, ShieldFL can achieve 30%-80% accuracy improvement to defend two state-of-the-art model poisoning attacks in both non-IID and IID settings.
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“To solve this problem, [38], [49], [51] used homomorphic encryption to evaluate the local model securely.”
From Poisoning attacks in federated learning: A survey (2023) · cites this paper as [38]
Citations
Cites
Communication-Efficient Learning of Deep Networks from Decentralized Data
McMahan, H. B., Moore, E., Ramage, D., Hampson, S., & Arcas, B. A. Y. (2016) · arXiv · doi:10.48550/arxiv.1602.05629 · Cited by 14,215
Membership Inference Attacks Against Machine Learning Models
Shokri, R., Stronati, M., Song, C., & Shmatikov, V. (2017) · 2017 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2017.41 · Cited by 4,754
Practical Secure Aggregation for Privacy-Preserving Machine Learning
Bonawitz, K., Ivanov, V., Kreuter, B., Marcedone, A., McMahan, H. B., Patel, S., Ramage, D., Segal, A., & Seth, K. (2017) · Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/3133956.3133982 · Cited by 3,956
Privacy-preserving deep learning
Shokri, R., & Shmatikov, V. (2015) · Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/2810103.2813687 · Cited by 2,356
Federated Learning with Non-IID Data
Zhao, Y., Li, M., Lai, L., Suda, N., Civin, D., & Chandra, V. (2018) · arXiv · doi:10.48550/arxiv.1806.00582 · Cited by 2,077
SecureML: A System for Scalable Privacy-Preserving Machine Learning
Mohassel, P., & Zhang, Y. (2017) · 2017 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2017.12 · Cited by 1,936
Nasr, M., Shokri, R., & Houmansadr, A. (2019) · 2019 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2019.00065 · Cited by 1,760
Exploiting Unintended Feature Leakage in Collaborative Learning
Melis, L., Song, C., De Cristofaro, E., & Shmatikov, V. (2019) · 2019 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2019.00029 · Cited by 1,734
On the Convergence of FedAvg on Non-IID Data
Li, X., Huang, K., Yang, W., Wang, S., & Zhang, Z. (2019) · arXiv · doi:10.48550/arxiv.1907.02189 · Cited by 1,575
How to backdoor federated learning
Bagdasaryan, E., Veit, A., Hua, Y., Estrin, D., & Shmatikov, V. (2018) · arXiv · doi:10.48550/arxiv.1807.00459 · Cited by 1,495
Research works printed but not linked: 4
- Shen, AUROR: Defending against poisoning attacks in collaborative deep learning systems, 508
- LeCun, 1998, MNIST Database
- 1999, KDD Cup 1999 Data
- 2003, Amazon Networks
Cited by
Sorted by citations
Items 201–300 of 371
Qi, T., Xue, L., Zhan, Y., & Ma, X. (2025) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/3719027.3744805 · Cited by 2
PPFPL: Cross-Silo Privacy-Preserving Federated Prototype Learning Against Data Poisoning Attacks
Zhang, H., Yu, J., Xu, F., Hu, C., Zhang, Y., Wang, X., Yu, Z., & Zhang, X. (2025) · IEEE Transactions on Artificial Intelligence · doi:10.1109/tai.2025.3643391 · Cited by 2
FRIDA: Free-rider detection using privacy attacks
Recasens, P. G., Horváth, Á., Gutierrez-Torre, A., Torres, J., Berral, J. L., & Pejó, B. (2025) · Journal of Information Security and Applications · doi:10.1016/j.jisa.2025.104357 · Cited by 3
Yang, C., Zhou, Z., Liang, Y., & Tang, C. (2026) · IEEE Transactions on Vehicular Technology · doi:10.1109/tvt.2026.3665733 · Cited by 2
Tang, Y., Ni, L., Zhang, J., & Liang, Y. (2026) · Computer Networks · doi:10.1016/j.comnet.2026.112209 · Cited by 2
LSFL: A Lightweight and Secure Federated Learning scheme for Internet of Vehicles
Wei, L., Peng, D., Shi, Y., Shi, L., Li, G. Y., & Lian, H. (2026) · Information Processing & Management · doi:10.1016/j.ipm.2026.104858 · Cited by 2
Privacy-Preserving and Reliable Distributed Federated Learning
Dong, Y., Zhang, L., & Xu, L. (2024) · Lecture notes in computer science · doi:10.1007/978-981-97-0834-5_9 · Cited by 2
Khor, J. H., Sidorov, M., Law, S. Z., Tan, S. Y., & Woon, P. Y. (2024) · Lecture notes in electrical engineering · doi:10.1007/978-981-99-9833-3_23 · Cited by 2
RADAR: Model Quality Assessment for Reputation-aware Collaborative Federated Learning
Lavaur, L., Lechevalier, P.-M., Busnel, Y., Ludinard, R., Pahl, M., & Texier, G. (2024) · IEEE Symposium on Reliable Distributed Systems (SRDS) · doi:10.1109/srds64841.2024.00030 · Cited by 7
Explore Patterns to Detect Sybil Attack during Federated Learning in Mobile Digital Twin Network
Zhang, W., Yu, C., Meng, Z., Shen, S., & Zhang, K. (2024) · International Conference on Communications · doi:10.1109/icc51166.2024.10622975 · Cited by 2
Lightweight Federated Learning Secure Aggregation Protocols
Mu, X., Tian, Y., Zhou, Z., & Xiong, J. (2024) · International Conference on Networking and Network Applications (NaNA) · doi:10.1109/nana63151.2024.00079 · Cited by 2
Chen, S., Zhou, T., Xie, H., & Yang, X. (2025) · Journal of Information Security and Applications · doi:10.1016/j.jisa.2025.104039 · Cited by 2
Duy, P. T., Tran, T.-D., Duy, H. N., Hoang, H. D., & Pham, V.-H. (2023) · RIVF International Conference on Computing and Communication Technologies (RIVF) · doi:10.1109/rivf60135.2023.10471775 · Cited by 2
Vulnerability detection under poisoning attacks through code and token featuresPreprint
González‐Manzano, L., & García-Alfaro, J. (2024) · Research Square · doi:10.21203/rs.3.rs-4355876/v1 · Cited by 2
Liang, P., Chen, J., Yu, H., Huang, H., & Pu, B. (2025) · SSRN Electronic Journal · doi:10.2139/ssrn.5383089 · Cited by 2
Patronus: Countering Model Poisoning Attacks in Edge Distributed DNN Training
Wu, Z., Xu, C., Wang, M., Ma, Y., Wu, Z., Xiahou, Z., & Grieco, L. A. (2024) · IEEE Wireless Communications and Networking Conference · doi:10.1109/wcnc57260.2024.10571140 · Cited by 1
Progress and prospects of domain generalization mechanical fault diagnosis research
Shao, H., YiMing, X. I. A. O., Shen, Y. A. N., Jie, W. A. N. G., & Ying, P. E. N. G. (2024) · Scientia Sinica Technologica · doi:10.1360/sst-2024-0149 · Cited by 1
Defending Against Poisoning Attacks in Federated Prototype Learning on Non-IID Data
Zhang, J., Zhang, H., Wang, G., & Dong, A. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-71467-2_6 · Cited by 1
Jing, Z., & Wang, R. (2024) · Drones · doi:10.3390/drones8120707 · Cited by 1
Bai, F., Zhao, Y., Shen, T., Zeng, K., Zhang, X., & Zhang, C. (2025) · Symmetry · doi:10.3390/sym17050782 · Cited by 1
Cyber Security Concerns and Mitigation Strategies in Federated Learning: A Comprehensive Review
Ahir, P., & Parikh, M. C. (2025) · NFSU Journal of Cyber Security Digital Forensic · doi:10.69490/jcsdf920250526 · Cited by 1
Edelson, M., Pham, A., & Kuo, T.-T. (2025) · Scientific Reports · doi:10.1038/s41598-025-04069-2 · Cited by 1
Xie, Q., & Zhao, Y. (2025) · Computer Networks · doi:10.1016/j.comnet.2025.111493 · Cited by 2
General Test-Time Backdoor Detection in Split Neural Network-Based Vertical Federated Learning
Yuan, S., Li, X., Cao, X., Zhang, H., & Deng, R. H. (2025) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2025.3595518 · Cited by 1
Self-citationDeception-Based Defense of Poisoning Attack in Federated Learning
Masse, G. C. T., Benslimane, A., Tchendji, V. K., & Hemida, A. H. A. (2025) · IEEE Access · doi:10.1109/access.2025.3611806 · Cited by 1
A Truthful Incentive Scheme Based on Data Forgetting Game for Federated Unlearning
Xie, L., Su, Z., Wang, Y., Tao, J., & Lin, J. (2025) · IEEE International Conference on Privacy Computing and Data Security (PCDS) · doi:10.1109/pcds65695.2025.00030 · Cited by 2
Defense Against Poisoning Attacks on Federated Learning With Neighborhood Coulomb Force
Wang, B., Tian, Y., Guo, Y., & Li, H. (2025) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2025.3637669 · Cited by 1
Masse, G. C. T., Benslimane, A., Tchendji, V. K., Hemida, A. H. A., Su, Z., & Han, S. (2025) · International Conference on Communications · doi:10.1109/icc52391.2025.11161880 · Cited by 1
Peng, C., & Xian, H. (2025) · Journal of Information Security and Applications · doi:10.1016/j.jisa.2025.104345 · Cited by 2
PDFL: A Privacy-Enhancing and Robust Poisoning Defense Federated Learning Scheme
Wang, G., Wu, H., Li, Q., Liu, Z., Zhao, J., Lam, K., Dong, Q., Yang, Y., & Zhou, L. J. (2025) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2025.3648147 · Cited by 1
FedD2: Data Poisoning Robust Defense Strategy in Federated Learning
Wu, J. F., Liu, Y., Ni, T., Zheng, X., Luo, Y., & Hu, P. (2025) · IEEE International Conference on Parallel and Distributed Systems (ICPADS) · doi:10.1109/icpads67057.2025.11323206 · Cited by 1
SA-FL: Secure Aggregation Scheme in Federated Learning Against Poisoning Attacks
Chang, Y., Chen, Q., Luan, T. H., & Su, Z. (2026) · IEEE Transactions on Cognitive Communications and Networking · doi:10.1109/tccn.2026.3656284 · Cited by 1
Chen, M., Liu, X., Ma, W., Yu, K., Yu, J., Xie, J., & Sun, L. (2026) · IEEE Transactions on Mobile Computing · doi:10.1109/tmc.2026.3656307 · Cited by 1
A Robust Privacy-Preserving Federated Learning Method Against Poisoning Attacks on Non-IID Data
Fang, C., Chang, D., Li, Y., Yang, F., Liu, Y., & Ma, B. (2026) · IEEE Internet of Things Journal · doi:10.1109/jiot.2026.3658384 · Cited by 1
Self-citationPrivacy-Preserving and Poisoning-Resilient Enhanced Cross-Silo Federated Learning
Zheng, X., Yan, X., Yang, F., Ng, W. W. Y., Li, Y., & Wu, S. (2025) · International Conference on Blockchain Technology and Information Security (ICBCTIS) · doi:10.1109/icbctis66509.2025.11387244 · Cited by 1
Self-citationGame-Theoretic Defense Against Encrypted Data Poisoning in Federated Learning for Social Networks
Sun, Z., Gao, W., Yin, P., Li, W., Zhang, M., Chen, Y., & Shu, J. (2026) · Lecture notes in computer science · doi:10.1007/978-981-95-7027-0_6 · Cited by 1
Adversarial Model Poisoning in CNNs for Brain Tumor Detection: Risks to Smart Healthcare Integrity
Singh, P., Lata, K., & Saini, S. (2025) · OITS International Conference on Information Technology (OCIT) · doi:10.1109/ocit66168.2025.11400258 · Cited by 1
TCFL: Trapdoor homomorphic encryption based federated learning aggregator with filter
Shen, X., Jia, Y., Xu, C. L., & Zhu, L. (2026) · Peer-to-Peer Networking and Applications · doi:10.1007/s12083-025-02193-4 · Cited by 1
Jia, X., Sun, R. X., Liu, L., Liu, J., Kang, J., Mumtaz, S., & Dong, M. (2026) · IEEE Transactions on Vehicular Technology · doi:10.1109/tvt.2026.3671265 · Cited by 1
Chen, L., Batool, H., Zeng, X., Zhao, D., Du, Y., & Tan, C. W. (2026) · Applied Soft Computing · doi:10.1016/j.asoc.2026.114982 · Cited by 1
Manzoor, H. U., Shabbir, A., Rais, R. N. B., Hussain, S., & Zoha, A. (2026) · International Journal of Intelligent Systems · doi:10.1155/int/8810907 · Cited by 1
PRFed: Privacy-preserving federated learning to resist poisoning attack
Li, H., Chen, Y., Yang, Y., Dou, H., & Yang, Y. (2026) · Information Fusion · doi:10.1016/j.inffus.2026.104397 · Cited by 1
Su, Z., Lu, Z. G., Wu, Y. H., Shen, R., & Lu, S. (2025) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv51701.2025.00373 · Cited by 1
Hu, F., Zhang, A., Li, M., & Wang, C. (2026) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2026.3689720 · Cited by 1
From data heterogeneity to convergence: A data-centric review of federated learning
Nguyen, H. T., Bettinelli, M., Ghaffari, A., Benoît, A., Nguyen, T., Pirttikangas, S., & Lovén, L. (2026) · Neurocomputing · doi:10.1016/j.neucom.2026.135005 · Cited by 1
The shift from centralized analytics to federated learning in smart grids: a comprehensive review
Sultana, A., & Sarma, K. K. (2026) · Knowledge and Information Systems · doi:10.1007/s10115-026-02793-3 · Cited by 1
A Byzantine-Robust Secure Federated Learning Scheme in Heterogeneous Data
Wang, R., Wang, R., Li, Z., Zhang, F., Li, J., & Li, X. (2026) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2026.3714122 · Cited by 1
Yu, Y., Jianping, L., & Weiwei, D. (2022) · International Computer Conference on Wavelet Active Media Technology and Information Processing (ICCWAMTIP) · doi:10.1109/iccwamtip56608.2022.10016548 · Cited by 1
FedMC: Federated Learning with Mode Connectivity Against Distributed Backdoor Attacks
Wang, W., Zhang, C., Liu, S., Tang, M., Liu, A., & Yu, S. (2023) · International Conference on Communications · doi:10.1109/icc45041.2023.10278903 · Cited by 1
Garg, P. (2023) · International Conference on Power Energy, Environment and Intelligent Control (PEEIC) · doi:10.1109/peeic59336.2023.10451626 · Cited by 1
An Adaptive Differential Private Federated Learning in Secure IoT
Xu, R., Li, Q., Cao, W., Yan, J., & Li, Y. (2023) · International Conference on Advanced Cloud and Big Data · doi:10.1109/cbd63341.2023.00028 · Cited by 1
Self-citationZhong, Y., & Wang, L.-P. (2024) · International Conference on Computer Supported Cooperative Work in Design (CSCWD) · doi:10.1109/cscwd61410.2024.10580526 · Cited by 1
R-PPDFL: A Robust and Privacy-Preserving Decentralized Federated Learning System
Chen, T., Wang, X., & Dai, H. (2024) · Lecture notes in computer science · doi:10.1007/978-981-97-5101-3_9 · Cited by 1
Decentralized Federated Learning Links for Biometric Recognition
Guo, J., Mu, H., Ren, H., Han, C., & Sun, L. (2024) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn60899.2024.10650816 · Cited by 1
Privacy-Preserving and Robust Federated Learning Based on Secret Sharing
Mei, J., Shen, X., Xu, C. L., Zhu, L., Jin, G., & Sharif, K. (2024) · IEEE International Symposium on Parallel and Distributed Processing with Applications (ISPA) · doi:10.1109/ispa63168.2024.00223 · Cited by 1
Byzantine-Robust Decentralized Federated Learning via Local Performance Checking
Zhang, K., Basharat, A., & Xu, P. (2025) · Communications in computer and information science · doi:10.1007/978-981-96-6954-7_12 · Cited by 1
Privacy-Preserving Federated Learning Compatible with Robust AggregatorsPreprint
Alebouyeh, Z., & Bidgoly, A. J. (2024) · SSRN Electronic Journal · doi:10.2139/ssrn.4793556 · Cited by 1
Secure Image Watermarking in Cloud Computing with Distributed Paillier Cryptosystem
Zhou, Z., Chen, B., Dong, C., Zheng, P., & Lu, W. (2022) · IEEE International Workshop on Multimedia Signal Processing (MMSP) · doi:10.1109/mmsp55362.2022.9949258
Privacy-preserving Federated Learning Against Byzantine Attack via Top-k Indexes
Shang, M., Tong, Z., Liu, T., & Zhang, T. (2023) · International Conference on Networking and Network Applications (NaNA) · doi:10.1109/nana60121.2023.00108
A Max-Min Security Game for Coordinated Backdoor Attacks on Federated Learning
Wahab, O. A., & Avila, A. R. (2023) · IEEE International Conference on Big Data (BigData) · doi:10.1109/bigdata59044.2023.10386756
PPBRFL: Privacy-Preserving Byzantine-Robust Federated Learning
Zhou, Q. (2024) · Frontiers in Computing and Intelligent Systems · doi:10.54097/6jamgy43
Privacy-Preserving Federated Learning Compatible with Robust AggregatorsPreprint
Alebouyeh, Z., & Bidgoly, A. J. (2024) · SSRN Electronic Journal · doi:10.2139/ssrn.4882102
Refine and Identify: An Accelerated Iterative Algorithm for Securing Federated Learning
Gouissem, A., Chkirbene, Z., Khattab, T. M., Mabrok, M. A., Abdallah, M. M., & Hamila, R. (2024) · International Wireless Communications and Mobile Computing Conference (IWCMC) · doi:10.1109/iwcmc61514.2024.10592366
A Survey of Federated Learning: Review, Attacks, Defenses
Yao, Z., Cheng, J., Fu, C., & Huang, Z. (2024) · Communications in computer and information science · doi:10.1007/978-981-97-4387-2_13
Lightweight Byzantine-Robust and Privacy-Preserving Federated Learning
Lu, Z. G., Lu, S., Cui, Y., Wu, J., Nie, H., Xiao, J., & Yi, Z. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-69766-1_19
Piaseczny, A., Ruzomberka, E., Parasnis, R., & Brinton, C. G. (2024) · IEEE Internet of Things Journal · doi:10.1109/jiot.2024.3462674
Why Not Model Privacy?: An Efficient and Practical Scheme for Federated Learning Model Security
Wang, S., Bi, R., Tian, Y., & Xiong, J. (2024) · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · doi:10.1007/978-3-031-60347-1_33
FEFL: A Fair & Efficient Defense Against Poisoning Attacks via Discrete Update Space
Zhao, Y., Zhang, J., Cao, Y., & Ye, T. (2024) · International Conference on Information Communication and Signal Processing (ICICSP) · doi:10.1109/icicsp62589.2024.10809244
A backdoor attack defense scheme in federated learning
Jing, Z., & He, J. (2024) · IEEE International Conference on Information Technology, Big Data and Artificial Intelligence (ICIBA) · doi:10.1109/iciba62489.2024.10867968
An Asynchronous Robust Federated Learning Approach for Data Value in IoT
Liang, H., Jin, M., Yan, H., Han, S., Li, W., Yang, Z., & Wang, Z. (2025) · Lecture notes in electrical engineering · doi:10.1007/978-981-96-2468-3_20
Bai, K. V. S., Pradeep, K., Harini, G. V. N. L., & Reddy, N. Y. (2025) · International Conference on Electronics and Renewable Systems (ICEARS) · doi:10.1109/icears64219.2025.10940731
StegoFL: Using Steganography and Federated Learning to Transmit Malware
Rong, W., Liang, J., Jiang, H., Feng, C., & Chang, C. (2024) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom63139.2024.00050
Federated Learning: An Overview of Attacks and Defense Methods
Sameera, K. M., Arikkat, D. R., Vinod, P., A., R. R. K., Aneez, A., & Conti, M. (2025) · Springer eBooks · doi:10.1007/978-3-031-83157-7_14
LBRFL: Lightweight Privacy-Preserving Federated Learning with Byzantine-Robustness
Shen, P., Zhao, S., Xu, J., Zhao, C., Chen, Z., & Guo, S. (2025) · Lecture notes in computer science · doi:10.1007/978-981-96-6606-5_3
Guo, C., Zhao, S., & Qin, S. (2025) · IEEE Congress on Evolutionary Computation (CEC) · doi:10.1109/cec65147.2025.11043007
PARSIFAL: Private and Robust Sign Federated Learning
Lei, R., Wang, P., Zeng, J., Wang, C., Pei, H., & Zhao, J. (2025) · ACM SIGKDD Conference on Knowledge Discovery and Data Mining (KDD) · doi:10.1145/3711896.3737074
Dao, B. T., Duc, V. V., Vu, T. A., Nguyen, H. T., Tran, K. P., & Truong, H. (2025) · SSRN Electronic Journal · doi:10.2139/ssrn.5362071
Privacy-preserving federated graph neural network against poisoning attack
He, G., Ren, Y., He, G., Feng, G., & Zhang, X. (2025) · Signal Processing · doi:10.1016/j.sigpro.2025.110214
AP-PPFL: an anti-poisoning privacy-preserving federated learning method
Li, Y., Chen, F., Chang, C., Guo, Y., Sun, H., & Hao, Y. (2026) · Cybersecurity · doi:10.1186/s42400-026-00583-6
Self-citationBR-CPPFL: A Blockchain-Based Robust Clustered Privacy-Preserving Federated Learning System
Li, Y., Wang, X., Zhang, K., Zhang, B., Zheng, L., Ding, X., & Xu, Q. H. (2025) · Lecture notes in computer science · doi:10.1007/978-981-95-3543-9_20
Self-citationSecure federated learning with configurable reliability in heterogeneous edge computing
Liu, Y., Liang, Y., Zhang, R., & Zhou, Z. (2025) · Computer Networks · doi:10.1016/j.comnet.2025.111808
A Defense Scheme of Backdoor Attacks for Federated Learning Based on Multi-Index Cascading
Guo, J., Xiong, Y., Wu, L., Dong, K., & Lee, L. (2025) · IEEE International Conference on Software Quality, Reliability and Security Companion (QRS-C) · doi:10.1109/qrs-c65679.2025.00072
How to Defend Against Large-Scale Model Poisoning Attacks in Federated Learning: A Vertical Solution
Wang, J., Wang, R., & Zhang, F. (2025) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2025.3630175
Enhancing Security and Privacy in Multi-Server Federated Learning
Zhao, X., Bu, Y., Fan, K., & Li, H. (2025) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2025.3627244
From Heterogeneous Data to Secure Convergence: A Data-Centric Review of Federated LearningPreprint
Nguyen, H. Q., Bettinelli, M., Ghaffari, A., Benoît, A., Nguyen, T., Pirttikangas, S., & Lovén, L. (2025) · SSRN Electronic Journal · doi:10.2139/ssrn.5856890
An Empirical Analysis of Secure Federated Learning for Autonomous Vehicle Applications
Mia, M. J., & Amini, M. H. (2025) · ASCE International Conference on Computing in Civil Engineering (i3CE) · doi:10.1061/9780784486115.044
Emerging Paradigms for Securing Federated Learning Systems
Abouelmagd, A. A., & Hilal, A. E. (2025) · IEEE Global Conference on Artificial Intelligence and Internet of Things (GCAIoT) · doi:10.1109/gcaiot68269.2025.11275564
Sybil-aware adaptive defence framework for robust federated learning
Khedekar, D., Mahapatra, T., & Rajput, A. S. (2025) · Pervasive and Mobile Computing · doi:10.1016/j.pmcj.2025.102157
Jbara, Y. H. F., Aloufi, F. A., & Alhalangy, A. (2025) · SSRN Electronic Journal · doi:10.2139/ssrn.5933532
FBFL: Flexible Byzantine-Robust Federated Learning With Privacy-Preserving
Xu, Y., Zhang, H., Zhao, J., Gai, K., Tian, Z., & Yang, J. (2025) · IEEE Transactions on Cloud Computing · doi:10.1109/tcc.2025.3641757 · Cited by 1
Secure and Robust Federated Learning Under Dual-Server Architecture in Internet of Things
Liu, S., Ren, J., Meng, R., Yan, X., Miao, Y., Liu, Z., Peng, J., Zou, Y., Wang, Z., Li, H., et al. (2025) · IEEE Internet of Things Journal · doi:10.1109/jiot.2025.3647441
Self-citationRoy, S., Singha, S. K., & Bera, D. (2025) · IEEE Access · doi:10.1109/access.2025.3648434
Zhang, Y., Zhao, W., & Hu, C. (2026) · Future Generation Computer Systems · doi:10.1016/j.future.2026.108390
Enhancing Federated Learning Security: Cluster-Based Strategies to Counter GAN-Poisoned Attacks
Nowroozi, E., Habibi, Y., Mughal, A. B., Saedi, M., & Jafari, M. (2026) · Springer eBooks · doi:10.1007/978-3-031-99447-0_16
Liu, L., Wang, Y., Li, J., Zheng, M., Jiang, Z., Song, Y., & Liu, X. (2025) · IEEE International Conference on Bioinformatics and Biomedicine (BIBM) · doi:10.1109/bibm66473.2025.11356719
Privacy-Enhanced Federated Prompt Tuning Against Backdoor Attack
He, G., Ren, Y., He, G., Feng, G., & Zhang, X. (2026) · IEEE Transactions on Cloud Computing · doi:10.1109/tcc.2026.3660272
Certifiably robust and privacy-preserving federated learning against backdoor attacks
Li, M., Ma, X., Teng, Z., Zhou, H., & Wei, L. (2026) · Computer Networks · doi:10.1016/j.comnet.2026.112063
Xu, N., Feng, Y., Liu, N., Liu, M., Li, Y., & Fu, X. (2026) · Knowledge-Based Systems · doi:10.1016/j.knosys.2026.115558
Self-citationHe, L., & Zhao, Y. (2025) · International Conference on Artificial Intelligence, Human-Computer Interaction and Robotics (AIHCIR) · doi:10.1109/aihcir67580.2025.11404964
FLET: Game-Theoretic Free-Riding Mitigation via Test Tasks in Federated Learning
Guo, S., Wang, Y., Su, Z., Pan, Y., Luan, T. H., & Luo, X. (2026) · IEEE Transactions on Networking · doi:10.1109/ton.2026.3668944
Metadata
- Authors
- Ma, Z., Ma, J., Miao, Y., Li, Y., & Deng, R. H.
- Affiliations
- Xidian University (CN)
- University of Oregon (US)
- Singapore Management University (SG)
- Venue
- IEEE Transactions on Information Forensics and Security
- Published
- 2022
- Volume
- 17
- Pages
- 1639-1654
- ISSN
- 1556-6013 (ISSN-L)
- 1556-6021
- OpenAlex
- W4226047321
- Cited by
- 371
- References
- 39
- Citations by year
- 2026: 98 · 2025: 123 · 2024: 94 · 2023: 50 · 2022: 6
- FWCI
- 22.45
- Type
- journal article
- Language
- en
- Open access
- closed
- Licence
- Locations
- IEEE Transactions on Information Forensics and Security (publishedVersion)
- Singapore Management University Institutional Knowledge (InK) (Singapore Management University) (submittedVersion)
- Funders
- National Key Research and Development Program of China (2021YFB3101100)
- Foundation for Innovative Research Groups of the National Natural Science Foundation of China (62121001)
- National Natural Science Foundation of China (62072361, U1804263, 62072352)
- Key Research and Development Program of Shaanxi Province (2019ZDLGY12-04, 2020ZDLGY09-06)
- Fundamental Research Funds for the Central Universities (JB211505)
- Guangxi Key Laboratory of Cryptography and Information Security (GCIS201917)
- Guangxi Key Laboratory of Trusted Software (KX202028)
- Ripple University Blockchain Research Initiative
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Privacy-Preserving Technologies in Data
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Computer Networks and Communications › Cryptography and Data Security
- Keywords
- privacy-preserving federated learning, model poisoning, Byzantine attacks, gradient aggregation, non-IID data
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review