Cited by 371Privacy-Preserving Technologies in DataAdversarial Robustness in Machine LearningCryptography and Data Security

The DOI matches its Crossref record; 39 of the 39 references it cites were found in a registry or an index.

ShieldFL: Mitigating Model Poisoning Attacks in Privacy-Preserving Federated Learning

Ma, Zhuoran, Ma, Jianfeng, Miao, Yinbin, Li, Yingjiu, Deng, Robert H.·2022·IEEE Transactions on Information Forensics and Security

DOI 10.1109/tifs.2022.3169918

Open this paper in CoChat — free account

Abstract

Privacy-Preserving Federated Learning (PPFL) is an emerging secure distributed learning paradigm that aggregates user-trained local gradients into a federated model through a cryptographic protocol. Unfortunately, PPFL is vulnerable to model poisoning attacks launched by a Byzantine adversary, who crafts malicious local gradients to harm the accuracy of the federated model. To resist model poisoning attacks, existing defense strategies focus on identifying suspicious local gradients over plaintexts. However, the Byzantine adversary submits encrypted poisonous gradients to circumvent existing defense strategies in PPFL, resulting in encrypted model poisoning. To address the issue, in this paper we design a privacy-preserving defense strategy using two-trapdoor homomorphic encryption (referred to as ShieldFL), which can resist encrypted model poisoning without compromising privacy in PPFL. Specially, we first present the secure cosine similarity method aiming to measure the distance between two encrypted gradients. Then, we propose the Byzantine-tolerance aggregation using cosine similarity, which can achieve robustness for both Independently Identically Distribution (IID) and non-IID data. Extensive evaluations on three benchmark datasets (i.e.,MNIST, KDDCup99, and Amazon) show that ShieldFL outperforms existing defense strategies. Especially, ShieldFL can achieve 30%-80% accuracy improvement to defend two state-of-the-art model poisoning attacks in both non-IID and IID settings.

Integrity signals

Registry

Crossref · 10.1109/tifs.2022.3169918

Cites

39 of 39 references verified0 citation errors · 0 not checkable

Statistics

Recomputing p-values needs the paper’s full text.

Claims the paper makes

This paper’s full text isn’t openly available, so its claims and self-check weren’t run. The registry and citation checks still apply.

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

Communication-Efficient Learning of Deep Networks from Decentralized Data
McMahan, H. B., Moore, E., Ramage, D., Hampson, S., & Arcas, B. A. Y. (2016) · arXiv · doi:10.48550/arxiv.1602.05629 · Cited by 14,215
Membership Inference Attacks Against Machine Learning Models
Shokri, R., Stronati, M., Song, C., & Shmatikov, V. (2017) · 2017 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2017.41 · Cited by 4,754
Practical Secure Aggregation for Privacy-Preserving Machine Learning
Bonawitz, K., Ivanov, V., Kreuter, B., Marcedone, A., McMahan, H. B., Patel, S., Ramage, D., Segal, A., & Seth, K. (2017) · Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/3133956.3133982 · Cited by 3,956
Privacy-preserving deep learning
Shokri, R., & Shmatikov, V. (2015) · Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/2810103.2813687 · Cited by 2,356
Federated Learning with Non-IID Data
Zhao, Y., Li, M., Lai, L., Suda, N., Civin, D., & Chandra, V. (2018) · arXiv · doi:10.48550/arxiv.1806.00582 · Cited by 2,077
SecureML: A System for Scalable Privacy-Preserving Machine Learning
Mohassel, P., & Zhang, Y. (2017) · 2017 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2017.12 · Cited by 1,936
Comprehensive Privacy Analysis of Deep Learning: Passive and Active White-box Inference Attacks against Centralized and Federated Learning
Nasr, M., Shokri, R., & Houmansadr, A. (2019) · 2019 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2019.00065 · Cited by 1,760
Exploiting Unintended Feature Leakage in Collaborative Learning
Melis, L., Song, C., De Cristofaro, E., & Shmatikov, V. (2019) · 2019 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2019.00029 · Cited by 1,734
On the Convergence of FedAvg on Non-IID Data
Li, X., Huang, K., Yang, W., Wang, S., & Zhang, Z. (2019) · arXiv · doi:10.48550/arxiv.1907.02189 · Cited by 1,575
How to backdoor federated learning
Bagdasaryan, E., Veit, A., Hua, Y., Estrin, D., & Shmatikov, V. (2018) · arXiv · doi:10.48550/arxiv.1807.00459 · Cited by 1,495

Show all 39 references

Research works printed but not linked: 4

Shen, AUROR: Defending against poisoning attacks in collaborative deep learning systems, 508
LeCun, 1998, MNIST Database
1999, KDD Cup 1999 Data
2003, Amazon Networks

Sorted by citations

Items 301–371 of 371

RankFL: Robustness and Privacy-Preserving Federated Learning Scheme Against Poisoning Attacks
Chang, Y., Chen, Q., Luan, T. H., & Su, Z. (2026) · IEEE Transactions on Mobile Computing · doi:10.1109/tmc.2026.3672641
A blockchain-enabled privacy-preserving and auditable federated learning scheme for 6G edge intelligent networks
Zhang, F., Yi, F., Wu, J., & Ma, Z. (2026) · Journal on Wireless Communications and Networking · doi:10.1186/s13638-025-02558-6
Self-citation
Mitigating Poisoning Attack Coalitions in FL: A Non-Linear Personalized Approach
Besrour, S., Couturier, A., & Almhana, J. (2025) · Globecom · doi:10.1109/globecom59602.2025.11432196
AFCG: A privacy-preserving federated learning framework against chained malicious attacks for vehicular networks
Huang, H., Zhou, Q., Hao, Y., & Huang, Z. (2026) · Ad Hoc Networks · doi:10.1016/j.adhoc.2026.104225
RBFL: Defending against sophisticated poisoning attacks in resilient blockchain-empowered federated learning
Gao, C., Deng, W., Zhou, N., Liang, X., & Cui, W. (2026) · Neurocomputing · doi:10.1016/j.neucom.2026.133454
Secure collaborative management platform applied to IoT Networks
Atia, O. B. (2024) · theses.fr (ABES) · doi:10.70675/6c43d453z9fb0z4a37z8123z35304e4a31cc
Predictor-Guided Robust Federated Learning Against Backdoor Attacks
Jiang, Y., Zhang, W., Huang, G., Gong, X., & Yuan, X. (2026) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp55912.2026.11462402
ROPFL: Robust and Privacy-Preserving Decentralized Federated Learning Framework
Li, K., Yang, X., Ban, Z., Qi, S., He, Z., Zhao, H., & Wang, Q. (2026) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp55912.2026.11465073
Hybrid Poisoning Attacks Leveraging Fake Identities in Cross-Device Federated Learning-Edge Consumer IoT Networks
Xiao, X., Tang, Z., Song, Y., Tan, J., Wang, X., Chen, L. N., Liang, Z., & Li, K. (2026) · IEEE Transactions on Consumer Electronics · doi:10.1109/tce.2026.3686756
Faros: robust federated learning with adaptive scaling against backdoor attacks
Hu, C., Hu, Q., Chen, S., Li, N., Zhang, M., & Li, J. (2026) · The Journal of Supercomputing · doi:10.1007/s11227-026-08527-0
Adaptive aggregation and robust client selection against poisoning and backdoor attacks in federated learning
Chuang, Y., & Zhang, Q.-X. (2026) · Engineering Applications of Artificial Intelligence · doi:10.1016/j.engappai.2026.114734
Entropy-Regularized Weighted Federated Meta-Learning Approach for Power Load Forecasting in Non-IID Scenarios
Yang, Y., Zhu, F., Gao, Y., & Wang, L. (2026) · IEEE Transactions on Smart Grid · doi:10.1109/tsg.2026.3688250
SecureTensor for federated learning with privacy preservation and communication efficiency
Wu, X., Lou, F., Chen, X., Chen, Y., Lan, T., & Wang, Z. (2026) · Neurocomputing · doi:10.1016/j.neucom.2026.133832
A Resilient Hybrid Mechanism for Protecting Healthcare Data from Model Poisoning in Federated Learning
Miloudi, A., Laouid, A., Bounceur, A., Bouhamed, M. M., & Hammoudeh, M. (2025) · International Conference on Future Networks and Distributed Systems (ICFNDS) · doi:10.1145/3789692.3789788
SharBipole: Secure and Scalable Sharding Blockchain-Based Federated Learning Against Poisoning Attacks
Jin, Z., Li, D. S., Liu, J., Peng, H., Wu, Q., Guan, Z., Susilo, W., Deng, R. H., & Liu, Y. (2026) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2026.3691662
Self-citation
DDFL: dual defense against poisoning attacks in privacy-preserving federated learning
Guo, C., Tian, M., Li, X., Sun, H., & Jie, Y. (2026) · Neural Networks · doi:10.1016/j.neunet.2026.109095
Biasing Federated Learning Based on Adversarial Graph Attention Networks
Li, K., Yuan, X., & Ni, W. (2026) · Springer series in reliability engineering · doi:10.1007/978-3-032-23959-4_5
ByFeDis: Toward Byzantine-Robust Heterogeneous Federated Learning via Knowledge Distillation in Railway Intelligent Control Systems
Guo, S., Sun, R. X., & Liu, J. (2026) · IEEE Transactions on Intelligent Transportation Systems · doi:10.1109/tits.2026.3690685
PBSFL: Privacy-Preserving and Byzantine-Resilient for Summoning Federated Learning
Chen, B., Ke, Y., Zhang, W., & Liu, J. (2026) · Journal of King Saud University - Computer and Information Sciences · doi:10.1007/s44443-026-00847-8
SecureDFL: A Secure Distributed Federated Learning Framework Against Poisoning Attacks
Javadpour, A., Ja’fari, F., Taleb, T., Türkmen, F., Benzaïd, C., & Shojafar, M. (2026) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2026.3697583 · Cited by 1
DRFL: A Dual‐Encryption and Reputation Evaluation Defence Against Malicious Attacks on Federated Learning
Zheng, Y., Tian, Y., Zhou, Z., Wang, S., Li, M., & Xiong, J. (2026) · IET Communications · doi:10.1049/cmu2.70173
Trustworthy Multimodal Federated Learning: A Survey of Feasibility, Adversariality, and SecurityPreprint
Yuan, Z., Luo, Y., Deng, G., Chen, S., Jiang, W., Yang, X., Wu, S., Wang, K., Wang, M., Rao, C., et al. (2026) · SSRN Electronic Journal · doi:10.2139/ssrn.6849573
A Study of Model Poisoning Attacks on Federated Large Language Models
Faiyaz, A., Olapojoye, R., Karwa, G., & Salman, T. (2026) · IEEE International Conference on Computing and Machine Intelligence (ICMI) · doi:10.1109/icmi68585.2026.11539939
Setup Once, Secure Always: A Single-Setup Secure Federated Learning Aggregation Protocol with Forward and Backward Secrecy for Dynamic Users
Sultan, N. H., Bo, Y., Gao, Y., Camtepe, S. A., Mahboubi, A., Bui, H. T., Chauhan, A., Aboutorab, H., Bewong, M., Gauravaram, P., et al. (2026) · ACM Asia Conference on Computer and Communications Security (ASIA CCS) · doi:10.1145/3779208.3785414 · Cited by 3
Security and robustness of collaborative learning in the context of 6G
Saeed, M. M. A., Saeed, R. A., & Ahmed, Z. E. (2026) · Elsevier eBooks · doi:10.1016/b978-0-44-340570-9.00015-9
Resilience of federated learning: perspectives on attacks and defenses
Raj, P. V. P., Gupta, A., & Das, S. K. (2026) · Elsevier eBooks · doi:10.1016/b978-0-44-344433-3.00016-2
SADFL: Spectral Anomaly Detection with adversarial learning in Federated Learning for defending malicious client attacks
Ruan, J.-H., Zhang, Z.-L., Liu, W.-A., Ruan, Y.-P., & Xiong, Q. (2026) · Information Processing & Management · doi:10.1016/j.ipm.2026.104973
Bilateral-verifiable and robust secure aggregation via TEE for asynchronous federated learning
Liu, W., Zhang, Y., Wu, A., Cao, J. P., Wang, Y., & Tian, Y. (2026) · Journal of Information Security and Applications · doi:10.1016/j.jisa.2026.104542
PP-FedTrust: Securing Federated Learning Against Adaptive Poisoning Attacks
Tariq, A., Sallabi, F., Serhani, M. A., Qayyum, T., Barka, E. S., & Taleb, I. (2026) · IEEE Wireless Communications and Networking Conference Workshops (WCNCW) · doi:10.1109/wcncw67598.2026.11555241
BRPPFL: A Byzantine-Robust and Privacy-Preserving Framework for Cloud–Edge Federated Learning
Zhang, L., Qiancheng, Y., Wuwei, Y., & He, L. (2026) · Computer Networks · doi:10.1016/j.comnet.2026.112498
A comprehensive survey on communication optimization and privacy preservation in federated learning
Kunjumon, A., Sarath, G., & Nair, J. J. (2026) · Discover Computing · doi:10.1007/s10791-026-10272-0 · Cited by 1
Byzantine-Resistant Federated Learning Using Reinforced RNN
Rathika, P., Priyadharshini, A., Karthi, V., Elakkiya, G., Praveen, J. J., & Manjith, S. (2026) · International Conference on Computing, Communication and Green Engineering (CCGE) · doi:10.1109/ccge67142.2026.11581834
Multi-distance Identifies Backdoors Attack in Privacy-Preserving Federated Learning
Wang, Z., Shen, J., Cao, Z., & Dong, X. (2026) · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · doi:10.1007/978-3-032-22500-9_5
SAFL: Enhanced Defense Against Poisoning Attacks in Privacy-Preserving Federated Learning
Lai, H., Chen, J., Wu, G., Liu, X., & Chen, C. (2026) · International Conference on Computer Supported Cooperative Work in Design (CSCWD) · doi:10.1109/cscwd68734.2026.11581500
Blockchain-Assisted Privacy-Preserving and Robust Federated Learning in Edge Computing
Shen, X., Xu, C. L., Zhu, L., Liu, H., Sun, L., & Sharif, K. (2026) · IEEE Internet of Things Journal · doi:10.1109/jiot.2026.3710509
Federated Learning Poisoning Guard in Non-IID IDS
Rao, X.-M., Chang, L.-H., & Lee, T. H. (2025) · IEEE Globecom Workshops (GC Wkshps) · doi:10.1109/gcwkshps68340.2025.11591180
Risk-aware learning-enabled control for safety-critical federated systems: A privacy-preserving approach for CIoT malware defense
Yazdinejad, A., Dehghantanha, A., & Srivastava, G. (2026) · Internet of Things · doi:10.1016/j.iot.2026.102022
Collusion-Resistant and TTP-Free Privacy-Preserving Federated Learning via Dynamic Functional Encryption
Xiao, D., Shen, S., Chen, L., & Li, M. (2026) · International Conference on Communications · doi:10.1109/icc59461.2026.11587494
AFRWC: Adaptive Reputation-Weighted Consensus for Hierarchical Federated Learning at the Edge
Qayyum, T., Trabelsi, Z., Tariq, A., & Ali, M. (2026) · IEEE International Conference on Communications workshops · doi:10.1109/iccworkshops63917.2026.11586380
Spa: Stealthy and Persistent Backdoor Attacks in Federated Learning via Feature-Space Alignment
Zhu, C., Li, Y., Rao, B., Mao, Y., Zhang, J., Wu, T., Ge, X., & Zhong, S. (2026) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2026.3714266
Self-citation
FlexProofs: A Vector Commitment with Flexible Linear Time for Computing All Proofs
Liu, J., & Zhang, L. F. (2026) · Lecture notes in computer science · doi:10.1007/978-3-032-32560-0_9
Optimization of encrypted data poisoning defense strategies in Social Federated Computing: An evolutionary game approach
Sun, Z., Gao, W., Yin, P., Li, W., Zhang, M., Chen, Y., Shu, J., & Guo, Y. (2026) · Computer Standards & Interfaces · doi:10.1016/j.csi.2026.104189
MONZA: A Score System for Malicious Clients Detection
Veiga, R., Morais, R., Bastos, L., Sargento, S., do Rosário, D. L., & Cerqueira, E. (2026) · Journal of Internet Services and Applications · doi:10.5753/jisa.2026.7098
Poisoning Attacks in Federated Learning: An Accountability- Oriented Survey with Centralized Learning as a Baseline
Mohammed, S., Alhadidi, D., & Ngom, A. (2026) · Journal of Cybersecurity and Privacy · doi:10.3390/jcp6040133
RFedIM: A Frequency-Domain Enhanced Byzantine-Robust Federated Learning Framework via Game-Theoretic Aggregation
Wen, M., Gao, J., & Zhang, P. (2026) · International Conference on Electronic Information Technology and Computer Engineering (EITCE) · doi:10.1109/eitce70137.2026.11634533
Fed-CBE: Client-Side Backdoor Elimination in Federated Learning via Persistent Parameter Disruption
Li, C., Shen, Y., Xie, M., Su, Z., Wang, Y., Zhang, C., & Zhu, L. (2026) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2026.3723162
Causal-CISP: Hybrid causality and adaptive security for robust federated learning under adversarial threats
Dubey, P., & Kumar, M. (2026) · Knowledge-Based Systems · doi:10.1016/j.knosys.2026.116817
TAR-DT: A Trusted and Attack-Resilient Mechanism for Distributed DNN Training in Agentic Edge Intelligence
Wu, Z., Ma, Y., Lu, L., Xiao, H., & Liu, C. (2026) · Future Internet · doi:10.3390/fi18080439
PEPD: Secure-Aggregation-Compatible Label-Flip Poisoning Detection via Selective Layer Disclosure
Ma, M., Ma, J., & Luo, H. (2026) · International Conference on Computer Communication and Artificial Intelligence (CCAI) · doi:10.1109/ccai69603.2026.11641922
Self-citation
A secure detection and revocation scheme for eliminating poisoning participants in privacy-preserving federated learning
Alamer, A. M. A., & Basudan, S. (2026) · Information Sciences · doi:10.1016/j.ins.2026.124044
Multi-FedLinks: Highly reliable decentralized multibiometric federated learning links
Guo, J. B., Mu, H., Ren, H., Han, C., & Sun, L. (2026) · Neural Networks · doi:10.1016/j.neunet.2026.109519
Decentralized and Secure Aggregation in Federated Learning
Fang, J. (2026) · World Conference on Computer and Information Security (WCCIS) · doi:10.1109/wccis70285.2026.11650937
A Byzantine-Resilient Federated Learning Framework with Cryptographic Gradient Attestation Against Coordinated Model Poisoning Attacks
Alnajim, A. A. (2026) · Electronics · doi:10.3390/electronics15173842
Security and privacy-preserving mechanisms in collaborative machine learning: A systematic review with novel taxonomy
Tuama, A. Y., Hasan, T. M., & Shakir, A. C. (2026) · Journal of Information Security and Applications · doi:10.1016/j.jisa.2026.104608
SecHFed: Achieving secure hierarchical federated learning against poisoning attacks without data assumptions
Gu, C., Zhu, K., Hu, D., & Liu, Z. (2026) · Information Fusion · doi:10.1016/j.inffus.2026.104731
Robust security enhancements approach for privacy-preserving federated learning under poisoning attacks
Basak, S., & Chatterjee, K. (2026) · Journal of Information Security and Applications · doi:10.1016/j.jisa.2026.104612
Adaptive Federated Learning by Multi-Scale Residual Attention Network Added with Optimal Noise in Differential Privacy for Privacy Preservation of Big Data
Nainwal, M., Roy, D., Sreedharan, N. P. N., Brammya, G., & Krishna, B. L. V. S. R. (2026) · Journal of the Franklin Institute · doi:10.1016/j.jfranklin.2026.109073
VERSA: A novel framework for verifiable and secure aggregation in Summoned Federated Learning
Chen, B., Ke, Y., Zhang, W., Xu, C., & Liu, C. (2026) · Computer Networks · doi:10.1016/j.comnet.2026.112750
FedSecure-EGA: Efficient Byzantine-Resilient Federated Learning via Encrypted Gradient Auditing with Johnson—Lindenstrauss Compression
Hussain, T., Azam, F., & Anwar, M. W. (2026) · International Conference on Cloud Computing and Big Data Analytics (ICCCBDA) · doi:10.1109/icccbda69573.2026.11676430
Privacy-Preserving Robust Federated Learning Based on Threshold Homomorphic Encryption
Zhao, Q., Zhoupeng, F., Zhang, M., Qin, B., 秦, 香., & Zhang, B. (2026) · IEEE/CIC International Conference on Communications in China (ICCC) · doi:10.1109/iccc70295.2026.11680499
RiskCal-FL: Certified Risk-Budgeted Participation for Byzantine-Robust Federated LearningPreprint
Tian, Y., Tao, Y., Zhu, Y., Zhang, Y., & Tian, Y. (2026) · SSRN Electronic Journal · doi:10.2139/ssrn.7493759
A Secure Federated Learning Paradigm Based on Homomorphic Encryption and Distributed Trust
Jasim, R. M., Abdullah, S. B., Мостовенко, О., & Hameed, W. M. (2026) · Communications in computer and information science · doi:10.1007/978-3-032-39711-9_3
Unmasking Composite Adversaries: A New Threat Model for Federated Learning
Hasan, M., Xiang, Y., Uddin, M. P., Yearwood, J. L., & Gao, L. (2026) · IEEE Transactions on Reliability · doi:10.1109/tr.2026.3736807
FedCHO: Closed-loop hierarchical orchestration for blockchain-based byzantine-robust federated learning
Shen, F., Liu, Z., Chao, X. U., Liu, Z., Feng, J., & He, Y. (2026) · Information Sciences · doi:10.1016/j.ins.2026.124194
Securing FL-Enabled NWDAF in Private 5G Networks Against Hybrid Attacks
Xiong, R., Xiong, M., Ren, Y. C., Ren, W., & Parr, G. P. (2026) · IEEE Transactions on Green Communications and Networking · doi:10.1109/tgcn.2026.3735240
Poisoning resilient federated learning for secure internet of medical things a systematic review
Unbreen, A., Naeem, H., Hassan, S. R., & Hassan, A. S. (2026) · Discover Artificial Intelligence · doi:10.1007/s44163-026-02344-3
SecCFL: Secure clustered federated learning for model personalization
He, Y., Yu, J., Wang, J., & Yang, M. (2026) · Information Sciences · doi:10.1016/j.ins.2026.124234
HFL-Deflect: Defence framework against adaptive coordinated poisoning attacks in hierarchical federated learning
Khedekar, D., Mahapatra, T., & Rajput, A. S. (2026) · Journal of Information Security and Applications · doi:10.1016/j.jisa.2026.104660
RSA-AES Signcryption for Preserving Model Update Integrity in Federated Learning: A Physical IoT Deployment
Zuhri, H. S., Purwanto, Y., & Ruriawan, M. F. (2026) · International Conference on Information Technology and Computing (ICITCOM) · doi:10.1109/icitcom70739.2026.11714370
PA-CFL: Privacy-Preserving Adaptive Clustered Federated Learning Under Heterogeneous Data
Zhang, T., Wenting, S., Zhang, H., & Zhao, C. (2026) · Mathematics · doi:10.3390/math14203673
Efficiency Improvements in Privacy-Preserving Federated Learning: A Comprehensive Survey
Jin, Z., Wan, G., Xu, R., Li, C., Mao, Q., Li, J., Tian, X., & Cao, Y. (2026) · Chinese Journal of Electronics · doi:10.23919/cje.2025.00.116

Authors: Ma, Z., Ma, J., Miao, Y., Li, Y., & Deng, R. H.
Affiliations: Xidian University (CN)
University of Oregon (US)
Singapore Management University (SG)
ORCID: Ma, Zhuoran
Ma, Jianfeng
Miao, Yinbin
Li, Yingjiu
Deng, Robert H.
Venue: IEEE Transactions on Information Forensics and Security
Publisher: Institute of Electrical and Electronics Engineers (IEEE)
Published: 2022
Volume: 17
Pages: 1639-1654
ISSN: 1556-6013 (ISSN-L)
1556-6021
DOI: 10.1109/tifs.2022.3169918
OpenAlex: W4226047321
Cited by: 371
References: 39
Citations by year: 2026: 98 · 2025: 123 · 2024: 94 · 2023: 50 · 2022: 6
FWCI: 22.45
Type: journal article
Language: en
Open access: closed
Licence: ieeexplore.ieee.org/Xplorehelp/downloads/license-information/IEEE.html (vor)
doi.org/10.15223/policy-029 (stm-asf)
doi.org/10.15223/policy-037 (stm-asf)
Locations: IEEE Transactions on Information Forensics and Security (publishedVersion)
Singapore Management University Institutional Knowledge (InK) (Singapore Management University) (submittedVersion)
Funders: National Key Research and Development Program of China (2021YFB3101100)
Foundation for Innovative Research Groups of the National Natural Science Foundation of China (62121001)
National Natural Science Foundation of China (62072361, U1804263, 62072352)
Key Research and Development Program of Shaanxi Province (2019ZDLGY12-04, 2020ZDLGY09-06)
Fundamental Research Funds for the Central Universities (JB211505)
Guangxi Key Laboratory of Cryptography and Information Security (GCIS201917)
Guangxi Key Laboratory of Trusted Software (KX202028)
Ripple University Blockchain Research Initiative
Topics: Physical Sciences › Computer Science › Artificial Intelligence › Privacy-Preserving Technologies in Data
Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
Physical Sciences › Computer Science › Computer Networks and Communications › Cryptography and Data Security
Keywords: privacy-preserving federated learning, model poisoning, Byzantine attacks, gradient aggregation, non-IID data

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review

ShieldFL: Mitigating Model Poisoning Attacks in Privacy-Preserving Federated Learning

Abstract

Overview

Integrity signals

Verification

Claims the paper makes

Claims other papers make about this one

Citations

Cites

Cited by

Related

Metadata

Record

About these checks