Pocket diagnosis: Secure federated learning against poisoning attack in the cloud
Open accessAbstract
Federated learning has become prevalent in medical diagnosis due to its effectiveness in training a federated model among multiple health institutions (i.e., Data Islands (DIs)). However, increasingly massive DI-level poisoning attacks have shed light on a vulnerability in federated learning, which inject poisoned data into certain DIs to corrupt the availability of the federated model. Previous works on federated learning have been inadequate in ensuring the privacy of DIs and the availability of the final federated model. In this article, we design a secure federated learning mechanism with multiple keys to prevent DI-level poisoning attacks for medical diagnosis, calledSFAP. Concretely,SFAPprovides privacy-preserving random forest-based federated learning by using the multi-key secure computation, which guarantees the confidentiality of DI-related information. Meanwhile, a secure defense strategy over encrypted locally-submitted models is proposed to resist DI-level poisoning attacks. Finally, our formal security analysis and empirical tests on a public cloud platform demonstrate the security and efficiency ofSFAPas well as its capability of resisting DI-level poisoning attacks.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
HE is very effective for FL privacy preservation because most operations required by FL systems, such as aggregation, model updates, and gradient calculations, can be performed without accessing raw data.
“This approach is very effective for FL privacy preservation as most of the operations required by the FL systems like aggregation, model updates, and gradient calculations can be performed without accessing the raw data [34,35,36,37,38].”
From A Review of Privacy Enhancement Methods for Federated Learning in Healthcare Systems (2023) · cites this paper as [37]
Homomorphic encryption can be used to evaluate the local model securely.
“To solve this problem, [38], [49], [51] used homomorphic encryption to evaluate the local model securely.”
From Poisoning attacks in federated learning: A survey (2023) · cites this paper as [49]
Cites
Communication-Efficient Learning of Deep Networks from Decentralized Data
McMahan, H. B., Moore, E., Ramage, D., Hampson, S., & Arcas, B. A. Y. (2016) · arXiv · doi:10.48550/arxiv.1602.05629 · Cited by 14,215 · see citing works
Federated Learning: Strategies for Improving Communication Efficiency
Konečný, J., McMahan, H. B., Yu, F. X., Richtárik, P., Suresh, A. T., & Bacon, D. (2016) · arXiv · doi:10.48550/arxiv.1610.05492 · Cited by 3,766 · see citing works
Explaining Explanations: An Overview of Interpretability of Machine Learning
Gilpin, L. H., Bau, D., Yuan, B. Z., Bajwa, A., Specter, M., & Kagal, L. (2018) · 2018 IEEE 5th International Conference on Data Science and Advanced Analytics (DSAA) · doi:10.1109/dsaa.2018.00018 · Cited by 2,507 · see citing works
Machine learning for medical diagnosis: history, state of the art and perspective
Kononenko, I. (2001) · Artificial Intelligence in Medicine · doi:10.1016/s0933-3657(01)00077-x · Cited by 1,674 · see citing works
Privacy-Preserving Deep Learning via Additively Homomorphic Encryption
Phong, L. T., Aono, Y., Hayashi, T., Wang, L., & Moriai, S. (2018) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2017.2787987 · Cited by 1,662 · see citing works
Wild patterns: Ten years after the rise of adversarial machine learning
Biggio, B., & Roli, F. (2018) · Pattern Recognition · doi:10.1016/j.patcog.2018.07.023 · Cited by 1,563 · see citing works
How to backdoor federated learning
Bagdasaryan, E., Veit, A., Hua, Y., Estrin, D., & Shmatikov, V. (2018) · arXiv · doi:10.48550/arxiv.1807.00459 · Cited by 1,495 · see citing works
Neural Cleanse: Identifying and Mitigating Backdoor Attacks in Neural Networks
Wang, B., Yao, Y., Shan, S., Li, H., Viswanath, B., Zheng, H.-T., & Zhao, B. Y. (2019) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp.2019.00031 · Cited by 1,486 · see citing works
Poisoning Attacks against Support Vector Machines
Biggio, B., Nelson, B., & Laskov, P. (2012) · arXiv · doi:10.48550/arxiv.1206.6389 · Cited by 1,331 · see citing works
Federated learning of predictive models from federated Electronic Health Records
Brisimi, T. S., Chen, R., Mela, T., Olshevsky, A., Paschalidis, I. C., & Shi, W. (2018) · International Journal of Medical Informatics · doi:10.1016/j.ijmedinf.2018.01.007 · Cited by 997 · cited 1× · see citing works
“Driven by the above issue, federated learning [9], [10], [11] has been proposed as an efficient solution to provide privacy preservations in the cloud, in which a federatedmodel is constructed by aggregating locally-trained models.”
BackgroundThe General Data Protection Regulation
Thelisson, E., Sharma, K., Salam, H., & Dignum, V. (2018) · CHI Conference Extended Abstracts on Human Factors in Computing Systems (CHI EA) · doi:10.1145/3170427.3170632 · Cited by 991 · see citing works
Data Poisoning Attacks Against Federated Learning Systems
Tolpegin, V., Truex, S., Gursoy, M. E., & Liu, L. (2020) · Lecture Notes in Computer Science · doi:10.1007/978-3-030-58951-6_24 · Cited by 927 · see citing works
Beyond Inferring Class Representatives: User-Level Privacy Leakage From Federated Learning
Wang, Z., Song, M., Zhang, Z., Song, Y., Wang, Q., & Qi, H. (2019) · IEEE INFOCOM 2019 - IEEE Conference on Computer Communications · doi:10.1109/infocom.2019.8737416 · Cited by 881 · see citing works
Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learning
Jagielski, M., Oprea, A., Biggio, B., Liu, C., Nita-Rotaru, C., & Li, B. (2018) · 2018 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2018.00057 · Cited by 861 · see citing works
Verifynet: Secure and verifiable federated learning
Xu, G., Li, H., Liu, S., Yang, K., & Lin, X. (2020) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2019.2929409 · Cited by 839 · see citing works
Local Model Poisoning Attacks to Byzantine-Robust Federated Learning
Fang, M., Cao, X., Jia, J., & Gong, N. Z. (2019) · arXiv · doi:10.48550/arxiv.1911.11815 · Cited by 828 · see citing works
Analyzing Federated Learning through an Adversarial Lens
Bhagoji, A. N., Chakraborty, S., Mittal, P., & Calo, S. (2018) · arXiv · doi:10.48550/arxiv.1811.12470 · Cited by 703 · see citing works
A secure federated transfer learning framework
Liu, Y., Kang, Y., Xing, C., Chen, T., & Yang, Q. (2020) · IEEE Intelligent Systems · doi:10.1109/mis.2020.2988525 · Cited by 645 · see citing works
Achieving a Nationwide Learning Health System
Friedman, C. P., Wong, A. K., & Blumenthal, D. (2010) · Science Translational Medicine · doi:10.1126/scitranslmed.3001456 · Cited by 539 · see citing works
SoK: Security and Privacy in Machine Learning
Papernot, N., McDaniel, P., Sinha, A., & Wellman, M. P. (2018) · 2018 IEEE European Symposium on Security and Privacy (EuroS&P) · doi:10.1109/eurosp.2018.00035 · Cited by 502 · see citing works
Certified Defenses for Data Poisoning Attacks
Steinhardt, J., Koh, P. W., & Liang, P. (2017) · arXiv · doi:10.48550/arxiv.1706.03691 · Cited by 479 · see citing works
Privacy-Preserving Machine Learning: Threats and Solutions
Al-Rubaie, M., & Chang, J. M. (2019) · IEEE Security & Privacy · doi:10.1109/msec.2018.2888775 · Cited by 444 · see citing works
Systematic Poisoning Attacks on and Defenses for Machine Learning in Healthcare
Kermani, M. M., Sur‐Kolay, S., Raghunathan, A., & Jha, N. K. (2014) · IEEE Journal of Biomedical and Health Informatics · doi:10.1109/jbhi.2014.2344095 · Cited by 383 · see citing works
An Efficient Privacy-Preserving Outsourced Calculation Toolkit With Multiple Keys
Liu, X., Deng, R. H., Choo, K. R., & Weng, J. (2016) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2016.2573770 · Cited by 263 · see citing works
HealthDep: An Efficient and Secure Deduplication Scheme for Cloud-Assisted eHealth Systems
Zhang, Y., Xu, C., Li, H., Yang, K., Zhou, J., & Lin, X. (2018) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2018.2832251 · Cited by 219 · see citing works
Efficient and Privacy-Preserving Outsourced Calculation of Rational Numbers
Liu, X., Choo, K. R., Deng, R. H., Lu, R., & Weng, J. (2016) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2016.2536601 · Cited by 187 · see citing works
When Does Machine Learning FAIL? Generalized Transferability for Evasion and Poisoning AttacksPreprint
Suciu, O., Mărginean, R., Kaya, Y., Daumé, H., & Dumitraş, T. (2018) · arXiv (Cornell University) · Cited by 150 · see citing works
Multi-authority Attribute-Based Keyword Search over Encrypted Cloud Data
Miao, Y., Deng, R. H., Liu, X., Choo, K. R., Wu, H., & Li, H. (2019) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2019.2935044 · Cited by 140 · see citing works
Homem‐de‐Mello, T. (2008) · SIAM Journal on Optimization · doi:10.1137/060657418 · Cited by 85 · see citing works
Towards Practical Privacy-Preserving Decision Tree Training and Evaluation in the Cloud
Liu, L., Chen, R., Liu, X., Su, J., & Qiao, L. (2020) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2020.2980192 · Cited by 80 · see citing works
Lightweight Privacy-Preserving Medical Diagnosis in Edge Computing
Ma, Z., Ma, J., Miao, Y., Liu, X., Choo, K. R., Yang, R., & Wang, X. (2020) · IEEE Transactions on Services Computing · doi:10.1109/tsc.2020.3004627 · Cited by 66 · see citing works
Privacy-preserving and high-accurate outsourced disease predictor on random forest
Ma, Z., Ma, J., Miao, Y., & Liu, X. (2019) · Information Sciences · doi:10.1016/j.ins.2019.05.025 · Cited by 55 · see citing works
General Data Protection Regulation
Удовиченко, Ю. Г., & Ногаева, В. У. (2018) · Actual Problems of Russian Law · doi:10.17803/1994-1471.2018.93.8.221-224 · Cited by 51 · see citing works
Learning Halfspaces with Malicious Noise
Klivans, A. R., Long, P. M., & Servedio, R. A. (2009) · Cited by 51 · see citing works
Securely and Efficiently Outsourcing Decision Tree Inference
Zheng, Y., Duan, H., Wang, C., Wang, R., & Nepal, . (2020) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2020.3040012 · Cited by 50 · see citing works
Privacy-Preserving Diverse Keyword Search and Online Pre-Diagnosis in Cloud Computing
Wang, X., Ma, J., Miao, Y., Liu, X., & Yang, R. (2019) · IEEE Transactions on Services Computing · doi:10.1109/tsc.2019.2959775 · Cited by 38 · see citing works
Learning Halfspaces with Malicious Noise
Klivans, A. R., Long, P. M., & Servedio, R. A. (2009) · Lecture notes in computer science · doi:10.1007/978-3-642-02927-1_51 · Cited by 34 · see citing works
Privacy Preserving Federated Big Data Analysis
Dai, W., Wang, S., Xiong, H., & Jiang, X. (2017) · Studies in big data · doi:10.1007/978-3-319-53817-4_3 · Cited by 25 · see citing works
Privacy-Preserving Collaborative Prediction using Random Forests
Giacomelli, I., Jha, S., Kleiman, R., Page, D., & Yoon, K. (2018) · PubMed Central · doi:10.48550/arxiv.1811.08695 · Cited by 25 · see citing works
Privacy Enhanced Decision Tree Inference
Sarpatwar, K., Ratha, N., Nandakumar, K., Shanmugam, K., Rayfield, J. T., Pankanti, S., & Vaculín, R. (2020) · IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw50498.2020.00025 · Cited by 13 · see citing works
Flagged first, then by citations
Cited by
Sorted by citations
Ferrag, M. A., Friha, O., Maglaras, L., Janicke, H., & Shu, L. (2021) · IEEE Access · doi:10.1109/access.2021.3118642 · Cited by 342 · see citing works
Poisoning attacks in federated learning: A survey
Xia, G., Chen, J., Yu, C., & Ma, J. (2023) · IEEE Access · doi:10.1109/access.2023.3238823 · Cited by 212 · see citing works
Ali, S., Li, Q., & Yousafzai, A. (2023) · Ad Hoc Networks · doi:10.1016/j.adhoc.2023.103320 · Cited by 216 · see citing works
A Review of Privacy Enhancement Methods for Federated Learning in Healthcare Systems
Gu, X., Sabrina, F., Fan, Z., & Sohail, S. (2023) · International Journal of Environmental Research and Public Health · doi:10.3390/ijerph20156539 · Cited by 139 · see citing works
Data Quality Detection Mechanism Against Label Flipping Attacks in Federated Learning
Jiang, Y., Zhang, W., & Chen, Y. (2023) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2023.3249568 · Cited by 98 · see citing works
Federated learning for 6G-enabled secure communication systems: a comprehensive survey
Sirohi, D., Kumar, N., Rana, P. S., Tanwar, S., Iqbal, R., & Hijji, M. (2023) · Artificial Intelligence Review · doi:10.1007/s10462-023-10417-3 · Cited by 98 · see citing works
Trustworthy federated learning: privacy, security, and beyond
Chen, C., Liu, J., Tan, H., Li, X., Wang, K. I., Li, P., Sakurai, K., & Dou, D. (2024) · Knowledge and Information Systems · doi:10.1007/s10115-024-02285-2 · Cited by 100 · see citing works
Li, G., Wu, J., Li, S., Yang, W., & Li, C. (2022) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2022.3173996 · Cited by 82 · see citing works
Yamany, W., Moustafa, N., & Turnbull, B. (2021) · IEEE Transactions on Intelligent Transportation Systems · doi:10.1109/tits.2021.3130906 · Cited by 78 · see citing works
Salim, S., Turnbull, B., & Moustafa, N. (2021) · IEEE Transactions on Computational Social Systems · doi:10.1109/tcss.2021.3134463 · Cited by 54 · see citing works
Privacy-Preserving and Reliable Decentralized Federated Learning
Gao, Y., Zhang, L., Wang, L., Choo, K. R., & Zhang, R. (2023) · IEEE Transactions on Services Computing · doi:10.1109/tsc.2023.3250705 · Cited by 53 · see citing works
BPFL: Blockchain-based privacy-preserving federated learning against poisoning attack
Ren, Y., Hu, M., Yang, Z., Feng, G., & Zhang, X. (2024) · Information Sciences · doi:10.1016/j.ins.2024.120377 · Cited by 34 · see citing works
Zheng, C., Liu, S., Huang, Y., Zhang, W., & Yang, L. (2022) · IEEE Internet of Things Journal · doi:10.1109/jiot.2022.3189055 · Cited by 37 · see citing works
Edge intelligence secure frameworks: Current state and future challenges
Villar-Rodríguez, E., Arostegi, M., Torre-Bastida, A. I., Regueiro, C., & López-de-Armentia, J. (2023) · Computers & Security · doi:10.1016/j.cose.2023.103278 · Cited by 38 · see citing works
Tensor-Empowered Federated Learning for Cyber-Physical-Social Computing and Communication Systems
Yang, L., Zhao, R.-N., Liu, D.-B., Lu, W., & Deng, X. (2023) · IEEE Communications Surveys and Tutorials · doi:10.1109/comst.2023.3282264 · Cited by 22 · see citing works
Privacy preserving and secure robust federated learning: A survey
Han, Q., Lu, S., Wang, W., Qu, H., Li, J., & Gao, Y. (2024) · Concurrency and Computation: Practice and Experience · doi:10.1002/cpe.8084 · Cited by 29 · see citing works
Robust Financial Fraud Alerting System Based in the Cloud Environment
Stojanović, B., & Božić, J. (2022) · Sensors · doi:10.3390/s22239461 · Cited by 29 · see citing works
Federated Learning via Disentangled Information Bottleneck
Uddin, M. P., Xiang, Y., Lu, X.-Q., Yearwood, J., & Gao, L.-X. (2023) · IEEE Transactions on Services Computing · doi:10.1109/tsc.2022.3187962 · Cited by 14 · see citing works
BADFL: Backdoor Attack Defense in Federated Learning From Local Model Perspective
Zhang, H., Li, X., Xu, M., Liu, X., Wu, T., Weng, J., & Deng, R. H. (2024) · IEEE Transactions on Knowledge and Data Engineering · doi:10.1109/tkde.2024.3420778 · Cited by 13 · see citing works
Wang, X., Kim, B., Amoon, M., Kumar, S., & Liu, Z. (2025) · IEEE Transactions on Consumer Electronics · doi:10.1109/tce.2025.3551511 · Cited by 12 · see citing works
Detection of Model Poisson Attack in Federated Learning System Using AAE in IIoT Systems
Natrayan, L. (2025) · International Conference on Electronic Circuits and Signaling Technologies (ICECST) · doi:10.1109/icecst66106.2025.11307370 · Cited by 11 · see citing works
An Optimal Two-Step Approach for Defense Against Poisoning Attacks in Federated Learning
Ali, Y., Han, K., Majeed, A., Lim, J. S., & Hwang, S. O. (2025) · IEEE Access · doi:10.1109/access.2025.3556906 · Cited by 11 · see citing works
Privacy-Preserving Medical Data-Sharing System with Symmetric Encryption Based on Blockchain
Hu, M., Ren, Y., & Chen, C. (2023) · Symmetry · doi:10.3390/sym15051010 · Cited by 11 · see citing works
Federated learning secure model: A framework for malicious clients detection
Kolasa, D., Pilch, K., & Mazurczyk, W. (2024) · SoftwareX · doi:10.1016/j.softx.2024.101765 · Cited by 10 · see citing works
FL-PTD: A Privacy Preserving Defense Strategy Against Poisoning Attacks in Federated Learning
Xia, G., Chen, J., Huang, X., Yu, C., & Zhang, Z. (2023) · IEEE Annual International Computer Software and Applications Conference (COMPSAC) · doi:10.1109/compsac57700.2023.00101 · Cited by 8 · see citing works
Adaptive Regularization and Resilient Estimation in Federated Learning
Uddin, M. P., Xiang, Y., Zhao, Y., Ali, M., Zhang, Y., & Gao, L. (2023) · IEEE Transactions on Services Computing · doi:10.1109/tsc.2023.3332703 · Cited by 6 · see citing works
Wu, J., Luo, F., Sun, T., Wang, H., & Zhang, W. (2025) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2025.3617070 · Cited by 7 · see citing works
FedDP-SA: Boosting Differentially Private Federated Learning via Local Data Set Splitting
Liu, X., Zhou, Y., Wu, D., Hu, M., Wang, J. H., & Guizani, M. (2024) · IEEE Internet of Things Journal · doi:10.1109/jiot.2024.3421991 · Cited by 5 · see citing works
Abdulqadder, I. H., Aziz, I. T., & Zou, D. (2024) · Computer Networks · doi:10.1016/j.comnet.2024.110841 · Cited by 5 · see citing works
Zeng, H., Zhou, T., Guo, Y., Cai, Z., & Liu, F. (2024) · Journal of Parallel and Distributed Computing · doi:10.1016/j.jpdc.2024.104994 · Cited by 4 · see citing works
Multi-Attribute Auction-Based Grouped Federated Learning
Lu, R., Yang, H., Wang, Y., He, H. X., Li, Q., Zhong, X., & Zhang, W. (2024) · IEEE Transactions on Services Computing · doi:10.1109/tsc.2024.3387734 · Cited by 4 · see citing works
HDFL: Private and Robust Federated Learning using Hyperdimensional Computing
Kasyap, H., Tripathy, S., & Conti, M. (2023) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom60117.2023.00049 · Cited by 4 · see citing works
BaDFL: Mitigating Model Poisoning in Decentralized Federated Learning
Yuan, Y., Zhou, A., Zhang, X., Zou, Y., Shi, Y., & Yu, D. (2025) · IEEE Transactions on Computers · doi:10.1109/tc.2025.3603683 · Cited by 3 · see citing works
Sikandar, H. S., Malik, S. U. R., Anjum, A., Khan, A., & Jeon, G. (2023) · Future Generation Computer Systems · doi:10.1016/j.future.2023.07.037 · Cited by 4 · see citing works
Protection Against Poisoning Attacks on Federated Learning-Based Spectrum Sensing
Wasilewska, M., & Bogucka, H. (2025) · IEEE Journal on Selected Areas in Communications · doi:10.1109/jsac.2025.3560285 · Cited by 3 · see citing works
MPHM: Model poisoning attacks on federal learning using historical information momentum
Shi, L., Chen, Z., Shi, Y., Lin, W., Tao, Y., He, M., Wang, Q., Zhou, Y. H., & Gao, Y. (2023) · Security and Safety · doi:10.1051/sands/2023006 · Cited by 2 · see citing works
Applying Random Forests in Federated Learning: A Synthesis of Aggregation Techniques
Bodynek, M., Leiser, F., Thiebes, S., & Sunyaev, A. (2025) · Lecture notes in information systems and organisation · doi:10.1007/978-3-031-80119-8_25 · Cited by 2 · see citing works
A Review on Privacy Enhanced Distributed ML Against Poisoning Attacks
Archa, A. T., & Kartheeban, K. (2024) · Lecture notes in networks and systems · doi:10.1007/978-981-97-3973-8_11 · Cited by 1 · see citing works
Xia, G., Chen, J., Huang, X., Wu, J., Huang, H., Yu, C., Zhang, Y., & Cai, Z. (2025) · IEEE International Conference on Machine Learning for Communication and Networking (ICMLCN) · doi:10.1109/icmlcn64995.2025.11140049 · Cited by 1 · see citing works
Singh, V. P., Singh, M. P., & Hegde, S. (2025) · Progress in Artificial Intelligence · doi:10.1007/s13748-025-00415-7 · Cited by 1 · see citing works
Han, C., Yang, T., Sun, X., & Ning, J. (2023) · International Conference on Communications · doi:10.1109/icc45041.2023.10279179 · Cited by 1 · see citing works
Falade, A. A., Agarwal, G., Sanghi, A., & Gupta, A. K. (2024) · AIP conference proceedings · doi:10.1063/5.0217169 · Cited by 1 · see citing works
SAMK: Secure Aggregation for Federated Learning Under Multiple Keys With Low Communication Rounds
Guo, C., Li, L., Liu, X., Choo, K. R., & Liu, Y. (2025) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2025.3602908
Toward Secure Federated Partial Label Learning Against Poisoning Attacks
Chen, X., Yang, Z., Sheng, X., Fu, S., & Bao, W. (2025) · ACM International Conference on Information and Knowledge Management (CIKM) · doi:10.1145/3746252.3760849
Sybil-aware adaptive defence framework for robust federated learning
Khedekar, D., Mahapatra, T., & Rajput, A. S. (2025) · Pervasive and Mobile Computing · doi:10.1016/j.pmcj.2025.102157
Indra Yatini, B., Iriyanta, K., Hendra, S.P., B. T. S., Muhrial, H., & Prayitno, E. (2025) · International Seminar on Research of Information Technology and Intelligent Systems (ISRITI) · doi:10.1109/isriti68345.2025.11393406 · Cited by 1 · see citing works
Yu, X., Zhou, Y., Zheng, P., Wang, W., & Liao, S. (2026) · Journal of Imaging Informatics in Medicine · doi:10.1007/s10278-026-01886-3
Cyber-Attack Detection in Federated Learning: A Bidirectionally Secure and Verifiable Architecture
Luo, R., He, J., Fang, W., Wang, J., Zhang, L., Gu, M., & Lan, X. (2026) · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · doi:10.1007/978-3-032-21171-2_20
DFMAD: Data-Free Backdoor Defense for Federated Learning via Multi-Teacher Adversarial Distillation
Zhong, K., Yan, Q., & Lai, W. (2026) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp55912.2026.11462083
Basak, S., & Chatterjee, K. (2026) · Journal of Information Security and Applications · doi:10.1016/j.jisa.2026.104612
- Authors
- Ma, Z., Ma, J., Miao, Y., Liu, X., Choo, K.-K. R., & Deng, R. H.
- Affiliations
- Xidian University (CN)
- Fuzhou University (CN)
- The University of Texas at San Antonio (US)
- Singapore Management University (SG)
- Venue
- IEEE Transactions on Services Computing
- Published
- 2022-11-01
- Volume
- 15
- Issue
- 6
- Pages
- 3429-3442
- ISSN
- 1939-1374 (ISSN-L)
- 2372-0204
- OpenAlex
- W3176224843
- Cited by
- 50
- References
- 40
- Citations by year
- 2026: 4 · 2025: 13 · 2024: 11 · 2023: 15 · 2022: 4 · 2021: 3
- FWCI
- 2.92
- Type
- journal article
- Language
- en
- Open access
- green
- arxiv.org
- Licence
- Locations
- IEEE Transactions on Services Computing (publishedVersion)
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- Funders
- China Scholarship Council
- Cloud Technology Endowed Professorship
- Shaanxi Science & Technology Coordination & Innovation Project (2016TZC-G-6-3)
- National Natural Science Foundation of China (62072361, 62072109, U1804263, 62072352)
- Key R&D Program of Shaanxi Province (2019ZDLGY12-04, 2020ZDLGY09-06)
- Fundamental Research Funds for the Central Universities (JB211505)
- Guangxi Key Laboratory of Cryptography and Information Security (GCIS201917)
- Guangxi Key Laboratory of Trusted Software (KX202028)
- CCF-Tencent Open Fund WeBank Special Funding (CCF-Webank RAGR 20200102)
- CCF-NSFOCUS Kunpeng Research Fund (CCF-NSFOCUS 20200004)
- Hong Kong Scholar Program (XJ2019038)
- Henan Key Laboratory of Network Cryptography Technology (LNCT2020-A06)
- Innovation Fund of Xidian University (YJS2114)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Privacy-Preserving Technologies in Data
- Physical Sciences › Computer Science › Information Systems › Cloud Data Security Solutions
- Physical Sciences › Computer Science › Artificial Intelligence › Cryptography and Data Security
- Keywords
- federated learning, data poisoning, diagnosis, privacy preservation, random forest, data islands, cloud security, formal security analysis
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review