The DOI matches its Crossref record; 31 of the 35 references it cites were found in a registry or an index.
Poisoning Attacks on Federated Learning-based IoT Intrusion Detection System
Open accessAbstract
Federated Learning (FL) is an appealing method for applying machine learning to large scale systems due to the privacy and efficiency advantages that its training mechanism provides.One important field for FL deployment is emerging IoT applications.In particular, FL has been recently used for IoT intrusion detection systems where clients, e.g., a home security gateway, monitors traffic data generated by IoT devices in its network, trains a local intrusion detection model, and send this model to a central entity, the aggregator, who then computes a global model (using the models of all gateways) that is distributed back to clients.This approach protects the privacy of users as it does not require local clients to share their potentially private IoT data with any other parties, and it is in general more efficient than a centralized system.However, FL schemes have been subject to poising attacks, in particular to backdoor attacks.In this paper, we show that FL-based IoT intrusion detection systems are vulnerable to backdoor attacks.We present a novel data poisoning attack that allows an adversary to implant a backdoor into the aggregated detection model to incorrectly classify malicious traffic as benign.We show that the adversary can gradually poison the detection model by only using compromised IoT devices (and not gateways/clients) to inject small amounts of malicious data into the training process and remain undetected.Our extensive evaluation on three real-world IoT datasets generated from 46 IoT devices shows the effectiveness of our attack in injecting backdoors and circumventing state of the art defenses against FL poisoning.Finally, we discuss shortly possible mitigation approaches.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“Thus, the defense algorithm proposed in [191] can be applied to multiple scenarios.”
From Data and model poisoning backdoor attacks on wireless federated learning, and the defense mechanisms: A comprehensive survey (2024) · cites this paper as [191]
In the citing paper
“Furthermore, a turning point exists after which the Clean ACC remains high and the Backdoor ACC reduces rapidly.”
From Data and model poisoning backdoor attacks on wireless federated learning, and the defense mechanisms: A comprehensive survey (2024) · cites this paper as [191]
In the citing paper
“The backdoor attack success rate under the defense mechanism reduces to zero, while the stability-based defense can ensure a high success rate for the main task.”
From Data and model poisoning backdoor attacks on wireless federated learning, and the defense mechanisms: A comprehensive survey (2024) · cites this paper as [191]
In the citing paper
“This work discusses that the turning points between Clean ACC and Backdoor ACC are similar among different types of backdoor attacks.”
From Data and model poisoning backdoor attacks on wireless federated learning, and the defense mechanisms: A comprehensive survey (2024) · cites this paper as [191]
In the citing paper
“It has been discovered that the probability that the trained model correctly classifies the normal inputs (Clean ACC) is proportional to the probability that the trained model misclassifies the backdoored inputs (Backdoor ACC).”
From Data and model poisoning backdoor attacks on wireless federated learning, and the defense mechanisms: A comprehensive survey (2024) · cites this paper as [191]
In the citing paper
“In the experimental setup, the number of participants is set to 10, and the training data are IID.”
From Data and model poisoning backdoor attacks on wireless federated learning, and the defense mechanisms: A comprehensive survey (2024) · cites this paper as [191]
In the citing paper
“Although Thien et al. [80] propose that it can mix a small number of malicious updates with numerous benign updates to avoid server detection, the server can still identify the attack by comparing historical updates from the client.”
From Poisoning attacks in federated learning: A survey (2023) · cites this paper as [80]
In the citing paper
“First, the attacker can learn the characteristics of benign clients, such as controlling the Euclidean distance between the malicious and benign models [28] or controlling the poisoning data rate (PDR) [80] to reduce the risk of detection by the server.”
From Poisoning attacks in federated learning: A survey (2023) · cites this paper as [80]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Communication-Efficient Learning of Deep Networks from Decentralized Data
McMahan, H. B., Moore, E., Ramage, D., Hampson, S., & Arcas, B. A. Y. (2016) · arXiv · doi:10.48550/arxiv.1602.05629 · Cited by 14,215
Empirical Evaluation of Gated Recurrent Neural Networks on Sequence Modeling
Chung, J., Gulcehre, C., Cho, K., & Bengio, Y. (2014) · arXiv · doi:10.48550/arxiv.1412.3555 · Cited by 11,008
How to backdoor federated learning
Bagdasaryan, E., Veit, A., Hua, Y., Estrin, D., & Shmatikov, V. (2018) · arXiv · doi:10.48550/arxiv.1807.00459 · Cited by 1,495
(2017) · neural information processing systems · Cited by 1,413
Understanding the mirai botnet
Antonakakis, M., April, T., Bailey, M., Bernhard, M., Bursztein, E., Cochran, J., Durumeric, Z., Halderman, J. A., Invernizzi, L., Kallitsis, M., et al. (2017) · USENIX Security Symposium · Cited by 1,362
Machine Learning DDoS Detection for Consumer Internet of Things Devices
Doshi, R., Apthorpe, N., & Feamster, N. (2018) · IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw.2018.00013 · Cited by 920
Classifying IoT Devices in Smart Environments Using Network Traffic Characteristics
Sivanathan, A., Gharakheili, H. H., Loi, F., Radford, A., Wijenayake, C. A., Vishwanath, A., & Sivaraman, V. (2018) · IEEE Transactions on Mobile Computing · doi:10.1109/tmc.2018.2866249 · Cited by 812
Natarajan, N., Dhillon, I. S., Ravikumar, P., & Tewari, A. (2013) · Cited by 740
DÏoT: A Federated Self-learning Anomaly Detection System for IoT
Nguyen, T. D., Marchal, S., Miettinen, M., Fereidooni, H., Asokan, N., & Sadeghi, A.-R. (2019) · 2019 IEEE 39th International Conference on Distributed Computing Systems (ICDCS) · doi:10.1109/icdcs.2019.00080 · Cited by 663
Self-citationFederated Learning: Collaborative Machine Learning without Centralized Training Data
Abhishek, V. A., Binny, S., Johan, T. R., Raj, N., & Thomas, V. (2022) · International Journal of Engineering Technology and Management Sciences · doi:10.46647/ijetms.2022.v06i05.052 · Cited by 489
Flagged first, then by citations
4 of the 35 references couldn’t be matched to a known paper.
Research works printed but not linked: 1
- S. Shen, S. Tople, and P. Saxena, "Auror: Defending against poisoning attacks in collaborative deep learning systems," in Proceedings of the 32Nd Annual Conference on Computer Security Applications, ser. ACSAC '16. ACM, 2016, pp. 508-519.
Cited by
Sorted by citations
Items 101–200 of 200
Advances in Adversarial Attacks and Defenses in Intrusion Detection System: A Survey
Mbow, M., Sakurai, K., & Koide, H. (2022) · Communications in computer and information science · doi:10.1007/978-981-19-7769-5_15 · Cited by 11
FLARE: Defending Federated Learning Against Model Poisoning Attacks via Latent Space Representations
Wang, N., Zhang, C., Xiao, Y., Chen, Y., Lou, W., & Hou, Y. T. (2024) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2024.3521297 · Cited by 12
Infighting in the Dark: Multi-Label Backdoor Attack in Federated Learning
Li, Y., Zhao, Y., Zhu, C., & Zhang, J. (2025) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52734.2025.02400 · Cited by 10
FLEDGE: Ledger-based Federated Learning Resilient to Inference and Backdoor Attacks
Castillo, J., Rieger, P., Fereidooni, H., Chen, Q., & Sadeghi, A. R. (2023) · Annual Computer Security Applications Conference · doi:10.1145/3627106.3627194 · Cited by 10
Self-citationProtecting IoT Devices from BotNet Threats: A Federated Machine Learning Solution
Metwaly, A. A., & Elhenawy, I. (2023) · Sustainable Machine Intelligence Journal · doi:10.61185/smij.2023.22105 · Cited by 11
Cybersecurity Challenges and Solutions in IoT-based Precision Farming Systems
Balaji, S. R. A., Rao, S. P., & Ranganathan, P. (2023) · IEEE Annual Ubiquitous Computing, Electronics & Mobile Communication Conference (UEMCON) · doi:10.1109/uemcon59035.2023.10316154 · Cited by 9
Defending Data Poisoning Attack via Trusted Platform Module and Blockchain Oracle
Huang, M., Cao, S., Li, X., Huang, K., & Zhang, X. (2022) · International Conference on Communications · doi:10.1109/icc45855.2022.9838252 · Cited by 10
Exploring Adversarial Graph Autoencoders to Manipulate Federated Learning in The Internet of Things
Li, K., Yuan, X., Zheng, J., Ni, W., & Guizani, M. (2023) · 2023 International Wireless Communications and Mobile Computing (IWCMC) · doi:10.1109/iwcmc58020.2023.10183217 · Cited by 8
Robust Knowledge Distillation in Federated Learning: Counteracting Backdoor Attacks
Alharbi, E., Marcolino, L. S., Ni, Q., & Gouglidis, A. (2025) · IEEE Conference on Secure and Trustworthy Machine Learning (SaTML) · doi:10.1109/satml64287.2025.00018 · Cited by 8
Wang, Y., Zheng, W., Liu, Z., Wang, J., Shi, H., Gu, M., & Di, Y. (2023) · Electronics · doi:10.3390/electronics12194049 · Cited by 8
FLAIRS: FPGA-Accelerated Inference-Resistant & Secure Federated Learning
Li, H., Rieger, P., Zeitouni, S., Picek, S., & Sadeghi, A. (2023) · International Conference on Field Programmable Logic and Applications (FPL) · doi:10.1109/fpl60245.2023.00046 · Cited by 8
Self-citationZhou, Z., Tian, Y., Peng, C., Yang, N., & Long, S. (2022) · Concurrency and Computation Practice and Experience · doi:10.1002/cpe.7193 · Cited by 8
Federated Learning: Data Privacy and Cyber Security in Edge-Based Machine Learning
White, J., & Legg, P. (2023) · Springer eBooks · doi:10.1007/978-3-031-34006-2_6 · Cited by 8
KVSAgg: Secure Aggregation of Distributed Key-Value Sets
Wu, Y., Dong, S., Zhou, Y., Zhao, Y., Fu, F., Yang, T., Niu, C., Wu, F., & Cui, B. (2023) · IEEE International Conference on Data Engineering (ICDE) · doi:10.1109/icde55515.2023.00139 · Cited by 8
On the feasibility of adversarial machine learning in malware and network intrusion detection
Venturi, A., & Zanasi, C. (2021) · IEEE International Symposium on Network Computing and Applications (NCA) · doi:10.1109/nca53618.2021.9685709 · Cited by 8
Adversarial Robustness of AI-Driven Claims Management Systems
Madugula, S. R. P., & Malali, N. (2025) · International Journal of Advanced Research in Science, Communication and Technology · doi:10.48175/ijarsct-24430 · Cited by 4
Alanazi, A., Althbiti, A., Ghorashi, S. A., Birkea, F. M. O., Soto-Díaz, R., & Escorcia‐Gutierrez, J. (2025) · Scientific Reports · doi:10.1038/s41598-025-15052-2 · Cited by 7
Intrusion Detection and Prevention Model for Blockchain Based IoMT Applications
Almalki, J. (2024) · Computer Systems Science and Engineering · doi:10.32604/csse.2023.038085 · Cited by 7
Ashwini, P., & Rout, R. R. (2025) · Computer Networks · doi:10.1016/j.comnet.2025.111656 · Cited by 6
Rezaie, H., Taheri, R., Nowroozi, E., Hajizadeh, M., Shiaeles, S. N., & Bauschert, T. (2025) · IEEE Open Journal of the Communications Society · doi:10.1109/ojcoms.2025.3644477 · Cited by 11
Ahmed, K. M., Das, B. C., Saadati, Y., & Amini, M. H. (2024) · Big and integrated artificial intelligence · doi:10.1007/978-3-031-57567-9_4 · Cited by 6
Efficient and Privacy-Preserving Integrity Verification for Federated Learning with TEEs
Li, J., Chen, N., Yu, S., & Srivatanakul, T. (2024) · IEEE Military Communications Conference (MILCOM) · doi:10.1109/milcom61039.2024.10773815 · Cited by 6
Fedward: Flexible Federated Backdoor Defense Framework with Non-IID Data
Chen, Z., Wang, F., Zheng, Z., Liu, X., & Lin, Y. (2023) · IEEE International Conference on Multimedia and Expo (ICME) · doi:10.1109/icme55011.2023.00067 · Cited by 6
Robust and privacy-preserving collaborative training: a comprehensive survey
Yang, F., Zhang, X., Guo, S., Chen, D., Gan, Y., Xiang, T., & Liu, Y. (2024) · Artificial Intelligence Review · doi:10.1007/s10462-024-10797-0 · Cited by 17
Sharma, H., & Yadav, G. S. (2025) · International Journal of Machine Learning and Cybernetics · doi:10.1007/s13042-025-02599-9 · Cited by 5
Sarkar, A. (2025) · Applied Soft Computing · doi:10.1016/j.asoc.2025.113040 · Cited by 5
Linkage on security, privacy and fairness in federated learning: New balances and new perspectives
Wang, L., Zhu, T., Zhou, W., & Yu, P. S. (2025) · Neural Networks · doi:10.1016/j.neunet.2025.107874 · Cited by 11
Triggerability of Backdoor Attacks in Multi-Source Transfer Learning-based Intrusion Detection
Alhussien, N., AlEroud, A. F., Rahaeimehr, R., & Schwarzmann, A. A. (2022) · IEEE/ACM International Conference on Big Data Computing, Applications and Technologies (BDCAT) · doi:10.1109/bdcat56447.2022.00013 · Cited by 5
Mitigating Poisoning Attacks in Federated Learning
Ganjoo, R., Ganjoo, M., & Patil, M. (2022) · Lecture notes on data engineering and communications technologies · doi:10.1007/978-981-16-7167-8_50 · Cited by 5
Client Adaptation improves Federated Learning with Simulated Non-IID ClientsPreprint
Rieger, L., Høegh, R. M. T., & Hansen, L. K. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2007.04806 · Cited by 7
Federated Learning for Intelligent IoT Systems: Background, Frameworks, and Optimization Techniques
Ray, P. P. (2024) · Wiley eBooks · doi:10.1002/9781394219230.ch13 · Cited by 5
Praharaj, L., Gupta, M., & Gupta, D. (2025) · International Conference on Fog and Mobile Edge Computing (FMEC) · doi:10.1109/fmec65595.2025.11119362 · Cited by 4
SurroFL: Sketch-Based Defense Against Poisoning in Privacy-Preserving Federated Learning
Kuang, Y., Liu, W., Han, L., Huang, J., Cao, P., & You, L. (2025) · IEEE Internet of Things Journal · doi:10.1109/jiot.2025.3602453 · Cited by 4
Lohani, C., & Sangal, A. L. (2025) · Sadhana · doi:10.1007/s12046-025-02958-w · Cited by 4
MiraiBotGuard: Federated Learning for Intelligent Defense Against Mirai Threats
Dahiya, P., & Bhattacharya, S. (2024) · International Conference on Device Intelligence, Computing and Communication Technologies (DICCT) · doi:10.1109/dicct61038.2024.10533028 · Cited by 5
Sun, Y., Ochiai, H., & Sakuma, J. (2024) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn60899.2024.10651460 · Cited by 4
Nguyen, L. H., Tran, K. D., Zeng, X., & Tran, K. P. (2024) · Springer series in reliability engineering · doi:10.1007/978-3-031-71495-5_5 · Cited by 4
Liu, S., Zhao, Z., He, W., Wang, J., Peng, J., & Ma, H. (2024) · International Conference on Big Data, Artificial Intelligence and Internet of Things Engineering (ICBAIE) · doi:10.1109/icbaie63306.2024.11117041 · Cited by 4
Komalasari, R. (2024) · Advances in healthcare information systems and administration book series · doi:10.4018/979-8-3693-1874-4.ch018 · Cited by 4
Backdoor Attack to Giant Model in Fragment-Sharing Federated Learning
Qi, S., Ma, H., Zou, Y., Yuan, Y., Xie, Z., Li, P., & Cheng, X. (2024) · Big Data Mining and Analytics · doi:10.26599/bdma.2024.9020035 · Cited by 3
Ariffin, A., Zaki, F., Hanif, H., & Anuar, N. B. (2025) · Computer Networks · doi:10.1016/j.comnet.2025.111739 · Cited by 3
Ariffin, A., Zaki, F., Hanif, H., & Anuar, N. B. (2025) · PeerJ Computer Science · doi:10.7717/peerj-cs.3215 · Cited by 3
Alruwaili, E., & Moulahi, T. (2026) · Frontiers in Public Health · doi:10.3389/fpubh.2026.1762346 · Cited by 3
A Defence Against Input-Agnostic Backdoor Attacks on Deep Neural Networks
Gao, Y., & Nepal, . (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-65610-2_4 · Cited by 3
An Investigation of Recent Backdoor Attacks and Defenses in Federated Learning
Chen, Q., & Tao, Y. (2023) · International Conference on Fog and Mobile Edge Computing (FMEC) · doi:10.1109/fmec59375.2023.10306127 · Cited by 3
Byzantine Robust Federated Learning Scheme Based on Backdoor Triggers
Yang, Z., Gu, K., & Zuo, Y. (2024) · Computers, materials & continua/Computers, materials & continua (Print) · doi:10.32604/cmc.2024.050025 · Cited by 3
Adversarial Attacks on Network Intrusion Detection Systems Based on Federated Learning
Yang, Z., Qu, H., Hua, Y., Zhang, X., & Lin, X.-J. (2024) · Lecture notes in computer science · doi:10.1007/978-981-97-5606-3_13 · Cited by 3
Mitigating cross-client GANs-based attack in federated learning
Huang, H. B., Lei, X., & Xiang, T. (2023) · Multimedia Tools and Applications · doi:10.1007/s11042-023-15879-9 · Cited by 4
Sun, Y., Ochiai, H., & Esaki, H. (2021) · arXiv (Cornell University) · Cited by 3
"Making AI Work for Cyber Defense: The Accuracy-Robustness Tradeoff "
Hoffman, W. (2021) · doi:10.51593/2021ca007 · Cited by 4
Adversarial Attacks on Anomaly Detection
Bhagoji, A. N., & Shirani, P. (2022) · Springer eBooks · doi:10.1007/978-1-4899-7502-7_998-1 · Cited by 3
Reinforcement Learning for Zero-Day Vulnerability Detection in IoT Devices: A Proactive ApproachPreprint
Reddy, B. P., Shaik, S. A., Gopal, G. V., Ramakrishna, K. V. S. S., & Kumar, M. J. (2024) · Research Square · doi:10.21203/rs.3.rs-4086508/v1 · Cited by 3
Penetrating the Power Grid: Realistic Adversarial Attacks on Smart Grid Intrusion Detection Systems
Mutua, N. M., Nadjm‐Tehrani, S., & Matoušek, P. (2025) · Lecture notes in computer science · doi:10.1007/978-3-031-84260-3_15 · Cited by 2
A Systematic Review of Concept Drift Approaches for Anomaly Detection in IoT Networks
Abdulrahaman, M. D., Balogun, N. A., & Oloyede, M. O. (2025) · SN Computer Science · doi:10.1007/s42979-025-04624-8 · Cited by 2
Model Backdoor Attack on Federated Learning Based on Parameter Analysis
Wang, B., Yan, Y., Zhang, M., Wang, W., & Yao, H. (2026) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2026.3664908 · Cited by 2
MPHM: Model poisoning attacks on federal learning using historical information momentum
Shi, L., Chen, Z., Shi, Y., Lin, W., Tao, Y., He, M., Wang, Q., Zhou, Y. H., & Gao, Y. (2023) · Security and Safety · doi:10.1051/sands/2023006 · Cited by 2
Fed-NAD: Backdoor Resilient Federated Learning via Neural Attention Distillation
Ma, H., Qi, S., Yao, J., Yuan, Y., Zou, Y., & Yu, D. (2024) · IEEE International Conference on Big Data Security on Cloud, IEEE International Conference on High Performance and Smart Computing, and IEEE International Conference on Intelligent Data and Security (BigDataSecurity/HPSC/IDS) · doi:10.1109/ids62739.2024.00009 · Cited by 2
White, J., & Legg, P. (2024) · Lecture notes in networks and systems · doi:10.1007/978-981-97-3973-8_2 · Cited by 2
FedXAI for Detecting DDoS on IoT Edge Networks in Federated Learning
Asiri, A., Wang, W., Wu, F. H., Vo, H. K., & Yu, S. (2024) · International Telecommunication Networks and Applications Conference (ITNAC) · doi:10.1109/itnac62915.2024.10815590 · Cited by 2
Advances in ML-Based Anomaly Detection for the IoT
Lübben, C., & Pahl, M. (2021) · Cyber Security in Networking Conference (CSNet) · doi:10.1109/csnet52717.2021.9614280 · Cited by 2
MPC-enabled privacy-preserving machine learning
Liu, Z. (2023) · doi:10.32657/10356/167272 · Cited by 2
Aasoum, N., Jellouli, I., Amjad, S., & Mohammed, Y. M. A. (2024) · International Conference on Innovative Research in Applied Science, Engineering and Technology (IRASET) · doi:10.1109/iraset60544.2024.10549292 · Cited by 1
Boumediri, T., Debicha, I., & Kenaza, T. (2024) · Lecture notes in networks and systems · doi:10.1007/978-3-031-71848-9_25 · Cited by 1
D2FL: Dimensional Disaster-oriented Backdoor Attack Defense Of Federated Learning
Li, Y., Zhang, J., Zhou, Z., Sun, Z., Ji, X., Li, Z., Han, J., & Zhao, Z. (2024) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom63139.2024.00246 · Cited by 1
Seeing Through the Threat: Adaptive Attention-Guided Backdoor Defense in Non-IID Federated Learning
You, X.-C., & Karati, A. (2025) · IEEE Conference on Communications and Network Security · doi:10.1109/cns66487.2025.11194979 · Cited by 1
Lone, A. H., Elemam, M., Muqaibel, A. H., & da Costa, D. B. (2025) · IEEE International Symposium on Personal, Indoor and Mobile Radio Communications (PIMRC) · doi:10.1109/pimrc62392.2025.11274954 · Cited by 2
Toward Efficient Distributed Network Security: A Lightweight Multitask Traffic Analysis Framework
Fu, J.-D., Fang, J., Sun, J.-Y., Zhuang, S., Liu, Y.-L., & Lv, Z.-Q. (2026) · IEEE Transactions on Networking · doi:10.1109/ton.2025.3643832 · Cited by 1
Intrusion Detection Systems for IoT Using Federated Learning
Alkabkabi, A., Cherif, A., & Alshehri, S. (2025) · IEEE/ACS International Conference on Computer Systems and Applications (AICCSA) · doi:10.1109/aiccsa66935.2025.11315304 · Cited by 1
A Clustering-Based Scoring Mechanism for Malicious Model Detection in Federated Learning
Caglayan, C., & Yurdakul, A. (2022) · Euromicro Conference on Digital System Design (DSD) · doi:10.1109/dsd57027.2022.00038 · Cited by 1
Towards Defending Adaptive Backdoor Attacks in Federated Learning
Yang, H., Gu, D., & He, J. (2023) · International Conference on Communications · doi:10.1109/icc45041.2023.10279267 · Cited by 1
Successive Interference Cancellation Based Defense for Trigger Backdoor in Federated Learning
Chen, Y., Ke, B.-H., Chen, B.-Z., Chiu, S.-R., Tu, C.-W., & Kuo, J.-J. (2023) · International Conference on Communications · doi:10.1109/icc45041.2023.10278979 · Cited by 1
Defending against Adversarial Attacks in Federated Learning on Metric Learning Model
Gu, Z., Shi, J., Yang, Y., & He, L. (2023) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom60117.2023.00047 · Cited by 1
Sharma, A., & Babbar, H. (2024) · Asian Conference on Intelligent Technologies (ACOIT) · doi:10.1109/acoit62457.2024.10939158 · Cited by 1
Hasegawa, T., & Kobayashi, R. (2023) · International Symposium on Computing and Networking · doi:10.1109/candar60563.2023.00024 · Cited by 1
Advanced Attacks and Protection Mechanisms in IoT Devices and Networks
Batina, L., Mentens, N., Miettinen, M., Mukhtar, N., Nguyen, T. D., Rabbani, M. M., Rieger, P., & Sadeghi, A. (2021) · Wiley eBooks · doi:10.1002/9781119607755.ch1
Self-citationKo, S., Lee, K., Cho, H., Hwang, Y., & Jang, H. (2022) · SSRN Electronic Journal · doi:10.2139/ssrn.4179215
Detecting Intruders in Network using Machine Learning
Sujith kumar, S., Shamsudeen, E., R.Sharath, & K.Vasanth (2023) · International Journal For Multidisciplinary Research · doi:10.36948/ijfmr.2023.v05i02.2637
Facemask Detection Using Bounding Box Algortihm Under COVID-19 Circumstances
Hanumanthu, M., Karimullah, S., Sravani, M., Shaik, F., Shashank, P., Sravani, Y., & VamsiKrishna, K. (2024) · Studies in computational intelligence · doi:10.1007/978-3-031-43009-1_9
Obarafor, V., Qi, M., & Zhang, L. (2024) · International Conference on Cyber Resilience (ICCR) · doi:10.1109/iccr61006.2024.10532886
LayerDBA: Circumventing Similarity-Based Defenses in Federated Learning
Nikolov, J., Pegoraro, A., Rieger, P., & Sadeghi, A. (2024) · IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw63631.2024.10795458
Self-citationInnovative Approaches to Poisoning Attack Detection with Boosting Algorithms
Sharma, A., & Babbar, H. (2024) · Global Conference on Communications and Information Technologies (GCCIT) · doi:10.1109/gccit63234.2024.10862074
SBA: A Swift and Stealthy Backdoor Attack Framework for Federated Learning
Wang, J., Wu, Z., Wang, Z., & Lu, D. (2025) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp49660.2025.10889426
Federated Learning For Intrusion Detection System: A Systematic Review
Alsad, O., Al-Haija, Q. S. A., & Alnabhan, M. M. (2025) · Lecture notes in networks and systems · doi:10.1007/978-981-96-1758-6_33
Advancing Intrusion Detection with Deep Learning: Techniques, Limitations, and Future Trends
James, A. M., Sebastian, K., & Jayadurga, R. (2025) · Lecture notes in networks and systems · doi:10.1007/978-981-96-7289-9_6
Defending Against Backdoor Attacks in Federated Learning: A Triple-Phase Client-Side Approach
Chen, Y., & Li, B. (2026) · Electronics · doi:10.3390/electronics15020273
JADE-FL: Joint Adaptive Defense and Encryption for Federated Learning
Dembani, R., Akbar, N. A., Karvelas, I., Rizou, S., & Tegolo, D. (2025) · International Conference on Foundation and Large Language Models (FLLM) · doi:10.1109/fllm67465.2025.11390917
NeuroScope: Trigger-Induced Activation Analysis for Backdoor Detection in Federated Learning
Yang, K., Xu, C., Xu, L., Zhang, P., & Zhang, R. (2025) · IEEE International Conference on Big Data (BigData) · doi:10.1109/bigdata66926.2025.11402518
Poisoning Attacks in Heterogeneous Federated Learning Networks
Sameera, K. M., Mukati, K., Kavya, M. L., Preethi, S. L., Rughani, P. H., Radhamani, G., Rehiman, K. A. R., & Vinod, P. (2026) · International Conference on Advances in Intelligent Computing and Applications (AICAPS) · doi:10.1109/aicaps68631.2026.11453269
RBA: Towards Robust and Stealthy Backdoor Attack in Federated Learning
Xiang, J., Liu, Y., & Zhang, R. (2026) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp55912.2026.11463145
Sibai: A Few-Shot Meta-Classifier for Poisoning Detection in Federated Learning
Götz, M., Kraub, T., & Dmitrienko, A. (2025) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv51701.2025.00361
Li, K., Yuan, X., & Ni, W. (2026) · Springer series in reliability engineering · doi:10.1007/978-3-032-23959-4_6
SimGuard: Towards Resilience of Community-based Intrusion Detection
Eichhammer, P., & Reiser, H. P. (2026) · ACM Symposium on Applied Computing · doi:10.1145/3748522.3779878
Mitigating Model Replacement Attacks in Federated Learning-based Intrusion Detection Systems
Bouzinis, P. S., Grammatikis, P. I. R., Mitsiou, N. A., Oikonomou, T. K., Koutsioumpa, V. I., Papadopoulos, G. T., Kotsirou, V., Karagiannidis, G. K., & Sarigiannidis, P. G. (2025) · IEEE Globecom Workshops (GC Wkshps) · doi:10.1109/gcwkshps68340.2025.11591058
Almarwani, R., & Almarwani, M. (2026) · Journal of King Saud University - Computer and Information Sciences · doi:10.1007/s44443-026-01023-8
Chen, X., Zeng, R., Zhou, C., Zhang, Y., Li, Q., Pu, Y., Liu, Z., Yin, J., & Ji, S. (2026) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2026.3716241
Kanawade, S., & Patil, S. V. (2026) · Lecture notes in networks and systems · doi:10.1007/978-3-032-28293-4_13
Xu, J., & Jia, X. (2026) · Wireless networks · doi:10.1007/978-3-032-30978-5_1
Ramadan, M. N. A., & Saygın, H. (2026) · AI · doi:10.3390/ai7090358
Anas, H., Toumi, H., & Talea, M. (2026) · Sakarya University Journal of Computer and Information Sciences · doi:10.35377/saucis...1826274
Metadata
- Authors
- Nguyen, T. D., Rieger, P., Miettinen, M., & Sadeghi, A.-R.
- Affiliations
- Technische Universität Darmstadt (DE)
- Venue
- Proceedings 2020 Workshop on Decentralized IoT Systems and Security
- Publisher
- Internet Society
- Published
- 2020
- OpenAlex
- W3030742901
- Cited by
- 200
- References
- 35
- Citations by year
- 2026: 13 · 2025: 35 · 2024: 54 · 2023: 38 · 2022: 36 · 2021: 19 · 2020: 5
- FWCI
- 9.36
- Type
- conference paper
- Language
- en
- Open access
- bronze
- doi.org
- Locations
- Workshop on Decentralized IoT Systems and Security (DISS) (publishedVersion)
- TUbilio (Technical University of Darmstadt) (submittedVersion)
- Funders
- Deutsche Forschungsgemeinschaft (SFB 1119, 236615297)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Privacy-Preserving Technologies in Data
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Keywords
- federated learning, data poisoning, backdoor attacks, IoT intrusion detection, privacy-preserving machine learning, malicious traffic classification, attack mitigation
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
