{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,17]],"date-time":"2026-09-17T09:03:18Z","timestamp":1789635798663,"version":"4.0.0"},"publisher-location":"Cham","reference-count":43,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031944574","type":"print"},{"value":"9783031944581","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,8,31]],"date-time":"2025-08-31T00:00:00Z","timestamp":1756598400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,8,31]],"date-time":"2025-08-31T00:00:00Z","timestamp":1756598400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-031-94458-1_12","type":"book-chapter","created":{"date-parts":[[2025,9,1]],"date-time":"2025-09-01T10:49:13Z","timestamp":1756723753000},"page":"249-262","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Poisoning Attack on\u00a0Federated Learning with\u00a0Non-IID Data: A Historical-Global-Model-Based Approach"],"prefix":"10.1007","author":[{"given":"Yaqi","family":"Sun","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xin","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhenyong","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ming","family":"Yang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yunpeng","family":"He","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiaoming","family":"Wu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,8,31]]},"reference":[{"key":"12_CR1","unstructured":"McMahan, B., Moore, E., Ramage, D., et al.: Communication-efficient learning of deep networks from decentralized data. In: Artificial Intelligence and Statistics, pp. 1273\u20131282. PMLR (2017)"},{"key":"12_CR2","doi-asserted-by":"crossref","unstructured":"Chai, D., Wang, L., Yang, L., et al.: A survey for federated learning evaluations: goals and measures. IEEE Trans. Knowl. Data Eng. (2024)","DOI":"10.1109\/TKDE.2024.3382002"},{"key":"12_CR3","doi-asserted-by":"publisher","first-page":"3843","DOI":"10.1109\/TIFS.2021.3096121","volume":"16","author":"X Wang","year":"2021","unstructured":"Wang, X., Ishii, H., He, J., Cheng, P.: Dynamic privacy-aware collaborative schemes for average computation: a multi-time reporting case. IEEE Trans. Inf. Forensics Secur. 16, 3843\u20133858 (2021)","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"12_CR4","doi-asserted-by":"crossref","unstructured":"Guan, H., Yap, P.T., Bozoki, A., et al.: Federated learning for medical image analysis: a survey. Pattern Recogn., 110424 (2024)","DOI":"10.1016\/j.patcog.2024.110424"},{"issue":"5","key":"12_CR5","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3637868","volume":"56","author":"M Gecer","year":"2024","unstructured":"Gecer, M., Garbinato, B.: Federated learning for mobility applications. ACM Comput. Surv. 56(5), 1\u201328 (2024)","journal-title":"ACM Comput. Surv."},{"issue":"1","key":"12_CR6","first-page":"1","volume":"1","author":"BSP Thummisetti","year":"2024","unstructured":"Thummisetti, B.S.P., Atluri, H.: Advancing healthcare informatics for empowering privacy and security through federated learning paradigms. Int. J. Sustain. Dev. Comput. Sci. 1(1), 1\u201316 (2024)","journal-title":"Int. J. Sustain. Dev. Comput. Sci."},{"key":"12_CR7","unstructured":"Kone\u010dn\u00fd, J., McMahan, H.B., Yu, F.X., et al.: Federated learning: strategies for improving communication efficiency. arXiv preprint arXiv:1610.05492 (2016)"},{"key":"12_CR8","doi-asserted-by":"crossref","unstructured":"Kairouz, P., McMahan, H.B., Avent, B., et al.: Advances and open problems in federated learning. Found. Trends Mach. Learn. 14(1\u20132), 1\u2013210 (2021)","DOI":"10.1561\/2200000083"},{"key":"12_CR9","doi-asserted-by":"crossref","unstructured":"Lu, Z., Pan, H., Dai, Y., et al.: Federated learning with non-IID data: a survey. IEEE Internet Things J. (2024)","DOI":"10.1109\/JIOT.2024.3376548"},{"key":"12_CR10","unstructured":"Zhao, Y., Li, M., Lai, L., et al.: Federated learning with non-IID data. arXiv preprint arXiv:1806.00582 (2018)"},{"key":"12_CR11","doi-asserted-by":"publisher","first-page":"10708","DOI":"10.1109\/ACCESS.2023.3238823","volume":"11","author":"G Xia","year":"2023","unstructured":"Xia, G., Chen, J., Yu, C., et al.: Poisoning attacks in federated learning: a survey. IEEE Access 11, 10708\u201310722 (2023)","journal-title":"IEEE Access"},{"key":"12_CR12","series-title":"Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering","doi-asserted-by":"publisher","first-page":"394","DOI":"10.1007\/978-3-030-90022-9_21","volume-title":"Security and Privacy in Communication Networks","author":"Z Cheng","year":"2021","unstructured":"Cheng, Z., Li, Z.: Poisoning attack for inter-agent transfer learning. In: Garcia-Alfaro, J., Li, S., Poovendran, R., Debar, H., Yung, M. (eds.) SecureComm 2021. LNICSSITE, vol. 399, pp. 394\u2013404. Springer, Cham (2021). https:\/\/doi.org\/10.1007\/978-3-030-90022-9_21"},{"issue":"17","key":"12_CR13","doi-asserted-by":"publisher","first-page":"15617","DOI":"10.1109\/JIOT.2023.3264918","volume":"10","author":"X Wang","year":"2023","unstructured":"Wang, X., Fang, C., Yang, M., Wu, X., Zhang, H., Cheng, P.: Resilient distributed classification learning against label flipping attack: an ADMM-based approach. IEEE Internet Things J. 10(17), 15617\u201315631 (2023)","journal-title":"IEEE Internet Things J."},{"key":"12_CR14","doi-asserted-by":"crossref","unstructured":"Xia, Q., Tao, Z., Li, Q.: ToFi: an algorithm to defend against byzantine attacks in federated learning. In: Security and Privacy in Communication Networks: 17th EAI International Conference, SecureComm 2021, Virtual Event, September 6\u20139, 2021, Proceedings, Part I 17. Springer, pp. 229\u2013248 (2021)","DOI":"10.1007\/978-3-030-90019-9_12"},{"key":"12_CR15","unstructured":"Fang, M., Cao, X., Jia, J., et al.: Local model poisoning attacks to Byzantine-Robust federated learning. In: 29th USENIX Security Symposium (USENIX Security 20), pp. 1605\u20131622 (2020)"},{"key":"12_CR16","doi-asserted-by":"crossref","unstructured":"Cao, X., Fang, M., Liu, J., et al.: FLTrust: byzantine-robust federated learning via trust bootstrapping. In: Proceedings of NDSS (2021)","DOI":"10.14722\/ndss.2021.24434"},{"key":"12_CR17","doi-asserted-by":"crossref","unstructured":"Pan, K., He, D., Xu, C.: Local model privacy-preserving study for federated learning. In: Security and Privacy in Communication Networks: 17th EAI International Conference, SecureComm 2021, Virtual Event, September 6\u20139, 2021, Proceedings, Part I 17. Springer, pp. 287\u2013307 (2021)","DOI":"10.1007\/978-3-030-90019-9_15"},{"key":"12_CR18","doi-asserted-by":"crossref","unstructured":"Shejwalkar, V., Houmansadr, A.: Manipulating the byzantine: optimizing model poisoning attacks and defenses for federated learning. In: NDSS (2021)","DOI":"10.14722\/ndss.2021.24498"},{"key":"12_CR19","unstructured":"Yin, D., Chen, Y., Kannan, R., et al.: Byzantine-robust distributed learning: towards optimal statistical rates. In: International Conference on Machine Learning. PMLR, pp. 5650\u20135659 (2018)"},{"key":"12_CR20","doi-asserted-by":"publisher","first-page":"4226","DOI":"10.1109\/TSP.2020.3009007","volume":"68","author":"X Wang","year":"2020","unstructured":"Wang, X., Ishii, H., Du, L., Cheng, P., Chen, J.: Privacy-preserving distributed machine learning via local randomization and ADMM perturbation. IEEE Trans. Sig. Process. 68, 4226\u20134241 (2020)","journal-title":"IEEE Trans. Sig. Process."},{"key":"12_CR21","doi-asserted-by":"crossref","unstructured":"\u00d6zfatura, K., \u00d6zfatura, E., K\u00fcp\u00e7\u00fc, A., et al.: Byzantines can also learn from history: fall of centered clipping in federated learning. IEEE Trans. Inf. Forensics Secur. (2023)","DOI":"10.1109\/TIFS.2023.3345171"},{"issue":"12","key":"12_CR22","doi-asserted-by":"publisher","first-page":"4835","DOI":"10.1109\/TPDS.2022.3205714","volume":"33","author":"C Xu","year":"2022","unstructured":"Xu, C., Jia, Y., Zhu, L., et al.: TDFL: truth discovery based byzantine robust federated learning. IEEE Trans. Parallel Distrib. Syst. 33(12), 4835\u20134848 (2022)","journal-title":"IEEE Trans. Parallel Distrib. Syst."},{"key":"12_CR23","unstructured":"Bagdasaryan, E., Veit, A., Hua, Y., et al.: How to backdoor federated learning. In: International Conference on Artificial Intelligence and Statistics. PMLR, pp. 2938\u20132948 (2020)"},{"key":"12_CR24","doi-asserted-by":"crossref","unstructured":"Xu, J., Cai, Z., Shen, W.: Using FGSM targeted attack to improve the transferability of adversarial example. In: 2019 IEEE 2nd International Conference on Electronics and Communication Engineering (ICECE), pp. 20\u201325 (2019)","DOI":"10.1109\/ICECE48499.2019.9058535"},{"key":"12_CR25","unstructured":"Li, X., Huang, K., Yang, W., et al.: On the convergence of FedAVG on non-IID data. arXiv preprint arXiv:1907.02189 (2019)"},{"key":"12_CR26","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2023.3289546","author":"X Wang","year":"2023","unstructured":"Wang, X., Zhang, H., Yang, M., Wu, X., Cheng, P.: Privacy-preserving collaborative learning: a scheme providing heterogeneous protection. IEEE Internet Things J. (2023). https:\/\/doi.org\/10.1109\/JIOT.2023.3289546","journal-title":"IEEE Internet Things J."},{"key":"12_CR27","doi-asserted-by":"crossref","unstructured":"Dong, Y., Liao, F., Pang, T., et al.: Boosting adversarial attacks with momentum. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 9185\u20139193 (2018)","DOI":"10.1109\/CVPR.2018.00957"},{"key":"12_CR28","doi-asserted-by":"crossref","unstructured":"Drainakis, G., Katsaros, K.V., Pantazopoulos, P., et al.: Federated vs. centralized machine learning under privacy-elastic users: a comparative analysis. In:2020 IEEE 19th International Symposium on Network Computing and Applications (NCA), pp. 1\u20138. IEEE (2020)","DOI":"10.1109\/NCA51143.2020.9306745"},{"issue":"2","key":"12_CR29","first-page":"742","volume":"16","author":"S Peng","year":"2022","unstructured":"Peng, S., Yang, Y., Mao, M., et al.: Centralized machine learning versus federated averaging: a comparison using MNIST dataset. KSII TIIS 16(2), 742\u2013756 (2022)","journal-title":"KSII TIIS"},{"issue":"9","key":"12_CR30","doi-asserted-by":"publisher","first-page":"3400","DOI":"10.1109\/TNNLS.2019.2944481","volume":"31","author":"F Sattler","year":"2019","unstructured":"Sattler, F., Wiedemann, S., M\u00fcller, K.R., et al.: Robust and communication-efficient federated learning from non-IID data. IEEE Trans. Neural Netw. Learn. Syst. 31(9), 3400\u20133413 (2019)","journal-title":"IEEE Trans. Neural Netw. Learn. Syst."},{"key":"12_CR31","doi-asserted-by":"crossref","unstructured":"Li, Q., Diao, Y., Chen, Q., et al.: Federated learning on non-IID data silos: an experimental study. In: 2022 IEEE 38th International Conference on Data Engineering (ICDE), pp. 965\u2013978. IEEE (2022)","DOI":"10.1109\/ICDE53745.2022.00077"},{"key":"12_CR32","doi-asserted-by":"crossref","unstructured":"Cao, D., Chang, S., Lin, Z., et al.: Understanding distributed poisoning attack in federated learning. In: 2019 IEEE 25th International Conference on Parallel and Distributed Systems (ICPADS), pp. 233\u2013239. IEEE (2019)","DOI":"10.1109\/ICPADS47876.2019.00042"},{"key":"12_CR33","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"480","DOI":"10.1007\/978-3-030-58951-6_24","volume-title":"Computer Security \u2013 ESORICS 2020","author":"V Tolpegin","year":"2020","unstructured":"Tolpegin, V., Truex, S., Gursoy, M.E., Liu, L.: Data poisoning attacks against federated learning systems. In: Chen, L., Li, N., Liang, K., Schneider, S. (eds.) ESORICS 2020. LNCS, vol. 12308, pp. 480\u2013501. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-58951-6_24"},{"issue":"13","key":"12_CR34","doi-asserted-by":"publisher","first-page":"11365","DOI":"10.1109\/JIOT.2021.3128646","volume":"9","author":"G Sun","year":"2021","unstructured":"Sun, G., Cong, Y., Dong, J., et al.: Data poisoning attacks on federated machine learning. IEEE Internet Things J. 9(13), 11365\u201311375 (2021)","journal-title":"IEEE Internet Things J."},{"key":"12_CR35","doi-asserted-by":"publisher","first-page":"121192","DOI":"10.1016\/j.eswa.2023.121192","volume":"235","author":"H Kasyap","year":"2024","unstructured":"Kasyap, H., Tripathy, S.: Beyond data poisoning in federated learning. Expert Syst. Appl. 235, 121192 (2024)","journal-title":"Expert Syst. Appl."},{"issue":"3","key":"12_CR36","doi-asserted-by":"publisher","first-page":"73","DOI":"10.3390\/fi13030073","volume":"13","author":"X Zhou","year":"2021","unstructured":"Zhou, X., Xu, M., Wu, Y., et al.: Deep model poisoning attack on federated learning. Future Internet 13(3), 73 (2021)","journal-title":"Future Internet"},{"key":"12_CR37","doi-asserted-by":"publisher","first-page":"158","DOI":"10.1016\/j.ins.2023.02.025","volume":"630","author":"M Yang","year":"2023","unstructured":"Yang, M., Cheng, H., Chen, F., et al.: Model poisoning attack in differential privacy-based federated learning. Inf. Sci. 630, 158\u2013172 (2023)","journal-title":"Inf. Sci."},{"key":"12_CR38","doi-asserted-by":"publisher","first-page":"110178","DOI":"10.1016\/j.knosys.2022.110178","volume":"260","author":"NM Jebreel","year":"2023","unstructured":"Jebreel, N.M., Domingo-Ferrer, J.: Fl-defender: combating targeted attacks in federated learning. Knowl.-Based Syst. 260, 110178 (2023)","journal-title":"Knowl.-Based Syst."},{"key":"12_CR39","doi-asserted-by":"crossref","unstructured":"Yu, Y., Liu, Q., Wu, L., et al.: Untargeted attack against federated recommendation systems via poisonous item embeddings and the defense. In: Proceedings of the AAAI Conference on Artificial Intelligence, vol. 37, no. 4, pp. 4854\u20134863 (2023)","DOI":"10.1609\/aaai.v37i4.25611"},{"key":"12_CR40","doi-asserted-by":"crossref","unstructured":"Cao, X., Gong, N.Z.: Mpaf: model poisoning attacks to federated learning based on fake clients. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 3396\u20133404 (2022)","DOI":"10.1109\/CVPRW56347.2022.00383"},{"key":"12_CR41","doi-asserted-by":"crossref","unstructured":"Geng, J., Mou, Y., Li, Q., et al.: Improved gradient inversion attacks and defenses in federated learning. IEEE Trans. Big Data (2023)","DOI":"10.1109\/TBDATA.2023.3239116"},{"key":"12_CR42","doi-asserted-by":"crossref","unstructured":"Jia, J., Salem, A., Backes, M., et al.: Memguard: defending against black-box membership inference attacks via adversarial examples. In: Proceedings of the ACM SIGSAC Conference on Computer and Communications Security, pp. 259\u2013274 (2019)","DOI":"10.1145\/3319535.3363201"},{"key":"12_CR43","unstructured":"Ghosh, A., Hong, J., Yin, D., et al.: Robust federated learning in a heterogeneous environment. arXiv preprint arXiv:1906.06629 (2019)"}],"container-title":["Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering","Security and Privacy in Communication Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-94458-1_12","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,9,17]],"date-time":"2026-09-17T08:25:05Z","timestamp":1789633505000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-94458-1_12"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,8,31]]},"ISBN":["9783031944574","9783031944581"],"references-count":43,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-94458-1_12","relation":{},"ISSN":["1867-8211","1867-822X"],"issn-type":[{"value":"1867-8211","type":"print"},{"value":"1867-822X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,8,31]]},"assertion":[{"value":"31 August 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"SecureComm","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Security and Privacy in Communication Systems","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Dubai","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"United Arab Emirates","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2024","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"28 October 2024","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30 October 2024","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"20","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"securecomm2024","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/securecomm.eai-conferences.org\/2024\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}