{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,20]],"date-time":"2026-07-20T08:02:07Z","timestamp":1784534527989,"version":"3.55.0"},"publisher-location":"Cham","reference-count":25,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032332592","type":"print"},{"value":"9783032332608","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-33260-8_7","type":"book-chapter","created":{"date-parts":[[2026,7,20]],"date-time":"2026-07-20T07:06:47Z","timestamp":1784531207000},"page":"124-141","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Data Poisoning in\u00a0Longitudinal Local Differential Privacy: Attacks and\u00a0Analysis"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0009-0009-0735-4964","authenticated-orcid":false,"given":"Ant\u00f4nio A.","family":"Marreiras Neto","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8059-7094","authenticated-orcid":false,"given":"H\u00e9ber H.","family":"Arcolezi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8430-9421","authenticated-orcid":false,"given":"Javam C.","family":"Machado","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,7,21]]},"reference":[{"key":"7_CR1","unstructured":"San Francisco fire department calls for service (2019). https:\/\/data.sfgov.org\/Public-Safety\/Fire-Department-and-Emergency-Medical-Services-Dis\/nuek-vuh3"},{"key":"7_CR2","unstructured":"Arcolezi, H.H., Couchot, J.F., Al\u00a0Bouna, B., Xiao, X.: Improving the utility of locally differentially private protocols for longitudinal and multidimensional frequency estimates. Digit. Commun. Netw. (2022)"},{"key":"7_CR3","doi-asserted-by":"publisher","unstructured":"Arcolezi, H.H., Gambs, S., Couchot, J.F., Palamidessi, C.: On the risks of collecting multidimensional data under local differential privacy. Proc. VLDB Endow. 16(5), 1126\u20131139 (2023). https:\/\/doi.org\/10.14778\/3579075.3579086","DOI":"10.14778\/3579075.3579086"},{"key":"7_CR4","unstructured":"Arcolezi, H.H., Pinz\u00f3n, C., Palamidessi, C., Gambs, S.: Frequency estimation of evolving data under local differential privacy. arXiv preprint arXiv:2210.00262 (2022)"},{"key":"7_CR5","doi-asserted-by":"crossref","unstructured":"Bassily, R., Smith, A.: Local, private, efficient protocols for succinct histograms. In: Proceedings of the Forty-Seventh Annual ACM Symposium on Theory of Computing, pp. 127\u2013135 (2015)","DOI":"10.1145\/2746539.2746632"},{"key":"7_CR6","unstructured":"Cao, X., Jia, J., Gong, N.Z.: Data poisoning attacks to local differential privacy protocols. In: 30th USENIX Security Symposium (USENIX Security 2021), pp. 947\u2013964 (2021)"},{"key":"7_CR7","unstructured":"Ding, B., et al.: Collecting telemetry data privately. In: Garnett, R. (ed.) Advances in Neural Information Processing Systems, vol. 30, pp. 3571\u20133580. Curran Associates, Inc. (2017)"},{"key":"7_CR8","doi-asserted-by":"crossref","unstructured":"Duchi, J.C., Jordan, M.I., Wainwright, M.J.: Local privacy and statistical minimax rates. In: IEEE 54th Annual Symposium on Foundations of Computer Science, pp. 429\u2013438. IEEE (2013)","DOI":"10.1109\/FOCS.2013.53"},{"key":"7_CR9","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"265","DOI":"10.1007\/11681878_14","volume-title":"Theory of Cryptography","author":"C Dwork","year":"2006","unstructured":"Dwork, C., McSherry, F., Nissim, K., Smith, A.: Calibrating noise to sensitivity in private data analysis. In: Halevi, S., Rabin, T. (eds.) TCC 2006. LNCS, vol. 3876, pp. 265\u2013284. Springer, Heidelberg (2006). https:\/\/doi.org\/10.1007\/11681878_14"},{"key":"7_CR10","doi-asserted-by":"crossref","unstructured":"Dwork, C., Roth, A., et\u00a0al.: The algorithmic foundations of differential privacy. Found. Trends\u00ae Theor. Comput. Sci. 9(3\u20134), 211\u2013407 (2014)","DOI":"10.1561\/0400000042"},{"key":"7_CR11","doi-asserted-by":"publisher","first-page":"1785","DOI":"10.1109\/TIFS.2022.3170242","volume":"17","author":"M Emre Gursoy","year":"2022","unstructured":"Emre Gursoy, M., Liu, L., Chow, K.H., Truex, S., Wei, W.: An adversarial approach to protocol analysis and selection in local differential privacy. IEEE Trans. Inf. Forensics Secur. 17, 1785\u20131799 (2022). https:\/\/doi.org\/10.1109\/TIFS.2022.3170242","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"7_CR12","doi-asserted-by":"crossref","unstructured":"Erlingsson, \u00da., Pihur, V., Korolova, A.: Rappor: randomized aggregatable privacy-preserving ordinal response. In: Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security, pp. 1054\u20131067 (2014)","DOI":"10.1145\/2660267.2660348"},{"key":"7_CR13","doi-asserted-by":"crossref","unstructured":"He, X., Huang, K., Ye, Q., Hu, H.: Data poisoning attacks to local differential privacy protocols for graphs. In: 2025 IEEE 41st International Conference on Data Engineering (ICDE), pp. 987\u20131000. IEEE (2025)","DOI":"10.1109\/ICDE65448.2025.00079"},{"key":"7_CR14","unstructured":"Kairouz, P., Bonawitz, K., Ramage, D.: Discrete distribution estimation under local privacy. In: International Conference on Machine Learning, pp. 2436\u20132444. PMLR (2016)"},{"issue":"3","key":"7_CR15","doi-asserted-by":"publisher","first-page":"793","DOI":"10.1137\/090756090","volume":"40","author":"SP Kasiviswanathan","year":"2011","unstructured":"Kasiviswanathan, S.P., Lee, H.K., Nissim, K., Raskhodnikova, S., Smith, A.: What can we learn privately? SIAM J. Comput. 40(3), 793\u2013826 (2011)","journal-title":"SIAM J. Comput."},{"key":"7_CR16","doi-asserted-by":"publisher","unstructured":"Li, X., Li, N., Wang, B., Sun, W.: Mitigating data poisoning attacks to local differential privacy. In: Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security, CCS 2025, pp. 1230\u20131244. Association for Computing Machinery, New York, NY, USA (2025). https:\/\/doi.org\/10.1145\/3719027.3744839","DOI":"10.1145\/3719027.3744839"},{"key":"7_CR17","doi-asserted-by":"crossref","unstructured":"Marreiras, A.A., Neto, E.R.D., Costa\u00a0Filho, J.S., Machado, J.C.: Locally differentially private and consistent frequency estimation of longitudinal data. In: Simp\u00f3sio Brasileiro de Banco de Dados (SBBD), pp. 367\u2013380. SBC (2024)","DOI":"10.5753\/sbbd.2024.240837"},{"key":"7_CR18","doi-asserted-by":"publisher","unstructured":"Ruggles, S., Flood, S., Goeken, R., Schouweiler, M., Sobek, M.: Ipums usa: Version 12.0 (2022). https:\/\/doi.org\/10.18128\/D010.V12.0","DOI":"10.18128\/D010.V12.0"},{"key":"7_CR19","doi-asserted-by":"publisher","unstructured":"Sun, X., et al.: Ldprecover: recovering frequencies from poisoning attacks against local differential privacy. In: 2024 IEEE 40th International Conference on Data Engineering (ICDE), pp. 1619\u20131631 (2024). https:\/\/doi.org\/10.1109\/ICDE60146.2024.00132","DOI":"10.1109\/ICDE60146.2024.00132"},{"key":"7_CR20","unstructured":"Sun, Z., Kairouz, P., Sun, H., Gascon, A., Suresh, A.T.: Private federated discovery of out-of-vocabulary words for gboard. arXiv preprint arXiv:2404.11607 (2024)"},{"key":"7_CR21","unstructured":"Apple Differential Privacy Team: Learning with privacy at scale (2017). https:\/\/docs-assets.developer.apple.com\/ml-research\/papers\/learning-with-privacy-at-scale.pdf"},{"key":"7_CR22","doi-asserted-by":"crossref","unstructured":"Wang, L., Ye, Q., Hu, H., Meng, X., Huang, K.: LDP-purifier: defending against poisoning attacks in local differential privacy. In: International Conference on Database Systems for Advanced Applications, pp. 221\u2013231. Springer (2024)","DOI":"10.1007\/978-981-97-5562-2_14"},{"key":"7_CR23","unstructured":"Wang, T., Blocki, J., Li, N., Jha, S.: Locally differentially private protocols for frequency estimation. In: 26th USENIX Security Symposium (USENIX Security 2017), pp. 729\u2013745 (2017)"},{"issue":"309","key":"7_CR24","doi-asserted-by":"publisher","first-page":"63","DOI":"10.1080\/01621459.1965.10480775","volume":"60","author":"SL Warner","year":"1965","unstructured":"Warner, S.L.: Randomized response: a survey technique for eliminating evasive answer bias. J. Am. Stat. Assoc. 60(309), 63\u201369 (1965)","journal-title":"J. Am. Stat. Assoc."},{"key":"7_CR25","unstructured":"Wu, Y., Cao, X., Jia, J., Gong, N.Z.: Poisoning attacks to local differential privacy protocols for $$\\{$$Key-Value$$\\}$$ data. In: 31st USENIX Security Symposium (USENIX Security 2022), pp. 519\u2013536 (2022)"}],"container-title":["Lecture Notes in Computer Science","Data and Applications Security and Privacy XL"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-33260-8_7","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,20]],"date-time":"2026-07-20T07:06:51Z","timestamp":1784531211000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-33260-8_7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9783032332592","9783032332608"],"references-count":25,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-33260-8_7","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"21 July 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"DBSec","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"IFIP Annual Conference on Data and Applications Security and Privacy","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Arlington, VA","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"USA","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2026","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"28 July 2026","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30 July 2026","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"40","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"dbsec2026","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/dbsec2026.gmu.edu\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}