{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T15:57:01Z","timestamp":1782835021107,"version":"3.54.5"},"reference-count":117,"publisher":"Springer Science and Business Media LLC","issue":"4","license":[{"start":{"date-parts":[[2025,1,21]],"date-time":"2025-01-21T00:00:00Z","timestamp":1737417600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,1,21]],"date-time":"2025-01-21T00:00:00Z","timestamp":1737417600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Knowl Inf Syst"],"published-print":{"date-parts":[[2025,4]]},"DOI":"10.1007\/s10115-025-02339-z","type":"journal-article","created":{"date-parts":[[2025,1,21]],"date-time":"2025-01-21T03:23:30Z","timestamp":1737429810000},"page":"3099-3137","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["Securing the collective intelligence: a comprehensive review of federated learning security attacks and defensive strategies"],"prefix":"10.1007","volume":"67","author":[{"given":"Vishal","family":"Kaushal","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sangeeta","family":"Sharma","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,1,21]]},"reference":[{"key":"2339_CR1","doi-asserted-by":"crossref","unstructured":"Kairouz P, McMahan HB, Avent B, Bellet A, Bennis M, Bhagoji AN, Bonawitz K, Charles Z, Cormode G, Cummings R (2021) Advances and open problems in federated learning. Found Trends\u00ae Mach Learn 14(1\u20132):1\u2013210","DOI":"10.1561\/2200000083"},{"key":"2339_CR2","unstructured":"Hu S, Lu J, Wan W, Zhang LY (2021) Challenges and approaches for mitigating byzantine attacks in federated learning. arXiv preprint arXiv:2112.14468"},{"key":"2339_CR3","doi-asserted-by":"crossref","first-page":"106854","DOI":"10.1016\/j.cie.2020.106854","volume":"149","author":"L Li","year":"2020","unstructured":"Li L, Fan Y, Tse M, Lin KY (2020) A review of applications in federated learning. Comput Ind Eng 149:106854","journal-title":"Comput Ind Eng"},{"key":"2339_CR4","doi-asserted-by":"crossref","unstructured":"Kumar Y, Singla R (2021) Federated learning systems for healthcare: perspective and recent progress. In: Federated Learning Systems: Towards Next-Generation AI, pp. 141\u2013156. Springer","DOI":"10.1007\/978-3-030-70604-3_6"},{"issue":"3","key":"2339_CR5","doi-asserted-by":"crossref","first-page":"8","DOI":"10.1109\/MCE.2019.2959108","volume":"9","author":"Z Li","year":"2020","unstructured":"Li Z, Sharma V, Mohanty SP (2020) Preserving data privacy via federated learning: challenges and solutions. IEEE Consumer Electron Magaz 9(3):8\u201316","journal-title":"IEEE Consumer Electron Magaz"},{"issue":"2","key":"2339_CR6","doi-asserted-by":"crossref","first-page":"72","DOI":"10.1109\/MWC.001.1900119","volume":"27","author":"J Kang","year":"2020","unstructured":"Kang J, Xiong Z, Niyato D, Zou Y, Zhang Y, Guizani M (2020) Reliable federated learning for mobile networks. IEEE Wirel Commun 27(2):72\u201380","journal-title":"IEEE Wirel Commun"},{"issue":"2","key":"2339_CR7","doi-asserted-by":"crossref","first-page":"20","DOI":"10.1109\/MSEC.2020.3039941","volume":"19","author":"MS Jere","year":"2020","unstructured":"Jere MS, Farnan T, Koushanfar F (2020) A taxonomy of attacks on federated learning. IEEE Secur Privacy 19(2):20\u201328","journal-title":"IEEE Secur Privacy"},{"key":"2339_CR8","doi-asserted-by":"crossref","unstructured":"Tolpegin V, Truex S, Gursoy ME, Liu L (2020) Data poisoning attacks against federated learning systems. In: Computer Security\u2013ESORICS 2020, pp. 480\u2013501. Springer","DOI":"10.1007\/978-3-030-58951-6_24"},{"key":"2339_CR9","unstructured":"Fang M, Cao X, Jia J, Gong NZ (2020) Local model poisoning attacks to Byzantine-Robust federated learning. In: 29th USENIX Security Symposium (USENIX Security 20), pp. 1605\u20131622"},{"key":"2339_CR10","unstructured":"Wu C-L, Yang X, Zhu S, Mitra P (2020) Mitigating backdoor attacks in federated learning. arXiv preprint arXiv:2011.01767"},{"key":"2339_CR11","unstructured":"Prakash S, Avestimehr SA (2020) Mitigating byzantine attacks in federated learning. arXiv preprint arXiv:2010.07541"},{"key":"2339_CR12","doi-asserted-by":"crossref","unstructured":"Zhang J, Zhang J, Chen J, Yu Sa (2020) Gan enhanced membership inference: A passive local attack in federated learning. In: ICC 2020-2020 IEEE International Conference on Communications (ICC), pp. 1\u20136. IEEE","DOI":"10.1109\/ICC40277.2020.9148790"},{"key":"2339_CR13","doi-asserted-by":"crossref","unstructured":"Li J, Rakin AS, Chen X, He Z, Fan D, Chakrabarti C (2022) Ressfl: A resistance transfer framework for defending model inversion attack in split federated learning. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 10194\u201310202","DOI":"10.1109\/CVPR52688.2022.00995"},{"key":"2339_CR14","unstructured":"Fung C, Yoon CJ, Beschastnikh I (2020) The limitations of federated learning in sybil settings. In: 23rd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2020), pp. 301\u2013316"},{"issue":"4","key":"2339_CR15","doi-asserted-by":"crossref","first-page":"2555","DOI":"10.1109\/JIOT.2021.3089713","volume":"9","author":"X Yuan","year":"2021","unstructured":"Yuan X, Ma X, Zhang L, Fang Y, Wu D (2021) Beyond class-level privacy leakage: breaking record-level privacy in federated learning. IEEE Internet Things J 9(4):2555\u20132565","journal-title":"IEEE Internet Things J"},{"key":"2339_CR16","doi-asserted-by":"crossref","unstructured":"Kaushal V, Sharma S (2022) Some observations on the behaviour of federated learning. In: Federated Learning for IoT Applications, pp. 67\u201374. Springer","DOI":"10.1007\/978-3-030-85559-8_5"},{"key":"2339_CR17","doi-asserted-by":"crossref","unstructured":"Zhang T, Mao S (2022) An introduction to the federated learning standard. GetMobile: Mobile Comput Commun 25(3):18\u201322","DOI":"10.1145\/3511285.3511291"},{"key":"2339_CR18","unstructured":"McMahan HB, Moore E, Ramage D, Hampson S, Arcas BA (2017) Communication-efficient learning of deep networks from decentralized data. In: Artificial Intelligence and Statistics, pp. 1273\u20131282"},{"key":"2339_CR19","doi-asserted-by":"crossref","unstructured":"Asad M, Moustafa A, Ito T (2021) Federated learning versus classical machine learning: A convergence comparison. arXiv preprint arXiv:2107.10976","DOI":"10.22541\/au.162074596.66890690\/v1"},{"issue":"3","key":"2339_CR20","doi-asserted-by":"crossref","first-page":"50","DOI":"10.1109\/MSP.2020.2975749","volume":"37","author":"T Li","year":"2020","unstructured":"Li T, Sahu AK, Talwalkar A, Smith V (2020) Federated learning: challenges, methods, and future directions. IEEE Signal Process Mag 37(3):50\u201360","journal-title":"IEEE Signal Process Mag"},{"key":"2339_CR21","doi-asserted-by":"crossref","unstructured":"Kairouz P, McMahan HB, Avent B, Bellet A, Bennis M, Bhagoji AN, Bonawitz K, Charles Z, Cormode G, Cummings R (2021) Advances and open problems in federated learning. Found Trends\u00ae Mach Learn 14(1-2):1\u2013210","DOI":"10.1561\/2200000083"},{"key":"2339_CR22","doi-asserted-by":"crossref","unstructured":"Qu L, Zhou Y, Liang P-P, Xia Y, Wang F, Adeli E, Fei-Fei L, Rubin D (2022) Rethinking architecture design for tackling data heterogeneity in federated learning. In: Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition, pp. 10061\u201310071","DOI":"10.1109\/CVPR52688.2022.00982"},{"issue":"3","key":"2339_CR23","doi-asserted-by":"crossref","first-page":"1759","DOI":"10.1109\/COMST.2021.3090430","volume":"23","author":"LU Khan","year":"2021","unstructured":"Khan LU, Saad W, Han Z, Hossain E, Hong CS (2021) Federated learning for internet of things: recent advances, taxonomy, and open challenges. IEEE Commun Surveys Tutor 23(3):1759\u20131799","journal-title":"IEEE Commun Surveys Tutor"},{"issue":"1","key":"2339_CR24","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1038\/s41746-020-00323-1","volume":"3","author":"N Rieke","year":"2020","unstructured":"Rieke N, Hancox J, Li W, Milletari F, Roth HR, Albarqouni S, Bakas S, Galtier M-N, Landman BA, Maier-Hein K, Ourselin S (2020) The future of digital health with federated learning. NPJ Digit Med 3(1):1\u20138","journal-title":"NPJ Digit Med"},{"key":"2339_CR25","doi-asserted-by":"crossref","unstructured":"Zhang D, Kou Z, Wang D (2020) Fairfl: A fair federated learning approach to reducing demographic bias in privacy-sensitive classification models. In: 2020 IEEE International Conference on Big Data (Big Data), pp. 1051\u20131060. IEEE","DOI":"10.1109\/BigData50022.2020.9378043"},{"key":"2339_CR26","doi-asserted-by":"crossref","unstructured":"Tolpegin V, Truex S, Gursoy ME, Liu L (2020) Data poisoning attacks against federated learning systems. In: Computer Security\u2013ESORICS 2020, pp. 480\u2013501. Springer","DOI":"10.1007\/978-3-030-58951-6_24"},{"key":"2339_CR27","doi-asserted-by":"crossref","unstructured":"Nuding F, Mayer R (2022) Data poisoning in sequential and parallel federated learning. In: Proceedings of the 2022 ACM on International Workshop on Security and Privacy Analytics, pp. 24\u201334. ACM","DOI":"10.1145\/3510548.3519372"},{"key":"2339_CR28","doi-asserted-by":"crossref","unstructured":"Tian Y, Zhang W, Simpson A, Liu Y, Jiang ZL (2021) Defending against data poisoning attacks: from distributed learning to federated learning. The Computer Journal","DOI":"10.1093\/comjnl\/bxab192"},{"key":"2339_CR29","doi-asserted-by":"crossref","unstructured":"Cao D, Chang S, Lin Z, Liu G, Sun D (2019) Understanding distributed poisoning attack in federated learning. In: 2019 IEEE 25th International Conference on Parallel and Distributed Systems (ICPADS), pp. 233\u2013239. IEEE","DOI":"10.1109\/ICPADS47876.2019.00042"},{"issue":"13","key":"2339_CR30","doi-asserted-by":"crossref","first-page":"11365","DOI":"10.1109\/JIOT.2021.3128646","volume":"9","author":"G Sun","year":"2021","unstructured":"Sun G, Cong Y, Dong J, Wang Q, Lyu L, Liu J (2021) Data poisoning attacks on federated machine learning. IEEE Internet Things J 9(13):11365\u201311375","journal-title":"IEEE Internet Things J"},{"key":"2339_CR31","unstructured":"Li X, Qu Z, Zhao S, Tang B, Lu Z, Liu Y (2021) Lomar: A local defense against poisoning attack on federated learning. IEEE Trans Depend Secure Comput"},{"key":"2339_CR32","unstructured":"Sun Z, Kairouz P, Suresh AT, McMahan HB (2019) Can you really backdoor federated learning? arXiv preprint arXiv:1911.07963"},{"key":"2339_CR33","unstructured":"Goodfellow I, Pouget-Abadie J, Mirza M, Xu B, Warde-Farley D, Ozair S, Courville A, Bengio Y (2014) Generative adversarial nets. Adv Neural Inf Process Syst 27"},{"issue":"5","key":"2339_CR34","doi-asserted-by":"crossref","first-page":"3310","DOI":"10.1109\/JIOT.2020.3023126","volume":"8","author":"J Zhang","year":"2020","unstructured":"Zhang J, Chen B, Cheng X, Binh HTT, Yu S (2020) Poisongan: generative poisoning attacks against federated learning in edge computing systems. IEEE Internet Things J 8(5):3310\u20133322","journal-title":"IEEE Internet Things J"},{"key":"2339_CR35","doi-asserted-by":"crossref","unstructured":"Doku R, Rawat DB (2011) Mitigating data poisoning attacks on a federated learning-edge computing network. In: 2021 IEEE 18th Annual Consumer Communications & Networking Conference (CCNC), pp. 1\u20136. IEEE","DOI":"10.1109\/CCNC49032.2021.9369581"},{"issue":"3","key":"2339_CR36","doi-asserted-by":"publisher","first-page":"711","DOI":"10.1093\/comjnl\/bxab192","volume":"66","author":"Y Tian","year":"2021","unstructured":"Tian Y, Zhang W, Simpson A, Liu Y, Jiang ZL (2021) Defending against data poisoning attacks: From distributed learning to federated learning. Comput J 66(3):711\u2013726. https:\/\/doi.org\/10.1093\/comjnl\/bxab192","journal-title":"Comput J"},{"key":"2339_CR37","doi-asserted-by":"publisher","first-page":"103270","DOI":"10.1016\/j.cose.2023.103270","volume":"130","author":"P Gupta","year":"2023","unstructured":"Gupta P, Yadav K, Gupta BB, Alazab M, Gadekallu TR (2023) A novel data poisoning attack in federated learning based on inverted loss function. Comput Secur 130:103270. https:\/\/doi.org\/10.1016\/j.cose.2023.103270","journal-title":"Comput Secur"},{"key":"2339_CR38","doi-asserted-by":"crossref","unstructured":"Nuding F, Mayer R (2022) Data poisoning in sequential and parallel federated learning. In: Proceedings of the 2022 ACM on International Workshop on Security and Privacy Analytics, pp. 24\u201334","DOI":"10.1145\/3510548.3519372"},{"key":"2339_CR39","doi-asserted-by":"crossref","first-page":"1142","DOI":"10.1109\/TSP.2022.3153135","volume":"70","author":"K Pillutla","year":"2022","unstructured":"Pillutla K, Kakade SM, Harchaoui Z (2022) Robust aggregation for federated learning. IEEE Trans Signal Process 70:1142\u20131154","journal-title":"IEEE Trans Signal Process"},{"issue":"11","key":"2339_CR40","doi-asserted-by":"crossref","first-page":"8836","DOI":"10.1109\/JIOT.2020.3037194","volume":"8","author":"Y Zhao","year":"2020","unstructured":"Zhao Y, Zhao J, Yang M, Wang T, Wang N, Lyu L, Niyato D, Lam K-Y (2020) Local differential privacy-based federated learning for internet of things. IEEE Internet Things J 8(11):8836\u20138853","journal-title":"IEEE Internet Things J"},{"key":"2339_CR41","doi-asserted-by":"crossref","unstructured":"Ben\u00a0Hamida S, Mrabet H, Belguith S, Alhomoud A, Jemai A (2021) Towards securing machine learning models against membership inference attacks. Comput Mater Contin 70(3)","DOI":"10.32604\/cmc.2022.019709"},{"issue":"15","key":"2339_CR42","doi-asserted-by":"crossref","first-page":"44455","DOI":"10.1007\/s11042-023-17394-3","volume":"83","author":"S Ben Hamida","year":"2024","unstructured":"Ben Hamida S, Mrabet H, Chaieb F, Jemai A (2024) Assessment of data augmentation, dropout with l2 regularization and differential privacy against membership inference attacks. Multimed Tools Appl 83(15):44455\u201344484","journal-title":"Multimed Tools Appl"},{"issue":"6","key":"2339_CR43","doi-asserted-by":"crossref","first-page":"16231","DOI":"10.1007\/s11042-023-16126-x","volume":"83","author":"S Ben Hamida","year":"2024","unstructured":"Ben Hamida S, Sameh Snoun A, Jemai O, Jemai A (2024) The influence of dropout and residual connection against membership inference attacks on transformer model: a neuro generative disease case study. Multimed Tools Appl 83(6):16231\u201316253","journal-title":"Multimed Tools Appl"},{"key":"2339_CR44","unstructured":"Suri A, Kanani P, Marathe VJ, Peterson DW (2022) Subject membership inference attacks in federated learning. arXiv preprint arXiv:2206.03317"},{"key":"2339_CR45","unstructured":"Lyu L, Chen C (2021) A novel attribute reconstruction attack in federated learning. arXiv preprint arXiv:2108.06910"},{"key":"2339_CR46","doi-asserted-by":"crossref","unstructured":"Feng, T., Hashemi, H., Hebbar, R., Annavaram, M., Narayanan, S.S.: Attribute inference attack of speech emotion recognition in federated learning settings. arXiv preprint arXiv:2112.13416 (2021)","DOI":"10.21437\/Interspeech.2022-10060"},{"key":"2339_CR47","unstructured":"Zhang X, Luo X (2021) Exploiting Defenses against GAN-Based Feature Inference Attacks in Federated Learning (2021)"},{"key":"2339_CR48","doi-asserted-by":"crossref","unstructured":"Pustozerova A, Mayer R (2020) Information leaks in federated learning. In: Proceedings of the Network and Distributed System Security Symposium 10:122","DOI":"10.14722\/diss.2020.23004"},{"key":"2339_CR49","doi-asserted-by":"crossref","unstructured":"Melis L, Song C, De\u00a0Cristofaro E, Shmatikov V (2019) Exploiting unintended feature leakage in collaborative learning. In: 2019 IEEE Symposium on Security and Privacy (SP), pp. 691\u2013706. IEEE","DOI":"10.1109\/SP.2019.00029"},{"key":"2339_CR50","doi-asserted-by":"crossref","unstructured":"Wang Z, Song M, Zhang Z, Song Y, Wang Q, Qi H (2019) Beyond inferring class representatives: User-level privacy leakage from federated learning. In: IEEE INFOCOM 2019-IEEE Conference on Computer Communications, pp. 2512\u20132520. IEEE","DOI":"10.1109\/INFOCOM.2019.8737416"},{"key":"2339_CR51","doi-asserted-by":"publisher","unstructured":"Chen J, Zhang J, Zhao Y, Han H, Zhu K, Chen B (2020) Beyond model-level membership privacy leakage: an adversarial approach in federated learning. In: 2020 29th International Conference on Computer Communications and Networks (ICCCN), pp. 1\u20139. https:\/\/doi.org\/10.1109\/ICCCN49398.2020.9209744","DOI":"10.1109\/ICCCN49398.2020.9209744"},{"key":"2339_CR52","doi-asserted-by":"publisher","unstructured":"Nasr M, Shokri R, Houmansadr A (2019) Comprehensive privacy analysis of deep learning: Passive and active white-box inference attacks against centralized and federated learning. In: 2019 IEEE Symposium on Security and Privacy (SP), pp. 739\u2013753. https:\/\/doi.org\/10.1109\/SP.2019.00065","DOI":"10.1109\/SP.2019.00065"},{"key":"2339_CR53","unstructured":"Wang L, Xu S, Wang X, Zhu Q (2019) Eavesdrop the Composition Proportion of Training Labels in Federated Learning"},{"key":"2339_CR54","unstructured":"Xiao H, Rasul K, Vollgraf R (2017) Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithms"},{"issue":"11","key":"2339_CR55","doi-asserted-by":"publisher","first-page":"2278","DOI":"10.1109\/5.726791","volume":"86","author":"Y LeCun","year":"1998","unstructured":"LeCun Y, Bottou L, Bengio Y, Haffner P (1998) Gradient-based learning applied to document recognition. Proc IEEE 86(11):2278\u20132324. https:\/\/doi.org\/10.1109\/5.726791","journal-title":"Proc IEEE"},{"key":"2339_CR56","unstructured":"Krizhevsky A, Hinton G, et al (2009) Learning multiple layers of features from tiny images"},{"key":"2339_CR57","unstructured":"Acquire valued shoppers challenge. URL: https:\/\/www.kaggle.com\/c\/acquire-valued-shoppers-challenge\/data (2013)"},{"issue":"11","key":"2339_CR58","doi-asserted-by":"publisher","first-page":"2278","DOI":"10.1109\/5.726791","volume":"86","author":"Y LeCun","year":"1998","unstructured":"LeCun Y, Bottou L, Bengio Y, Hafner P (1998) Gradient-based learning applied to document recognition. Proc IEEE 86(11):2278\u20132324. https:\/\/doi.org\/10.1109\/5.726791","journal-title":"Proc IEEE"},{"key":"2339_CR59","doi-asserted-by":"publisher","unstructured":"Samaria FS, Harter AC (1994) Parameterisation of a stochastic model for human face identification. In: Proceedings of 1994 IEEE workshop on applications of computer vision. IEEE Comput Soc Press https:\/\/doi.org\/10.1109\/acv.1994.341300","DOI":"10.1109\/acv.1994.341300"},{"issue":"1","key":"2339_CR60","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1038\/sdata.2018.161","volume":"5","author":"P Tschandl","year":"2018","unstructured":"Tschandl P, Rosendahl C, Kittler H (2018) The ham10000 dataset, a large collection of multi-source dermatoscopic images of common pigmented skin lesions. Sci Data 5(1):1\u20139. https:\/\/doi.org\/10.1038\/sdata.2018.161","journal-title":"Sci Data"},{"key":"2339_CR61","unstructured":"California SD Yale Face Database. http:\/\/vision.ucsd.edu\/content\/yale-face-database"},{"key":"2339_CR62","unstructured":"Bhagoji AN, Chakraborty S, Mittal P, Calo S (2019) Analyzing federated learning through an adversarial lens. In: International conference on machine learning, pp. 634\u2013643. PMLR"},{"key":"2339_CR63","unstructured":"Fang M, Cao X, Jia J, Gong N (2020) Local model poisoning attacks to $$\\{$$Byzantine-Robust$$\\}$$ federated learning. In: 29th USENIX security symposium (USENIX Security 20), pp. 1605\u20131622"},{"key":"2339_CR64","doi-asserted-by":"crossref","unstructured":"Shejwalkar V, Houmansadr A (2021) Manipulating the byzantine: optimizing model poisoning attacks and defenses for federated learning. In: NDSS","DOI":"10.14722\/ndss.2021.24498"},{"issue":"3","key":"2339_CR65","doi-asserted-by":"crossref","first-page":"73","DOI":"10.3390\/fi13030073","volume":"13","author":"X Zhou","year":"2021","unstructured":"Zhou X, Xu M, Wu Y, Zheng N (2021) Deep model poisoning attack on federated learning. Fut Internet 13(3):73","journal-title":"Fut Internet"},{"key":"2339_CR66","doi-asserted-by":"crossref","unstructured":"Cao X, Gong NZ (2022) Mpaf: Model poisoning attacks to federated learning based on fake clients. In: Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (CVPR) workshops, pp. 3396\u20133404","DOI":"10.1109\/CVPRW56347.2022.00383"},{"key":"2339_CR67","doi-asserted-by":"crossref","unstructured":"Hatamizadeh A, Yin H, Molchanov P, Myronenko A, Li W, Dogra P, Feng A, Flores MG, Kautz J, Xu D, et al (2023) Do gradient inversion attacks make federated learning unsafe?. IEEE Trans Med Imag","DOI":"10.1109\/TMI.2023.3239391"},{"key":"2339_CR68","doi-asserted-by":"publisher","unstructured":"Hu H, Salcic Z, Sun L, Dobbie G, Zhang X (2021) Source inference attacks in federated learning. In: 2021 IEEE International conference on data mining (ICDM), pp. 1102\u20131107. https:\/\/doi.org\/10.1109\/ICDM51629.2021.00129","DOI":"10.1109\/ICDM51629.2021.00129"},{"key":"2339_CR69","doi-asserted-by":"crossref","unstructured":"Wang X, Peng Y, Lu L, Lu Z, Bagheri M, Summers RM (2017) Chestx-ray8: Hospital-scale chest x-ray database and benchmarks on weakly-supervised classification and localization of common thorax diseases. In: Proc. IEEE Conf. Comput. Vis. Pattern Recognit. (CVPR), pp. 2097\u20132106","DOI":"10.1109\/CVPR.2017.369"},{"key":"2339_CR70","doi-asserted-by":"publisher","unstructured":"De\u00a0Vente C, Vermeer KA, Jaccard N, Van\u00a0Ginneken B, Lemij HG, S\u00e1nchez CI (2021) Rotterdam eyepacs airogs train set. In: Proc. IEEE Int. Symp. Biomed. Imag. Zenodo. https:\/\/doi.org\/10.5281\/zenodo.5745363","DOI":"10.5281\/zenodo.5745363"},{"issue":"1","key":"2339_CR71","doi-asserted-by":"publisher","first-page":"118","DOI":"10.1109\/MNET.117.2200065","volume":"37","author":"Y-A Xie","year":"2023","unstructured":"Xie Y-A, Kang J, Niyato D, Van NTT, Luong NC, Liu Z, Yu H (2023) Securing federated learning: A covert communication-based approach. IEEE Network 37(1):118\u2013124. https:\/\/doi.org\/10.1109\/MNET.117.2200065","journal-title":"IEEE Network"},{"key":"2339_CR72","doi-asserted-by":"crossref","unstructured":"Yi J, Wu F, Zhu B, Yu Y, Zhang C, Sun G, Xie X (2022) Ua-fedrec: Untargeted attack on federated news recommendation. arXiv preprint arXiv:2202.06701","DOI":"10.1145\/3580305.3599923"},{"key":"2339_CR73","unstructured":"Fang M, Cao X, Jia J, Gong NZ (2020) Local model poisoning attacks to byzantine-robust federated learning. In: Proceedings of the 29th USENIX Conference on Security Symposium, pp. 1623\u20131640"},{"issue":"3","key":"2339_CR74","doi-asserted-by":"crossref","first-page":"243","DOI":"10.1147\/rd.383.0243","volume":"38","author":"D Coppersmith","year":"1994","unstructured":"Coppersmith D (1994) The data encryption standard (des) and its strength against attacks. IBM J Res Dev 38(3):243\u2013250","journal-title":"IBM J Res Dev"},{"key":"2339_CR75","unstructured":"Jiang Z, Wang W, Liu Y (2021) Flashe: Additively symmetric homomorphic encryption for cross-silo federated learning. arXiv preprint arXiv:2109.00675"},{"issue":"4","key":"2339_CR76","doi-asserted-by":"crossref","first-page":"94","DOI":"10.3390\/fi13040094","volume":"13","author":"H Fang","year":"2021","unstructured":"Fang H, Qian Q (2021) Privacy preserving machine learning with homomorphic encryption and federated learning. Future Internet 13(4):94","journal-title":"Future Internet"},{"key":"2339_CR77","doi-asserted-by":"crossref","first-page":"3454","DOI":"10.1109\/TIFS.2020.2988575","volume":"15","author":"K Wei","year":"2020","unstructured":"Wei K, Li J, Ding M, Ma C, Yang HH, Farokhi F, Jin S, Quek TQ, Poor HV (2020) Federated learning with differential privacy: Algorithms and performance analysis. IEEE Trans Inf Forensics Secur 15:3454\u20133469","journal-title":"IEEE Trans Inf Forensics Secur"},{"key":"2339_CR78","doi-asserted-by":"crossref","unstructured":"Ben\u00a0Hamida S, Mrabet H, Jemai A (2022) How differential privacy reinforces privacy of machine learning models? In: International Conference on Computational Collective Intelligence, pp. 661\u2013673. Springer","DOI":"10.1007\/978-3-031-16210-7_54"},{"key":"2339_CR79","doi-asserted-by":"crossref","first-page":"22359","DOI":"10.1109\/ACCESS.2022.3151670","volume":"10","author":"A El Ouadrhiri","year":"2022","unstructured":"El Ouadrhiri A, Abdelhadi A (2022) Differential privacy for deep and federated learning: A survey. IEEE access 10:22359\u201322380","journal-title":"IEEE access"},{"key":"2339_CR80","unstructured":"Mugunthan V, Polychroniadou A, Byrd D, Balch TH (2019) Smpai: Secure multi-party computation for federated learning. In: Proceedings of the NeurIPS 2019 Workshop on Robust AI in Financial Services, pp. 1\u20139. MIT Press Cambridge, MA, USA"},{"issue":"4","key":"2339_CR81","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3467981","volume":"2","author":"Raed Abdel Sater","year":"2021","unstructured":"Sater Raed Abdel, Hamza A. Ben (2021) A Federated Learning Approach to Anomaly Detection in Smart Buildings. ACM Transactions Internet of Things 2(4):1\u201323. https:\/\/doi.org\/10.1145\/3467981","journal-title":"ACM Transactions Internet of Things"},{"key":"2339_CR82","unstructured":"Li S, Cheng Y, Wang W, Liu Y, Chen T (2020) Learning to detect malicious clients for robust federated learning. arXiv preprint arXiv:2002.00211"},{"key":"2339_CR83","doi-asserted-by":"crossref","unstructured":"Sattler F, M\u00fcller K-R, Wiegand T, Samek W (2020) On the byzantine robustness of clustered federated learning. In: ICASSP 2020-2020 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP), pp. 8861\u20138865 . IEEE","DOI":"10.1109\/ICASSP40776.2020.9054676"},{"issue":"12","key":"2339_CR84","doi-asserted-by":"crossref","first-page":"2663","DOI":"10.3390\/app8122663","volume":"8","author":"D Preuveneers","year":"2018","unstructured":"Preuveneers D, Rimmer V, Tsingenopoulos I, Spooren J, Joosen W, Ilie-Zudor E (2018) Chained anomaly detection models for federated learning: An intrusion detection case study. Appl Sci 8(12):2663","journal-title":"Appl Sci"},{"key":"2339_CR85","doi-asserted-by":"crossref","unstructured":"Nguyen TD, Marchal S, Miettinen M, Fereidooni H, Asokan N, Sadeghi A-R (2019) D\u00efot: A federated self-learning anomaly detection system for iot. In: 2019 IEEE 39th International Conference on Distributed Computing Systems (ICDCS), pp. 756\u2013767. IEEE","DOI":"10.1109\/ICDCS.2019.00080"},{"key":"2339_CR86","volume":"99","author":"X Hei","year":"2020","unstructured":"Hei X, Yin X, Wang Y, Ren J, Zhu L (2020) A trusted feature aggregator federated learning for distributed malicious attack detection. Computers & Security 99:102033","journal-title":"Computers & Security"},{"key":"2339_CR87","unstructured":"Azulay S, Raz L, Globerson A, Koren T, Afek Y (2020) Holdout sgd: Byzantine tolerant federated learning. arXiv preprint arXiv:2008.04612"},{"key":"2339_CR88","doi-asserted-by":"crossref","unstructured":"Cao D, Chang S, Lin Z, Liu G, Sun D (2019) Understanding distributed poisoning attack in federated learning. In: 2019 IEEE 25th International Conference on Parallel and Distributed Systems (ICPADS), pp. 233\u2013239. IEEE","DOI":"10.1109\/ICPADS47876.2019.00042"},{"key":"2339_CR89","doi-asserted-by":"publisher","first-page":"595","DOI":"10.1007\/978-3-030-38991-8_39","volume-title":"Algorithms and Architectures for Parallel Processing: 19th International Conference, ICA3PP 2019, Melbourne, VIC, Australia, December 9\u201311, 2019, Proceedings, Part I","author":"Ying Zhao","year":"2020","unstructured":"Zhao Ying, Chen Junjun, Zhang Jiale, Wu Di, Teng Jian, Yu Shui (2020) PDGAN: A Novel Poisoning Defense Method in Federated Learning Using Generative Adversarial Network. In: Wen Sheng, Zomaya Albert, Yang Laurence T. (eds) Algorithms and Architectures for Parallel Processing: 19th International Conference, ICA3PP 2019, Melbourne, VIC, Australia, December 9\u201311, 2019, Proceedings, Part I. Springer International Publishing, Cham, pp 595\u2013609. https:\/\/doi.org\/10.1007\/978-3-030-38991-8_39"},{"key":"2339_CR90","doi-asserted-by":"publisher","unstructured":"Qu Youyang, Gao Longxiang, Luan Tom H., Xiang Yong, Yu Shui, Li Bai, Zheng Gavin (2020) Decentralized Privacy Using Blockchain-Enabled Federated Learning in Fog Computing. IEEE Internet Things J 7(6):5171\u20135183. https:\/\/doi.org\/10.1109\/JIOT.2020.2977383","DOI":"10.1109\/JIOT.2020.2977383"},{"key":"2339_CR91","first-page":"2886795","volume":"2022","author":"J Zhang","year":"2022","unstructured":"Zhang J, Zhu H, Wang F, Zhao J, Xu Q, Li H et al (2022) Security and privacy threats to federated learning: issues, methods, and challenges. Secur Commun Netw 2022:2886795","journal-title":"Secur Commun Netw"},{"key":"2339_CR92","unstructured":"Wang Z, Hu Q (2021) Blockchain-based federated learning: a comprehensive survey. arXiv preprint arXiv:2110.02182"},{"key":"2339_CR93","doi-asserted-by":"crossref","first-page":"102355","DOI":"10.1016\/j.cose.2021.102355","volume":"108","author":"M Ali","year":"2021","unstructured":"Ali M, Karimipour H, Tariq M (2021) Integration of blockchain and federated learning for internet of things: recent advances and future challenges. Comput Secur 108:102355","journal-title":"Comput Secur"},{"issue":"6","key":"2339_CR94","doi-asserted-by":"crossref","first-page":"5171","DOI":"10.1109\/JIOT.2020.2977383","volume":"7","author":"Y Qu","year":"2020","unstructured":"Qu Y, Gao L, Luan TH, Xiang Y, Yu S, Li B, Zheng G (2020) Decentralized privacy using blockchain-enabled federated learning in fog computing. IEEE Internet Things J 7(6):5171\u20135183","journal-title":"IEEE Internet Things J"},{"issue":"6","key":"2339_CR95","doi-asserted-by":"crossref","first-page":"4177","DOI":"10.1109\/TII.2019.2942190","volume":"16","author":"Y Lu","year":"2019","unstructured":"Lu Y, Huang X, Dai Y, Maharjan S, Zhang Y (2019) Blockchain and federated learning for privacy-preserved data sharing in industrial IoT. IEEE Trans Industr Inf 16(6):4177\u20134186","journal-title":"IEEE Trans Industr Inf"},{"issue":"4","key":"2339_CR96","doi-asserted-by":"crossref","first-page":"20","DOI":"10.1109\/MC.2021.3052390","volume":"55","author":"P Treleaven","year":"2022","unstructured":"Treleaven P, Smietanka M, Pithadia H (2022) Federated learning: the pioneering distributed machine learning and privacy-preserving data technology. Computer 55(4):20\u201329","journal-title":"Computer"},{"issue":"4","key":"2339_CR97","doi-asserted-by":"crossref","first-page":"182","DOI":"10.1109\/MNET.007.2100717","volume":"36","author":"AP Kalapaaking","year":"2022","unstructured":"Kalapaaking AP, Stephanie V, Khalil I, Atiquzzaman M, Yi X, Almashor M (2022) SMPC-based federated learning for 6G-enabled internet of medical things. IEEE Netw 36(4):182\u2013189","journal-title":"IEEE Netw"},{"key":"2339_CR98","doi-asserted-by":"crossref","first-page":"198275","DOI":"10.1109\/ACCESS.2020.3034602","volume":"8","author":"H Zhu","year":"2020","unstructured":"Zhu H, Goh RSM, Ng W-K (2020) Privacy-preserving weighted federated learning within the secret sharing framework. IEEE Access 8:198275\u2013198284","journal-title":"IEEE Access"},{"issue":"4","key":"2339_CR99","first-page":"832","volume":"34","author":"E Tahanian","year":"2021","unstructured":"Tahanian E, Amouei M, Fateh H, Rezvani M (2021) A game-theoretic approach for robust federated learning. Int J Eng 34(4):832\u2013842","journal-title":"Int J Eng"},{"key":"2339_CR100","doi-asserted-by":"crossref","unstructured":"Zhang Z, Su Q, Sun X (2022) Dim-krum: Backdoor-resistant federated learning for nlp with dimension-wise krum-based aggregation. arXiv preprint arXiv:2210.06894","DOI":"10.18653\/v1\/2022.findings-emnlp.25"},{"key":"2339_CR101","unstructured":"Mu\u00f1oz-Gonz\u00e1lez L, Co KT, Lupu EC (2019) Byzantine-robust federated machine learning through adaptive model averaging. arXiv preprint arXiv:1909.05125"},{"key":"2339_CR102","unstructured":"Fu S, Xie C, Li B, Chen Q (2019) Attack-resistant federated learning with residual-based reweighting. arXiv preprint arXiv:1912.11464"},{"key":"2339_CR103","unstructured":"Zou T, Liu Y, Zhang Y-Q (2023) Mutual information regularization for vertical federated learning. arXiv preprint arXiv:2301.01142"},{"issue":"24","key":"2339_CR104","doi-asserted-by":"crossref","first-page":"9900","DOI":"10.3390\/s22249900","volume":"22","author":"Y Kim","year":"2022","unstructured":"Kim Y, Lee W (2022) Distributed Raman spectrum data augmentation system using federated learning with deep generative models. Sensors 22(24):9900","journal-title":"Sensors"},{"key":"2339_CR105","doi-asserted-by":"crossref","unstructured":"Qiao Y, Adhikary A, Kim KT, Zhang C, Hong CS (2024) Knowledge distillation assisted robust federated learning: Towards edge intelligence. In: ICC 2024-IEEE International Conference on Communications, pp. 843\u2013848. IEEE","DOI":"10.1109\/ICC51166.2024.10622956"},{"key":"2339_CR106","unstructured":"Yin D, Chen Y, Kannan R, Bartlett P (2018) Byzantine-robust distributed learning: Towards optimal statistical rates. In: International Conference on Machine Learning, pp. 5650\u20135659. PMLR"},{"key":"2339_CR107","unstructured":"Bagdasaryan E, Veit A, Hua Y, Estrin D, Shmatikov V (2020) How to backdoor federated learning. In: International Conference on Artificial Intelligence and Statistics, pp. 2938\u20132948. PMLR"},{"key":"2339_CR108","unstructured":"Wang L, Xu S, Wang X, Zhu Q (2019) Eavesdrop the composition proportion of training labels in federated learning. CoRR arxiv:1910.06044"},{"key":"2339_CR109","unstructured":"Bagdasaryan E, Veit A, Hua Y, Estrin D, Shmatikov V (2020) How to backdoor federated learning. In: International Conference on Artificial Intelligence and Statistics, pp. 2938\u20132948. PMLR"},{"key":"2339_CR110","doi-asserted-by":"crossref","unstructured":"Xiao X, Tang Z, Li C, Xiao B, Li K (2022) SCA: Sybil-based collusion attacks of IIOT data poisoning in federated learning. IEEE Trans Ind Informat","DOI":"10.1109\/TII.2022.3172310"},{"key":"2339_CR111","doi-asserted-by":"crossref","unstructured":"Awan S, Li F, Luo B, Liu M (2019) Poster: A reliable and accountable privacy-preserving federated learning framework using the blockchain. In: Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security, pp. 2561\u20132563","DOI":"10.1145\/3319535.3363256"},{"issue":"7","key":"2339_CR112","doi-asserted-by":"crossref","first-page":"8423","DOI":"10.1109\/TITS.2021.3081560","volume":"23","author":"Y Li","year":"2021","unstructured":"Li Y, Tao X, Zhang X, Liu J, Xu J (2021) Privacy-preserved federated learning for autonomous driving. IEEE Trans Intell Transp Syst 23(7):8423\u20138434","journal-title":"IEEE Trans Intell Transp Syst"},{"key":"2339_CR113","unstructured":"Wang H, Sreenivasan K, Rajput S, Vishwakarma H, Agarwal S, Sohn J, Lee K, Papailiopoulos D (2020) Attack of the tails: Yes, you really can backdoor federated learning. Adv Neural Inf Process Syst"},{"key":"2339_CR114","unstructured":"Bhagoji AN, Chakraborty S, Mittal P, Calo S (2019) Analyzing federated learning through an adversarial lens. In: International Conference on Machine Learning, pp. 634\u2013643. PMLR"},{"key":"2339_CR115","unstructured":"Fang M, Cao X, Jia J, Gong NZ (2020) Local model poisoning attacks to byzantine robust federated learning. In: USENIX Security Symposium, pp. 1605\u20131622"},{"key":"2339_CR116","unstructured":"Bagdasaryan E, Veit A, Hua Y, Estrin D, Shmatikov V (2018) How to backdoor federated learning. In: CoRR arxiv:1807.00459"},{"issue":"12","key":"2339_CR117","doi-asserted-by":"crossref","first-page":"2663","DOI":"10.3390\/app8122663","volume":"8","author":"D Preuveneers","year":"2018","unstructured":"Preuveneers D, Rimmer V, Tsingenopoulos I, Spooren J, Joosen W, Ilie-Zudor E (2018) Chained anomaly detection models for federated learning: an intrusion detection case study. Appl Sci 8(12):2663","journal-title":"Appl Sci"}],"container-title":["Knowledge and Information Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10115-025-02339-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10115-025-02339-z\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10115-025-02339-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,4,9]],"date-time":"2025-04-09T16:38:03Z","timestamp":1744216683000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10115-025-02339-z"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,1,21]]},"references-count":117,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2025,4]]}},"alternative-id":["2339"],"URL":"https:\/\/doi.org\/10.1007\/s10115-025-02339-z","relation":{},"ISSN":["0219-1377","0219-3116"],"issn-type":[{"value":"0219-1377","type":"print"},{"value":"0219-3116","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,1,21]]},"assertion":[{"value":"7 June 2024","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"23 December 2024","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"4 January 2025","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"21 January 2025","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"Vishal Kaushal declare that he has no conflict of interest. Sangeeta Sharma declares that she has no conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}},{"value":"This article does not contain any studies with human participants or animals performed by any of the authors.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethical approval"}}]}}