{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,8]],"date-time":"2026-07-08T16:29:51Z","timestamp":1783528191003,"version":"3.55.0"},"reference-count":74,"publisher":"Springer Science and Business Media LLC","issue":"10","license":[{"start":{"date-parts":[[2024,7,1]],"date-time":"2024-07-01T00:00:00Z","timestamp":1719792000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,7,1]],"date-time":"2024-07-01T00:00:00Z","timestamp":1719792000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62272203"],"award-info":[{"award-number":["62272203"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62272203"],"award-info":[{"award-number":["62272203"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Cluster Comput"],"published-print":{"date-parts":[[2024,12]]},"DOI":"10.1007\/s10586-024-04629-7","type":"journal-article","created":{"date-parts":[[2024,7,1]],"date-time":"2024-07-01T21:01:45Z","timestamp":1719867705000},"page":"13565-13582","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":27,"title":["A survey on privacy-preserving federated learning against poisoning attacks"],"prefix":"10.1007","volume":"27","author":[{"given":"Feng","family":"Xia","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wenhao","family":"Cheng","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2024,7,1]]},"reference":[{"key":"4629_CR1","unstructured":"Kone\u010dn\u1ef3, J., McMahan, H.B., Yu, F.X., Richt\u00e1rik, P., Suresh, A.T., Bacon, D.: Federated learning: strategies for improving communication efficiency. arXiv preprint arXiv:1610.05492 (2016)"},{"key":"4629_CR2","doi-asserted-by":"crossref","unstructured":"Lyu, L., Yu, H., Yang, Q.: Threats to federated learning: a survey. arXiv e-prints, 2003 (2020)","DOI":"10.1007\/978-3-030-63076-8_1"},{"issue":"12","key":"4629_CR3","doi-asserted-by":"publisher","first-page":"7897","DOI":"10.1109\/TII.2021.3071405","volume":"17","author":"Y Deng","year":"2021","unstructured":"Deng, Y., Zhang, T., Lou, G., Zheng, X., Jin, J., Han, Q.-L.: Deep learning-based autonomous driving systems: a survey of attacks and defenses. IEEE Trans. Ind. Inform. 17(12), 7897\u20137912 (2021)","journal-title":"IEEE Trans. Ind. Inform."},{"issue":"1","key":"4629_CR4","doi-asserted-by":"publisher","first-page":"20","DOI":"10.1109\/TII.2022.3198481","volume":"19","author":"Y Chen","year":"2022","unstructured":"Chen, Y., Zhu, X., Gong, X., Yi, X., Li, S.: Data poisoning attacks in internet-of-vehicle networks: taxonomy, state-of-the-art, and future directions. IEEE Trans. Ind. Inform. 19(1), 20\u201328 (2022)","journal-title":"IEEE Trans. Ind. Inform."},{"key":"4629_CR5","doi-asserted-by":"crossref","unstructured":"Bonawitz, K., Ivanov, V., Kreuter, B., Marcedone, A., McMahan, H.B., Patel, S., Ramage, D., Segal, A., Seth, K.: Practical secure aggregation for privacy-preserving machine learning. In: Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, pp. 1175\u20131191 (2017)","DOI":"10.1145\/3133956.3133982"},{"key":"4629_CR6","doi-asserted-by":"crossref","unstructured":"Bell, J.H., Bonawitz, K.A., Gasc\u00f3n, A., Lepoint, T., Raykova, M.: Secure single-server aggregation with (poly) logarithmic overhead. In: Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security, pp. 1253\u20131269 (2020)","DOI":"10.1145\/3372297.3417885"},{"key":"4629_CR7","doi-asserted-by":"crossref","unstructured":"Boenisch, F., Dziedzic, A., Schuster, R., Shamsabadi, A.S., Shumailov, I., Papernot, N.: When the curious abandon honesty: Federated learning is not private. In: 2023 IEEE 8th European Symposium on Security and Privacy (EuroS &P), pp. 175\u2013199 (2023). IEEE","DOI":"10.1109\/EuroSP57164.2023.00020"},{"key":"4629_CR8","unstructured":"Burkhalter, L., Lycklama, H., Viand, A., K\u00fcchler, N., Hithnawi, A.: Rofl: Attestable robustness for secure federated learning. arXiv e-prints, 2107 (2021)"},{"issue":"8","key":"4629_CR9","doi-asserted-by":"publisher","first-page":"6904","DOI":"10.1109\/JIOT.2020.3036583","volume":"8","author":"K Li","year":"2020","unstructured":"Li, K., Luo, G., Ye, Y., Li, W., Ji, S., Cai, Z.: Adversarial privacy-preserving graph embedding against inference attack. IEEE Internet Things J. 8(8), 6904\u20136915 (2020)","journal-title":"IEEE Internet Things J."},{"issue":"8","key":"4629_CR10","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3551636","volume":"55","author":"Z Tian","year":"2022","unstructured":"Tian, Z., Cui, L., Liang, J., Yu, S.: A comprehensive survey on poisoning attacks and countermeasures in machine learning. ACM Comput. Surv. 55(8), 1\u201335 (2022)","journal-title":"ACM Comput. Surv."},{"key":"4629_CR11","doi-asserted-by":"publisher","DOI":"10.1016\/j.engappai.2023.107166","volume":"127","author":"TD Nguyen","year":"2024","unstructured":"Nguyen, T.D., Nguyen, T., Le Nguyen, P., Pham, H.H., Doan, K.D., Wong, K.-S.: Backdoor attacks and defenses in federated learning: survey, challenges and future research directions. Eng. Appl. Artif. Intell. 127, 107166 (2024)","journal-title":"Eng. Appl. Artif. Intell."},{"issue":"5","key":"4629_CR12","doi-asserted-by":"publisher","first-page":"2672","DOI":"10.1109\/TPAMI.2023.3322785","volume":"46","author":"KN Kumar","year":"2024","unstructured":"Kumar, K.N., Mohan, C.K., Cenkeramaddi, L.R.: The impact of adversarial attacks on federated learning: a survey. IEEE Trans Pattern Anal Mach Intell 46(5), 2672\u20132691 (2024).\nhttps:\/\/doi.org\/10.1109\/TPAMI.2023.3322785","journal-title":"IEEE Trans Pattern Anal Mach Intell"},{"issue":"2","key":"4629_CR13","doi-asserted-by":"publisher","first-page":"260","DOI":"10.3390\/electronics12020260","volume":"12","author":"HS Sikandar","year":"2023","unstructured":"Sikandar, H.S., Waheed, H., Tahir, S., Malik, S.U., Rafique, W.: A detailed survey on federated learning attacks and defenses. Electronics 12(2), 260 (2023)","journal-title":"Electronics"},{"issue":"2","key":"4629_CR14","doi-asserted-by":"publisher","first-page":"513","DOI":"10.1007\/s13042-022-01647-y","volume":"14","author":"J Wen","year":"2023","unstructured":"Wen, J., Zhang, Z., Lan, Y., Cui, Z., Cai, J., Zhang, W.: A survey on federated learning: challenges and applications. Int. J. Mach. Learn. Cybern. 14(2), 513\u2013535 (2023)","journal-title":"Int. J. Mach. Learn. Cybern."},{"key":"4629_CR15","doi-asserted-by":"crossref","unstructured":"Zhang, J., Zhu, H., Wang, F., Zhao, J., Xu, Q., Li, H., et al.: Security and privacy threats to federated learning: issues, methods, and challenges. Secur. Commun. Netw. 2022 (2022)","DOI":"10.1155\/2022\/2886795"},{"key":"4629_CR16","doi-asserted-by":"publisher","first-page":"10708","DOI":"10.1109\/ACCESS.2023.3238823","volume":"11","author":"G Xia","year":"2023","unstructured":"Xia, G., Chen, J., Yu, C., Ma, J.: Poisoning attacks in federated learning: a survey. IEEE Access 11, 10708\u201310722 (2023)","journal-title":"IEEE Access"},{"issue":"5","key":"4629_CR17","doi-asserted-by":"publisher","first-page":"3951","DOI":"10.1007\/s10462-022-10271-9","volume":"56","author":"A Qammar","year":"2023","unstructured":"Qammar, A., Karim, A., Ning, H., Ding, J.: Securing federated learning with blockchain: a systematic literature review. Artif. Intell. Rev. 56(5), 3951\u20133985 (2023)","journal-title":"Artif. Intell. Rev."},{"key":"4629_CR18","unstructured":"McMahan, B., Moore, E., Ramage, D., Hampson, S., Arcas, B.A.: Communication-efficient learning of deep networks from decentralized data. In: Artificial Intelligence and Statistics, pp. 1273\u20131282 (2017). PMLR"},{"key":"4629_CR19","doi-asserted-by":"crossref","unstructured":"Dwork, C.: Differential privacy. In: International Colloquium on Automata, Languages, and Programming, pp. 1\u201312 (2006). Springer","DOI":"10.1007\/11787006_1"},{"key":"4629_CR20","doi-asserted-by":"crossref","unstructured":"Paillier, P.: Public-key cryptosystems based on composite degree residuosity classes. In: International Conference on the Theory and Applications of Cryptographic Techniques, pp. 223\u2013238 (1999). Springer","DOI":"10.1007\/3-540-48910-X_16"},{"key":"4629_CR21","doi-asserted-by":"crossref","unstructured":"Gentry, C., Sahai, A., Waters, B.: Homomorphic encryption from learning with errors: conceptually-simpler, asymptotically-faster, attribute-based. In: Advances in Cryptology\u2013CRYPTO 2013: 33rd Annual Cryptology Conference, Santa Barbara, CA, USA, August 18\u201322, 2013. Proceedings, Part I, pp. 75\u201392 (2013). Springer","DOI":"10.1007\/978-3-642-40041-4_5"},{"issue":"1","key":"4629_CR22","doi-asserted-by":"publisher","first-page":"86","DOI":"10.1145\/3387108","volume":"64","author":"Y Lindell","year":"2020","unstructured":"Lindell, Y.: Secure multiparty computation. Commun. ACM 64(1), 86\u201396 (2020)","journal-title":"Commun. ACM"},{"key":"4629_CR23","doi-asserted-by":"crossref","unstructured":"Zheng, Z., Xie, S., Dai, H., Chen, X., Wang, H.: An overview of blockchain technology: architecture, consensus, and future trends. In: 2017 IEEE International Congress on Big Data (BigData Congress), pp. 557\u2013564 (2017). IEEE","DOI":"10.1109\/BigDataCongress.2017.85"},{"key":"4629_CR24","doi-asserted-by":"crossref","unstructured":"Rodr\u00edguez\u00a0Barroso, N., Jim\u00e9nez\u00a0L\u00f3pez, D., Luz\u00f3n\u00a0Garc\u00eda, M.V., Herrera\u00a0Triguero, F., Mart\u00ednez\u00a0C\u00e1mara, E., et al.: Survey on federated learning threats: concepts, taxonomy on attacks and defences, experimental study and challenges (2022)","DOI":"10.1016\/j.inffus.2022.09.011"},{"key":"4629_CR25","unstructured":"Shafahi, A., Huang, W.R., Najibi, M., Suciu, O., Studer, C., Dumitras, T., Goldstein, T.: Poison frogs! targeted clean-label poisoning attacks on neural networks. Adv. Neural Inf. Process. Syst. 31 (2018)"},{"key":"4629_CR26","doi-asserted-by":"crossref","unstructured":"Tolpegin, V., Truex, S., Gursoy, M.E., Liu, L.: Data poisoning attacks against federated learning systems. In: Computer Security\u2013ESORICS 2020: 25th European Symposium on Research in Computer Security, ESORICS 2020, Guildford, UK, September 14\u201318, 2020, Proceedings, Part I 25, pp. 480\u2013501 (2020). Springer","DOI":"10.1007\/978-3-030-58951-6_24"},{"key":"4629_CR27","doi-asserted-by":"crossref","unstructured":"Shejwalkar, V., Houmansadr, A., Kairouz, P., Ramage, D.: Back to the drawing board: a critical evaluation of poisoning attacks on production federated learning. In: 2022 IEEE Symposium on Security and Privacy (SP), pp. 1354\u20131371 (2022). IEEE","DOI":"10.1109\/SP46214.2022.9833647"},{"issue":"5","key":"4629_CR28","doi-asserted-by":"publisher","first-page":"3310","DOI":"10.1109\/JIOT.2020.3023126","volume":"8","author":"J Zhang","year":"2020","unstructured":"Zhang, J., Chen, B., Cheng, X., Binh, H.T.T., Yu, S.: Poisongan: Generative poisoning attacks against federated learning in edge computing systems. IEEE Internet Things J. 8(5), 3310\u20133322 (2020)","journal-title":"IEEE Internet Things J."},{"key":"4629_CR29","unstructured":"Fang, M., Cao, X., Jia, J., Gong, N.Z.: Local model poisoning attacks to byzantine-robust federated learning. In: Proceedings of the 29th USENIX Conference on Security Symposium, pp. 1623\u20131640 (2020)"},{"key":"4629_CR30","unstructured":"Bagdasaryan, E., Veit, A., Hua, Y., Estrin, D., Shmatikov, V.: How to backdoor federated learning. In: The 23rd International Conference on Artificial Intelligence and Statistics, AISTATS 2020 (2020)"},{"key":"4629_CR31","doi-asserted-by":"crossref","unstructured":"Shejwalkar, V., Houmansadr, A.: Manipulating the byzantine: optimizing model poisoning attacks and defenses for federated learning. In: NDSS (2021)","DOI":"10.14722\/ndss.2021.24498"},{"key":"4629_CR32","unstructured":"Blanchard, P., El\u00a0Mhamdi, E.M., Guerraoui, R., Stainer, J.: Machine learning with adversaries: Byzantine tolerant gradient descent. Adv. Neural Inf. Process. Syst. 30 (2017)"},{"key":"4629_CR33","unstructured":"Yin, D., Chen, Y., Kannan, R., Bartlett, P.: Byzantine-robust distributed learning: towards optimal statistical rates. In: International Conference on Machine Learning, pp. 5650\u20135659 (2018). PMLR"},{"key":"4629_CR34","unstructured":"Guerraoui, R., Rouault, S., et al.: The hidden vulnerability of distributed learning in byzantium. In: International Conference on Machine Learning, pp. 3521\u20133530 (2018). PMLR"},{"key":"4629_CR35","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2022.110178","volume":"260","author":"NM Jebreel","year":"2023","unstructured":"Jebreel, N.M., Domingo-Ferrer, J.: Fl-defender: combating targeted attacks in federated learning. Knowl. Based Syst. 260, 110178 (2023)","journal-title":"Knowl. Based Syst."},{"key":"4629_CR36","unstructured":"Fung, C., Yoon, C.J., Beschastnikh, I.: The limitations of federated learning in sybil settings. In: 23rd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2020), pp. 301\u2013316 (2020)"},{"key":"4629_CR37","doi-asserted-by":"crossref","unstructured":"Awan, S., Luo, B., Li, F.: Contra: defending against poisoning attacks in federated learning. In: Computer Security\u2013ESORICS 2021: 26th European Symposium on Research in Computer Security, Darmstadt, Germany, October 4\u20138, 2021, Proceedings, Part I 26, pp. 455\u2013475 (2021). Springer","DOI":"10.1007\/978-3-030-88418-5_22"},{"key":"4629_CR38","doi-asserted-by":"crossref","unstructured":"Cao, D., Chang, S., Lin, Z., Liu, G., Sun, D.: Understanding distributed poisoning attack in federated learning. In: 2019 IEEE 25th International Conference on Parallel and Distributed Systems (ICPADS), pp. 233\u2013239 (2019). IEEE","DOI":"10.1109\/ICPADS47876.2019.00042"},{"key":"4629_CR39","doi-asserted-by":"crossref","unstructured":"Huang, S., Li, Y., Chen, C., Shi, L., Gao, Y.: Multi-metrics adaptively identifies backdoors in federated learning. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision, pp. 4652\u20134662 (2023)","DOI":"10.1109\/ICCV51070.2023.00429"},{"key":"4629_CR40","unstructured":"Fang, M., Cao, X., Jia, J., Gong, N.: Local model poisoning attacks to $$\\{$$Byzantine-Robust$$\\}$$ federated learning. In: 29th USENIX Security Symposium (USENIX Security 20), pp. 1605\u20131622 (2020)"},{"key":"4629_CR41","doi-asserted-by":"crossref","unstructured":"Uprety, A., Rawat, D.B.: Mitigating poisoning attack in federated learning. In: 2021 IEEE Symposium Series on Computational Intelligence (SSCI), pp. 01\u201307 (2021). IEEE","DOI":"10.1109\/SSCI50451.2021.9659839"},{"key":"4629_CR42","doi-asserted-by":"crossref","unstructured":"Zhao, Y., Chen, J., Zhang, J., Wu, D., Teng, J., Yu, S.: Pdgan: A novel poisoning defense method in federated learning using generative adversarial network. In: Algorithms and Architectures for Parallel Processing: 19th International Conference, ICA3PP 2019, Melbourne, VIC, Australia, December 9\u201311, 2019, Proceedings, Part I 19, pp. 595\u2013609 (2020). Springer","DOI":"10.1007\/978-3-030-38991-8_39"},{"issue":"10","key":"4629_CR43","doi-asserted-by":"publisher","first-page":"1105","DOI":"10.3390\/e22101105","volume":"22","author":"EM Mirkes","year":"2020","unstructured":"Mirkes, E.M., Allohibi, J., Gorban, A.: Fractional norms and quasinorms do not help to overcome the curse of dimensionality. Entropy 22(10), 1105 (2020)","journal-title":"Entropy"},{"key":"4629_CR44","unstructured":"Sun, Z., Kairouz, P., Suresh, A.T., McMahan, H.B.: Can you really backdoor federated learning? arXiv preprint arXiv:1911.07963 (2019)"},{"key":"4629_CR45","unstructured":"Naseri, M., Hayes, J., De\u00a0Cristofaro, E.: Local and central differential privacy for robustness and privacy in federated learning. arXiv preprint arXiv:2009.03561 (2020)"},{"key":"4629_CR46","doi-asserted-by":"crossref","unstructured":"Rathee, M., Shen, C., Wagh, S., Popa, R.A.: Elsa: Secure aggregation for federated learning with malicious actors. In: 2023 IEEE Symposium on Security and Privacy (SP), pp. 1961\u20131979 (2023). IEEE","DOI":"10.1109\/SP46215.2023.10179468"},{"issue":"5","key":"4629_CR47","doi-asserted-by":"publisher","DOI":"10.1007\/s11704-023-3142-5","volume":"18","author":"X Gao","year":"2024","unstructured":"Gao, X., Fu, S., Liu, L., Luo, Y.: Bvdfed: Byzantine-resilient and verifiable aggregation for differentially private federated learning. Front. Comput. Sci. 18(5), 185810 (2024)","journal-title":"Front. Comput. Sci."},{"issue":"7","key":"4629_CR48","doi-asserted-by":"publisher","first-page":"1513","DOI":"10.1109\/TPDS.2020.3044223","volume":"32","author":"M Shayan","year":"2021","unstructured":"Shayan, M., Fung, C., Yoon, C.J.M., Beschastnikh, I.: Biscotti: a blockchain system for private and secure federated learning. IEEE Trans. Parallel Distrib. Syst. 32(7), 1513\u20131525 (2021). https:\/\/doi.org\/10.1109\/TPDS.2020.3044223","journal-title":"IEEE Trans. Parallel Distrib. Syst."},{"key":"4629_CR49","doi-asserted-by":"crossref","unstructured":"Jiang, W., Fu, S., Luo, Y., Liu, L., Wang, Y.: Byzantine-robust privacy-preserving federated learning based on dt-pkc. In: International Conference on Frontiers in Cyber Security, pp. 205\u2013219 (2023). Springer","DOI":"10.1007\/978-981-99-9331-4_14"},{"key":"4629_CR50","doi-asserted-by":"publisher","first-page":"4574","DOI":"10.1109\/TIFS.2021.3108434","volume":"16","author":"X Liu","year":"2021","unstructured":"Liu, X., Li, H., Xu, G., Chen, Z., Huang, X., Lu, R.: Privacy-enhanced federated learning against poisoning adversaries. IEEE IEEE Trans. Inf. Forensics Secur. 16, 4574\u20134588 (2021)","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"4629_CR51","doi-asserted-by":"crossref","unstructured":"Chen, X., Xu, C., Dou, B., Zhang, P.: Ppapafl: a novel approach to privacy protection and anti-poisoning attacks in federated learning. In: International Conference on Testbeds and Research Infrastructures, pp. 117\u2013138 (2023). Springer","DOI":"10.1007\/978-3-031-51399-2_7"},{"key":"4629_CR52","doi-asserted-by":"publisher","first-page":"1639","DOI":"10.1109\/TIFS.2022.3169918","volume":"17","author":"Z Ma","year":"2022","unstructured":"Ma, Z., Ma, J., Miao, Y., Li, Y., Deng, R.H.: Shieldfl: mitigating model poisoning attacks in privacy-preserving federated learning. IEEE Trans. Inf. Forensics Secur. 17, 1639\u20131654 (2022)","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"4629_CR53","doi-asserted-by":"publisher","first-page":"2848","DOI":"10.1109\/TIFS.2022.3196274","volume":"17","author":"Y Miao","year":"2022","unstructured":"Miao, Y., Liu, Z., Li, H., Choo, K.-K.R., Deng, R.H.: Privacy-preserving byzantine-robust federated learning via blockchain systems. IEEE Trans. Inf. Forensics Secur. 17, 2848\u20132861 (2022)","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"4629_CR54","doi-asserted-by":"publisher","first-page":"5749","DOI":"10.1109\/TIFS.2023.3315125","volume":"18","author":"X Chen","year":"2023","unstructured":"Chen, X., Yu, H., Jia, X., Yu, X.: APFed: anti-poisoning attacks in privacy-preserving heterogeneous federated learning. IEEE Trans. Inf. Forensics Secur. 18, 5749\u20135761 (2023). https:\/\/doi.org\/10.1109\/TIFS.2023.3315125","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"4629_CR55","doi-asserted-by":"publisher","first-page":"120377","DOI":"10.1016\/j.ins.2024.120377","volume":"665","author":"Y Ren","year":"2024","unstructured":"Ren, Y., Hu, M., Yang, Z., Feng, G., Zhang, X.: BPFL: blockchain-based privacy-preserving federated learning against poisoning attack. Inf. Sci. 665, 120377 (2024). https:\/\/doi.org\/10.1016\/j.ins.2024.120377","journal-title":"Inf. Sci."},{"issue":"2","key":"4629_CR56","doi-asserted-by":"publisher","first-page":"889","DOI":"10.1109\/TDSC.2023.3264697","volume":"21","author":"C Dong","year":"2023","unstructured":"Dong, C., Weng, J., Li, M., Liu, J.-N., Liu, Z., Cheng, Y., Yu, S.: Privacy-preserving and byzantine-robust federated learning.IEEE Trans. Depend. Secure Comput. 21(2), 889\u2013904 (2023). https:\/\/doi.org\/10.1109\/TDSC.2023.3264697","journal-title":"IEEE Trans. Depend. Secure Comput."},{"key":"4629_CR57","doi-asserted-by":"crossref","unstructured":"Dong, Y., Chen, X., Li, K., Wang, D., Zeng, S.: Flod: Oblivious defender for private byzantine-robust federated learning with dishonest-majority. In: European Symposium on Research in Computer Security, pp. 497\u2013518 (2021). Springer","DOI":"10.1007\/978-3-030-88418-5_24"},{"key":"4629_CR58","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2023.122210","volume":"238","author":"H Kasyap","year":"2024","unstructured":"Kasyap, H., Tripathy, S.: Privacy-preserving and byzantine-robust federated learning framework using permissioned blockchain. Expert Syst. Appl. 238, 122210 (2024)","journal-title":"Expert Syst. Appl."},{"key":"4629_CR59","doi-asserted-by":"publisher","unstructured":"Feng, X., Cheng, W., Cao, C., Wang, L., Sheng, V.S.: Dpfla: defending private federated learning against poisoning attacks. IEEE Trans. Services Computing, 1\u201312 (2024) https:\/\/doi.org\/10.1109\/TSC.2024.3376255","DOI":"10.1109\/TSC.2024.3376255"},{"key":"4629_CR60","unstructured":"Nguyen, T.D., Rieger, P., Chen, H., Yalame, H., M\u00f6llering, H., Fereidooni, H., Marchal, S., Miettinen, M., Mirhoseini, A., Zeitouni, S., et al.: Flame: Taming backdoors in federated learning. In: USENIX Security Symposium (2022)"},{"issue":"1","key":"4629_CR61","doi-asserted-by":"publisher","first-page":"234","DOI":"10.1109\/MNET.011.2000263","volume":"35","author":"Y Li","year":"2021","unstructured":"Li, Y., Chen, C., Liu, N., Huang, H., Zheng, Z., Yan, Q.: A blockchain-based decentralized federated learning framework with committee consensus. IEEE Netw. 35(1), 234\u2013241 (2021). https:\/\/doi.org\/10.1109\/MNET.011.2000263","journal-title":"IEEE Netw."},{"key":"4629_CR62","doi-asserted-by":"publisher","first-page":"807","DOI":"10.1007\/s00778-024-00839-y","volume":"33","author":"H Lin","year":"2024","unstructured":"Lin, H., Chen, K., Jiang, D., Shou, L., Chen, G.: Refiner: a reliable and efficient incentive-driven federated learning system powered by blockchain. VLDB J. 33, 807\u2013831 (2024). https:\/\/doi.org\/10.1007\/s00778-024-00839-y","journal-title":"VLDB J."},{"key":"4629_CR63","doi-asserted-by":"publisher","unstructured":"Zhao, J., Zhu, H., Wang, F., Zheng, Y., Lu, R., Li, H.: Efficient and privacy-preserving federated learning against poisoning adversaries. IEEE Trans. Serv. Comput. 1\u201314 (2024) https:\/\/doi.org\/10.1109\/TSC.2024.3377931","DOI":"10.1109\/TSC.2024.3377931"},{"key":"4629_CR64","unstructured":"Nasr, M., Shokri, R., Houmansadr, A.: Comprehensive privacy analysis of deep learning. In: Proceedings of the 2019 IEEE Symposium on Security and Privacy (SP), pp. 1\u201315 (2018)"},{"key":"4629_CR65","doi-asserted-by":"crossref","unstructured":"Abadi, M., Chu, A., Goodfellow, I., McMahan, H.B., Mironov, I., Talwar, K., Zhang, L.: Deep learning with differential privacy. In: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, pp. 308\u2013318 (2016)","DOI":"10.1145\/2976749.2978318"},{"key":"4629_CR66","doi-asserted-by":"publisher","unstructured":"Benesty, J., Chen, J., Huang, Y., Cohen, I.: Pearson Correlation Coefficient, pp. 1\u20134 (2009). Springer, Berlin, Heidelberg. https:\/\/doi.org\/10.1007\/978-3-642-00296-0_5","DOI":"10.1007\/978-3-642-00296-0_5"},{"key":"4629_CR67","unstructured":"Shi, Y., Liang, J., Zhang, W., Tan, V.Y., Bai, S.: Towards understanding and mitigating dimensional collapse in heterogeneous federated learning. arXiv preprint arXiv:2210.00226 (2022)"},{"issue":"11","key":"4629_CR68","doi-asserted-by":"publisher","first-page":"2401","DOI":"10.1109\/TIFS.2016.2573770","volume":"11","author":"X Liu","year":"2016","unstructured":"Liu, X., Deng, R.H., Choo, K.-K.R., Weng, J.: An efficient privacy-preserving outsourced calculation toolkit with multiple keys. IEEE Trans. Inf. Forensics Secur. 11(11), 2401\u20132414 (2016)","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"issue":"1","key":"4629_CR69","doi-asserted-by":"publisher","first-page":"27","DOI":"10.1109\/TDSC.2016.2536601","volume":"15","author":"X Liu","year":"2016","unstructured":"Liu, X., Choo, K.-K.R., Deng, R.H., Lu, R., Weng, J.: Efficient and privacy-preserving outsourced calculation of rational numbers. IEEE Trans. Depend. Secure Comput. 15(1), 27\u201339 (2016)","journal-title":"IEEE Trans. Depend. Secure Comput."},{"issue":"8","key":"4629_CR70","doi-asserted-by":"publisher","first-page":"3710","DOI":"10.1109\/TNNLS.2020.3015958","volume":"32","author":"F Sattler","year":"2020","unstructured":"Sattler, F., M\u00fcller, K.-R., Samek, W.: Clustered federated learning: model-agnostic distributed multitask optimization under privacy constraints. IEEE Trans. Neural Netw. Learn. Syst. 32(8), 3710\u20133722 (2020)","journal-title":"IEEE Trans. Neural Netw. Learn. Syst."},{"issue":"11","key":"4629_CR71","doi-asserted-by":"publisher","first-page":"205","DOI":"10.21105\/joss.00205","volume":"2","author":"L McInnes","year":"2017","unstructured":"McInnes, L., Healy, J., Astels, S.: hdbscan: Hierarchical density based clustering. J. Open Source Softw. 2(11), 205 (2017)","journal-title":"J. Open Source Softw."},{"key":"4629_CR72","doi-asserted-by":"crossref","unstructured":"Ma, Y., Zhu, X., Hsu, J.: Data poisoning against differentially-private learners: attacks and defenses. arXiv preprint arXiv:1903.09860 (2019)","DOI":"10.24963\/ijcai.2019\/657"},{"key":"4629_CR73","doi-asserted-by":"crossref","unstructured":"Liu, G., Ma, X., Yang, Y., Wang, C., Liu, J.: Federaser: enabling efficient client-level data removal from federated learning models. In: 2021 IEEE\/ACM 29th International Symposium on Quality of Service (IWQOS), pp. 1\u201310 (2021). IEEE","DOI":"10.1109\/IWQOS52092.2021.9521274"},{"key":"4629_CR74","doi-asserted-by":"crossref","unstructured":"Liu, Y., Fan, M., Chen, C., Liu, X., Ma, Z., Wang, L., Ma, J.: Backdoor defense with machine unlearning. In: IEEE INFOCOM 2022-IEEE Conference on Computer Communications, pp. 280\u2013289 (2022). IEEE","DOI":"10.1109\/INFOCOM48880.2022.9796974"}],"container-title":["Cluster Computing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10586-024-04629-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10586-024-04629-7\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10586-024-04629-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,27]],"date-time":"2024-09-27T22:03:26Z","timestamp":1727474606000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10586-024-04629-7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,7,1]]},"references-count":74,"journal-issue":{"issue":"10","published-print":{"date-parts":[[2024,12]]}},"alternative-id":["4629"],"URL":"https:\/\/doi.org\/10.1007\/s10586-024-04629-7","relation":{},"ISSN":["1386-7857","1573-7543"],"issn-type":[{"value":"1386-7857","type":"print"},{"value":"1573-7543","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,7,1]]},"assertion":[{"value":"9 November 2023","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"11 June 2024","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"12 June 2024","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"1 July 2024","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare that they do not have any conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}]}}