{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,22]],"date-time":"2025-10-22T23:19:45Z","timestamp":1761175185304,"version":"build-2065373602"},"reference-count":49,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2025,10,22]],"date-time":"2025-10-22T00:00:00Z","timestamp":1761091200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"},{"start":{"date-parts":[[2025,10,22]],"date-time":"2025-10-22T00:00:00Z","timestamp":1761091200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"}],"funder":[{"DOI":"10.13039\/501100012226","name":"Fundamental Research Funds for the Central Universities","doi-asserted-by":"publisher","award":["2024JBZY10"],"award-info":[{"award-number":["2024JBZY10"]}],"id":[{"id":"10.13039\/501100012226","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61872028"],"award-info":[{"award-number":["61872028"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Discov Computing"],"DOI":"10.1007\/s10791-025-09742-8","type":"journal-article","created":{"date-parts":[[2025,10,22]],"date-time":"2025-10-22T08:04:39Z","timestamp":1761120279000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Peak-controlled logits poisoning attack in federated distillation"],"prefix":"10.1007","volume":"28","author":[{"given":"Yuhan","family":"Tang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhiyuan","family":"Wu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bo","family":"Gao","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tian","family":"Wen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yuwei","family":"Wang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sheng","family":"Sun","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,10,22]]},"reference":[{"key":"9742_CR1","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3339474","volume":"10","author":"Q Yang","year":"2019","unstructured":"Yang Q, Liu Y, Chen T, Tong Y. Federated machine learning: concept and applications. ACM Transactions on Intelligent Systems and Technology (TIST). 2019;10:1\u201319.","journal-title":"ACM Transactions on Intelligent Systems and Technology (TIST)"},{"key":"9742_CR2","unstructured":"McMahan B, Moore E, Ramage D, Hampson S & y\u00a0Arcas B\u00a0A . Communication-efficient learning of deep networks from decentralized data 2017:1273\u20131282."},{"key":"9742_CR3","first-page":"429","volume":"2","author":"T Li","year":"2020","unstructured":"Li T, et al. Federated optimization in heterogeneous networks. Proceedings of Machine Learning and Systems. 2020;2:429\u201350.","journal-title":"Proceedings of Machine Learning and Systems"},{"key":"9742_CR4","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1561\/2200000083","volume":"14","author":"P Kairouz","year":"2021","unstructured":"Kairouz P, et al. Advances and open problems in federated learning. Foundations and Trends\u00ae in Machine Learning. 2021;14:1\u2013210.","journal-title":"Foundations and Trends\u00ae in Machine Learning"},{"key":"9742_CR5","first-page":"1","volume":"13","author":"C Wu","year":"2022","unstructured":"Wu C, Wu F, Lyu L, Huang Y, Xie X. Communication-efficient federated learning via knowledge distillation. Nat Commun. 2022;13:1\u20138.","journal-title":"Nat Commun"},{"key":"9742_CR6","unstructured":"Wang Y, Lin L & Chen J. Communication-efficient adaptive federated learning 2022:22802\u201322838 ."},{"key":"9742_CR7","doi-asserted-by":"crossref","unstructured":"Tan A\u00a0Z, Yu H, Cui L & Yang Q. Towards personalized federated learning.  IEEE Transactions on Neural Networks and Learning Systems 2022.","DOI":"10.1109\/TNNLS.2022.3160699"},{"key":"9742_CR8","doi-asserted-by":"publisher","first-page":"252","DOI":"10.1109\/MNET.011.2000478","volume":"35","author":"A Tak","year":"2020","unstructured":"Tak A, Cherkaoui S. Federated edge learning: design issues and challenges. IEEE Network. 2020;35:252\u20138.","journal-title":"IEEE Network"},{"key":"9742_CR9","unstructured":"Jeong E et\u00a0al. Communication-efficient on-device machine learning: Federated distillation and augmentation under non-iid private data.  arXiv preprint arXiv: 1811.11479 2018."},{"key":"9742_CR10","unstructured":"Itahara S, Nishio T, Koda Y, Morikura M & Yamamoto K Distillation-based semi-supervised federated learning for communication-efficient collaborative training with non-iid private data.  IEEE Transactions on Mobile Computing 2021:1\u20131 ."},{"key":"9742_CR11","unstructured":"Li L, Gou J, Yu B, Du L & Tao Z Y\u00a0D. Federated distillation: A survey. arXiv preprint arXiv: 2404.08564 2024."},{"key":"9742_CR12","doi-asserted-by":"crossref","unstructured":"Wu Z. et\u00a0al. Fedcache: A knowledge cache-driven federated learning architecture for personalized edge intelligence.  IEEE Transactions on Mobile Computing 2024.","DOI":"10.36227\/techrxiv.23255420.v4"},{"key":"9742_CR13","unstructured":"Li D & Wang J. Fedmd: Heterogenous federated learning via model distillation. arXiv preprint arXiv: 1910.03581 2019."},{"key":"9742_CR14","unstructured":"Wu Z et\u00a0al. Fedict: Federated multi-task distillation for multi-access edge computing.  IEEE Transactions on Parallel and Distributed Systems 2023:1\u201316 ."},{"key":"9742_CR15","unstructured":"Hinton G, Vinyals O. & Dean J. Distilling the knowledge in a neural network.  arXiv preprint arXiv: 1503.02531 2015."},{"key":"9742_CR16","doi-asserted-by":"crossref","unstructured":"Wang, L. & Yoon, K.-J. Knowledge distillation and student-teacher learning for visual intelligence: A review and new outlooks.  IEEE Transactions on Pattern Analysis and Machine Intelligence ( 2021).","DOI":"10.1109\/TPAMI.2021.3055564"},{"key":"9742_CR17","doi-asserted-by":"crossref","unstructured":"Wu Z. et\u00a0al. Spirit distillation: A model compression method with multi-domain knowledge transfer 2021:553\u2013565.","DOI":"10.1007\/978-3-030-82136-4_45"},{"key":"9742_CR18","doi-asserted-by":"crossref","unstructured":"Deng, Y. et\u00a0al. A hierarchical knowledge transfer framework for heterogeneous federated learning 2023:1\u201310 .","DOI":"10.1109\/INFOCOM53939.2023.10228954"},{"key":"9742_CR19","first-page":"10092","volume":"34","author":"J Zhang","year":"2021","unstructured":"Zhang J, et al. Parameterized knowledge transfer for personalized federated learning. Adv Neural Inf Process Syst. 2021;34:10092\u2013104.","journal-title":"Adv Neural Inf Process Syst"},{"key":"9742_CR20","first-page":"14068","volume":"33","author":"C He","year":"2020","unstructured":"He C, Annavaram M, Avestimehr S. Group knowledge transfer: federated learning of large cnns at the edge. Adv Neural Inf Process Syst. 2020;33:14068\u201380.","journal-title":"Adv Neural Inf Process Syst"},{"key":"9742_CR21","doi-asserted-by":"publisher","unstructured":"Cho Y\u00a0J, Manoel A, Joshi G, Sim R & Dimitriadis D, Raedt L\u00a0D (ed.)  Heterogeneous ensemble knowledge transfer for training large models in federated learning. (ed.Raedt, L.\u00a0D.) Proceedings of the Thirty-First International Joint Conference on Artificial Intelligence, IJCAI-22, 2881\u20132887. Morgan Kaufmann (International Joint Conferences on Artificial Intelligence, 2022). https:\/\/doi.org\/10.24963\/ijcai.2022\/399.","DOI":"10.24963\/ijcai.2022\/399"},{"key":"9742_CR22","unstructured":"Cheng S, Wu J, Xiao Y & Liu Y Fedgems: Federated learning of larger server models via selective knowledge fusion.  arXiv preprint arXiv: 2110.11027 2021."},{"key":"9742_CR23","doi-asserted-by":"crossref","unstructured":"Wu Z et\u00a0al. Agglomerative federated learning: Empowering larger model training via end-edge-cloud collaboration.  arXiv preprint arXiv: 2312.11489 2023.","DOI":"10.36227\/techrxiv.24720759.v1"},{"key":"9742_CR24","doi-asserted-by":"crossref","unstructured":"Huang W, Ye M & Du B. Learn from others and be yourself in heterogeneous federated learning 2022:10143\u201310153 .","DOI":"10.1109\/CVPR52688.2022.00990"},{"key":"9742_CR25","doi-asserted-by":"crossref","unstructured":"Tang Y. et\u00a0al. Logits poisoning attack in federated distillation.  International Conference on Knowledge Science, Engineering and Management 2024.","DOI":"10.22541\/au.172481353.38743189\/v1"},{"key":"9742_CR26","doi-asserted-by":"publisher","first-page":"11365","DOI":"10.1109\/JIOT.2021.3128646","volume":"9","author":"G Sun","year":"2021","unstructured":"Sun G, et al. Data poisoning attacks on federated machine learning. IEEE Internet Things J. 2021;9:11365\u201375.","journal-title":"IEEE Internet Things J"},{"key":"9742_CR27","doi-asserted-by":"publisher","first-page":"e13161","DOI":"10.1111\/exsy.13161","volume":"40","author":"J Yang","year":"2023","unstructured":"Yang J, et al. Clean-label poisoning attacks on federated learning for iot. Expert Syst. 2023;40:e13161.","journal-title":"Expert Syst"},{"key":"9742_CR28","doi-asserted-by":"crossref","unstructured":"Gong X, Chen Y, Wang Q. & Kong W. Backdoor attacks and defenses in federated learning: State-of-the-art, taxonomy, and future directions.  IEEE Wireless Communications 2022.","DOI":"10.1109\/MWC.017.2100714"},{"key":"9742_CR29","doi-asserted-by":"crossref","unstructured":"Cao X & Gong N\u00a0Z. Mpaf: Model poisoning attacks to federated learning based on fake clients 2022:3396\u20133404 .","DOI":"10.1109\/CVPRW56347.2022.00383"},{"key":"9742_CR30","doi-asserted-by":"crossref","unstructured":"Sun W, Gao B, Xiong K, Lu Y & Wang Y. Vaguegan: A gan-based data poisoning attack against federated learning systems 2023:321\u2013329 .","DOI":"10.1109\/SECON58729.2023.10287523"},{"key":"9742_CR31","unstructured":"Wang Z et\u00a0al. Poisoning attacks and defenses in recommender systems: A survey.  arXiv preprint arXiv: 2406.01022 2024."},{"key":"9742_CR32","doi-asserted-by":"publisher","unstructured":"Yuan W. et\u00a0al. Federated unlearning for on-device recommendation 2023:393\u2013401 . https:\/\/doi.org\/10.1145\/3539597.3570463.","DOI":"10.1145\/3539597.3570463"},{"key":"9742_CR33","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s11432-024-4272-y","volume":"68","author":"W Yuan","year":"2025","unstructured":"Yuan W, et al. Robust federated contrastive recommender system against targeted model poisoning attack. SCIENCE CHINA Inf Sci. 2025;68:1\u201316.","journal-title":"SCIENCE CHINA Inf Sci"},{"key":"9742_CR34","unstructured":"Zhao Y. et\u00a0al. Federated learning with non-iid data.  arXiv preprint arXiv: 1806.00582 2018."},{"key":"9742_CR35","first-page":"1","volume":"15","author":"Z Wu","year":"2024","unstructured":"Wu Z, et al. Exploring the distributed knowledge congruence in proxy-data-free federated distillation. ACM Transactions on Intelligent Systems and Technology. 2024;15:1\u201334.","journal-title":"ACM Transactions on Intelligent Systems and Technology"},{"key":"9742_CR36","unstructured":"Pan Q. et\u00a0al. Fedcache 2.0: Exploiting the potential of distilled data in knowledge cache-driven federated learning.  arXiv preprint arXiv: 2405.13378 2024."},{"key":"9742_CR37","doi-asserted-by":"publisher","first-page":"2025","DOI":"10.1109\/TNSE.2021.3081748","volume":"9","author":"F Sattler","year":"2021","unstructured":"Sattler F, Marban A, Rischke R, Samek W. Cfd: communication-efficient federated distillation via soft-label quantization and delta coding. IEEE Transactions on Network Science and Engineering. 2021;9:2025\u201338.","journal-title":"IEEE Transactions on Network Science and Engineering"},{"key":"9742_CR38","doi-asserted-by":"publisher","first-page":"191","DOI":"10.1109\/TMC.2021.3070013","volume":"22","author":"S Itahara","year":"2021","unstructured":"Itahara S, Nishio T, Koda Y, Morikura M, Yamamoto K. Distillation-based semi-supervised federated learning for communication-efficient collaborative training with non-iid private data. IEEE Trans Mob Comput. 2021;22:191\u2013205.","journal-title":"IEEE Trans Mob Comput"},{"key":"9742_CR39","unstructured":"Yao D. et\u00a0al. F ed gkd: Towards heterogeneous federated learning via global knowledge distillation.  IEEE Transactions on Computers 2023."},{"key":"9742_CR40","unstructured":"Wu Z. et\u00a0al. Federated class-incremental learning with new-class augmented self-distillation.  arXiv preprint arXiv: 2401.00622 2024."},{"key":"9742_CR41","unstructured":"Mora A, Tenison I, Bellavista P, & Rish I. Knowledge distillation for federated learning: a practical guide.  arXiv preprint arXiv: 2211.04742 2022."},{"key":"9742_CR42","doi-asserted-by":"crossref","unstructured":"Wu Z. et\u00a0al. Survey of knowledge distillation in federated edge learning.  arXiv preprint arXiv: 2301.05849 2023.","DOI":"10.36227\/techrxiv.172710470.05138839\/v1"},{"key":"9742_CR43","unstructured":"Darlow L\u00a0N, Crowley E\u00a0J, Antoniou A, & Storkey A\u00a0J. Cinic-10 is not imagenet or cifar-10.  arXiv preprint arXiv: 1810.03505 2018."},{"key":"9742_CR44","unstructured":"Krizhevsky A, Hinton G. et\u00a0al. Learning multiple layers of features from tiny images 2009."},{"key":"9742_CR45","unstructured":"Netzer Y et\u00a0al. Reading digits in natural images with unsupervised feature learning 2011."},{"key":"9742_CR46","doi-asserted-by":"crossref","unstructured":"Tolpegin V, Truex S, Gursoy M\u00a0E & Liu L. Data poisoning attacks against federated learning systems 2020: 480\u2013501","DOI":"10.1007\/978-3-030-58951-6_24"},{"key":"9742_CR47","doi-asserted-by":"crossref","unstructured":"Upreti D, Kim H, Yang E & Seo C. Defending against label-flipping attacks in federated learning systems with umap 2022.","DOI":"10.21203\/rs.3.rs-1984301\/v1"},{"key":"9742_CR48","volume-title":"& Li, F","author":"S Awan","year":"2021","unstructured":"Awan S, Luo B. & Li, F. Contra: Defending against poisoning attacks in federated learning; 2021."},{"key":"9742_CR49","doi-asserted-by":"crossref","unstructured":"Li J, Zhang X & Zhao L. Robust federated learning based on metrics learning and unsupervised clustering for malicious data detection 2022.","DOI":"10.1145\/3476883.3520221"}],"container-title":["Discover Computing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10791-025-09742-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10791-025-09742-8\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10791-025-09742-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,22]],"date-time":"2025-10-22T08:04:58Z","timestamp":1761120298000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10791-025-09742-8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,22]]},"references-count":49,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2025,12]]}},"alternative-id":["9742"],"URL":"https:\/\/doi.org\/10.1007\/s10791-025-09742-8","relation":{},"ISSN":["2948-2992"],"issn-type":[{"value":"2948-2992","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,10,22]]},"assertion":[{"value":"23 February 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"30 September 2025","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"22 October 2025","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"Not applicable.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethics approval and consent to participate"}},{"value":"Not applicable.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Consent for publication"}},{"value":"The authors declare no competing interests.","order":4,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"227"}}