{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T21:19:29Z","timestamp":1783027169432,"version":"3.54.6"},"reference-count":47,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Expert Systems with Applications"],"published-print":{"date-parts":[[2026,12]]},"DOI":"10.1016\/j.eswa.2026.133244","type":"journal-article","created":{"date-parts":[[2026,6,11]],"date-time":"2026-06-11T19:27:22Z","timestamp":1781206042000},"page":"133244","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"PA","title":["Precise defense method against low-magnitude poisoning attack in industrial internet of things"],"prefix":"10.1016","volume":"331","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-2537-8129","authenticated-orcid":false,"given":"Ziyong","family":"Ran","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5458-541X","authenticated-orcid":false,"given":"Yu","family":"Yao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4215-3307","authenticated-orcid":false,"given":"Yao","family":"Shan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wenxuan","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wei","family":"Yang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yuming","family":"Hao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.eswa.2026.133244_bib0001","unstructured":"Chen, B., Carvalho, W., Baracaldo, N., Ludwig, H., Edwards, B., Lee, T., Molloy, I., & Srivastava, B. (2018). Detecting backdoor attacks on deep neural networks by activation clustering. arXiv: 1811.03728."},{"key":"10.1016\/j.eswa.2026.133244_bib0002","doi-asserted-by":"crossref","first-page":"3412","DOI":"10.1109\/TIFS.2021.3080522","article-title":"De-Pois: An attack-agnostic defense against data poisoning attacks","volume":"16","author":"Chen","year":"2021","journal-title":"IEEE Transactions on Information Forensics and Security"},{"key":"10.1016\/j.eswa.2026.133244_bib0003","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2024.125892","article-title":"Black-box backdoor attack with everyday physical object in mobile crowdsourcing","volume":"265","author":"Chen","year":"2025","journal-title":"Expert Systems with Applications"},{"issue":"13s","key":"10.1016\/j.eswa.2026.133244_bib0004","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3585385","article-title":"Wild patterns reloaded: A survey of machine learning security against training data poisoning","volume":"55","author":"Cin\u00e0","year":"2023","journal-title":"ACM Computing Surveys"},{"issue":"4","key":"10.1016\/j.eswa.2026.133244_bib0005","doi-asserted-by":"crossref","first-page":"2233","DOI":"10.1109\/TII.2014.2300753","article-title":"Internet of things in industries: A survey","volume":"10","author":"Da Xu","year":"2014","journal-title":"IEEE Transactions on industrial informatics"},{"key":"10.1016\/j.eswa.2026.133244_bib0006","series-title":"2025 iInternational conference on engineering, technology & management (ICETM)","first-page":"1","article-title":"IIoT security concerns: An extensive analysis of IIoT attacks and defences","author":"Diwan","year":"2025"},{"key":"10.1016\/j.eswa.2026.133244_bib0007","series-title":"2022 7th IEEE International conference on data science in cyberspace (DSC)","first-page":"48","article-title":"A survey on data poisoning attacks and defenses","author":"Fan","year":"2022"},{"key":"10.1016\/j.eswa.2026.133244_bib0008","doi-asserted-by":"crossref","first-page":"560","DOI":"10.1016\/j.aej.2024.08.048","article-title":"Utilizing correlation in space and time: Anomaly detection for industrial internet of things (IIoT) via spatiotemporal gated graph attention network","volume":"106","author":"Fan","year":"2024","journal-title":"Alexandria Engineering Journal"},{"key":"10.1016\/j.eswa.2026.133244_bib0009","unstructured":"Geiping, J., Fowl, L., Somepalli, G., Goldblum, M., Moeller, M., & Goldstein, T. (2021). What doesn\u2019t kill you makes you robust (er): How to adversarially train against data poisoning. arXiv preprint arXiv: 2102.13624."},{"issue":"2","key":"10.1016\/j.eswa.2026.133244_bib0010","doi-asserted-by":"crossref","first-page":"1563","DOI":"10.1109\/TPAMI.2022.3162397","article-title":"Dataset security for machine learning: Data poisoning, backdoor attacks, and defenses","volume":"45","author":"Goldblum","year":"2022","journal-title":"IEEE Transactions on Pattern Analysis and Machine Intelligence"},{"key":"10.1016\/j.eswa.2026.133244_bib0011","unstructured":"Goodfellow, I. J., Shlens, J., & Szegedy, C. (2014). Explaining and harnessing adversarial examples. arXiv preprint arXiv: 1412.6572."},{"key":"10.1016\/j.eswa.2026.133244_bib0012","doi-asserted-by":"crossref","first-page":"1749","DOI":"10.1109\/TIFS.2023.3251842","article-title":"Machine learning security in industry: A quantitative survey","volume":"18","author":"Grosse","year":"2023","journal-title":"IEEE Transactions on Information Forensics and Security"},{"key":"10.1016\/j.eswa.2026.133244_bib0013","unstructured":"Guo, W., Wang, L., Xing, X., Du, M., & Song, D. (2019). TABOR: A highly accurate approach to inspecting and restoring trojan backdoors in AI systems. arXiv preprint arXiv: 1908.01763."},{"issue":"5","key":"10.1016\/j.eswa.2026.133244_bib0014","doi-asserted-by":"crossref","first-page":"3562","DOI":"10.1109\/TII.2021.3112100","article-title":"Mitigating the backdoor attack by federated filters for industrial IoT applications","volume":"18","author":"Hou","year":"2021","journal-title":"IEEE Transactions on Industrial Informatics"},{"issue":"2","key":"10.1016\/j.eswa.2026.133244_bib0015","doi-asserted-by":"crossref","first-page":"685","DOI":"10.1109\/TDSC.2023.3261327","article-title":"A comprehensive defense framework against model extraction attacks","volume":"21","author":"Jiang","year":"2023","journal-title":"IEEE Transactions on Dependable and Secure Computing"},{"issue":"1","key":"10.1016\/j.eswa.2026.133244_bib0016","doi-asserted-by":"crossref","first-page":"8696","DOI":"10.1038\/s41598-025-93501-8","article-title":"An optimal federated learning-based intrusion detection for iot environment","volume":"15","author":"Karunamurthy","year":"2025","journal-title":"Scientific Reports"},{"issue":"3","key":"10.1016\/j.eswa.2026.133244_bib0017","doi-asserted-by":"crossref","first-page":"1417","DOI":"10.1109\/TSG.2016.2606888","article-title":"Implementation of a massively parallel dynamic security assessment platform for large-scale grids","volume":"8","author":"Konstantelos","year":"2016","journal-title":"IEEE Transactions on Smart Grid"},{"key":"10.1016\/j.eswa.2026.133244_bib0018","series-title":"Artificial intelligence safety and security","first-page":"99","article-title":"Adversarial examples in the physical world","author":"Kurakin","year":"2018"},{"key":"10.1016\/j.eswa.2026.133244_bib0019","unstructured":"Levine, A., & Feizi, S. (2020). Deep partition aggregation: Provable defense against general poisoning attacks. arXiv preprint arXiv: 2006.14768."},{"issue":"4","key":"10.1016\/j.eswa.2026.133244_bib0020","doi-asserted-by":"crossref","first-page":"805","DOI":"10.35833\/MPCE.2021.000161","article-title":"Edge-cloud computing systems for smart grid: State-of-the-art, architecture, and applications","volume":"10","author":"Li","year":"2022","journal-title":"Journal of Modern Power Systems and Clean Energy"},{"issue":"4","key":"10.1016\/j.eswa.2026.133244_bib0021","doi-asserted-by":"crossref","first-page":"1754","DOI":"10.1109\/TDSC.2023.3289446","article-title":"Defend data poisoning attacks on voice authentication","volume":"21","author":"Li","year":"2023","journal-title":"IEEE Transactions on Dependable and Secure Computing"},{"key":"10.1016\/j.eswa.2026.133244_bib0022","unstructured":"Li, Y., Lyu, X., Koren, N., Lyu, L., Li, B., & Ma, X. (2021). Neural attention distillation: Erasing backdoor triggers from deep neural networks. arXiv preprint arXiv: 2101.05930."},{"key":"10.1016\/j.eswa.2026.133244_bib0023","doi-asserted-by":"crossref","DOI":"10.1016\/j.knosys.2025.113117","article-title":"TF-Attack: Transferable and fast adversarial attacks on large language models","volume":"312","author":"Li","year":"2025","journal-title":"Knowledge-Based Systems"},{"key":"10.1016\/j.eswa.2026.133244_bib0024","doi-asserted-by":"crossref","first-page":"11947","DOI":"10.52202\/068431-0868","article-title":"Friendly noise against adversarial noise: A powerful defense against data poisoning attack","volume":"35","author":"Liu","year":"2022","journal-title":"Advances in Neural Information Processing Systems"},{"key":"10.1016\/j.eswa.2026.133244_bib0025","doi-asserted-by":"crossref","unstructured":"Ma, Y., Zhu, X., & Hsu, J. (2019). Data poisoning against differentially-private learners: Attacks and defenses. arXiv preprint arXiv: 1903.09860.","DOI":"10.24963\/ijcai.2019\/657"},{"key":"10.1016\/j.eswa.2026.133244_bib0026","unstructured":"Madry, A. (2017). Towards deep learning models resistant to adversarial attacks. arXiv preprint arXiv: 1706.06083."},{"key":"10.1016\/j.eswa.2026.133244_bib0027","doi-asserted-by":"crossref","DOI":"10.1016\/j.csa.2024.100068","article-title":"Federated learning-based intrusion detection system for the internet of things using unsupervised and supervised deep learning models","volume":"3","author":"Olanrewaju-George","year":"2025","journal-title":"Cyber Security and Applications"},{"key":"10.1016\/j.eswa.2026.133244_bib0028","doi-asserted-by":"crossref","first-page":"1767","DOI":"10.1109\/TIFS.2025.3530691","article-title":"ModelShield: Adaptive and robust watermark against model extraction attack","volume":"20","author":"Pang","year":"2025","journal-title":"IEEE Transactions on Information Forensics and Security"},{"key":"10.1016\/j.eswa.2026.133244_bib0029","series-title":"Computer vision\u2013ECCV 2020 workshops: Glasgow, UK, August 23\u201328, 2020, proceedings, Part I 16","first-page":"55","article-title":"Deep k-NN defense against clean-label data poisoning attacks","author":"Peri","year":"2020"},{"key":"10.1016\/j.eswa.2026.133244_bib0030","first-page":"6106","article-title":"Poison frogs! targeted clean-label poisoning attacks on neural networks","volume":"31","author":"Shafahi","year":"2018","journal-title":"Advances in Neural Information Processing Systems"},{"key":"10.1016\/j.eswa.2026.133244_bib0031","series-title":"31st USENIX security Symposium (USENIX security 22)","first-page":"3575","article-title":"Poison forensics: Traceback of data poisoning attacks in neural networks","author":"Shan","year":"2022"},{"issue":"19","key":"10.1016\/j.eswa.2026.133244_bib0032","doi-asserted-by":"crossref","first-page":"39991","DOI":"10.1109\/JIOT.2025.3587314","article-title":"PoisonCatcher: Revealing and identifying LDP poisoning attacks in IIoT","volume":"12","author":"Shuai","year":"2025","journal-title":"IEEE Internet of Things Journal"},{"key":"10.1016\/j.eswa.2026.133244_bib0033","first-page":"3520","article-title":"Certified defenses for data poisoning attacks","volume":"30","author":"Steinhardt","year":"2017","journal-title":"Advances in Neural Information Processing Systems"},{"issue":"13","key":"10.1016\/j.eswa.2026.133244_bib0034","doi-asserted-by":"crossref","first-page":"11365","DOI":"10.1109\/JIOT.2021.3128646","article-title":"Data poisoning attacks on federated machine learning","volume":"9","author":"Sun","year":"2021","journal-title":"IEEE Internet of Things Journal"},{"key":"10.1016\/j.eswa.2026.133244_bib0035","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2025.104442","article-title":"Robust intrusion detection based on personalized federated learning for IoT environment","volume":"154","author":"Sun","year":"2025","journal-title":"Computers & Security"},{"issue":"1","key":"10.1016\/j.eswa.2026.133244_bib0036","doi-asserted-by":"crossref","first-page":"1","DOI":"10.69709\/CAIC.2025.139199","article-title":"Security and privacy in the IIoT: Threats, possible security countermeasures, and future challenges","volume":"2","author":"Talu","year":"2025","journal-title":"Computing & AI Connect"},{"issue":"4","key":"10.1016\/j.eswa.2026.133244_bib0037","doi-asserted-by":"crossref","first-page":"2489","DOI":"10.1109\/COMST.2020.3011208","article-title":"A systematic survey of industrial internet of things security: Requirements and fog computing opportunities","volume":"22","author":"Tange","year":"2020","journal-title":"IEEE Communications Surveys & Tutorials"},{"key":"10.1016\/j.eswa.2026.133244_bib0038","series-title":"2019 IEEE Symposium on security and privacy (SP)","first-page":"707","article-title":"Neural cleanse: Identifying and mitigating backdoor attacks in neural networks","author":"Wang","year":"2019"},{"key":"10.1016\/j.eswa.2026.133244_bib0039","doi-asserted-by":"crossref","DOI":"10.1016\/j.trc.2024.104750","article-title":"Data poisoning attacks in intelligent transportation systems: A survey","volume":"165","author":"Wang","year":"2024","journal-title":"Transportation Research Part C: Emerging Technologies"},{"key":"10.1016\/j.eswa.2026.133244_bib0040","series-title":"Proceedings of the 2022 ACM on asia conference on computer and communications security","first-page":"337","article-title":"Model extraction attacks on graph neural networks: Taxonomy and realisation","author":"Wu","year":"2022"},{"issue":"8","key":"10.1016\/j.eswa.2026.133244_bib0041","doi-asserted-by":"crossref","first-page":"5244","DOI":"10.1109\/TII.2019.2952917","article-title":"LSTM learning with Bayesian and Gaussian processing for anomaly detection in industrial IoT","volume":"16","author":"Wu","year":"2019","journal-title":"IEEE Transactions on Industrial Informatics"},{"key":"10.1016\/j.eswa.2026.133244_bib0042","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2025.126632","article-title":"Boosting incremental intrusion detection system with adversarial samples","volume":"271","author":"Wu","year":"2025","journal-title":"Expert Systems with Applications"},{"issue":"11","key":"10.1016\/j.eswa.2026.133244_bib0043","doi-asserted-by":"crossref","first-page":"9936","DOI":"10.1002\/int.23022","article-title":"Towards explainable model extraction attacks","volume":"37","author":"Yan","year":"2022","journal-title":"International Journal of Intelligent Systems"},{"key":"10.1016\/j.eswa.2026.133244_bib0044","series-title":"International conference on machine learning","first-page":"25154","article-title":"Not all poisons are created equal: Robust training against data poisoning","author":"Yang","year":"2022"},{"key":"10.1016\/j.eswa.2026.133244_bib0045","series-title":"International conference on machine learning","first-page":"39299","article-title":"Data poisoning attacks against multimodal encoders","author":"Yang","year":"2023"},{"key":"10.1016\/j.eswa.2026.133244_bib0046","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2022.118101","article-title":"Data poisoning attacks against machine learning algorithms","volume":"208","author":"Yerlikaya","year":"2022","journal-title":"Expert Systems with Applications"},{"key":"10.1016\/j.eswa.2026.133244_bib0047","article-title":"Vulnerability of machine learning approaches applied in IoT-based smart grid: A review","author":"Zhang","year":"2024","journal-title":"IEEE Internet of Things Journal"}],"container-title":["Expert Systems with Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0957417426021536?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0957417426021536?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T20:35:44Z","timestamp":1783024544000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0957417426021536"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,12]]},"references-count":47,"alternative-id":["S0957417426021536"],"URL":"https:\/\/doi.org\/10.1016\/j.eswa.2026.133244","relation":{},"ISSN":["0957-4174"],"issn-type":[{"value":"0957-4174","type":"print"}],"subject":[],"published":{"date-parts":[[2026,12]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Precise defense method against low-magnitude poisoning attack in industrial internet of things","name":"articletitle","label":"Article Title"},{"value":"Expert Systems with Applications","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.eswa.2026.133244","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier Ltd. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"133244"}}