{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,26]],"date-time":"2026-06-26T14:45:48Z","timestamp":1782485148843,"version":"3.54.5"},"reference-count":80,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Neurocomputing"],"published-print":{"date-parts":[[2026,10]]},"DOI":"10.1016\/j.neucom.2026.134208","type":"journal-article","created":{"date-parts":[[2026,6,9]],"date-time":"2026-06-09T06:12:01Z","timestamp":1780985521000},"page":"134208","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["Defending federated learning-based intrusion detection systems against model poisoning attacks"],"prefix":"10.1016","volume":"698","author":[{"given":"Umer","family":"Zukaib","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiaohui","family":"Cui","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fahim","family":"Niaz","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dong","family":"Liang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chengliang","family":"Zheng","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Salah Ud","family":"Din","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.neucom.2026.134208_bib0005","doi-asserted-by":"crossref","DOI":"10.1016\/j.iot.2025.101675","article-title":"XBiDeep: a novel explainable artificial intelligence based intrusion detection system for internet of medical things environment","volume":"33","author":"Turgut","year":"2025","journal-title":"Internet Things"},{"issue":"19","key":"10.1016\/j.neucom.2026.134208_bib0010","doi-asserted-by":"crossref","first-page":"39407","DOI":"10.1109\/JIOT.2025.3558241","article-title":"AIoMT-Driven secure and green medical image processing for sustainable healthcare supply chains","volume":"12","author":"Guo","year":"2025","journal-title":"IEEE Internet Things J."},{"key":"10.1016\/j.neucom.2026.134208_bib0015","article-title":"Deep vision-based wildlife intrusion detection with colour distribution preserved generative adversarial networks","volume":"161","author":"Moorthy","year":"2025","journal-title":"Pattern Recognit."},{"issue":"2","key":"10.1016\/j.neucom.2026.134208_bib0020","doi-asserted-by":"crossref","first-page":"4508","DOI":"10.1109\/TCE.2025.3544885","article-title":"A resource-efficient federated learning framework for intrusion detection in IoMT networks","volume":"71","author":"Fahim-Ul-Islam","year":"2025","journal-title":"IEEE Trans. Consum. Electron."},{"issue":"1","key":"10.1016\/j.neucom.2026.134208_bib0025","doi-asserted-by":"crossref","first-page":"2185","DOI":"10.1109\/TCE.2026.3656201","article-title":"XAI-EdgeSFL: explainable edge intelligence with adaptive intrusion-resilient split federated learning for consumer healthcare ecosystems","volume":"72","author":"Zhao","year":"2026","journal-title":"IEEE Trans. Consum. Electron."},{"issue":"11","key":"10.1016\/j.neucom.2026.134208_bib0030","doi-asserted-by":"crossref","first-page":"8229","DOI":"10.1109\/JIOT.2022.3150363","article-title":"Recent advances on federated learning for cybersecurity and cybersecurity for federated learning for internet of things","volume":"9","author":"Ghimire","year":"2022","journal-title":"IEEE Internet Things J."},{"issue":"2","key":"10.1016\/j.neucom.2026.134208_bib0035","first-page":"189","article-title":"Feature selection in intrusion detection systems: a new hybrid fusion of bat algorithm and residue number system","volume":"8","author":"Saheed","year":"2024","journal-title":"J. Inf. Telecommun."},{"key":"10.1016\/j.neucom.2026.134208_bib0040","doi-asserted-by":"crossref","DOI":"10.1016\/j.knosys.2025.113167","article-title":"Mitigating backdoor attacks in federated learning based intrusion detection systems through neuron synaptic weight adjustment","volume":"314","author":"Zukaib","year":"2025","journal-title":"Knowl.-based Syst."},{"key":"10.1016\/j.neucom.2026.134208_bib0045","doi-asserted-by":"crossref","DOI":"10.1016\/j.patcog.2023.109382","article-title":"Defense against adversarial attacks with efficient frequency-adaptive compression and reconstruction","volume":"138","author":"Niu","year":"2023","journal-title":"Pattern Recognit."},{"issue":"5","key":"10.1016\/j.neucom.2026.134208_bib0050","doi-asserted-by":"crossref","first-page":"9098","DOI":"10.1109\/TNNLS.2024.3423397","article-title":"Defendfl: a privacy-preserving federated learning scheme against poisoning attacks","volume":"36","author":"Liu","year":"2024","journal-title":"IEEE Trans. Neural Netw. Learn. Syst."},{"key":"10.1016\/j.neucom.2026.134208_bib0055","doi-asserted-by":"crossref","first-page":"7394","DOI":"10.1109\/TIFS.2025.3589061","article-title":"Resisting poisoning attacks in federated learning via dual-domain distance and trust assessment","volume":"20","author":"Wang","year":"2025","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.neucom.2026.134208_bib0060","doi-asserted-by":"crossref","first-page":"6693","DOI":"10.1109\/TIFS.2024.3420126","article-title":"A robust privacy-preserving federated learning model against model poisoning attacks","volume":"19","author":"Yazdinejad","year":"2024","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.neucom.2026.134208_bib0065","first-page":"388","article-title":"Resilience in online federated learning: mitigating model-poisoning attacks via partial sharing","volume":"11","author":"Lari","year":"2025","journal-title":"IEEE Trans. Signal Inf. Process. Netw."},{"issue":"1","key":"10.1016\/j.neucom.2026.134208_bib0070","doi-asserted-by":"crossref","first-page":"6613","DOI":"10.1038\/s41598-024-84797-z","article-title":"Based on model randomization and adaptive defense for federated learning schemes","volume":"15","author":"Yue","year":"2025","journal-title":"Sci. Rep."},{"key":"10.1016\/j.neucom.2026.134208_bib0075","article-title":"Thwarting gradient inversion in federated learning via generative shadow mapping defense","author":"Zhou","year":"2025","journal-title":"J. Syst. Archit."},{"key":"10.1016\/j.neucom.2026.134208_bib0080","doi-asserted-by":"crossref","DOI":"10.1016\/j.knosys.2026.115727","article-title":"DABD: direction alignment\u2013based backdoor defense with sign consensus in federated learning","author":"Kang","year":"2026","journal-title":"Knowl.-based Syst."},{"key":"10.1016\/j.neucom.2026.134208_bib0085","article-title":"Backdoor defense based on adversarial prediction proximity and contrastive knowledge distillation","author":"Huang","year":"2025","journal-title":"Pattern Recognit."},{"key":"10.1016\/j.neucom.2026.134208_bib0090","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2024.125359","article-title":"ANODYNE: mitigating backdoor attacks in federated learning","volume":"259","author":"Gu","year":"2025","journal-title":"Expert Syst. Appl."},{"key":"10.1016\/j.neucom.2026.134208_bib0095","doi-asserted-by":"crossref","DOI":"10.1016\/j.patcog.2025.112210","article-title":"A general aggregation federated learning intervention algorithm based on do-calculus","volume":"171","author":"Huang","year":"2026","journal-title":"Pattern Recognit."},{"key":"10.1016\/j.neucom.2026.134208_bib0100","doi-asserted-by":"crossref","first-page":"3289","DOI":"10.1109\/TIFS.2023.3280032","article-title":"Safelearning: secure aggregation in federated learning with backdoor detectability","volume":"18","author":"Zhang","year":"2023","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.neucom.2026.134208_bib0105","author":"Li"},{"issue":"24","key":"10.1016\/j.neucom.2026.134208_bib0110","doi-asserted-by":"crossref","first-page":"17308","DOI":"10.1109\/JIOT.2021.3079472","article-title":"Federated learning with unreliable clients: performance analysis and mechanism design","volume":"8","author":"Ma","year":"2021","journal-title":"IEEE Internet Things J."},{"issue":"12","key":"10.1016\/j.neucom.2026.134208_bib0115","doi-asserted-by":"crossref","first-page":"8442","DOI":"10.1109\/TII.2020.3043458","article-title":"FED-IIoT: a robust federated malware detection architecture in industrial IoT","volume":"17","author":"Taheri","year":"2020","journal-title":"IEEE Trans. Ind. Inform."},{"key":"10.1016\/j.neucom.2026.134208_bib0120","author":"Campos"},{"issue":"5","key":"10.1016\/j.neucom.2026.134208_bib0125","doi-asserted-by":"crossref","first-page":"2320","DOI":"10.1109\/TSC.2024.3377931","article-title":"Efficient and privacy-preserving federated learning against poisoning adversaries","volume":"17","author":"Zhao","year":"2024","journal-title":"IEEE Trans. Serv. Comput."},{"key":"10.1016\/j.neucom.2026.134208_bib0130","article-title":"FedSBS: federated-learning participant-selection method for intrusion detection systems","volume":"244","author":"Neto","year":"2024","journal-title":"Comput. Netw."},{"issue":"3","key":"10.1016\/j.neucom.2026.134208_bib0135","doi-asserted-by":"crossref","first-page":"1160","DOI":"10.1109\/TON.2025.3526866","article-title":"CPFedAvg: enhancing hierarchical federated learning via optimized local aggregation and parameter mixing","volume":"33","author":"Liu","year":"2025","journal-title":"IEEE Trans. Netw."},{"issue":"9","key":"10.1016\/j.neucom.2026.134208_bib0140","doi-asserted-by":"crossref","first-page":"15075","DOI":"10.1109\/JIOT.2023.3341811","article-title":"FLOW: a robust federated learning framework to defend against model poisoning attacks in IoTs","volume":"11","author":"Liu","year":"2024","journal-title":"IEEE Internet Things J."},{"key":"10.1016\/j.neucom.2026.134208_bib0145","doi-asserted-by":"crossref","first-page":"8747","DOI":"10.1109\/TIFS.2024.3461449","article-title":"MODEL: a model poisoning defense framework for federated learning via truth discovery","volume":"19","author":"Wu","year":"2024","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.neucom.2026.134208_bib0150","series-title":"NDSS","article-title":"Manipulating the byzantine: optimizing model poisoning attacks and defenses for federated learning","author":"Shejwalkar","year":"2021"},{"key":"10.1016\/j.neucom.2026.134208_bib0155","author":"Yu"},{"key":"10.1016\/j.neucom.2026.134208_bib0160","author":"Xie"},{"key":"10.1016\/j.neucom.2026.134208_bib0165","doi-asserted-by":"crossref","first-page":"182","DOI":"10.1016\/j.future.2023.10.005","article-title":"Personalized federated learning-based intrusion detection system: poisoning attack and defense","volume":"153","author":"Thein","year":"2024","journal-title":"Future Gener. Comput. Syst."},{"issue":"11","key":"10.1016\/j.neucom.2026.134208_bib0170","doi-asserted-by":"crossref","first-page":"5661","DOI":"10.1109\/TKDE.2024.3420778","article-title":"BADFL: backdoor attack defense in federated learning from local model perspective","volume":"36","author":"Zhang","year":"2024","journal-title":"IEEE Trans. Knowl. Data Eng."},{"issue":"11","key":"10.1016\/j.neucom.2026.134208_bib0175","doi-asserted-by":"crossref","first-page":"12513","DOI":"10.1109\/TII.2024.3410319","article-title":"A stability-enhanced dynamic backdoor defense in federated learning for IIoT","volume":"20","author":"Ma","year":"2024","journal-title":"IEEE Trans. Ind. Inform."},{"issue":"6","key":"10.1016\/j.neucom.2026.134208_bib0180","doi-asserted-by":"crossref","first-page":"6732","DOI":"10.1109\/TDSC.2025.3590175","article-title":"FL-cdf: collaborative defense framework for backdoor mitigation in federated learning","volume":"22","author":"Zhang","year":"2025","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"10.1016\/j.neucom.2026.134208_bib0185","doi-asserted-by":"crossref","first-page":"13264","DOI":"10.1109\/TIFS.2025.3643155","article-title":"Breaking the illusion: a critical study of backdoor defense in federated learning with non-iid data","volume":"20","author":"Ye","year":"2025","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.neucom.2026.134208_bib0190","series-title":"Pacific-Asia Conference on Knowledge Discovery and Data Mining","first-page":"133","article-title":"Fedsweep: unlearning backdoors in federated learning","author":"Qiu","year":"2025"},{"key":"10.1016\/j.neucom.2026.134208_bib0195","author":"Zhang"},{"key":"10.1016\/j.neucom.2026.134208_bib0200","series-title":"Proceedings of the 33rd ACM International Conference on Multimedia","first-page":"11947","article-title":"FedBAP: backdoor defense via benign adversarial perturbation in federated learning","author":"Yan","year":"2025"},{"key":"10.1016\/j.neucom.2026.134208_bib0205","author":"Wan"},{"issue":"1","key":"10.1016\/j.neucom.2026.134208_bib0210","doi-asserted-by":"crossref","first-page":"2328","DOI":"10.1038\/s41598-024-82079-2","article-title":"Practical implementation of federated learning for detecting backdoor attacks in a next-word prediction model","volume":"15","author":"Wong","year":"2025","journal-title":"Sci. Rep."},{"key":"10.1016\/j.neucom.2026.134208_bib0215","doi-asserted-by":"crossref","DOI":"10.1016\/j.inffus.2025.103248","article-title":"Backdoor attacks and defense mechanisms in federated learning: a survey","volume":"123","author":"Li","year":"2025","journal-title":"Inf. Fusion"},{"key":"10.1016\/j.neucom.2026.134208_bib0220","series-title":"Proceedings of the AAAI Conference on Artificial Intelligence","first-page":"25443","article-title":"Defending against sophisticated poisoning attacks with RL-based aggregation in federated learning","volume":"vol. 39","author":"Wang","year":"2025"},{"key":"10.1016\/j.neucom.2026.134208_bib0225","doi-asserted-by":"crossref","first-page":"70476","DOI":"10.52202\/079017-2253","article-title":"Dual defense: enhancing privacy and mitigating poisoning attacks in federated learning","volume":"37","author":"Xu","year":"2024","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.neucom.2026.134208_bib0230","doi-asserted-by":"crossref","first-page":"3877","DOI":"10.1109\/TIFS.2025.3555193","article-title":"Enhanced model poisoning attack and multi-strategy defense in federated learning","volume":"20","author":"Yang","year":"2025","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.neucom.2026.134208_bib0235","doi-asserted-by":"crossref","first-page":"3312","DOI":"10.1109\/TKDE.2025.3548160","article-title":"Dual test-time training for out-of-distribution recommender system","volume":"37","author":"Yang","year":"2024","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"10.1016\/j.neucom.2026.134208_bib0240","article-title":"Efficient self-supervised heterogeneous graph representation learning with reconstruction","volume":"117","author":"Mo","year":"2024","journal-title":"Inf. Fusion"},{"issue":"4","key":"10.1016\/j.neucom.2026.134208_bib0245","doi-asserted-by":"crossref","first-page":"3993","DOI":"10.1109\/TDSC.2025.3542437","article-title":"Flad: byzantine-robust federated learning based on gradient feature anomaly detection","volume":"22","author":"Tang","year":"2025","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"10.1016\/j.neucom.2026.134208_bib0250","article-title":"Gradient episodic memory for continual learning","volume":"30","author":"Lopez-Paz","year":"2017","journal-title":"Adv. Neural Inf. Process. Syst."},{"issue":"4","key":"10.1016\/j.neucom.2026.134208_bib0255","doi-asserted-by":"crossref","first-page":"2967","DOI":"10.1109\/TMC.2024.3503682","article-title":"Mitigating update conflict in non-iid federated learning via orthogonal class gradients","volume":"24","author":"Guo","year":"2024","journal-title":"IEEE Trans. Mob. Comput."},{"issue":"5","key":"10.1016\/j.neucom.2026.134208_bib0260","doi-asserted-by":"crossref","first-page":"3895","DOI":"10.1109\/TPAMI.2025.3539019","article-title":"Revisiting flatness-aware optimization in continual learning with orthogonal gradient projection","volume":"47","author":"Yang","year":"2025","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"10.1016\/j.neucom.2026.134208_bib0265","doi-asserted-by":"crossref","first-page":"154","DOI":"10.1016\/j.future.2022.04.010","article-title":"SecFedNIDS: robust defense for poisoning attack against federated learning-based network intrusion detection system","volume":"134","author":"Zhang","year":"2022","journal-title":"Future Gener. Comput. Syst."},{"key":"10.1016\/j.neucom.2026.134208_bib0270","series-title":"Artificial Intelligence and Statistics","first-page":"1273","article-title":"Communication-efficient learning of deep networks from decentralized data","author":"McMahan","year":"2017"},{"key":"10.1016\/j.neucom.2026.134208_bib0275","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"10713","article-title":"Model-contrastive federated learning","author":"Li","year":"2021"},{"key":"10.1016\/j.neucom.2026.134208_bib0280","first-page":"429","article-title":"Federated optimization in heterogeneous networks","volume":"2","author":"Li","year":"2020","journal-title":"Proc. Mach. Learn. Syst."},{"key":"10.1016\/j.neucom.2026.134208_bib0285","first-page":"7611","article-title":"Tackling the objective inconsistency problem in heterogeneous federated optimization","volume":"33","author":"Wang","year":"2020","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.neucom.2026.134208_bib0290","series-title":"International Conference on Machine Learning","first-page":"5132","article-title":"Scaffold: stochastic controlled averaging for federated learning","author":"Karimireddy","year":"2020"},{"key":"10.1016\/j.neucom.2026.134208_bib0295","article-title":"Machine learning with adversaries: byzantine tolerant gradient descent","volume":"30","author":"Blanchard","year":"2017","journal-title":"Adv. Neural Inf. Process. Syst."},{"issue":"2","key":"10.1016\/j.neucom.2026.134208_bib0300","first-page":"1","article-title":"Distributed statistical machine learning in adversarial settings: byzantine gradient descent","volume":"1","author":"Chen","year":"2017","journal-title":"Proc. ACM Meas. Anal. Comput. Syst."},{"key":"10.1016\/j.neucom.2026.134208_bib0305","author":"Fung"},{"key":"10.1016\/j.neucom.2026.134208_bib0310","series-title":"International Symposium on Research in Attacks, Intrusions, and Defenses","first-page":"273","article-title":"Fine-pruning: defending against backdooring attacks on deep neural networks","author":"Liu","year":"2018"},{"key":"10.1016\/j.neucom.2026.134208_bib0315","author":"Li"},{"key":"10.1016\/j.neucom.2026.134208_bib0320","series-title":"2019 IEEE Symposium on Security and Privacy (SP)","first-page":"707","article-title":"Neural cleanse: identifying and mitigating backdoor attacks in neural networks","author":"Wang","year":"2019"},{"key":"10.1016\/j.neucom.2026.134208_bib0325","first-page":"16913","article-title":"Adversarial neuron pruning purifies backdoored deep models","volume":"34","author":"Wu","year":"2021","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.neucom.2026.134208_bib0330","series-title":"European Conference on Computer Vision","first-page":"175","article-title":"Data-free backdoor removal based on channel lipschitzness","author":"Zheng","year":"2022"},{"key":"10.1016\/j.neucom.2026.134208_bib0335","author":"Zeng"},{"key":"10.1016\/j.neucom.2026.134208_bib0340","series-title":"International Conference on Machine Learning","first-page":"19837","article-title":"Reconstructive neuron pruning for backdoor defense","author":"Li","year":"2023"},{"key":"10.1016\/j.neucom.2026.134208_bib0345","doi-asserted-by":"crossref","first-page":"42097","DOI":"10.52202\/079017-1332","article-title":"Unveiling and mitigating backdoor vulnerabilities based on unlearning weight changes and backdoor activeness","volume":"37","author":"Lin","year":"2024","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.neucom.2026.134208_bib0350","author":"Li"},{"key":"10.1016\/j.neucom.2026.134208_bib0355","doi-asserted-by":"crossref","first-page":"9727","DOI":"10.52202\/068431-0707","article-title":"Effective backdoor defense by exploiting sensitivity of poisoned samples","volume":"35","author":"Chen","year":"2022","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.neucom.2026.134208_bib0360","first-page":"21616","article-title":"Distributed training with heterogeneous data: bridging median-and mean-based algorithms","volume":"33","author":"Chen","year":"2020","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.neucom.2026.134208_bib0365","article-title":"Federated learning framework based on trimmed mean aggregation rules","author":"Wang","year":"2025","journal-title":"Expert Syst. Appl."},{"key":"10.1016\/j.neucom.2026.134208_bib0370","series-title":"31st USENIX Security Symposium (USENIX Security 22)","first-page":"1415","article-title":"{FLAME}: taming backdoors in federated learning","author":"Nguyen","year":"2022"},{"key":"10.1016\/j.neucom.2026.134208_bib0375","author":"Rocha"},{"key":"10.1016\/j.neucom.2026.134208_bib0380","doi-asserted-by":"crossref","DOI":"10.1016\/j.inffus.2024.102807","article-title":"FedKD-IDS: a robust intrusion detection system using knowledge distillation-based semi-supervised federated learning and anti-poisoning attack mechanism","volume":"117","author":"Quyen","year":"2025","journal-title":"Inf. Fusion"},{"key":"10.1016\/j.neucom.2026.134208_bib0385","author":"Guo"},{"issue":"5","key":"10.1016\/j.neucom.2026.134208_bib0390","doi-asserted-by":"crossref","first-page":"5742","DOI":"10.1109\/JIOT.2024.3490579","article-title":"Precise defense approach against small-scale backdoor attacks in industrial internet of things","volume":"12","author":"Ran","year":"2025","journal-title":"IEEE Internet Things J."},{"key":"10.1016\/j.neucom.2026.134208_bib0395","author":"Cao"},{"key":"10.1016\/j.neucom.2026.134208_bib0400","author":"Wang"}],"container-title":["Neurocomputing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0925231226016061?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0925231226016061?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,6,26]],"date-time":"2026-06-26T13:47:11Z","timestamp":1782481631000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0925231226016061"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,10]]},"references-count":80,"alternative-id":["S0925231226016061"],"URL":"https:\/\/doi.org\/10.1016\/j.neucom.2026.134208","relation":{},"ISSN":["0925-2312"],"issn-type":[{"value":"0925-2312","type":"print"}],"subject":[],"published":{"date-parts":[[2026,10]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Defending federated learning-based intrusion detection systems against model poisoning attacks","name":"articletitle","label":"Article Title"},{"value":"Neurocomputing","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.neucom.2026.134208","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier B.V. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"134208"}}