{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,19]],"date-time":"2026-05-19T15:04:01Z","timestamp":1779203041488,"version":"3.51.4"},"reference-count":47,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"funder":[{"name":"Swiss Federal Office for Defense Procurement (armasuisse) with CyberMind","award":["CYD-C-2020003"],"award-info":[{"award-number":["CYD-C-2020003"]}]},{"DOI":"10.13039\/501100006447","name":"University of Zurich","doi-asserted-by":"crossref","id":[{"id":"10.13039\/501100006447","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2025]]},"DOI":"10.1109\/access.2025.3552168","type":"journal-article","created":{"date-parts":[[2025,3,17]],"date-time":"2025-03-17T17:42:42Z","timestamp":1742233362000},"page":"50017-50031","source":"Crossref","is-referenced-by-count":4,"title":["AIDFL: An Information-Driven Anomaly Detector for Data Poisoning in Decentralized Federated Learning"],"prefix":"10.1109","volume":"13","author":[{"ORCID":"https:\/\/orcid.org\/0009-0003-1930-1225","authenticated-orcid":false,"given":"Xiao","family":"Chen","sequence":"first","affiliation":[{"name":"Department of Informatics, University of Zurich (UZH), Zürich, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chao","family":"Feng","sequence":"additional","affiliation":[{"name":"Department of Informatics, Communication Systems Group (CSG), University of Zurich (UZH), Zürich, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-6960-9179","authenticated-orcid":false,"given":"Shaohua","family":"Wang","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Remote Sensing and Digital Earth, Aerospace Information Research Institute, Chinese Academy of Sciences, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/comst.2023.3315746"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/tii.2021.3119038"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/jiot.2024.3407584"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2021.07.098"},{"key":"ref5","first-page":"1","article-title":"Jointly learning from decentralized (Federated) and centralized data to mitigate distribution shift","volume-title":"Proc. NeurIPS Workshop Distrib. Shifts","author":"Augenstein"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103319"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.3390\/a17070290"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2019.05.003"},{"key":"ref9","article-title":"Opening the black box of deep neural networks via information","author":"Shwartz-Ziv","year":"2017","journal-title":"arXiv:1703.00810"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.3390\/electronics12020260"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/access.2023.3238823"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24434"},{"key":"ref13","first-page":"634","article-title":"Analyzing federated learning through an adversarial lens","volume-title":"Proc. Int. Conf. Mach. Learn. (ICML)","author":"Bhagoji"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/msec.2020.3039941"},{"key":"ref15","volume-title":"Dive Into Deep Learning","author":"Zhang","year":"2023"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/access.2023.3330144"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1088\/1742-5468\/ab3985"},{"key":"ref18","first-page":"118","article-title":"Machine learning with adversaries: Byzantine tolerant gradient descent","volume-title":"Proc. Adv. Neural Inf. Process. Syst. (NeurIPS)","volume":"30","author":"Blanchard"},{"key":"ref19","first-page":"5650","article-title":"Byzantine-robust distributed learning: Towards optimal statistical rates","volume-title":"Proc. Int. Conf. Mach. Learn. (ICML)","author":"Yin"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/dsc.2017.20"},{"key":"ref21","first-page":"2938","article-title":"How to backdoor federated learning","volume-title":"Proc. Int. Conf. Artif. Intell. Statist. (AISTATS)","author":"Bagdasaryan"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1016\/j.inffus.2022.09.011"},{"key":"ref23","first-page":"3521","article-title":"The hidden vulnerability of distributed learning in byzantium","volume-title":"Proc. Int. Conf. Mach. Learn. (ICML)","author":"Mhamdi"},{"key":"ref24","first-page":"301","article-title":"The limitations of federated learning in Sybil settings","volume-title":"Proc. 23rd Int. Symp. Res. Attacks, Intrusions Defenses (RAID)","author":"Fung"},{"key":"ref25","article-title":"Mitigating sybils in federated learning poisoning","author":"Fung","year":"2018","journal-title":"arXiv:1808.04866"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2022.23156"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/mwc.017.2100714"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2021.3135422"},{"key":"ref29","article-title":"Learning to detect malicious clients for robust federated learning","author":"Li","year":"2020","journal-title":"arXiv:2002.00211"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3583780.3615106"},{"key":"ref31","first-page":"840","article-title":"Sageflow: Robust federated learning against both stragglers and adversaries","volume-title":"Proc. Adv. Neural Inf. Process. Syst. (NeurIPS)","volume":"34","author":"Park"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ccnc49033.2022.9700624"},{"key":"ref33","volume-title":"How To Interpret a Confusion Matrix for a Machine Learning Model","author":"Team","year":"2024"},{"key":"ref34","volume-title":"Computer Vision (Part 14)-Common Types of Noise","year":"2023"},{"key":"ref35","volume-title":"MNIST Handwritten Digit Database","author":"LeCun","year":"2010"},{"key":"ref36","first-page":"1760","article-title":"Sentinel: An aggregation function to secure decentralized federated learning","volume-title":"Proc. ECAI","author":"Feng"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1186\/s42400-021-00105-6"},{"key":"ref38","first-page":"16070","article-title":"Attack of the tails: Yes, you really can backdoor federated learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst. (NeurIPS)","author":"Wang"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3249568"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2023.3288886"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/icpads47876.2019.00042"},{"key":"ref42","first-page":"1273","article-title":"Communication-efficient learning of deep networks from decentralized data","volume-title":"Proc. Artif. Intell. Statist. (AISTATS)","author":"McMahan"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3298981"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-024-10796-1"},{"key":"ref45","article-title":"Fashion-MNIST: A novel image dataset for benchmarking machine learning algorithms","author":"Xiao","year":"2017","journal-title":"arXiv:1708.07747"},{"key":"ref46","volume-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2012"},{"key":"ref47","first-page":"3","article-title":"Data poisoning attack on random forest classification model","volume-title":"Proc. SMA","author":"Chang"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6287639\/10820123\/10930423.pdf?arnumber=10930423","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,3,29]],"date-time":"2025-03-29T03:51:19Z","timestamp":1743220279000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10930423\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":47,"URL":"https:\/\/doi.org\/10.1109\/access.2025.3552168","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]}}}