{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,20]],"date-time":"2026-06-20T01:16:15Z","timestamp":1781918175253,"version":"3.54.5"},"reference-count":21,"publisher":"IEEE","license":[{"start":{"date-parts":[[2023,6,4]],"date-time":"2023-06-04T00:00:00Z","timestamp":1685836800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-009"},{"start":{"date-parts":[[2023,6,4]],"date-time":"2023-06-04T00:00:00Z","timestamp":1685836800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-001"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023,6,4]]},"DOI":"10.1109\/icassp49357.2023.10096606","type":"proceedings-article","created":{"date-parts":[[2023,5,5]],"date-time":"2023-05-05T17:28:30Z","timestamp":1683307710000},"page":"1-5","source":"Crossref","is-referenced-by-count":5,"title":["STYX: Adaptive Poisoning Attacks Against Byzantine-Robust Defenses in Federated Learning"],"prefix":"10.1109","author":[{"given":"Yuxin","family":"Wen","sequence":"first","affiliation":[{"name":"University of Maryland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jonas","family":"Geiping","sequence":"additional","affiliation":[{"name":"University of Maryland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Micah","family":"Goldblum","sequence":"additional","affiliation":[{"name":"New York University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tom","family":"Goldstein","sequence":"additional","affiliation":[{"name":"University of Maryland"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref13","article-title":"A Little Is Enough: Circumventing Defenses For Distributed Learning","volume":"32","author":"baruch","year":"2019","journal-title":"Advances in neural information processing systems"},{"key":"ref12","article-title":"Thinking Two Moves Ahead: Anticipating Other Users Improves Backdoor Attacks in Federated Learning","author":"wen","year":"2022","journal-title":"arxiv 2210 09305[cs]"},{"key":"ref15","article-title":"Learning multiple layers of features from tiny images","author":"krizhevsky","year":"2009"},{"key":"ref14","first-page":"1605","article-title":"Local Model Poisoning Attacks to {Byzantine-Robust} Federated Learning","author":"fang","year":"2020","journal-title":"29th USENIX Security Symposium (USENIX Security 20)"},{"key":"ref20","article-title":"A field guide to federated optimization","author":"wang","year":"2021"},{"key":"ref11","first-page":"26429","article-title":"Neurotoxin: Durable Backdoors in Federated Learning","author":"zhang","year":"2022","journal-title":"Proceedings of the 39th International Conference on Machine Learning"},{"key":"ref10","article-title":"How To Backdoor Federated Learning","author":"bagdasaryan","year":"2019"},{"key":"ref21","article-title":"Measuring the effects of non-identical data distribution for federated visual classification","author":"hsu","year":"2019"},{"key":"ref2","article-title":"How Messages improves suggestions with federated technology - Messages Help","year":"2022"},{"key":"ref1","article-title":"Predicting Text Selections with Federated Learning","author":"hartmann","year":"2021"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW56347.2022.00383"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58951-6_24"},{"key":"ref19","first-page":"3","article-title":"Group normalization","author":"wu","year":"2018","journal-title":"Proceedings of the European Conference on Computer Vision (ECCV)"},{"key":"ref18","first-page":"770","article-title":"Deep residual learning for image recognition","author":"he","year":"2016","journal-title":"Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition"},{"key":"ref8","first-page":"1273","article-title":"Communication-efficient learning of deep networks from decentralized data","author":"mcmahan","year":"2017","journal-title":"Artificial Intelligence and Statistics"},{"key":"ref7","first-page":"5650","article-title":"Byzantine-robust distributed learning: Towards optimal statistical rates","author":"yin","year":"2018","journal-title":"International Conference on Machine Learning"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3264418"},{"key":"ref4","article-title":"Federated Learning: Collaborative Machine Learning without Centralized Training Data","author":"mcmahan","year":"2017"},{"key":"ref3","article-title":"Federated Optimization: Distributed Optimization Beyond the Datacenter","author":"kone?n\u00fd","year":"2015"},{"key":"ref6","article-title":"Machine learning with adversaries: Byzantine tolerant gradient descent","volume":"30","author":"blanchard","year":"2017","journal-title":"Advances in neural information processing systems"},{"key":"ref5","article-title":"Towards Federated Learning at Scale: System Design","author":"bonawitz","year":"2019"}],"event":{"name":"ICASSP 2023 - 2023 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","location":"Rhodes Island, Greece","start":{"date-parts":[[2023,6,4]]},"end":{"date-parts":[[2023,6,10]]}},"container-title":["ICASSP 2023 - 2023 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10094559\/10094560\/10096606.pdf?arnumber=10096606","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,10,23]],"date-time":"2023-10-23T17:55:47Z","timestamp":1698083747000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10096606\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,6,4]]},"references-count":21,"URL":"https:\/\/doi.org\/10.1109\/icassp49357.2023.10096606","relation":{},"subject":[],"published":{"date-parts":[[2023,6,4]]}}}