{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,4]],"date-time":"2026-03-04T17:33:25Z","timestamp":1772645605867,"version":"3.50.1"},"reference-count":45,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,10,6]],"date-time":"2025-10-06T00:00:00Z","timestamp":1759708800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,10,6]],"date-time":"2025-10-06T00:00:00Z","timestamp":1759708800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000006","name":"Office of Naval Research","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100000006","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,10,6]]},"DOI":"10.1109\/milcom64451.2025.11310549","type":"proceedings-article","created":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T18:35:33Z","timestamp":1767292533000},"page":"954-961","source":"Crossref","is-referenced-by-count":2,"title":["Enabling Trustworthy Federated Learning via Remote Attestation for Mitigating Byzantine Threats"],"prefix":"10.1109","author":[{"given":"Chaoyu","family":"Zhang","sequence":"first","affiliation":[{"name":"Virginia Tech,VA,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Heng","family":"Jin","sequence":"additional","affiliation":[{"name":"Virginia Tech,VA,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shanghao","family":"Shi","sequence":"additional","affiliation":[{"name":"Virginia Tech,VA,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hexuan","family":"Yu","sequence":"additional","affiliation":[{"name":"Virginia Tech,VA,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sydney","family":"Johns","sequence":"additional","affiliation":[{"name":"Virginia Tech,VA,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Y. Thomas","family":"Hou","sequence":"additional","affiliation":[{"name":"Virginia Tech,VA,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wenjing","family":"Lou","sequence":"additional","affiliation":[{"name":"Virginia Tech,VA,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Federated learning: Strategies for improving communication efficiency","author":"Kone\u010dn\u1ef3","year":"2016"},{"key":"ref2","first-page":"1273","article-title":"Communication-efficient learning of deep networks from decentralized data","author":"McMahan","year":"2017","journal-title":"Artificial Intelligence and Statistics (AISTATS 17)"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.3390\/rs16091640"},{"key":"ref4","doi-asserted-by":"crossref","DOI":"10.36227\/techrxiv.170956580.07799070\/v1","article-title":"State-of-the-art approaches to enhancing privacy preservation of machine learning datasets: A survey","author":"Zhang","year":"2024"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/IOTM.001.2200067"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM58377.2023.10356215"},{"key":"ref7","author":"of Standards","year":"2023","journal-title":"Federated Learning for Critical Infrastructure."},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2025.3544106"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3641512.3686380"},{"key":"ref10","article-title":"Machine learning-based intrusion detection systems: Capabilities, methodologies, and open research challenges","author":"Zhang","journal-title":"Authorea Preprints."},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2024.111694"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/DySPAN64764.2025.11115935"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3154503"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2020.3041404"},{"key":"ref15","first-page":"3521","article-title":"The hidden vulnerability of distributed learning in byzantium","volume-title":"International conference on machine learning","author":"Guerraoui"},{"key":"ref16","first-page":"1605","article-title":"Local model poisoning attacks to byzantine-robust federated learning","volume-title":"29th {USENIX} Security Symposium ({USENIX} Security 20)","author":"Fang"},{"key":"ref17","first-page":"634","article-title":"Analyzing federated learning through an adversarial lens","volume-title":"International Conference on machine learning","author":"Bhagoji"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2025.240644"},{"key":"ref19","doi-asserted-by":"crossref","DOI":"10.1145\/3721201.3721375","article-title":"MedLeak: Multimodal medical data leakage in secure federated learning with crafted models","volume-title":"Conference on Connected Health: Applications, Systems and Engineering Technologies (CHASE)","author":"Shi"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/2991079.2991125"},{"key":"ref21","article-title":"Mitigating sybils in federated learning poisoning","author":"Fung","year":"2018"},{"key":"ref22","article-title":"Learning to detect malicious clients for robust federated learning","author":"Li","year":"2020"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-38991-8_39"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2022.23156"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-88418-5_22"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN48605.2020.9207469"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2024.3521297"},{"key":"ref28","first-page":"487","article-title":"Deepattest: An end-to-end attestation framework for deep neural networks","volume-title":"Proceedings of the 46th International Symposium on Computer Architecture","author":"Chen"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3458864.3466628"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3093711"},{"key":"ref31","first-page":"086","article-title":"Intel sgx explained","volume":"2016","author":"Costan","year":"2016","journal-title":"IACR Cryptology ePrint Archive"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM41043.2020.9155414"},{"key":"ref33","first-page":"771","article-title":"{APEX}: A verified architecture for proofs of execution on remote devices under full software compromise","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Nunes"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23420"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00042"},{"key":"ref36","first-page":"2761","article-title":"{ARI}: Attestation of real-time mission execution integrity","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Wang"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/CNS66487.2025.11194998"},{"key":"ref38","first-page":"65","article-title":"{ACES}: Automatic compartments for embedded systems","volume-title":"27th USENIX Security Symposium (USENIX Security 18)","author":"Clements"},{"key":"ref39","article-title":"Trustzone: Integrated hardware and software security","author":"Alves","journal-title":"ARM White Paper."},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978358"},{"key":"ref41","article-title":"Fashion-mnist: a novel image dataset for benchmarking machine learning algorithms","author":"Xiao","year":"2017"},{"key":"ref42","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref43","first-page":"119","article-title":"Machine learning with adversaries: Byzantine tolerant gradient descent","author":"Blanchard","year":"2017","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref44","article-title":"Byzantine-robust distributed learning: Towards optimal statistical rates","author":"Yin","year":"2018"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24434"}],"event":{"name":"MILCOM 2025 - 2025 IEEE Military Communications Conference (MILCOM)","location":"Los Angeles, CA, USA","start":{"date-parts":[[2025,10,6]]},"end":{"date-parts":[[2025,10,10]]}},"container-title":["MILCOM 2025 - 2025 IEEE Military Communications Conference (MILCOM)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11309822\/11309347\/11310549.pdf?arnumber=11310549","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,1,2]],"date-time":"2026-01-02T05:47:09Z","timestamp":1767332829000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11310549\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,6]]},"references-count":45,"URL":"https:\/\/doi.org\/10.1109\/milcom64451.2025.11310549","relation":{},"subject":[],"published":{"date-parts":[[2025,10,6]]}}}