{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,25]],"date-time":"2026-07-25T04:05:01Z","timestamp":1784952301934,"version":"3.55.0"},"reference-count":55,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"12","license":[{"start":{"date-parts":[[2024,12,1]],"date-time":"2024-12-01T00:00:00Z","timestamp":1733011200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,12,1]],"date-time":"2024-12-01T00:00:00Z","timestamp":1733011200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,12,1]],"date-time":"2024-12-01T00:00:00Z","timestamp":1733011200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"NYUAD Center for Cyber Security","award":["G1104"],"award-info":[{"award-number":["G1104"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Artif. Intell."],"published-print":{"date-parts":[[2024,12]]},"DOI":"10.1109\/tai.2024.3465441","type":"journal-article","created":{"date-parts":[[2024,9,23]],"date-time":"2024-09-23T13:33:19Z","timestamp":1727098399000},"page":"6683-6698","source":"Crossref","is-referenced-by-count":16,"title":["<i>Get Rid of Your Trail<\/i>: Remotely Erasing Backdoors in Federated Learning"],"prefix":"10.1109","volume":"5","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3338-2944","authenticated-orcid":false,"given":"Manaar","family":"Alam","sequence":"first","affiliation":[{"name":"Center for Cyber Security, New York University Abu Dhabi, Abu Dhabi, UAE"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-5269-8718","authenticated-orcid":false,"given":"Hithem","family":"Lamri","sequence":"additional","affiliation":[{"name":"Center for Cyber Security, New York University Abu Dhabi, Abu Dhabi, UAE"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6899-0651","authenticated-orcid":false,"given":"Michail","family":"Maniatakos","sequence":"additional","affiliation":[{"name":"Center for Cyber Security, New York University Abu Dhabi, Abu Dhabi, UAE"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","first-page":"1273","article-title":"Communication-efficient learning of deep networks from decentralized data","volume-title":"Proc. 20th Int. Conf. Artif. Intell. Statist. (AISTATS), Proc. Mach. Learn. Res. (PMLR)","author":"McMahan","year":"2017"},{"key":"ref2","article-title":"Towards federated learning at scale: System design","volume-title":"Proc. Mach. Learn. Syst. (MLSys)","author":"Bonawitz","year":"2019"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3442381.3449851"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-63076-8_17"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3501813"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2021.3081560"},{"key":"ref7","first-page":"2938","article-title":"How to backdoor federated learning","volume-title":"Proc. 23rd Int. Conf. Artif. Intell. Statist. (AISTATS), Proc. Mach. Learn. Res. (PMLR)","author":"Bagdasaryan","year":"2020"},{"key":"ref8","article-title":"Attack of the tails: Yes, you really can backdoor federated learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst. 33: Annu. Conf. Neural Inf. Process. Syst. (NeurIPS)","author":"Wang","year":"2020"},{"key":"ref9","first-page":"26429","article-title":"Neurotoxin: Durable backdoors in federated learning","volume-title":"Proc. Int. Conf. Mach. Learn. (ICML), Proc. Mach. Learn. Res. (PMLR)","author":"Zhang","year":"2022"},{"key":"ref10","article-title":"DBA: Distributed backdoor attacks against federated learning","volume-title":"Proc. 8th Int. Conf. Learn. Representations (ICLR)","author":"Xie","year":"2020"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/COINS57856.2023.10189281"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN54540.2023.10191260"},{"key":"ref13","first-page":"119","article-title":"Machine learning with adversaries: Byzantine tolerant gradient descent","volume-title":"Proc. Adv. Neural Inf. Process. Syst., Annu. Conf. Neural Inf. Process. Syst., Long Beach, CA, USA","author":"Blanchard","year":"2017"},{"key":"ref14","first-page":"508","article-title":"Auror: Defending against poisoning attacks in collaborative deep learning systems","volume-title":"Proc. 32nd Annu. Conf. Comput. Secur. Appl. (ACSAC)","author":"Shen","year":"2016"},{"key":"ref15","first-page":"1415","article-title":"FLAME: Taming backdoors in federated learning","volume-title":"Proc. 31st USENIX Secur. Symp., USENIX Secur.","author":"Nguyen","year":"2022"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2022.23156"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP43922.2022.9747653"},{"key":"ref18","first-page":"5636","article-title":"Byzantine-robust distributed learning: Towards optimal statistical rates","volume-title":"Proc. 35th Int. Conf. Mach. Learn. (ICML)","volume":"80","author":"Yin","year":"2018"},{"key":"ref19","first-page":"9268","article-title":"Defending against backdoors in federated learning with robust learning rate","volume-title":"Proc. 35th AAAI Conf. Artif. Intell. (AAAI), 33rd Conf. Innov. Appl. Artif. Intell. (IAAI), The 11th Symp. Edu. Adv. Artif. Intell. (EAAI)","author":"\u00d6zdayi","year":"2021"},{"key":"ref20","first-page":"7587","article-title":"SparseFed: Mitigating model poisoning attacks in federated learning with sparsification","volume-title":"Proc. Int. Conf. Artif. Intell. Statist. (AISTATS)","author":"Panda","year":"2022"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179401"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS51616.2021.00086"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3437880.3460403"},{"key":"ref24","article-title":"Close the gate: Detecting backdoored models in federated learning based on client-side deep layer output analysis","volume-title":"Proc. Clin. Orthopaedics Related Res. (CoRR)","volume":"abs\/2210.07714","author":"Rieger","year":"2022"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.56553\/popets-2023-0009"},{"key":"ref26","article-title":"Inverting gradients - How easy is it to break privacy in federated learning?","volume-title":"Proc. Adv. Neural Inf. Process. Syst.: Annu. Conf. Neural Inf. Process. Syst. (NeurIPS)","author":"Geiping","year":"2020"},{"key":"ref27","article-title":"Towards building a robust and fair federated learning system","volume-title":"Proc. Clin. Orthopaedics Related Res. (CoRR)","volume":"abs\/2011.10464","author":"Xu","year":"2020"},{"key":"ref28","article-title":"Millions of gigabyte motherboards appear to be backdoored","author":"Targett","year":"2023"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.35"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00019"},{"key":"ref31","first-page":"18075","article-title":"Remember what you want to forget: Algorithms for machine unlearning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.: Annu. Conf. Neural Inf. Process. Syst. (NeurlIPS)","author":"Sekhari","year":"2021"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM48880.2022.9796721"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/IWQOS52092.2021.9521274"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.001.2200198"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM48880.2022.9796974"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3579856.3582822"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133982"},{"key":"ref38","first-page":"4424","article-title":"Federated multi-task learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.: Annu. Conf. Neural Inf. Process. Syst.","author":"Smith","year":"2017"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00932"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58526-6_23"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i13.17371"},{"key":"ref42","first-page":"3832","article-title":"Certified data removal from machine learning models","volume-title":"Proc. 37th Int. Conf. Mach. Learn. (ICML)","volume":"119","author":"Guo","year":"2020"},{"key":"ref43","first-page":"931","article-title":"Descent-to-delete: Gradient-based methods for machine unlearning","volume-title":"Proc. Algorithmic Learn. Theory, Virtual Conf., Worldwide","volume":"132","author":"Neel","year":"2021"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i7.20736"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.23087"},{"key":"ref46","first-page":"301","article-title":"The limitations of federated learning in Sybil settings","volume-title":"Proc. 23rd Int. Symp. Res. Attacks, Intrusions Defenses (RAID)","author":"Fung","year":"2020"},{"key":"ref47","article-title":"LEAF: A benchmark for federated settings","volume-title":"Proc. Clin. Orthopaedics Related Res. (CoRR)","volume":"abs\/1812.01097","author":"Caldas","year":"2018"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833647"},{"key":"ref49","article-title":"Learn to forget: User-level memorization elimination in federated learning","volume-title":"Proc. Clin. Orthopaedics Related Res. (CoRR)","volume":"abs\/2003.10933","author":"Liu","year":"2020"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/SPAWC51858.2021.9593225"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/3485447.3512222"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/3539597.3570463"},{"key":"ref53","article-title":"VeriFi: Towards verifiable federated unlearning","volume-title":"Proc. Clin. Orthopaedics Related Res. (CoRR)","volume":"abs\/2205.12709","author":"Gao","year":"2022"},{"key":"ref54","article-title":"Federated unlearning with knowledge distillation","volume-title":"Proc. Clin. Orthopaedics Related Res. (CoRR)","volume":"abs\/2201.09441","author":"Wu","year":"2022"},{"key":"ref55","article-title":"Federated unlearning: How to efficiently erase a client in FL?","volume-title":"Proc. Clin. Orthopaedics Related Res. (CoRR)","volume":"abs\/2207.05521","author":"Halimi","year":"2022"}],"container-title":["IEEE Transactions on Artificial Intelligence"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/9078688\/10794552\/10685452.pdf?arnumber=10685452","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,23]],"date-time":"2025-08-23T01:09:23Z","timestamp":1755911363000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10685452\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12]]},"references-count":55,"journal-issue":{"issue":"12"},"URL":"https:\/\/doi.org\/10.1109\/tai.2024.3465441","relation":{},"ISSN":["2691-4581"],"issn-type":[{"value":"2691-4581","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,12]]}}}