{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,10]],"date-time":"2025-11-10T18:52:51Z","timestamp":1762800771028,"version":"build-2065373602"},"reference-count":44,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"12","license":[{"start":{"date-parts":[[2025,12,1]],"date-time":"2025-12-01T00:00:00Z","timestamp":1764547200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,12,1]],"date-time":"2025-12-01T00:00:00Z","timestamp":1764547200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,12,1]],"date-time":"2025-12-01T00:00:00Z","timestamp":1764547200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Joint Key Funds of National Natural Science Foundation of China","award":["U24B20149","U23A20302","U24A20244"],"award-info":[{"award-number":["U24B20149","U23A20302","U24A20244"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62302247","62202273"],"award-info":[{"award-number":["62302247","62202273"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100007129","name":"Natural Science Foundation of Shandong Province","doi-asserted-by":"publisher","award":["ZR2022QF140"],"award-info":[{"award-number":["ZR2022QF140"]}],"id":[{"id":"10.13039\/501100007129","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Shandong Science Foundation for Excellent Young Scholars","award":["2023HWYQ-007"],"award-info":[{"award-number":["2023HWYQ-007"]}]},{"name":"Postdoctoral Fellowship Program of CPSF","award":["GZC20231460"],"award-info":[{"award-number":["GZC20231460"]}]},{"DOI":"10.13039\/501100002858","name":"China Postdoctoral Science Foundation","doi-asserted-by":"publisher","award":["2024M761806"],"award-info":[{"award-number":["2024M761806"]}],"id":[{"id":"10.13039\/501100002858","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Comput."],"published-print":{"date-parts":[[2025,12]]},"DOI":"10.1109\/tc.2025.3603683","type":"journal-article","created":{"date-parts":[[2025,9,1]],"date-time":"2025-09-01T19:30:30Z","timestamp":1756755030000},"page":"3968-3979","source":"Crossref","is-referenced-by-count":0,"title":["BaDFL: Mitigating Model Poisoning in Decentralized Federated Learning"],"prefix":"10.1109","volume":"74","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3976-0870","authenticated-orcid":false,"given":"Yuan","family":"Yuan","sequence":"first","affiliation":[{"name":"School of Software &#x0026; Joint SDU-NTU Centre for Artificial Intelligence Research (C-FAIR), Shandong University, Jinan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-9529-5424","authenticated-orcid":false,"given":"Anhao","family":"Zhou","sequence":"additional","affiliation":[{"name":"School of Mathematics, Shandong University, Jinan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0824-9284","authenticated-orcid":false,"given":"Xiao","family":"Zhang","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Shandong University, Qingdao, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4579-5380","authenticated-orcid":false,"given":"Yifei","family":"Zou","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Shandong University, Qingdao, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2923-2748","authenticated-orcid":false,"given":"Yangguang","family":"Shi","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Shandong University, Qingdao, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6835-5981","authenticated-orcid":false,"given":"Dongxiao","family":"Yu","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Shandong University, Qingdao, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","first-page":"1505","article-title":"Blind backdoors in deep learning models","volume-title":"Proc. 30th USENIX Secur. Symp. (USENIX Security)","author":"Bagdasaryan","year":"2021"},{"key":"ref2","first-page":"2938","article-title":"How to backdoor federated learning","volume-title":"Proc. Int. Conf. Artif. Intell. Statist.","author":"Bagdasaryan","year":"2020"},{"key":"ref3","first-page":"8635","article-title":"A little is enough: Circumventing defenses for distributed learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"32","author":"Baruch","year":"2019"},{"key":"ref4","first-page":"119","article-title":"Machine learning with adversaries: Byzantine tolerant gradient descent","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"30","author":"Blanchard","year":"2017"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/ICPADS47876.2019.00042"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2023.3329128"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2022.3191347"},{"key":"ref8","first-page":"1605","article-title":"Local model poisoning attacks to {Byzantine-Robust} federated learning","volume-title":"Proc. 29th USENIX Secur. Symp. (USENIX Security)","author":"Fang","year":"2020"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3670307"},{"key":"ref10","first-page":"3521","article-title":"The hidden vulnerability of distributed learning in byzantium","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Guerraoui","year":"2018"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2021.3116976"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TSIPN.2022.3188456"},{"article-title":"Byzantine-robust decentralized learning via ClippedGossip","year":"2022","author":"He","key":"ref13"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2022.3183337"},{"article-title":"Learning multiple layers of features from tiny images","year":"2009","author":"Krizhevsky","key":"ref15"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2024.127476"},{"issue":"7","key":"ref17","first-page":"3","article-title":"Tiny ImageNet visual recognition challenge","volume":"7","author":"Le","year":"2015","journal-title":"CS 231N"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/DSA52907.2021.00081"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1016\/j.hcc.2024.100273"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2023.110763"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2024.3377912"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TSC.2021.3090771"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-88418-5_23"},{"article-title":"Toward robustness and privacy in federated learning: Experimenting with local and central differential privacy","year":"2020","author":"Naseri","key":"ref24"},{"key":"ref25","first-page":"66364","article-title":"IBA: Towards irreversible backdoor attacks in federated learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"36","author":"Nguyen","year":"2024"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/HITE63532.2024.10777143"},{"key":"ref27","first-page":"7587","article-title":"SparseFed: Mitigating model poisoning attacks in federated learning with sparsification","volume-title":"Proc. Int. Conf. Artif. Intell. Statist.","author":"Panda","year":"2022"},{"article-title":"Leveraging federated learning and edge computing for recommendation systems within cloud computing networks","year":"2024","author":"Qi","key":"ref28"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2024.3438462"},{"key":"ref30","first-page":"12613","article-title":"FL-WBC: Enhancing robustness against model poisoning attacks in federated learning from a client perspective","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"34","author":"Sun","year":"2021"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02338"},{"article-title":"Can you really backdoor federated learning?","year":"2019","author":"Sun","key":"ref32"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-65745-1_12"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/TSP.2023.3300629"},{"article-title":"Generalized byzantine-tolerant SGD","year":"2018","author":"Xie","key":"ref35"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2024.107570"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1016\/j.asoc.2024.111689"},{"key":"ref38","first-page":"5650","article-title":"Byzantine-robust distributed learning: Towards optimal statistical rates","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Yin","year":"2018"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1016\/j.hcc.2024.100235"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2024.3477971"},{"key":"ref41","first-page":"61213","article-title":"A3FL: Adversarially adaptive backdoor attacks to federated learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"36","author":"Zhang","year":"2024"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2023.3252029"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/TVT.2024.3380582"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2023.09.004"}],"container-title":["IEEE Transactions on Computers"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/12\/11234919\/11145333.pdf?arnumber=11145333","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,10]],"date-time":"2025-11-10T18:47:24Z","timestamp":1762800444000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11145333\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,12]]},"references-count":44,"journal-issue":{"issue":"12"},"URL":"https:\/\/doi.org\/10.1109\/tc.2025.3603683","relation":{},"ISSN":["0018-9340","1557-9956","2326-3814"],"issn-type":[{"type":"print","value":"0018-9340"},{"type":"electronic","value":"1557-9956"},{"type":"electronic","value":"2326-3814"}],"subject":[],"published":{"date-parts":[[2025,12]]}}}