{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,28]],"date-time":"2026-03-28T06:13:00Z","timestamp":1774678380436,"version":"3.50.1"},"reference-count":41,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2025,7,1]],"date-time":"2025-07-01T00:00:00Z","timestamp":1751328000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,7,1]],"date-time":"2025-07-01T00:00:00Z","timestamp":1751328000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,7,1]],"date-time":"2025-07-01T00:00:00Z","timestamp":1751328000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61932014"],"award-info":[{"award-number":["61932014"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62232011"],"award-info":[{"award-number":["62232011"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62472276"],"award-info":[{"award-number":["62472276"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Shanghai Science and Technology Innovation Action Plan","award":["24BC3201200"],"award-info":[{"award-number":["24BC3201200"]}]},{"name":"National Key R&D Program of China","award":["2023YFB2704700"],"award-info":[{"award-number":["2023YFB2704700"]}]},{"name":"Shanghai Committee of Science and Technology, China","award":["23511101000"],"award-info":[{"award-number":["23511101000"]}]},{"name":"Shanghai Committee of Science and Technology, China","award":["24BC3200400"],"award-info":[{"award-number":["24BC3200400"]}]},{"name":"Science and Technology Project of the State Grid Corporation of China","award":["5700-202321603A-3-2-ZN"],"award-info":[{"award-number":["5700-202321603A-3-2-ZN"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2025,7]]},"DOI":"10.1109\/tdsc.2025.3532339","type":"journal-article","created":{"date-parts":[[2025,1,21]],"date-time":"2025-01-21T13:30:50Z","timestamp":1737466250000},"page":"3383-3397","source":"Crossref","is-referenced-by-count":5,"title":["Temporal Gradient Inversion Attacks With Robust Optimization"],"prefix":"10.1109","volume":"22","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1602-3541","authenticated-orcid":false,"given":"Bowen","family":"Li","sequence":"first","affiliation":[{"name":"Department of Computer Science and Engineering, Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8266-4561","authenticated-orcid":false,"given":"Hanlin","family":"Gu","sequence":"additional","affiliation":[{"name":"WeBank AI Lab, WeBank, Shenzhen, Guangdong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8729-3034","authenticated-orcid":false,"given":"Ruoxin","family":"Chen","sequence":"additional","affiliation":[{"name":"Youtu Laboratory, Tencent, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4974-6116","authenticated-orcid":false,"given":"Jie","family":"Li","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6882-3754","authenticated-orcid":false,"given":"Chentao","family":"Wu","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7673-9843","authenticated-orcid":false,"given":"Na","family":"Ruan","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xueming","family":"Si","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8162-7096","authenticated-orcid":false,"given":"Lixin","family":"Fan","sequence":"additional","affiliation":[{"name":"WeBank AI Lab, WeBank, Shenzhen, Guangdong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","first-page":"1273","article-title":"Communication-efficient learning of deep networks from decentralized data","volume-title":"Proc. Int. Conf. Artif. Intell. Statist.","author":"McMahan"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3298981"},{"key":"ref3","first-page":"14747","article-title":"Deep leakage from gradients","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Zhu"},{"key":"ref4","first-page":"16937","article-title":"Inverting gradients-how easy is it to break privacy in federated learning?","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Geiping"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01607"},{"key":"ref6","first-page":"29898","article-title":"Gradient inversion with generative image prior","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Jeon"},{"key":"ref7","article-title":"R-GAP: Recursive gradient attack on privacy","volume-title":"Proc. 9th Int. Conf. Learn. Representations","author":"Zhu"},{"key":"ref8","first-page":"5650","article-title":"Byzantine-robust distributed learning: Towards optimal statistical rates","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Yin"},{"key":"ref9","article-title":"SAPAG: A self-adaptive privacy attack from gradients","author":"Wang","year":"2020"},{"key":"ref10","article-title":"iDLG: Improved deep leakage from gradients","author":"Zhao","year":"2020"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978318"},{"key":"ref12","first-page":"1306","article-title":"Gradient sparsification for communication-efficient distributed optimization","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Wangni"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00919"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/SRDS55811.2022.00012"},{"key":"ref15","first-page":"119","article-title":"Machine learning with adversaries: Byzantine tolerant gradient descent","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Blanchard"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.00989"},{"key":"ref17","first-page":"994","article-title":"CAFE: Catastrophic data leakage in vertical federated learning","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Jin"},{"key":"ref18","article-title":"Exploring the security boundary of data reconstruction via neuron exclusivity analysis","author":"Pan","year":"2020"},{"key":"ref19","article-title":"Towards general deep leakage in federated learning","author":"Geng","year":"2021"},{"key":"ref20","article-title":"Data leakage in federated averaging","author":"Dimitrov","year":"2022"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/tsp.2022.3153135"},{"key":"ref22","article-title":"Generalized byzantine-tolerant SGD","author":"Xie","year":"2018"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1017\/S0962492918000016"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2787987"},{"key":"ref25","article-title":"Federated optimization: Distributed machine learning for on-device intelligence","author":"Kone\u010dn\u1ef3","year":"2016"},{"key":"ref26","article-title":"Megatron-LM: Training multi-billion parameter language models using model parallelism","author":"Shoeybi","year":"2019"},{"key":"ref27","article-title":"Don\u2019t decay the learning rate, increase the batch size","volume-title":"Proc. 6th Int. Conf. Learn. Representations","author":"Smith"},{"key":"ref28","article-title":"Federated learning with non-IID data","author":"Zhao","year":"2018"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1561\/2200000050"},{"key":"ref30","article-title":"Communication efficient decentralized training with multiple local updates","author":"Li","year":"2019"},{"key":"ref31","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref33","first-page":"1106","article-title":"ImageNet classification with deep convolutional neural networks","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Krizhevsky"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2003.819861"},{"key":"ref37","article-title":"A sensitivity analysis of (and practitioners\u2019 guide to) convolutional neural networks for sentence classification","author":"Zhang","year":"2015"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.findings-emnlp.305"},{"key":"ref39","article-title":"mixup: Beyond empirical risk minimization","volume-title":"Proc. 6th Int. Conf. Learn. Representations","author":"Zhang"},{"key":"ref40","first-page":"4507","article-title":"InstaHide: Instance-hiding schemes for private distributed learning","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Huang"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2023\/418"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8858\/11077775\/10848255.pdf?arnumber=10848255","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,7,14]],"date-time":"2025-07-14T17:45:27Z","timestamp":1752515127000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10848255\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,7]]},"references-count":41,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2025.3532339","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,7]]}}}