{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,4]],"date-time":"2026-07-04T17:07:06Z","timestamp":1783184826634,"version":"3.54.6"},"reference-count":54,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"5","license":[{"start":{"date-parts":[[2025,9,1]],"date-time":"2025-09-01T00:00:00Z","timestamp":1756684800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,9,1]],"date-time":"2025-09-01T00:00:00Z","timestamp":1756684800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,9,1]],"date-time":"2025-09-01T00:00:00Z","timestamp":1756684800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62272183"],"award-info":[{"award-number":["62272183"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62002104"],"award-info":[{"award-number":["62002104"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62372343"],"award-info":[{"award-number":["62372343"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"National Key R&D Program of China","award":["2024YFE0103800"],"award-info":[{"award-number":["2024YFE0103800"]}]},{"name":"Major Science and Technology Project of Hubei Province","award":["2024BAA008"],"award-info":[{"award-number":["2024BAA008"]}]},{"name":"Major Science and Technology Project of Hubei Province","award":["2024BAA011"],"award-info":[{"award-number":["2024BAA011"]}]},{"name":"Key R&D Program of Hubei Province","award":["2024BAB016"],"award-info":[{"award-number":["2024BAB016"]}]},{"name":"Key R&D Program of Hubei Province","award":["2024BAB031"],"award-info":[{"award-number":["2024BAB031"]}]},{"name":"Key R&D Program of Hubei Province","award":["2023BAB074"],"award-info":[{"award-number":["2023BAB074"]}]},{"name":"UKRI EPSRC","award":["EP\/X035085\/1"],"award-info":[{"award-number":["EP\/X035085\/1"]}]},{"name":"Open Project Funding of the Key Laboratory of Intelligent Sensing System and Security","award":["KLISSS202401"],"award-info":[{"award-number":["KLISSS202401"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2025,9]]},"DOI":"10.1109\/tdsc.2025.3564697","type":"journal-article","created":{"date-parts":[[2025,4,28]],"date-time":"2025-04-28T13:35:54Z","timestamp":1745847354000},"page":"5277-5290","source":"Crossref","is-referenced-by-count":1,"title":["Poisoning as a Post-Protection: Mitigating Membership Privacy Leakage From Gradient and Prediction of Federated Models"],"prefix":"10.1109","volume":"22","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2566-9360","authenticated-orcid":false,"given":"Gaoyang","family":"Liu","sequence":"first","affiliation":[{"name":"Hubei Key Laboratory of Internet of Intelligence, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-0308-213X","authenticated-orcid":false,"given":"Tianlong","family":"Xu","sequence":"additional","affiliation":[{"name":"Hubei Key Laboratory of Internet of Intelligence, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6297-5722","authenticated-orcid":false,"given":"Yang","family":"Yang","sequence":"additional","affiliation":[{"name":"Key Laboratory of Intelligent Sensing System and Security, Ministry of Education, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1374-1882","authenticated-orcid":false,"given":"Ahmed M.","family":"Abdelmoniem","sequence":"additional","affiliation":[{"name":"School of Electronic Engineering and Computer Science, Queen Mary University of London, London, U.K."}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1963-4954","authenticated-orcid":false,"given":"Chen","family":"Wang","sequence":"additional","affiliation":[{"name":"Hubei Key Laboratory of Internet of Intelligence, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6592-1984","authenticated-orcid":false,"given":"Jiangchuan","family":"Liu","sequence":"additional","affiliation":[{"name":"School of Computing Science, Simon Fraser University, Burnaby, BC, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cosrev.2021.100379"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3146448"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3176191"},{"key":"ref4","article-title":"Federated optimization: Distributed machine learning for on-device intelligence","author":"Kone\u010dny","year":"2016"},{"key":"ref5","article-title":"Federated learning: Strategies for improving communication efficiency","author":"Kone\u010dny","year":"2016"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/LRA.2020.2976321"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1038\/s42256-020-0186-1"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3501296"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3321565"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3196646"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP51992.2021.00025"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3303718"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3326230"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3155921"},{"key":"ref15","article-title":"Dataset inference: Ownership resolution in machine learning","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Maini"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243855"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23119"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978318"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2022.23054"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2023\/418"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2024.23014"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3298981"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1561\/9781680837896"},{"key":"ref25","article-title":"Very deep convolutional networks for large-scale image recognition","author":"Simonyan","year":"2014"},{"key":"ref26","first-page":"1","article-title":"On the convergence of fedavg on non-IID data","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Li"},{"key":"ref27","volume-title":"Deep Learning","author":"Goodfellow","year":"2016"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00065"},{"key":"ref29","first-page":"1","article-title":"Effective passive membership inference attacks in federated learning against overparameterized models","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Li"},{"key":"ref30","article-title":"Differentially private federated learning: A client level perspective","author":"Geyer","year":"2017"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00919"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2018.00027"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1037\/e516712004-001"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3324772"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484575"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3154029"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01015"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560684"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00449"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00029"},{"key":"ref41","article-title":"Efficient passive membership inference attack in federated learning","author":"Zari","year":"2021"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/ICC40277.2020.9148790"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2022.103201"},{"key":"ref44","article-title":"The influence of dropout on membership inference in differentially private models","author":"Galinkin","year":"2021"},{"key":"ref45","first-page":"2615","volume-title":"Proc. USENIX Secur. Symp.","author":"Song"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/11681878_14"},{"key":"ref47","article-title":"Sampling attacks: Amplification of membership inference attacks by repeated queries","author":"Rahimian","year":"2020"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1016\/j.inffus.2022.09.011"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813687"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/3485447.3512233"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1002\/int.22241"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-63076-8_3"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102378"},{"key":"ref54","article-title":"Mixnn: Protection of federated learning against inference attacks by mixing neural network layers","author":"Boutet","year":"2021"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8858\/11150357\/10978074.pdf?arnumber=10978074","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,4]],"date-time":"2025-09-04T18:53:13Z","timestamp":1757011993000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10978074\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9]]},"references-count":54,"journal-issue":{"issue":"5"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2025.3564697","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,9]]}}}