{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,17]],"date-time":"2026-10-17T22:12:28Z","timestamp":1792275148318,"version":"4.4.0"},"reference-count":39,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62172123"],"award-info":[{"award-number":["62172123"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62302122"],"award-info":[{"award-number":["62302122"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100005046","name":"Natural Science Foundation of Heilongjiang Province of China","doi-asserted-by":"publisher","award":["YQ2021F007"],"award-info":[{"award-number":["YQ2021F007"]}],"id":[{"id":"10.13039\/501100005046","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2023]]},"DOI":"10.1109\/tifs.2023.3315125","type":"journal-article","created":{"date-parts":[[2023,9,13]],"date-time":"2023-09-13T13:31:47Z","timestamp":1694611907000},"page":"5749-5761","source":"Crossref","is-referenced-by-count":54,"title":["APFed: Anti-Poisoning Attacks in Privacy-Preserving Heterogeneous Federated Learning"],"prefix":"10.1109","volume":"18","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7850-9710","authenticated-orcid":false,"given":"Xiao","family":"Chen","sequence":"first","affiliation":[{"name":"School of Cyberspace Science, Harbin Institute of Technology, Harbin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4996-3233","authenticated-orcid":false,"given":"Haining","family":"Yu","sequence":"additional","affiliation":[{"name":"School of Cyberspace Science, Harbin Institute of Technology, Harbin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8702-8302","authenticated-orcid":false,"given":"Xiaohua","family":"Jia","sequence":"additional","affiliation":[{"name":"Department of Computer Science, City University of Hong Kong, Hong Kong, SAR, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiangzhan","family":"Yu","sequence":"additional","affiliation":[{"name":"School of Cyberspace Science, Harbin Institute of Technology, Harbin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref13","first-page":"429","article-title":"Federated optimization in heterogeneous networks","author":"li","year":"2018","journal-title":"Proc Mach Learn Syst"},{"key":"ref35","article-title":"Can you really backdoor federated learning?","author":"sun","year":"2019","journal-title":"arXiv 1911 07963"},{"key":"ref12","first-page":"1126","article-title":"Model-agnostic meta-learning for fast adaptation of deep networks","author":"finn","year":"2017","journal-title":"Proc Int Conf Mach Learn"},{"key":"ref34","first-page":"4274","article-title":"Universal multi-party poisoning attacks","author":"mahloujifar","year":"2019","journal-title":"Proc Int Conf Mach Learn"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/671"},{"key":"ref37","first-page":"16070","article-title":"Attack of the tails: Yes, you really can backdoor federated learning","author":"wang","year":"2020","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP40778.2020.9190968"},{"key":"ref36","article-title":"How to backdoor federated learning","author":"bagdasaryan","year":"2018","journal-title":"arXiv 1807 00459"},{"key":"ref31","article-title":"The hidden vulnerability of distributed learning in byzantium","author":"el mhamdi","year":"2018","journal-title":"arXiv 1802 07927"},{"key":"ref30","first-page":"1","article-title":"Mobile edge computing—A key technology towards 5G","volume":"11","author":"hu","year":"2015","journal-title":"ETSI White Paper"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2020.3015958"},{"key":"ref33","first-page":"8635","article-title":"A little is enough: Circumventing defenses for distributed learning","author":"baruch","year":"2019","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref10","article-title":"Robust federated learning in a heterogeneous environment","author":"ghosh","year":"2019","journal-title":"arXiv 1906 06629"},{"key":"ref32","first-page":"1623","article-title":"Local model poisoning attacks to Byzantine-robust federated learning","author":"fang","year":"2019","journal-title":"Proc Usenix Secur Symp"},{"key":"ref2","article-title":"Federated learning with non-IID data","author":"zhao","year":"2018","journal-title":"arXiv 1806 00582"},{"key":"ref1","first-page":"1273","article-title":"Communication-efficient learning of deep networks from decentralized data","author":"mcmahan","year":"2017","journal-title":"Proc Int Conf Artif Intell Statist"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3169918"},{"key":"ref39","first-page":"6106","article-title":"Poison frogs! Targeted clean-label poisoning attacks on neural networks","author":"shafahi","year":"2018","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref16","article-title":"Membership inference attacks against machine learning models","author":"shokri","year":"2016","journal-title":"arXiv 1610 05820"},{"key":"ref38","first-page":"1","article-title":"DBA: Distributed backdoor attacks against federated learning","author":"xie","year":"2020","journal-title":"Proc Int Conf Learn Represent"},{"key":"ref19","first-page":"2938","article-title":"How to backdoor federated learning","author":"bagdasaryan","year":"2020","journal-title":"Proc Int Conf Artif Intell Statist"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2021.3108434"},{"key":"ref24","first-page":"5650","article-title":"Byzantine-robust distributed learning: Towards optimal statistical rates","author":"yin","year":"2018","journal-title":"Proc Int Conf Mach Learn"},{"key":"ref23","first-page":"118","article-title":"Machine learning with adversaries: Byzantine tolerant gradient descent","volume":"30","author":"blanchard","year":"2017","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref26","article-title":"FLTrust: Byzantine-robust federated learning via trust bootstrapping","author":"cao","year":"2020","journal-title":"arXiv 2012 13995"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3219617.3219655"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i8.16849"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58951-6_24"},{"key":"ref21","first-page":"301","article-title":"The limitations of federated learning in Sybil settings","author":"fung","year":"2020","journal-title":"Proc 23rd Int Symp Res Attacks Intrusions Defenses"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-48910-X_16"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP40776.2020.9054676"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-48000-6_14"},{"key":"ref8","first-page":"5132","article-title":"SCAFFOLD: Stochastic controlled averaging for federated learning","author":"karimireddy","year":"2020","journal-title":"Proc Int Conf Mach Learn"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2014.161"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3442381.3449847"},{"key":"ref4","article-title":"Federated learning for mobile keyboard prediction","author":"hard","year":"2018","journal-title":"arXiv 1811 03604"},{"key":"ref3","article-title":"Federated AI for building AI solutions across multiple agencies","author":"verma","year":"2018","journal-title":"arXiv 1809 10036"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM41043.2020.9155268"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM41043.2020.9155414"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/9970396\/10250861.pdf?arnumber=10250861","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,10,9]],"date-time":"2023-10-09T14:45:27Z","timestamp":1696862727000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10250861\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"references-count":39,"URL":"https:\/\/doi.org\/10.1109\/tifs.2023.3315125","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]}}}