{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,4]],"date-time":"2026-07-04T17:02:48Z","timestamp":1783184568849,"version":"3.54.6"},"reference-count":62,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Real-Time and Embedded Computing Systems Research Centre (CISTER) Research Unit","award":["UIDP\/UIDB\/04234\/2020"],"award-info":[{"award-number":["UIDP\/UIDB\/04234\/2020"]}]},{"name":"ADANET Project","award":["PTDC\/EEICOM\/3362\/2021"],"award-info":[{"award-number":["PTDC\/EEICOM\/3362\/2021"]}]},{"name":"IBEX Project, funded by the National Funds through FCT\/MCTES","award":["PTDC\/CCI-COM\/4280\/2021"],"award-info":[{"award-number":["PTDC\/CCI-COM\/4280\/2021"]}]},{"DOI":"10.13039\/501100001961","name":"AXA Research Fund","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001961","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"U.S. National Science Foundation","doi-asserted-by":"publisher","award":["CNS-2128448"],"award-info":[{"award-number":["CNS-2128448"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"U.S. National Science Foundation","doi-asserted-by":"publisher","award":["ECCS-2335876"],"award-info":[{"award-number":["ECCS-2335876"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2024]]},"DOI":"10.1109\/tifs.2024.3362147","type":"journal-article","created":{"date-parts":[[2024,2,5]],"date-time":"2024-02-05T18:35:24Z","timestamp":1707158124000},"page":"3465-3480","source":"Crossref","is-referenced-by-count":38,"title":["Data-Agnostic Model Poisoning Against Federated Learning: A Graph Autoencoder Approach"],"prefix":"10.1109","volume":"19","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-0517-2392","authenticated-orcid":false,"given":"Kai","family":"Li","sequence":"first","affiliation":[{"name":"Department of Engineering, University of Cambridge, Cambridge, U.K."}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5728-9453","authenticated-orcid":false,"given":"Jingjing","family":"Zheng","sequence":"additional","affiliation":[{"name":"Real-Time and Embedded Computing Systems Research Centre (CISTER), Porto, Portugal"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9167-1613","authenticated-orcid":false,"given":"Xin","family":"Yuan","sequence":"additional","affiliation":[{"name":"Digital Productivity and Services Flagship, Commonwealth Scientific and Industrial Research Organization (CSIRO), Sydney, NSW, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4933-594X","authenticated-orcid":false,"given":"Wei","family":"Ni","sequence":"additional","affiliation":[{"name":"Digital Productivity and Services Flagship, Commonwealth Scientific and Industrial Research Organization (CSIRO), Sydney, NSW, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2523-3858","authenticated-orcid":false,"given":"Ozgur B.","family":"Akan","sequence":"additional","affiliation":[{"name":"Department of Engineering, Division of Electrical Engineering, University of Cambridge, Cambridge, U.K."}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2062-131X","authenticated-orcid":false,"given":"H. Vincent","family":"Poor","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering, Princeton University, Princeton, NJ, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3221899"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2022.3232845"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2021.3090430"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/tifs.2022.3227435"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/MSEC.2020.3039941"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.011.2000286"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3551636"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3534678.3539231"},{"key":"ref9","first-page":"1605","article-title":"Local model poisoning attacks to Byzantine-robust federated learning","volume-title":"Proc. 29th USENIX Secur. Symp.","author":"Fang"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-63076-8_1"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/sp46214.2022.9833647"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2018.2807452"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/IWCMC58020.2023.10183217"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/tifs.2022.3176191"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2021.3130434"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/WF-IoT51360.2021.9594946"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2021.3120197"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.3013710"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS.2019.00130"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/GCWkshps52748.2021.9681966"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2020.3002796"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58951-6_24"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3128679"},{"key":"ref24","first-page":"16070","article-title":"Attack of the tails: Yes, you really can backdoor federated learning","volume-title":"Proc. NIPS","author":"Wang"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.3023126"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom\/BigDataSE.2019.00057"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2019.8737416"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2020.3000372"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW53098.2021.00309"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/BigData47090.2019.9005983"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/tifs.2020.3043139"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/WCNC55385.2023.10118940"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2022.3176739"},{"key":"ref34","first-page":"7232","article-title":"Evaluating gradient inversion attacks and defenses in federated learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"34","author":"Huang"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/TETC.2022.3159282"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.117.2200065"},{"key":"ref37","first-page":"689","article-title":"DROWN: Breaking TLS using SSLv2","volume-title":"Proc. USENIX Secur. Symp.","author":"Aviram"},{"key":"ref38","first-page":"4877","article-title":"We really need to talk about session tickets: A large-scale analysis of cryptographic dangers with TLS session tickets","volume-title":"Proc. USENIX Secur. Symp.","author":"Hebrok"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2019.2914453"},{"key":"ref40","first-page":"1","article-title":"Machine learning with adversaries: Byzantine tolerant gradient descent","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"30","author":"Blanchard"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2021.3135422"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i11.17193"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9780511804441"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/ISCC50000.2020.9219684"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3383972.3383985"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2022.3182119"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/TCYB.2019.2932096"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/ICBDA55095.2022.9760357"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1201\/b11629"},{"key":"ref50","first-page":"268","article-title":"Singular-value decomposition","volume-title":"Foundations of Robotics: Analysis and Control","author":"Yoshikawa","year":"2003"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/tifs.2020.2988575"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/3378679.3394533"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.3037194"},{"key":"ref54","author":"O\u2019Searcoid","year":"2006","journal-title":"Metric Spaces"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46128-1_50"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2012.2211477"},{"key":"ref57","article-title":"Fashion-MNIST: A novel image dataset for benchmarking machine learning algorithms","author":"Xiao","year":"2017","journal-title":"arXiv:1708.07747"},{"key":"ref58","first-page":"1415","article-title":"FLAME: Taming backdoors in federated learning","volume-title":"Proc. 31st USENIX Security Symp.","author":"Nguyen"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/ICPADS47876.2019.00042"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.14722\/diss.2020.23003"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW56347.2022.00383"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/TCOMM.2019.2944169"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/10319981\/10419367.pdf?arnumber=10419367","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,14]],"date-time":"2024-03-14T01:32:41Z","timestamp":1710379961000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10419367\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"references-count":62,"URL":"https:\/\/doi.org\/10.1109\/tifs.2024.3362147","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024]]}}}