{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,18]],"date-time":"2026-06-18T15:53:10Z","timestamp":1781797990427,"version":"3.54.5"},"reference-count":47,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100005230","name":"Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62372073"],"award-info":[{"award-number":["62372073"]}],"id":[{"id":"10.13039\/501100005230","id-type":"DOI","asserted-by":"publisher"}]},{"name":"National Social Science Fund of China","award":["2024-SKJJ-C-029"],"award-info":[{"award-number":["2024-SKJJ-C-029"]}]},{"DOI":"10.13039\/501100012226","name":"Fundamental Research Funds for the Central Universities","doi-asserted-by":"publisher","award":["2023CDJXY-039"],"award-info":[{"award-number":["2023CDJXY-039"]}],"id":[{"id":"10.13039\/501100012226","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100012546","name":"Chongqing Post-Doctoral Science Foundation","doi-asserted-by":"publisher","award":["2021LY75"],"award-info":[{"award-number":["2021LY75"]}],"id":[{"id":"10.13039\/100012546","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100012546","name":"Chongqing Post-Doctoral Science Foundation","doi-asserted-by":"publisher","award":["cx2023080"],"award-info":[{"award-number":["cx2023080"]}],"id":[{"id":"10.13039\/100012546","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2025]]},"DOI":"10.1109\/tifs.2025.3570119","type":"journal-article","created":{"date-parts":[[2025,5,15]],"date-time":"2025-05-15T17:31:50Z","timestamp":1747330310000},"page":"5396-5410","source":"Crossref","is-referenced-by-count":7,"title":["FLGuardian: Defending Against Model Poisoning Attacks via Fine-Grained Detection in Federated Learning"],"prefix":"10.1109","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0009-0000-9159-1536","authenticated-orcid":false,"given":"Xingjie","family":"Zhou","sequence":"first","affiliation":[{"name":"College of Computer Science, Chongqing University, Chongqing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8987-377X","authenticated-orcid":false,"given":"Xianzhang","family":"Chen","sequence":"additional","affiliation":[{"name":"College of Computer Science, Chongqing University, Chongqing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7087-1069","authenticated-orcid":false,"given":"Shukan","family":"Liu","sequence":"additional","affiliation":[{"name":"School of Electronic Engineering, Naval University of Engineering, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-1482-8583","authenticated-orcid":false,"given":"Xuehong","family":"Fan","sequence":"additional","affiliation":[{"name":"College of Computer Science, Chongqing University, Chongqing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2498-4177","authenticated-orcid":false,"given":"Qiao","family":"Sun","sequence":"additional","affiliation":[{"name":"School of Electronic Engineering, Naval University of Engineering, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-5103-4589","authenticated-orcid":false,"given":"Lin","family":"Chen","sequence":"additional","affiliation":[{"name":"School of Electronic Engineering, Naval University of Engineering, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1004-0140","authenticated-orcid":false,"given":"Meikang","family":"Qiu","sequence":"additional","affiliation":[{"name":"School of Computer and Cyber Sciences, Augusta University, Augusta, GA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9439-4623","authenticated-orcid":false,"given":"Tao","family":"Xiang","sequence":"additional","affiliation":[{"name":"College of Computer Science, Chongqing University, Chongqing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"Utilization of Fate in Risk Management of Credit in Small and Micro Enterprises","year":"2019"},{"key":"ref2","volume-title":"Machine Learning Ledger Orchestration for Drug Discovery (melloddy)","year":"2020"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1038\/s41598-018-24874-2"},{"key":"ref4","first-page":"2938","article-title":"How to backdoor federated learning","volume-title":"Proc. Int. Conf. Artif. Intell. Statist.","author":"Bagdasaryan"},{"key":"ref5","first-page":"8635","article-title":"A little is enough: Circumventing defenses for distributed learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Baruch"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.354"},{"key":"ref7","first-page":"118","article-title":"Machine learning with adversaries: Byzantine tolerant gradient descent","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"30","author":"Blanchard"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24434"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW56347.2022.00383"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ICCD46524.2019.00038"},{"key":"ref11","first-page":"1605","article-title":"Local model poisoning attacks to Byzantine-robust federated learning","volume-title":"Proc. 29th USENIX Secur. Symp. (USENIX Secur. 20)","author":"Fang"},{"key":"ref12","first-page":"301","article-title":"The limitations of federated learning in Sybil settings","volume-title":"Proc. 23rd Int. Symp. Res. Attacks, Intrusions Defenses","author":"Fung"},{"key":"ref13","article-title":"Protecting federated learning from extreme model poisoning attacks via multidimensional time series anomaly detection","author":"Gabrielli","year":"2023","journal-title":"arXiv:2303.16668"},{"key":"ref14","article-title":"BadNets: Identifying vulnerabilities in the machine learning model supply chain","author":"Gu","year":"2017","journal-title":"arXiv:1708.06733"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3321408.3321586"},{"key":"ref16","article-title":"Federated learning for mobile keyboard prediction","author":"Hard","year":"2018","journal-title":"arXiv:1811.03604"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2002.1017616"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CISS53076.2022.9751167"},{"key":"ref20","article-title":"Federated learning: Strategies for improving communication efficiency","author":"Kone\u010dn\u00fd","year":"2016","journal-title":"arXiv:1610.05492"},{"key":"ref21","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref22","volume-title":"Mnist Handwritten Digit Database","author":"LeCun","year":"1998"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179401"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/BIBM55620.2022.9995378"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2023.3341811"},{"key":"ref26","first-page":"1273","article-title":"Communication-efficient learning of deep networks from decentralized data","volume":"54","author":"McMahan","year":"2017","journal-title":"Proc. 20th Int. Conf. Artif. Intell. Statist."},{"key":"ref27","first-page":"1415","article-title":"FLAME: Taming backdoors in federated learning","volume-title":"Proc. 31st USENIX Secur. Symp. (USENIX Secur. 22)","author":"Nguyen"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i10.17118"},{"key":"ref29","first-page":"8026","article-title":"PyTorch: An imperative style, high-performance deep learning library","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Paszke"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.26512\/lstr.v13i2.37425"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2022.23156"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24498"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-11723-8_9"},{"key":"ref34","article-title":"Deep inside convolutional networks: Visualising image classification models and saliency maps","author":"Simonyan","year":"2013","journal-title":"arXiv:1312.6034"},{"key":"ref35","first-page":"4427","article-title":"Federated multi-task learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"30","author":"Smith"},{"key":"ref36","article-title":"Can you really backdoor federated learning?","author":"Sun","year":"2019","journal-title":"arXiv:1911.07963"},{"key":"ref37","first-page":"16070","article-title":"Attack of the tails: Yes, you really can backdoor federated learning","volume-title":"Proc. NIPS","author":"Wang"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3488932.3517395"},{"key":"ref39","article-title":"Fashion-MNIST: A novel image dataset for benchmarking machine learning algorithms","author":"Xiao","year":"2017","journal-title":"arXiv:1708.07747"},{"key":"ref40","first-page":"1","article-title":"DBA: Distributed backdoor attacks against federated learning","volume-title":"Proc. 8th Int. Conf. Learn. Represent. (ICLR)","author":"Xie"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i9.26271"},{"key":"ref42","first-page":"5650","article-title":"Byzantine-robust distributed learning: Towards optimal statistical rates","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Yin"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-10590-1_53"},{"key":"ref44","first-page":"1","article-title":"FLIP: A provable defense framework for backdoor mitigation in federated learning","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Zhang"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3534678.3539231"},{"key":"ref46","first-page":"26429","article-title":"Neurotoxin: Durable backdoors in federated learning","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Zhang"},{"key":"ref47","first-page":"1","article-title":"Backdoor federated learning by poisoning backdoor-critical layers","volume-title":"Proc. 12th Int. Conf. Learn. Represent.","author":"Zhuang"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/10810755\/11003999.pdf?arnumber=11003999","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,10]],"date-time":"2025-06-10T17:49:54Z","timestamp":1749577794000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11003999\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":47,"URL":"https:\/\/doi.org\/10.1109\/tifs.2025.3570119","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]}}}