{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,4]],"date-time":"2026-08-04T15:12:34Z","timestamp":1785856354393,"version":"3.56.0"},"reference-count":32,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"crossref","award":["U2468205"],"award-info":[{"award-number":["U2468205"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100004543","name":"China Scholarship Council","doi-asserted-by":"crossref","id":[{"id":"10.13039\/501100004543","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Key Laboratory of Knowledge Engineering with Big Data","award":["BigKEOpen2025-04"],"award-info":[{"award-number":["BigKEOpen2025-04"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2025]]},"DOI":"10.1109\/tifs.2025.3589061","type":"journal-article","created":{"date-parts":[[2025,7,15]],"date-time":"2025-07-15T17:41:55Z","timestamp":1752601315000},"page":"7394-7409","source":"Crossref","is-referenced-by-count":6,"title":["Resisting Poisoning Attacks in Federated Learning via Dual-Domain Distance and Trust Assessment"],"prefix":"10.1109","volume":"20","author":[{"given":"Zhaoqi","family":"Wang","sequence":"first","affiliation":[{"name":"Beijing Institute of Technology","place":["Beijing, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6313-4407","authenticated-orcid":false,"given":"Zijian","family":"Zhang","sequence":"additional","affiliation":[{"name":"Beijing Institute of Technology","place":["Beijing, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhen","family":"Li","sequence":"additional","affiliation":[{"name":"Beijing Institute of Technology","place":["Beijing, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4441-7230","authenticated-orcid":false,"given":"Yan","family":"Wu","sequence":"additional","affiliation":[{"name":"Beijing Institute of Technology","place":["Beijing, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ye","family":"Liu","sequence":"additional","affiliation":[{"name":"Singapore Management University","place":["Bras Basah, Singapore"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3553-0813","authenticated-orcid":false,"given":"Meng","family":"Li","sequence":"additional","affiliation":[{"name":"Hefei University of Technology","place":["Hefei, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4257-4347","authenticated-orcid":false,"given":"Xin","family":"Li","sequence":"additional","affiliation":[{"name":"Beijing Institute of Technology","place":["Beijing, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yong","family":"Liu","sequence":"additional","affiliation":[{"name":"Qi An Xin Technology Group Inc.","place":["Beijing, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-6607-5993","authenticated-orcid":false,"given":"Jincheng","family":"An","sequence":"additional","affiliation":[{"name":"QAX Security Center","place":["Beijing, China"],"department":["Qi An Xin Technology Group Inc."]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5074-1363","authenticated-orcid":false,"given":"Wei","family":"Liang","sequence":"additional","affiliation":[{"name":"Hunan University of Science and Technology","place":["Xiangtan, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3277-3887","authenticated-orcid":false,"given":"Liehuang","family":"Zhu","sequence":"additional","affiliation":[{"name":"Beijing Institute of Technology","place":["Beijing, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","first-page":"1273","article-title":"Communication-efficient learning of deep networks from decentralized data","volume-title":"Proc. Artif. Intell. Statist. (AISTATS)","author":"McMahan"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3196274"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2021.3108434"},{"key":"ref4","article-title":"Generalized Byzantine-tolerant SGD","author":"Xie","year":"2018","journal-title":"arXiv:1802.10116"},{"key":"ref5","first-page":"8635","article-title":"A little is enough: Circumventing defenses for distributed learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst. (NeurIPS)","author":"Baruch"},{"key":"ref6","first-page":"118","article-title":"Machine learning with adversaries: Byzantine tolerant gradient descent","volume-title":"Proc. Adv. Neural Inf. Process. Syst. (NeurIPS)","volume":"30","author":"Blanchard"},{"key":"ref7","first-page":"5650","article-title":"Byzantine-robust distributed learning: Towards optimal statistical rates","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Yin"},{"key":"ref8","article-title":"Mitigating Sybils in federated learning poisoning","author":"Fung","year":"2018","journal-title":"arXiv:1808.04866"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24434"},{"key":"ref10","first-page":"1415","article-title":"FLAME: Taming backdoors in federated learning","volume-title":"Proc. 31st USENIX Secur. Symp. (USENIX Secur.)","author":"Nguyen"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2024.24620"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02338"},{"key":"ref13","volume-title":"The MNIST Database of Handwritten Digits","author":"LeCun","year":"1998"},{"key":"ref14","article-title":"Fashion-MNIST: A novel image dataset for benchmarking machine learning algorithms","author":"Xiao","year":"2017","journal-title":"arXiv:1708.07747"},{"key":"ref15","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref16","first-page":"437","article-title":"A public domain dataset for human activity recognition using smartphones","volume-title":"Proc. Eur. Symp. Artif. Neural Netw. (ESANN)","author":"Anguita"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1038\/srep27988"},{"key":"ref18","article-title":"Robust and privacy-preserving collaborative learning: A comprehensive survey","author":"Guo","year":"2021","journal-title":"arXiv:2112.10183"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2022.3216981"},{"key":"ref20","article-title":"Targeted backdoor attacks on deep learning systems using data poisoning","author":"Chen","year":"2017","journal-title":"arXiv:1712.05526"},{"key":"ref21","first-page":"2938","article-title":"How to backdoor federated learning","volume-title":"Proc. Int. Conf. Artif. Intell. Statist.","author":"Bagdasaryan"},{"key":"ref22","first-page":"1","article-title":"DBA: Distributed backdoor attacks against federated learning","volume-title":"Proc. Int. Conf. Learn. Represent. (ICLR)","author":"Xie"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140451"},{"key":"ref24","first-page":"3521","article-title":"The hidden vulnerability of distributed learning in Byzantium","volume-title":"Proc. 35th Int. Conf. Mach. Learn.","author":"El Mhamdi"},{"key":"ref25","article-title":"Continuous control with deep reinforcement learning","author":"Lillicrap","year":"2015","journal-title":"arXiv:1509.02971"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/BF00115009"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE53745.2022.00077"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TSP.2014.2309076"},{"key":"ref29","article-title":"Differentially private federated learning: A client level perspective","author":"Geyer","year":"2017","journal-title":"arXiv:1712.07557"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-658-40442-0_9"},{"key":"ref31","first-page":"3320","article-title":"How transferable are features in deep neural networks","volume-title":"Proc. Adv. Neural Inf. Process. Syst. (NeurIPS)","volume":"27","author":"Yosinski"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.1503.02531"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/10810755\/11080042.pdf?arnumber=11080042","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,30]],"date-time":"2026-07-30T19:07:29Z","timestamp":1785438449000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11080042\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":32,"URL":"https:\/\/doi.org\/10.1109\/tifs.2025.3589061","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]}}}