{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T23:48:43Z","timestamp":1782949723924,"version":"3.54.5"},"reference-count":52,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"NSFC","doi-asserted-by":"crossref","award":["92270204"],"award-info":[{"award-number":["92270204"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100001809","name":"Chinese Academy of Sciences (CAS) Project for Young Scientists in Basic Research","doi-asserted-by":"publisher","award":["YSBR-118"],"award-info":[{"award-number":["YSBR-118"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/tifs.2026.3688017","type":"journal-article","created":{"date-parts":[[2026,4,27]],"date-time":"2026-04-27T19:48:15Z","timestamp":1777319295000},"page":"4816-4830","source":"Crossref","is-referenced-by-count":1,"title":["HEFLGuard: Backdoor Detection in Homomorphic Encryption-Based Federated Learning"],"prefix":"10.1109","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0009-0001-1727-1590","authenticated-orcid":false,"given":"Congyi","family":"Li","sequence":"first","affiliation":[{"name":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2671-4314","authenticated-orcid":false,"given":"Peizhuo","family":"Lv","sequence":"additional","affiliation":[{"name":"College of Computing and Data Science, Nanyang Technological University, Nanyang Ave, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jinwen","family":"He","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5624-2987","authenticated-orcid":false,"given":"Kai","family":"Chen","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0673-2283","authenticated-orcid":false,"given":"Hong","family":"Zhu","sequence":"additional","affiliation":[{"name":"School of Software, Shandong University, Shandong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","first-page":"1273","article-title":"Communication-efficient learning of deep networks from decentralized data","author":"McMahan","year":"2016","journal-title":"Artif. Intell. Statist."},{"key":"ref2","article-title":"Label inference attacks against vertical federated learning","volume-title":"Proc. USENIX Secur.","author":"Fu"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2787987"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref5","article-title":"Public-key cryptosystem based on composite degree residuosity","author":"Paillier","year":"1999","journal-title":"J. Cryptol."},{"key":"ref6","first-page":"493","article-title":"BatchCrypt: Efficient homomorphic encryption for cross-silo federated learning","volume-title":"Proc. USENIX ATC","author":"Zhang"},{"key":"ref7","article-title":"DBA: Distributed backdoor attacks against federated learning","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Xie"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24434"},{"key":"ref9","article-title":"Backdoor attacks and defenses in federated learning: Survey, challenges and future research directions","author":"Nguyen","year":"2023","journal-title":"arXiv:2303.02213"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-88418-5_23"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/ICPADS47876.2019.00042"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2021.3108434"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3169918"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3420126"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560611"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179400"},{"key":"ref17","article-title":"ACORN: Input validation for secure aggregation","volume-title":"Proc. 32nd USENIX Secur. Symp. (USENIX Security)","author":"Bell"},{"key":"ref18","article-title":"Byzantine-robust distributed learning: Towards optimal statistical rates","volume-title":"Proc. Int. Conf. Mach. Learn. (ICML)","author":"Yin"},{"key":"ref19","first-page":"118","article-title":"Machine learning with adversaries: Byzantine tolerant gradient descent","volume-title":"Proc. Adv. Neural Inf. Process. Syst. (NeurIPS)","volume":"30","author":"Blanchard"},{"key":"ref20","article-title":"A fully homomorphic encryption scheme","author":"Gentry","year":"2009"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3393527.3393533"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.3390\/electronics8040411"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1117\/12.2606256"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102199"},{"key":"ref25","article-title":"IBM-federated learning with homomorphic encryption","author":"Aronovich","year":"2022","journal-title":"IBM Community Blog"},{"key":"ref26","article-title":"Federated learning with homomorphic encryption","author":"Holger Roth","year":"2021","journal-title":"NVIDIA Developer Blog"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2021.3130115"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1002\/int.22818"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2025.3611340"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1016\/j.inffus.2026.104155"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2024.3361451"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58951-6_24"},{"key":"ref33","article-title":"How to backdoor federated learning","volume-title":"Proc. Int. Conf. Artif. Intell. Statist.","author":"Bagdasaryan"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3212174"},{"key":"ref35","article-title":"Local model poisoning attacks to Byzantine-robust federated learning","volume-title":"Proc. USENIX Secur.","author":"Fang"},{"key":"ref36","volume-title":"Standards for Privacy of Individually Identifiable Health Information","year":"2025"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1080\/01621459.1974.10482962"},{"key":"ref38","article-title":"Byzantine-robust distributed learning: Towards optimal statistical rates","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Liu"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/357172.357176"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref41","article-title":"Fashion-MNIST: A novel image dataset for benchmarking machine learning algorithms","author":"Xiao","year":"2017","journal-title":"arXiv:1708.07747"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1038\/srep27988"},{"key":"ref43","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref44","article-title":"Character-level convolutional networks for text classification","author":"Zhang","year":"2015","journal-title":"arXiv:1509.01626"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1016\/B978-1-55860-377-6.50048-7"},{"key":"ref46","article-title":"Very deep convolutional networks for large-scale image recognition","author":"Simonyan","year":"2014","journal-title":"arXiv:1409.1556"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/3065386"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.findings-emnlp.372"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01616"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/DTPI52967.2021.9540109"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/11313711\/11495226.pdf?arnumber=11495226","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,16]],"date-time":"2026-05-16T04:20:03Z","timestamp":1778905203000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11495226\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":52,"URL":"https:\/\/doi.org\/10.1109\/tifs.2026.3688017","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}