{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,8]],"date-time":"2026-06-08T20:07:06Z","timestamp":1780949226459,"version":"3.54.1"},"reference-count":43,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"7","license":[{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62472302"],"award-info":[{"award-number":["62472302"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100013317","name":"Key Research and Development Program of Shanxi Province","doi-asserted-by":"crossref","award":["202402150101007"],"award-info":[{"award-number":["202402150101007"]}],"id":[{"id":"10.13039\/501100013317","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Open Project of the State Key Laboratory of Internet Architecture","award":["HLW2025MS31"],"award-info":[{"award-number":["HLW2025MS31"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. on Mobile Comput."],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1109\/tmc.2026.3664822","type":"journal-article","created":{"date-parts":[[2026,2,16]],"date-time":"2026-02-16T21:09:23Z","timestamp":1771276163000},"page":"10590-10606","source":"Crossref","is-referenced-by-count":0,"title":["SMTFL: Secure Model Training to Untrusted Participants in Federated Learning"],"prefix":"10.1109","volume":"25","author":[{"given":"Zhihui","family":"Zhao","sequence":"first","affiliation":[{"name":"College of Computer Science and Technology, Taiyuan University of Technology, Taiyuan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-1337-1678","authenticated-orcid":false,"given":"Xiaorong","family":"Dong","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Taiyuan University of Technology, Taiyuan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7543-0326","authenticated-orcid":false,"given":"Yimo","family":"Ren","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2773-3429","authenticated-orcid":false,"given":"Jianhua","family":"Wang","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Taiyuan University of Technology, Taiyuan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0999-8543","authenticated-orcid":false,"given":"Dan","family":"Yu","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Taiyuan University of Technology, Taiyuan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3720-7403","authenticated-orcid":false,"given":"Hongsong","family":"Zhu","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1000-1109","authenticated-orcid":false,"given":"Yongle","family":"Chen","sequence":"additional","affiliation":[{"name":"College of Artificial Intelligence, Taiyuan University of Technology, Taiyuan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2021.106775"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE60146.2024.00319"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/SRDS55811.2022.00012"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2024.3361451"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SPW53761.2021.00017"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2023.3333879"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3378679.3394533"},{"key":"ref8","article-title":"Random gradient masking as a defensive measure to deep leakage in federated learning","author":"Kim","year":"2024"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24434"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i10.17118"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i7.26083"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3352415"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560611"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3679014"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/FPL60245.2023.00046"},{"key":"ref16","article-title":"Toward robustness and privacy in federated learning: Experimenting with local and central differential privacy","author":"Naseri","year":"2020"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2024.24620"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.52202\/079017-2253"},{"key":"ref19","first-page":"301","article-title":"The limitations of federated learning in sybil settings","volume-title":"Proc. 23rd Int. Symp. Res. Attacks, Intrusions Defenses","author":"Fung"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS51616.2021.00086"},{"key":"ref21","article-title":"Learning differentially private language models without losing accuracy","author":"McMahan","year":"2017"},{"key":"ref22","first-page":"1415","article-title":"$\\lbrace${FLAME$\\rbrace$}: Taming backdoors in federated learning","volume-title":"Proc. 31st USENIX Secur. Symp.","author":"Nguyen"},{"key":"ref23","first-page":"118","article-title":"Machine learning with adversaries: Byzantine tolerant gradient descent","volume-title":"Proc. 31st Int. Conf. Neural Inf. Process. Syst.","author":"Blanchard"},{"key":"ref24","article-title":"Byzantine-robust distributed learning: Towards optimal statistical rates","author":"Yin","year":"2021"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560557"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2024.3391294"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SRDS55811.2022.00024"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3543507.3583305"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2024.3382321"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2021.3125190"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref32","article-title":"Fashion-MNIST: A novel image dataset for benchmarking machine learning algorithms","author":"Xiao","year":"2017"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2017.7966217"},{"key":"ref34","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref35","first-page":"86","article-title":"Few shot learning based on the street view house numbers (SVHN) dataset","volume-title":"Proc. Int. Conf. Edge Comput. IoT","author":"Yang"},{"key":"ref36","first-page":"1605","article-title":"Local model poisoning attacks to $\\lbrace${Byzantine-Robust$\\rbrace$} federated learning","volume-title":"Proc. 29th USENIX Secur. Symp.","author":"Fang"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2022.23156"},{"key":"ref38","first-page":"508","article-title":"Auror: Defending against poisoning attacks in collaborative deep learning systems","volume-title":"Proc. Annu. Conf. Comput. Secur. Appl.","author":"Shen"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref40","article-title":"Deep leakage from gradients","author":"Zhu","year":"2019"},{"key":"ref41","article-title":"On the convergence of fedavg on non-IID data","author":"Li","year":"2019"},{"key":"ref42","article-title":"Secure federated learning against model poisoning attacks via client filtering","author":"Yaldiz","year":"2023"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179336"}],"container-title":["IEEE Transactions on Mobile Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/7755\/11552380\/11397203.pdf?arnumber=11397203","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,8]],"date-time":"2026-06-08T19:54:54Z","timestamp":1780948494000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11397203\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7]]},"references-count":43,"journal-issue":{"issue":"7"},"URL":"https:\/\/doi.org\/10.1109\/tmc.2026.3664822","relation":{},"ISSN":["1536-1233","1558-0660","2161-9875"],"issn-type":[{"value":"1536-1233","type":"print"},{"value":"1558-0660","type":"electronic"},{"value":"2161-9875","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,7]]}}}