{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,19]],"date-time":"2025-12-19T19:12:32Z","timestamp":1766171552700,"version":"3.48.0"},"reference-count":83,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62372425"],"award-info":[{"award-number":["62372425"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61972371"],"award-info":[{"award-number":["61972371"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Innovation Program for Quantum Science and Technology","award":["2021ZD0301301"],"award-info":[{"award-number":["2021ZD0301301"]}]},{"DOI":"10.13039\/501100017668","name":"Anhui Provincial Key Research and Development Plan","doi-asserted-by":"publisher","award":["2022a05020050"],"award-info":[{"award-number":["2022a05020050"]}],"id":[{"id":"10.13039\/501100017668","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004739","name":"Youth Innovation Promotion Association of the Chinese Academy of Sciences","doi-asserted-by":"publisher","award":["Y202093"],"award-info":[{"award-number":["Y202093"]}],"id":[{"id":"10.13039\/501100004739","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Netw. Sci. Eng."],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/tnse.2025.3632902","type":"journal-article","created":{"date-parts":[[2025,11,14]],"date-time":"2025-11-14T18:50:53Z","timestamp":1763146253000},"page":"3351-3368","source":"Crossref","is-referenced-by-count":0,"title":["RobustPPFL: A Secure and Robust Privacy-Preserving Federated Learning Framework Against Poisoning Attacks"],"prefix":"10.1109","volume":"13","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2095-7523","authenticated-orcid":false,"given":"Kaiping","family":"Xue","sequence":"first","affiliation":[{"name":"School of Cyber Science and Technology, University of Science and Technology of China, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jiachen","family":"Li","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Technology, University of Science and Technology of China, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Rui","family":"Xue","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Technology, University of Science and Technology of China, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1421-5427","authenticated-orcid":false,"given":"Yingjie","family":"Xue","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Technology, University of Science and Technology of China, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-5146-7343","authenticated-orcid":false,"given":"Jingcheng","family":"Zhao","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Technology, University of Science and Technology of China, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","first-page":"1273","article-title":"Communication-efficient learning of deep networks from decentralized data","volume-title":"Proc. 20th Int. Conf. Artif. Intell. Statist.","volume":"54","author":"McMahan","year":"2017"},{"key":"ref2","first-page":"2687","article-title":"Leakage of dataset properties in multi-party machine learning","volume-title":"Proc. 30th USENIX Secur. Symp.","author":"Zhang","year":"2021"},{"key":"ref3","first-page":"14774","article-title":"Deep leakage from gradients","volume-title":"Proc. 33th Conf. Neural Inf. Process. Syst.","volume":"32","author":"Zhu","year":"2019"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2024.3354736"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3215574"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3093711"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2021.3108434"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3169918"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3338501.3357371"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3474369.3486872"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2020.3041404"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560611"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3221899"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179468"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3239007"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3264697"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140451"},{"key":"ref18","first-page":"1605","article-title":"Local model poisoning attacks to Byzantine-robust federated learning","volume-title":"Proc. 29th USENIX Secur. Symp.","author":"Fang","year":"2020"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i1.27796"},{"key":"ref20","first-page":"2938","article-title":"How to backdoor federated learning","volume-title":"Proc. 23 rd Int. Conf. Artif. Intell. Statist.","author":"Bagdasaryan","year":"2020"},{"key":"ref21","first-page":"118","article-title":"Machine learning with adversaries: Byzantine tolerant gradient descent","volume-title":"Proc. 31st Conf. Neural Inf. Process. Syst.","volume":"30","author":"Blanchard","year":"2017"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3154503"},{"key":"ref23","first-page":"5650","article-title":"Byzantine-robust distributed learning: Towards optimal statistical rates","volume-title":"Proc. 35th Int. Conf. Mach. Learn.","volume":"80","author":"Yin","year":"2018"},{"key":"ref24","first-page":"6893","article-title":"Zeno: Distributed stochastic gradient descent with suspicion-based fault-tolerance","volume-title":"Proc. 36th Int. Conf. Mach. Learn.","volume":"97","author":"Xie","year":"2019"},{"key":"ref25","first-page":"20096","article-title":"Self-driven entropy aggregation for Byzantine-robust heterogeneous federated learning","volume-title":"Proc. 41st Int. Conf. Mach. Learn.","volume":"235","author":"Huang","year":"2024"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOMWKSHPS54753.2022.9798217"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1007\/978-94-009-5438-0_20"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TBDATA.2024.3362191"},{"article-title":"FedLAD: A linear algebra based data poisoning defence for federated learning","year":"2025","author":"Xiong","key":"ref29"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.12"},{"key":"ref31","first-page":"1651","article-title":"GAZELLE: A low latency framework for secure neural network inference","volume-title":"Proc. 27th USENIX Secur. Symp.","author":"Juvekar","year":"2018"},{"key":"ref32","first-page":"809","article-title":"Cheetah: Lean and fast secure two-party deep neural network inference","volume-title":"Proc. 31st USENIX Secur. Symp.","author":"Huang","year":"2022"},{"key":"ref33","first-page":"7207","article-title":"AegisFL: Efficient and flexible privacy-preserving byzantine-robust cross-silo federated learning","volume-title":"Proc. 41st Int. Conf. Mach. Learn.","volume":"235","author":"Chen","year":"2024"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP49660.2025.10887951"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2025.111234"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2025.3551923"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24434"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2025.3577267"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2024.3353317"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2024.110990"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/3696410.3714728"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/SP61157.2025.00249"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2025.3555193"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v39i24.34733"},{"key":"ref45","first-page":"1","article-title":"On the tension between Byzantine robustness and no-attack accuracy in distributed learning","volume-title":"Proc. 42nd Int. Conf. Mach. Learn.","author":"Yang","year":"2025"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2020.3002796"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2023.3251196"},{"key":"ref48","first-page":"54460","article-title":"FedREDefense: Defending against model poisoning attacks for federated learning using model update reconstruction error","volume-title":"Proc. 41st Int. Conf. Mach. Learn.","volume":"235","author":"XIE","year":"2024"},{"key":"ref49","first-page":"1721","article-title":"Every vote counts: Ranking-based training of federated learning to resist poisoning attacks","volume-title":"Proc. 32nd USENIX Secur. Symp.","author":"Mozaffari","year":"2023"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/SPW67851.2025.00021"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2025.3532351"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133982"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2022.3153519"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2022.3206243"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.2988575"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3318944"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/TBDATA.2022.3177170"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3255171"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2025.3540312"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2024.3386357"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2787987"},{"key":"ref62","first-page":"493","article-title":"$\\lbrace$BatchCrypt $\\rbrace$: Efficient homomorphic encryption for $\\lbrace$ Cross-Silo$\\rbrace$ federated learning","volume-title":"Proc. 2020 USENIX Annu. Tech. Conf.","author":"Zhang","year":"2020"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3336977"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3304788"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2022.3185327"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24119"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3280032"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3168556"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179400"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2024.3404102"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3336521"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3196274"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1016\/j.engappai.2025.110078"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.2025.3577019"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2024.3350365"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2025.3541633"},{"article-title":"Somewhat practical fully homomorphic encryption","year":"2012","author":"Fan","key":"ref77"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-78372-3_18"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417274"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1145\/1568318.1568324"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref82","first-page":"1379","article-title":"Efficient differentially private secure aggregation for federated learning via hardness of learning with errors","volume-title":"Proc. 31st USENIX Secur. Symp.","author":"Stevens","year":"2022"},{"key":"ref83","first-page":"6461","article-title":"PoiSAFL: Scalable poisoning attack framework to Byzantine-resilient semi-asynchronous federated learning","volume-title":"Proc. 34th USENIX Secur. Symp.","author":"Pang","year":"2025"}],"container-title":["IEEE Transactions on Network Science and Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6488902\/11264281\/11248967.pdf?arnumber=11248967","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,19]],"date-time":"2025-12-19T19:00:19Z","timestamp":1766170819000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11248967\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":83,"URL":"https:\/\/doi.org\/10.1109\/tnse.2025.3632902","relation":{},"ISSN":["2327-4697","2334-329X"],"issn-type":[{"type":"electronic","value":"2327-4697"},{"type":"electronic","value":"2334-329X"}],"subject":[],"published":{"date-parts":[[2026]]}}}