{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,18]],"date-time":"2026-06-18T15:41:25Z","timestamp":1781797285100,"version":"3.54.5"},"reference-count":71,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"10","license":[{"start":{"date-parts":[[2025,10,1]],"date-time":"2025-10-01T00:00:00Z","timestamp":1759276800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,10,1]],"date-time":"2025-10-01T00:00:00Z","timestamp":1759276800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,10,1]],"date-time":"2025-10-01T00:00:00Z","timestamp":1759276800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62476095"],"award-info":[{"award-number":["62476095"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100021171","name":"Basic and Applied Basic Research Foundation of Guangdong Province","doi-asserted-by":"publisher","award":["2025A1515011525"],"award-info":[{"award-number":["2025A1515011525"]}],"id":[{"id":"10.13039\/501100021171","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Pattern Anal. Mach. Intell."],"published-print":{"date-parts":[[2025,10]]},"DOI":"10.1109\/tpami.2025.3581555","type":"journal-article","created":{"date-parts":[[2025,6,20]],"date-time":"2025-06-20T13:27:53Z","timestamp":1750426073000},"page":"8907-8922","source":"Crossref","is-referenced-by-count":6,"title":["FedID: Enhancing Federated Learning Security Through Dynamic Identification"],"prefix":"10.1109","volume":"47","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-0648-3405","authenticated-orcid":false,"given":"Siquan","family":"Huang","sequence":"first","affiliation":[{"name":"School of Computer Science and Engineering, South China University of Technology, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-3663-5964","authenticated-orcid":false,"given":"Yijiang","family":"Li","sequence":"additional","affiliation":[{"name":"School of Applied Mathematics and Statistics, Johns Hopkins University, Baltimore, MD, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6278-120X","authenticated-orcid":false,"given":"Chong","family":"Chen","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, South China University of Technology, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8925-8192","authenticated-orcid":false,"given":"Ying","family":"Gao","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, South China University of Technology, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4952-699X","authenticated-orcid":false,"given":"Xiping","family":"Hu","sequence":"additional","affiliation":[{"name":"School of Medical Technology, Beijing Institute of Technology, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Federated learning: Strategies for improving communication efficiency","author":"Kone\u010dny","year":"2016"},{"key":"ref2","first-page":"1273","article-title":"Communication-efficient learning of deep networks from decentralized data","volume-title":"Proc. Int. Conf. Artif. Intell. Statist.","author":"McMahan"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.01471"},{"key":"ref4","article-title":"Federated learning: Collaborative machine learning without centralized training data","author":"McMahan","year":"2017"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/BIBM55620.2022.9995378"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00487"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1016\/j.isatra.2022.08.003"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1561\/9781680837896"},{"key":"ref9","first-page":"2938","article-title":"How to backdoor federated learning","volume-title":"Proc. Int. Conf. Artif. Intell. Statist.","author":"Bagdasaryan"},{"key":"ref10","first-page":"634","article-title":"Analyzing federated learning through an adversarial lens","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Bhagoji"},{"key":"ref11","first-page":"16070","article-title":"Attack of the tails: Yes, you really can backdoor federated learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Wang"},{"key":"ref12","article-title":"DBA: Distributed backdoor attacks against federated learning","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Xie"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3164073"},{"key":"ref14","article-title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain","author":"Gu","year":"2017"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01615"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3274119"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.33011544"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2023.3296408"},{"key":"ref19","first-page":"1415","article-title":"Flame: Taming backdoors in federated learning","volume-title":"Proc. 31st USENIX Secur. Symp.","author":"Nguyen"},{"key":"ref20","first-page":"301","article-title":"The limitations of federated learning in sybil settings","volume-title":"Proc. 23rd Int. Symp. Res. Attacks Intrusions Defenses","author":"Fung"},{"key":"ref21","first-page":"118","article-title":"Machine learning with adversaries: Byzantine tolerant gradient descent","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Blanchard"},{"key":"ref22","first-page":"5650","article-title":"Byzantine-robust distributed learning: Towards optimal statistical rates","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Yin"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/TSP.2022.3153135"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24434"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i8.20903"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3169918"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3212174"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS51616.2021.00086"},{"key":"ref29","first-page":"3521","article-title":"The hidden vulnerability of distributed learning in byzantium","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Guerraoui"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3264697"},{"key":"ref31","article-title":"Can you really backdoor federated learning?","author":"Sun","year":"2019"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i10.17118"},{"key":"ref33","first-page":"11372","article-title":"CRFL: Certifiably robust federated learning against backdoor attacks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Xie"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3320694"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1561\/0400000042"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00429"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1016\/j.engappai.2023.107166"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3227761"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3297369"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3295949"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3309095"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.2307\/3611672"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-49257-7_15"},{"key":"ref44","first-page":"506","article-title":"What is the nearest neighbor in high dimensional spaces?","volume-title":"Proc. 26th Internat. Conf. Very Large Databases","author":"Hinneburg"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-44503-X_27"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.3390\/e22101105"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2009.84"},{"key":"ref48","first-page":"1877","article-title":"Language models are few-shot learners","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Brown"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01170"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2023.3256421"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2021.3124805"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2019.2941876"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2020.3004354"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.3844\/jcssp.2006.735.739"},{"key":"ref55","article-title":"On the convergence of fedavg on non-IID data","author":"Li","year":"2019"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2023.3272334"},{"key":"ref57","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2017.7966217"},{"key":"ref59","article-title":"Fashion-mnist: A novel image dataset for benchmarking machine learning algorithms","author":"Xiao","year":"2017"},{"key":"ref60","article-title":"Cinic-10 is not imagenet or cifar-10","author":"Darlow","year":"2018"},{"key":"ref61","article-title":"Lending club loan data","author":"Kan","year":"2019"},{"issue":"12","key":"ref62","article-title":"Twitter sentiment classification using distant supervision","volume":"1","author":"Go","year":"2009","journal-title":"CS224 N Project Rep."},{"key":"ref63","article-title":"Very deep convolutional networks for large-scale image recognition","author":"Simonyan","year":"2014"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1162\/neco.1997.9.8.1735"},{"key":"ref66","article-title":"Mitigating backdoor attacks in federated learning","author":"Wu","year":"2020"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.00779"},{"key":"ref68","first-page":"8635","article-title":"A little is enough: Circumventing defenses for distributed learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Baruch"},{"key":"ref69","article-title":"Learning to backdoor federated learning","author":"Li","year":"2023"},{"key":"ref70","first-page":"35007","article-title":"Learning to attack federated learning: A model-based reinforcement learning attack framework","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Li"},{"key":"ref71","first-page":"1605","article-title":"Local model poisoning attacks to byzantine-robust federated learning","volume-title":"Proc. 29th USENIX Secur. Symp.","author":"Fang"}],"container-title":["IEEE Transactions on Pattern Analysis and Machine Intelligence"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/34\/11163533\/11045524.pdf?arnumber=11045524","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,18]],"date-time":"2025-09-18T20:04:52Z","timestamp":1758225892000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11045524\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10]]},"references-count":71,"journal-issue":{"issue":"10"},"URL":"https:\/\/doi.org\/10.1109\/tpami.2025.3581555","relation":{},"ISSN":["0162-8828","2160-9292","1939-3539"],"issn-type":[{"value":"0162-8828","type":"print"},{"value":"2160-9292","type":"electronic"},{"value":"1939-3539","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,10]]}}}