{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,3]],"date-time":"2026-04-03T15:13:26Z","timestamp":1775229206579,"version":"3.50.1"},"reference-count":90,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"7","license":[{"start":{"date-parts":[[2021,7,1]],"date-time":"2021-07-01T00:00:00Z","timestamp":1625097600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,7,1]],"date-time":"2021-07-01T00:00:00Z","timestamp":1625097600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2021,7,1]],"date-time":"2021-07-01T00:00:00Z","timestamp":1625097600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100000038","name":"Natural Sciences and Engineering Research Council of Canada","doi-asserted-by":"publisher","award":["2014-04870"],"award-info":[{"award-number":["2014-04870"]}],"id":[{"id":"10.13039\/501100000038","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Parallel Distrib. Syst."],"published-print":{"date-parts":[[2021,7,1]]},"DOI":"10.1109\/tpds.2020.3044223","type":"journal-article","created":{"date-parts":[[2020,12,11]],"date-time":"2020-12-11T20:37:43Z","timestamp":1607719063000},"page":"1513-1525","source":"Crossref","is-referenced-by-count":314,"title":["Biscotti: A Blockchain System for Private and Secure Federated Learning"],"prefix":"10.1109","volume":"32","author":[{"given":"Muhammad","family":"Shayan","sequence":"first","affiliation":[{"name":"University of British Columbia, Vancouver, BC, Canada"}]},{"given":"Clement","family":"Fung","sequence":"additional","affiliation":[{"name":"University of British Columbia, Vancouver, BC, Canada"}]},{"given":"Chris J. M.","family":"Yoon","sequence":"additional","affiliation":[{"name":"University of British Columbia, Vancouver, BC, Canada"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1676-8834","authenticated-orcid":false,"given":"Ivan","family":"Beschastnikh","sequence":"additional","affiliation":[{"name":"University of British Columbia, Vancouver, BC, Canada"}]}],"member":"263","reference":[{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.280"},{"key":"ref72","article-title":"Deep compression: Compressing deep neural networks with pruning, trained quantization and huffman coding","author":"han","year":"2016","journal-title":"Proc Int Conf Learn Representations"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2019.2944481"},{"key":"ref70","article-title":"Federated learning: Strategies for improving communication efficiency","author":"kone?n\u00fd","year":"2016"},{"key":"ref76","first-page":"3320","article-title":"How transferable are features in deep neural networks?","author":"yosinski","year":"2014","journal-title":"Proc 27th Int Conf Neural Inf Process Syst"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1145\/3341301.3359642"},{"key":"ref74","article-title":"Distilling the knowledge in a neural network","author":"hinton","year":"2015"},{"key":"ref39","article-title":"Mobile edge computing, blockchain and reputation based crowdsourcing federated learning: A secure, decentralized and privacy-preserving system","author":"zhao","year":"2019"},{"key":"ref75","article-title":"MobileNets: Efficient convolutional neural networks for mobile vision applications","author":"howard","year":"2017"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.2987843"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1145\/1644893.1644895"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00057"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/OBD.2016.11"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3132747.3132757"},{"key":"ref31","author":"nakamoto","year":"2009","journal-title":"Bitcoin A Peer-to-Peer Electronic Cash System"},{"key":"ref30","first-page":"173","article-title":"Practical byzantine fault tolerance","author":"castro","year":"1999","journal-title":"Proc 3rd Symp Operating Syst Des Implementation"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2018.2871449"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2019.00023"},{"key":"ref35","first-page":"65","article-title":"zkLedger: Privacy-preserving auditing for distributed ledgers","author":"narula","year":"2018","journal-title":"Proc 15th USENIX Conf Netw Syst Des Implementation"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.37"},{"key":"ref60","first-page":"1223","article-title":"Large scale distributed deep networks","author":"dean","year":"2012","journal-title":"Proc 25th Int Conf Neural Inf Process Syst"},{"key":"ref62","year":"2018"},{"key":"ref61","article-title":"Automatic differentiation in pytorch","author":"paszke","year":"2017"},{"key":"ref63","year":"2018"},{"key":"ref28","first-page":"693","article-title":"HOGWILD!: A lock-free approach to parallelizing stochastic gradient descent","author":"recht","year":"2011","journal-title":"Proc 24th Int Conf Neural Inf Process Syst"},{"key":"ref64","year":"2018"},{"key":"ref27","article-title":"Turbo-aggregate: Breaking the quadratic aggregation barrier in secure federated learning","author":"so","year":"2020"},{"key":"ref65","first-page":"688","article-title":"Efficient identification and signatures for smart cards","author":"schnorr","year":"1990","journal-title":"Proc Workshop Theory Appl Cryptogr Techn Advances Cryptol"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1007\/s10623-019-00608-x"},{"key":"ref29","first-page":"5336","article-title":"Can decentralized algorithms outperform centralized algorithms? A case study for decentralized parallel stochastic gradient descent","author":"lian","year":"2017","journal-title":"Proc 31st Int Conf Neural Inf Process Syst"},{"key":"ref67","article-title":"UCI machine learning repository","author":"dheeru","year":"2017"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-010-5188-5"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS.2017.226"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/2987550.2987586"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134012"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978318"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/2991079.2991125"},{"key":"ref24","article-title":"Differentially private federated learning: A client level perspective","author":"geyer","year":"2017","journal-title":"Proc NIPS Workshop Mach Learn Phone Consum Devices"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1561\/0400000042"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133982"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813687"},{"key":"ref50","first-page":"3521","article-title":"The hidden vulnerability of distributed learning in byzantium","author":"guerraoui","year":"2018"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23119"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-46766-1_9"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813677"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140451"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-7908-2604-3_16"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-63688-7_12"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-17373-8_11"},{"key":"ref54","article-title":"Towards demystifying membership inference attacks","author":"truex","year":"2018"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00065"},{"key":"ref52","article-title":"Eavesdrop the composition proportion of training labels in federated learning","author":"wang","year":"2019"},{"key":"ref10","article-title":"Split learning for health: Distributed deep learning without sharing raw patient data","author":"vepakomma","year":"2018"},{"key":"ref11","first-page":"301","article-title":"The limitations of federated learning in sybil settings","author":"fung","year":"2020","journal-title":"Proc 23rd Int Symp Res Attacks Intrusions Defenses"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/BigData.2018.8622598"},{"key":"ref12","first-page":"2938","article-title":"How to backdoor federated learning","author":"bagdasaryan","year":"2020"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00029"},{"key":"ref14","article-title":"Advances and open problems in federated learning","author":"kairouz","year":"2019"},{"key":"ref15","first-page":"1467","article-title":"Poisoning attacks against support vector machines","author":"biggio","year":"2012","journal-title":"Proc 29th Int Conf Mach Learn"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref16","article-title":"Exploiting machine learning to subvert your spam filter","author":"nelson","year":"2008","journal-title":"Proc 1st Usenix Workshop Large-Scale Exploits Emergent Threats"},{"key":"ref81","article-title":"BadNets: Identifying vulnerabilities in the machine learning model supply chain","author":"gu","year":"2017"},{"key":"ref17","article-title":"DBA: Distributed backdoor attacks against federated learning","author":"xie","year":"2020","journal-title":"Proc Int Conf Learn Representations"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1109\/LCOMM.2019.2921755"},{"key":"ref18","first-page":"1605","article-title":"Local model poisoning attacks to Byzantine-robust federated learning","author":"fang","year":"2020","journal-title":"Proc 29th USENIX Secur Symp"},{"key":"ref83","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-030-63076-8_9","article-title":"FedCoin: A peer-to-peer payment system for federated learning","author":"liu","year":"2020"},{"key":"ref19","first-page":"6893","article-title":"Zeno: Distributed stochastic gradient descent with suspicion-based fault-tolerance","author":"xie","year":"2019","journal-title":"Proc 36th Int Conf Mach Learn"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140450"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00045"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/s41666-020-00082-4"},{"key":"ref3","first-page":"629","article-title":"Gaia: Geo-distributed machine learning approaching LAN speeds","author":"hsieh","year":"2017","journal-title":"Proc 14th USENIX Conf Netw Syst Des Implementation"},{"key":"ref6","first-page":"4427","article-title":"Federated multi-task learning","author":"smith","year":"2017","journal-title":"Proc 31st Int Conf Neural Inf Process Syst"},{"key":"ref5","first-page":"1273","article-title":"Communication-efficient learning of deep networks from decentralized data","author":"mcmahan","year":"2017","journal-title":"Proc 20th Int Conf Artif Intell Statist"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2959220"},{"key":"ref8","first-page":"756","article-title":"DÏoT: A federated self-learning anomaly detection system for IoT","author":"nguyen","year":"2019","journal-title":"Proc IEEE 39th Int Conf Distrib Comput Syst"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2019.2952332"},{"key":"ref7","article-title":"Towards federated learning at scale: System design","author":"bonawitz","year":"2019","journal-title":"Proc Conf Syst Mach Learn"},{"key":"ref49","first-page":"5650","article-title":"Byzantine-robust distributed learning: Towards optimal statistical rates","author":"yin","year":"2018","journal-title":"Proc 35th Int Conf Mach Learn"},{"key":"ref87","article-title":"A next-generation smart contract and decentralized application platform","author":"buterin","year":"2014"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.12"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2020.2996273"},{"key":"ref46","article-title":"Multi-party poisoning through generalized $ p$p-tampering","author":"mahloujifar","year":"2018"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45748-8_24"},{"key":"ref48","first-page":"261","article-title":"Fall of empires: Breaking Byzantine-tolerant SGD by inner product manipulation","author":"xie","year":"2020","journal-title":"Proc Conf Uncertainty of Artificial Intelligence"},{"key":"ref47","first-page":"634","article-title":"Analyzing federated learning through an adversarial lens","author":"bhagoji","year":"2019","journal-title":"Proc 36th Int Conf Mach Learn"},{"key":"ref42","first-page":"118","article-title":"Machine learning with adversaries: Byzantine tolerant gradient descent","author":"blanchard","year":"2017","journal-title":"Proc 31st Int Conf Neural Inf Process Syst"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/SFFCS.1999.814584"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/2046684.2046692"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/359168.359176"}],"container-title":["IEEE Transactions on Parallel and Distributed Systems"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/71\/9357351\/09292450.pdf?arnumber=9292450","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,12,4]],"date-time":"2022-12-04T07:51:56Z","timestamp":1670140316000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9292450\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,7,1]]},"references-count":90,"journal-issue":{"issue":"7"},"URL":"https:\/\/doi.org\/10.1109\/tpds.2020.3044223","relation":{},"ISSN":["1045-9219","1558-2183","2161-9883"],"issn-type":[{"value":"1045-9219","type":"print"},{"value":"1558-2183","type":"electronic"},{"value":"2161-9883","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,7,1]]}}}