{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T05:52:00Z","timestamp":1781589120108,"version":"3.54.5"},"reference-count":41,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"CloudTech RMIT Green Bitcoin Joint Research Program"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Rel."],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/tr.2026.3696364","type":"journal-article","created":{"date-parts":[[2026,5,25]],"date-time":"2026-05-25T19:53:36Z","timestamp":1779738816000},"page":"2052-2066","source":"Crossref","is-referenced-by-count":0,"title":["FedGDD: Defending Federated Learning Against Targeted Model Poisoning Sybil Attacks Based on Gradient Drift Detection"],"prefix":"10.1109","volume":"75","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-0087-036X","authenticated-orcid":false,"given":"Qi","family":"Xiong","sequence":"first","affiliation":[{"name":"School of Computing Technologies and the Centre of Cyber Security Research and Innovation, RMIT University, Melbourne, VIC, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7033-5688","authenticated-orcid":false,"given":"Hai","family":"Dong","sequence":"additional","affiliation":[{"name":"School of Computing Technologies and the Centre of Cyber Security Research and Innovation, RMIT University, Melbourne, VIC, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8340-2261","authenticated-orcid":false,"given":"Nasrin","family":"Sohrabi","sequence":"additional","affiliation":[{"name":"Cyber Security Discipline, School of Information Technologies, Deakin University, Burwood, VIC, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1235-9673","authenticated-orcid":false,"given":"Zahir","family":"Tari","sequence":"additional","affiliation":[{"name":"School of Computing Technologies and the Centre of Cyber Security Research and Innovation, RMIT University, Melbourne, VIC, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","first-page":"1273","article-title":"Communication-efficient learning of deep networks from decentralized data","volume-title":"Proc. Int. Conf. Artif. Intell. Statist.","author":"McMahan","year":"2017"},{"key":"ref2","article-title":"A survey of solutions to the Sybil attack","author":"Levine","year":"2006"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2022.3172310"},{"key":"ref4","first-page":"1605","article-title":"Local model poisoning attacks to Byzantine-robust federated learning","volume-title":"Proc. USENIX Secur. Symp.","author":"Fang","year":"2020"},{"key":"ref5","first-page":"1415","article-title":"Flame: Taming backdoors in federated learning","volume-title":"Proc. USENIX Secur. Symp.","author":"Nguyen","year":"2022"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1016\/j.engappai.2023.107166"},{"key":"ref7","first-page":"1505","article-title":"Blind backdoors in deep learning models","volume-title":"Proc. USENIX Secur. Symp.","author":"Bagdasaryan","year":"2021"},{"key":"ref8","first-page":"2938","article-title":"How to backdoor federated learning","volume-title":"Proc. Int. Conf. Artif. Intell. Statist.","author":"Bagdasaryan","year":"2020"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58951-6_24"},{"key":"ref10","first-page":"12613","article-title":"FL-WBC: Enhancing robustness against model poisoning attacks in federated learning from a client perspective","volume":"34","author":"Sun","year":"2021","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3534678.3539231"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3623212"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2025.3525554"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179362"},{"key":"ref15","first-page":"5650","article-title":"Byzantine-robust distributed learning: Towards optimal statistical rates","volume-title":"Proc. Intl. Conf. Mach. Learn.","author":"Yin","year":"2018"},{"key":"ref16","article-title":"Generalized Byzantine-tolerant SGD","author":"Xie","year":"2018"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24434"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00461"},{"key":"ref19","first-page":"118","article-title":"Machine learning with adversaries: Byzantine tolerant gradient descent","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","volume":"30","author":"Blanchard","year":"2017"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3579856.3595790"},{"key":"ref21","first-page":"1","article-title":"DBA: Distributed backdoor attacks against federated learning","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Xie","year":"2019"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-99-7032-2_3"},{"key":"ref23","first-page":"43158","article-title":"LeadFL: Client self-defense against model poisoning in federated learning","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Zhu","year":"2023"},{"key":"ref24","first-page":"1","article-title":"Detecting dataset drift and non-IID sampling via K-nearest neighbors","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Cummings","year":"2023"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM42981.2021.9488723"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1080\/01621459.1969.10500983"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i8.20903"},{"key":"ref28","first-page":"16937","article-title":"Inverting gradientsHow easy is it to break privacy in federated learning?","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Geiping","year":"2020"},{"key":"ref29","first-page":"14774","article-title":"Deep leakage from gradients","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Zhu","year":"2019"},{"key":"ref30","first-page":"301","article-title":"The limitations of federated learning in Sybil settings","volume-title":"Proc. Int. Symp. Res. Attacks, Intrusions Defenses","author":"Fung","year":"2020"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01057"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-20056-4_40"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i9.26271"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01568"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3580305.3599346"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1038\/s41598-018-24874-2"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.52202\/079017-2253"},{"key":"ref38","first-page":"10876","article-title":"Lockdown: Backdoor defense for federated learning with isolated subspace training","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","volume":"36","author":"Huang","year":"2023"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2024.3486028"},{"key":"ref40","first-page":"54460","article-title":"FedREDefense: Defending against model poisoning attacks for federated learning using model update reconstruction error","volume-title":"Proc. 41st Int. Conf. Mach. Learn.","author":"Xie","year":"2024"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2024.109893"}],"container-title":["IEEE Transactions on Reliability"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/24\/11317936\/11534578.pdf?arnumber=11534578","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T04:59:50Z","timestamp":1781585990000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11534578\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":41,"URL":"https:\/\/doi.org\/10.1109\/tr.2026.3696364","relation":{"has-preprint":[{"id-type":"doi","id":"10.36227\/techrxiv.175527490.03503012\/v1","asserted-by":"object"}]},"ISSN":["0018-9529","1558-1721"],"issn-type":[{"value":"0018-9529","type":"print"},{"value":"1558-1721","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}