{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,25]],"date-time":"2026-06-25T07:18:16Z","timestamp":1782371896991,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":50,"publisher":"ACM","license":[{"start":{"date-parts":[[2021,4,19]],"date-time":"2021-04-19T00:00:00Z","timestamp":1618790400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2021,4,19]]},"DOI":"10.1145\/3442381.3450066","type":"proceedings-article","created":{"date-parts":[[2021,6,3]],"date-time":"2021-06-03T19:00:27Z","timestamp":1622746827000},"page":"969-980","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":39,"title":["Data Poisoning Attacks and Defenses to Crowdsourcing Systems"],"prefix":"10.1145","author":[{"given":"Minghong","family":"Fang","sequence":"first","affiliation":[{"name":"Iowa State University and The Ohio State University, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Minghao","family":"Sun","sequence":"additional","affiliation":[{"name":"Iowa State University, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Qi","family":"Li","sequence":"additional","affiliation":[{"name":"Iowa State University, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Neil Zhenqiang","family":"Gong","sequence":"additional","affiliation":[{"name":"Duke University, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jin","family":"Tian","sequence":"additional","affiliation":[{"name":"Iowa State University, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jia","family":"Liu","sequence":"additional","affiliation":[{"name":"The Ohio State University, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2021,6,3]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.5555\/3016100.3016102"},{"key":"e_1_3_2_1_2_1","unstructured":"Gilad Baruch Moran Baruch and Yoav Goldberg. 2019. A little is enough: Circumventing defenses for distributed learning. In Advances in Neural Information Processing Systems. 8632\u20138642.  Gilad Baruch Moran Baruch and Yoav Goldberg. 2019. A little is enough: Circumventing defenses for distributed learning. In Advances in Neural Information Processing Systems. 8632\u20138642."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1057\/palgrave.jors.2600425"},{"key":"e_1_3_2_1_4_1","unstructured":"Arjun\u00a0Nitin Bhagoji Supriyo Chakraborty Prateek Mittal and Seraphin Calo. 2019. Analyzing federated learning through an adversarial lens. In ICML.  Arjun\u00a0Nitin Bhagoji Supriyo Chakraborty Prateek Mittal and Seraphin Calo. 2019. Analyzing federated learning through an adversarial lens. In ICML."},{"key":"e_1_3_2_1_5_1","unstructured":"Battista Biggio Blaine Nelson and Pavel Laskov. 2012. Poisoning attacks against support vector machines. arXiv preprint arXiv:1206.6389(2012).  Battista Biggio Blaine Nelson and Pavel Laskov. 2012. Poisoning attacks against support vector machines. arXiv preprint arXiv:1206.6389(2012)."},{"key":"e_1_3_2_1_6_1","unstructured":"Xiaoyu Cao Minghong Fang Jia Liu and Neil\u00a0Zhenqiang Gong. 2021. FLTrust: Byzantine-robust Federated Learning via Trust Bootstrapping. In NDSS.  Xiaoyu Cao Minghong Fang Jia Liu and Neil\u00a0Zhenqiang Gong. 2021. FLTrust: Byzantine-robust Federated Learning via Trust Bootstrapping. In NDSS."},{"key":"e_1_3_2_1_7_1","unstructured":"Xinyun Chen Chang Liu Bo Li Kimberly Lu and Dawn Song. 2017. Targeted backdoor attacks on deep learning systems using data poisoning. arXiv preprint arXiv:1712.05526(2017).  Xinyun Chen Chang Liu Bo Li Kimberly Lu and Dawn Song. 2017. Targeted backdoor attacks on deep learning systems using data poisoning. arXiv preprint arXiv:1712.05526(2017)."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/2623330.2623708"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/3298689.3347031"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.2307\/2346806"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1111\/j.2517-6161.1977.tb01600.x"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.14778\/1687627.1687690"},{"key":"e_1_3_2_1_13_1","volume-title":"Breakthroughs in statistics","author":"Efron Bradley","unstructured":"Bradley Efron . 1992. Bootstrap methods: another look at the jackknife . In Breakthroughs in statistics . Springer , 569\u2013593. Bradley Efron. 1992. Bootstrap methods: another look at the jackknife. In Breakthroughs in statistics. Springer, 569\u2013593."},{"key":"e_1_3_2_1_14_1","volume-title":"An introduction to the bootstrap","author":"Efron Bradley","unstructured":"Bradley Efron and Robert\u00a0 J Tibshirani . 1994. An introduction to the bootstrap . CRC press . Bradley Efron and Robert\u00a0J Tibshirani. 1994. An introduction to the bootstrap. CRC press."},{"key":"e_1_3_2_1_15_1","volume-title":"Usenix Security Symposium.","author":"Fang Minghong","year":"2020","unstructured":"Minghong Fang , Xiaoyu Cao , Jinyuan Jia , and Neil\u00a0Zhenqiang Gong . 2020 . Local Model Poisoning Attacks to Byzantine-Robust Federated Learning . In Usenix Security Symposium. Minghong Fang, Xiaoyu Cao, Jinyuan Jia, and Neil\u00a0Zhenqiang Gong. 2020. Local Model Poisoning Attacks to Byzantine-Robust Federated Learning. In Usenix Security Symposium."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/3366423.3380072"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274706"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/1718487.1718504"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.14778\/3137628.3137662"},{"key":"e_1_3_2_1_20_1","series-title":"SIAM Journal on scientific and Statistical Computing 13, 5","volume-title":"New branch-and-bound rules for linear bilevel programming","author":"Hansen Pierre","year":"1992","unstructured":"Pierre Hansen , Brigitte Jaumard , and Gilles Savard . 1992. New branch-and-bound rules for linear bilevel programming . SIAM Journal on scientific and Statistical Computing 13, 5 ( 1992 ), 1194\u20131217. Pierre Hansen, Brigitte Jaumard, and Gilles Savard. 1992. New branch-and-bound rules for linear bilevel programming. SIAM Journal on scientific and Statistical Computing 13, 5 (1992), 1194\u20131217."},{"key":"e_1_3_2_1_21_1","unstructured":"Robert\u00a0V Hogg Joseph McKean and Allen\u00a0T Craig. 2005. Introduction to mathematical statistics. Pearson Education.  Robert\u00a0V Hogg Joseph McKean and Allen\u00a0T Craig. 2005. Introduction to mathematical statistics. Pearson Education."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00057"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/956750.956769"},{"key":"e_1_3_2_1_24_1","unstructured":"Bo Li Yining Wang Aarti Singh and Yevgeniy Vorobeychik. 2016. Data poisoning attacks on factorization-based collaborative filtering. In Advances in neural information processing systems. 1885\u20131893.  Bo Li Yining Wang Aarti Singh and Yevgeniy Vorobeychik. 2016. Data poisoning attacks on factorization-based collaborative filtering. In Advances in neural information processing systems. 1885\u20131893."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.14778\/2735496.2735505"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/2588555.2610509"},{"key":"e_1_3_2_1_27_1","unstructured":"Xian Li Xin\u00a0Luna Dong Kenneth Lyons Weiyi Meng and Divesh Srivastava. 2015. Truth finding on the deep web: Is the problem solved?arXiv preprint arXiv:1503.00303(2015).  Xian Li Xin\u00a0Luna Dong Kenneth Lyons Weiyi Meng and Divesh Srivastava. 2015. Truth finding on the deep web: Is the problem solved?arXiv preprint arXiv:1503.00303(2015)."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/2897350.2897352"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2016.2559481"},{"key":"e_1_3_2_1_30_1","volume-title":"Bootstrap procedures under some non-iid models. The annals of statistics 16, 4","author":"Y Liu","year":"1988","unstructured":"Regina\u00a0 Y Liu 1988. Bootstrap procedures under some non-iid models. The annals of statistics 16, 4 ( 1988 ), 1696\u20131708. Regina\u00a0Y Liu 1988. Bootstrap procedures under some non-iid models. The annals of statistics 16, 4 (1988), 1696\u20131708."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/3178876.3186032"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/3209582.3209594"},{"key":"e_1_3_2_1_33_1","unstructured":"[\n  33\n  ]  World\u00a0Weather Online.[Online]. https:\/\/www.worldweatheronline.com\/  [33] World\u00a0Weather Online.[Online]. https:\/\/www.worldweatheronline.com\/"},{"key":"e_1_3_2_1_34_1","volume-title":"Twenty-Second International Joint Conference on Artificial Intelligence.","author":"Pasternack Jeff","year":"2011","unstructured":"Jeff Pasternack and Dan Roth . 2011 . Making better informed trust decisions with generalized fact-finding . In Twenty-Second International Joint Conference on Artificial Intelligence. Jeff Pasternack and Dan Roth. 2011. Making better informed trust decisions with generalized fact-finding. In Twenty-Second International Joint Conference on Artificial Intelligence."},{"key":"e_1_3_2_1_35_1","volume-title":"Learning from crowds.Journal of Machine Learning Research 11, 4","author":"Raykar C","year":"2010","unstructured":"Vikas\u00a0 C Raykar , Shipeng Yu , Linda\u00a0 H Zhao , Gerardo\u00a0Hermosillo Valadez , Charles Florin , Luca Bogoni , and Linda Moy . 2010. Learning from crowds.Journal of Machine Learning Research 11, 4 ( 2010 ). Vikas\u00a0C Raykar, Shipeng Yu, Linda\u00a0H Zhao, Gerardo\u00a0Hermosillo Valadez, Charles Florin, Luca Bogoni, and Linda Moy. 2010. Learning from crowds.Journal of Machine Learning Research 11, 4 (2010)."},{"key":"e_1_3_2_1_36_1","unstructured":"Ali Shafahi W\u00a0Ronny Huang Mahyar Najibi Octavian Suciu Christoph Studer Tudor Dumitras and Tom Goldstein. 2018. Poison frogs! targeted clean-label poisoning attacks on neural networks. In Advances in Neural Information Processing Systems. 6103\u20136113.  Ali Shafahi W\u00a0Ronny Huang Mahyar Najibi Octavian Suciu Christoph Studer Tudor Dumitras and Tom Goldstein. 2018. Poison frogs! targeted clean-label poisoning attacks on neural networks. In Advances in Neural Information Processing Systems. 6103\u20136113."},{"key":"e_1_3_2_1_37_1","volume-title":"Proceedings of the 2008 conference on empirical methods in natural language processing. 254\u2013263","author":"Snow Rion","year":"2008","unstructured":"Rion Snow , Brendan O\u2019connor , Dan Jurafsky , and Andrew\u00a0 Y Ng . 2008 . Cheap and fast\u2013but is it good? evaluating non-expert annotations for natural language tasks . In Proceedings of the 2008 conference on empirical methods in natural language processing. 254\u2013263 . Rion Snow, Brendan O\u2019connor, Dan Jurafsky, and Andrew\u00a0Y Ng. 2008. Cheap and fast\u2013but is it good? evaluating non-expert annotations for natural language tasks. In Proceedings of the 2008 conference on empirical methods in natural language processing. 254\u2013263."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-49669-2_18"},{"key":"e_1_3_2_1_39_1","unstructured":"[\n  39\n  ]  Weather Underground.[Online]. https:\/\/www.wunderground.com\/  [39] Weather Underground.[Online]. https:\/\/www.wunderground.com\/"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/2939672.2939837"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2017.60"},{"key":"e_1_3_2_1_42_1","unstructured":"[\n  42\n  ]  Weather.[Online]. http:\/\/lunadong.com\/fusionDataSets.htm  [42] Weather.[Online]. http:\/\/lunadong.com\/fusionDataSets.htm"},{"key":"e_1_3_2_1_43_1","unstructured":"[\n  43\n  ]  HAM weather.[Online]. http:\/\/www.hamweather.com\/  [43] HAM weather.[Online]. http:\/\/www.hamweather.com\/"},{"key":"e_1_3_2_1_44_1","volume-title":"International Conference on Machine Learning. 1689\u20131698","author":"Xiao Huang","year":"2015","unstructured":"Huang Xiao , Battista Biggio , Gavin Brown , Giorgio Fumera , Claudia Eckert , and Fabio Roli . 2015 . Is feature selection secure against training data poisoning? . In International Conference on Machine Learning. 1689\u20131698 . Huang Xiao, Battista Biggio, Gavin Brown, Giorgio Fumera, Claudia Eckert, and Fabio Roli. 2015. Is feature selection secure against training data poisoning?. In International Conference on Machine Learning. 1689\u20131698."},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/2939672.2939831"},{"key":"e_1_3_2_1_46_1","unstructured":"Cong Xie Sanmi Koyejo and Indranil Gupta. 2019. Fall of empires: Breaking byzantine-tolerant sgd by inner product manipulation. In UAI.  Cong Xie Sanmi Koyejo and Indranil Gupta. 2019. Fall of empires: Breaking byzantine-tolerant sgd by inner product manipulation. In UAI."},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"crossref","unstructured":"Guolei Yang Neil\u00a0Zhenqiang Gong and Ying Cai. 2017. Fake Co-visitation Injection Attacks to Recommender Systems. In NDSS.  Guolei Yang Neil\u00a0Zhenqiang Gong and Ying Cai. 2017. Fake Co-visitation Injection Attacks to Recommender Systems. In NDSS.","DOI":"10.14722\/ndss.2017.23020"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2007.190745"},{"key":"e_1_3_2_1_49_1","volume-title":"Proc. of QDB","author":"Zhao Bo","year":"2012","unstructured":"Bo Zhao and Jiawei Han . 2012 . A probabilistic model for estimating real-valued truth from conflicting sources . Proc. of QDB (2012). Bo Zhao and Jiawei Han. 2012. A probabilistic model for estimating real-valued truth from conflicting sources. Proc. of QDB (2012)."},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.14778\/2168651.2168656"}],"event":{"name":"WWW '21: The Web Conference 2021","location":"Ljubljana Slovenia","acronym":"WWW '21","sponsor":["SIGWEB ACM Special Interest Group on Hypertext, Hypermedia, and Web"]},"container-title":["Proceedings of the Web Conference 2021"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3442381.3450066","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3442381.3450066","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T21:24:27Z","timestamp":1750195467000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3442381.3450066"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,4,19]]},"references-count":50,"alternative-id":["10.1145\/3442381.3450066","10.1145\/3442381"],"URL":"https:\/\/doi.org\/10.1145\/3442381.3450066","relation":{},"subject":[],"published":{"date-parts":[[2021,4,19]]},"assertion":[{"value":"2021-06-03","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}