{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,17]],"date-time":"2026-07-17T16:51:30Z","timestamp":1784307090831,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":21,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,7,10]],"date-time":"2023-07-10T00:00:00Z","timestamp":1688947200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-2038986, CNS-2146449"],"award-info":[{"award-number":["CNS-2038986, CNS-2146449"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100006754","name":"Army Research Laboratory","doi-asserted-by":"publisher","award":["W911NF-2020-221"],"award-info":[{"award-number":["W911NF-2020-221"]}],"id":[{"id":"10.13039\/100006754","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,7,10]]},"DOI":"10.1145\/3579856.3582836","type":"proceedings-article","created":{"date-parts":[[2023,7,5]],"date-time":"2023-07-05T14:52:13Z","timestamp":1688568733000},"page":"553-566","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":21,"title":["FLAIR: Defense against Model Poisoning Attack in Federated Learning"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6953-5965","authenticated-orcid":false,"given":"Atul","family":"Sharma","sequence":"first","affiliation":[{"name":"Purdue University, United States of America"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6722-4322","authenticated-orcid":false,"given":"Wei","family":"Chen","sequence":"additional","affiliation":[{"name":"Purdue University, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1868-0473","authenticated-orcid":false,"given":"Joshua","family":"Zhao","sequence":"additional","affiliation":[{"name":"Purdue University, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2610-3502","authenticated-orcid":false,"given":"Qiang","family":"Qiu","sequence":"additional","affiliation":[{"name":"Purdue University, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4239-5632","authenticated-orcid":false,"given":"Saurabh","family":"Bagchi","sequence":"additional","affiliation":[{"name":"Purdue University, United States of America"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3651-6362","authenticated-orcid":false,"given":"Somali","family":"Chaterji","sequence":"additional","affiliation":[{"name":"Purdue University, United States of America"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2023,7,10]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"European Symposium on Research in Computer Security. Springer, 455\u2013475","author":"Awan Sana","year":"2021","unstructured":"Sana Awan , Bo Luo , and Fengjun Li . 2021 . CONTRA: Defending against Poisoning Attacks in Federated Learning . In European Symposium on Research in Computer Security. Springer, 455\u2013475 . Sana Awan, Bo Luo, and Fengjun Li. 2021. CONTRA: Defending against Poisoning Attacks in Federated Learning. In European Symposium on Research in Computer Security. Springer, 455\u2013475."},{"key":"e_1_3_2_1_2_1","unstructured":"Peva Blanchard Rachid Guerraoui and Julien Stainer. 2017. Machine learning with adversaries: Byzantine tolerant gradient descent. In Advances in Neural Information Processing Systems. 119\u2013129. Krum paper.  Peva Blanchard Rachid Guerraoui and Julien Stainer. 2017. Machine learning with adversaries: Byzantine tolerant gradient descent. In Advances in Neural Information Processing Systems. 119\u2013129. Krum paper."},{"key":"e_1_3_2_1_3_1","volume-title":"Peter Wu, Tian Li, Jakub Kone\u010dn\u00fd, H.\u00a0Brendan McMahan, Virginia Smith, and Ameet Talwalkar.","author":"Caldas Sebastian","year":"2019","unstructured":"Sebastian Caldas , Sai Meher\u00a0Karthik Duddu , Peter Wu, Tian Li, Jakub Kone\u010dn\u00fd, H.\u00a0Brendan McMahan, Virginia Smith, and Ameet Talwalkar. 2019 . LEAF : A Benchmark for Federated Settings . arXiv preprint arXiv:1812.01097 (2019). Sebastian Caldas, Sai Meher\u00a0Karthik Duddu, Peter Wu, Tian Li, Jakub Kone\u010dn\u00fd, H.\u00a0Brendan McMahan, Virginia Smith, and Ameet Talwalkar. 2019. LEAF: A Benchmark for Federated Settings. arXiv preprint arXiv:1812.01097 (2019)."},{"key":"e_1_3_2_1_4_1","volume-title":"Network and Distributed System Security Symposium","author":"Cao Xiaoyu","year":"2021","unstructured":"Xiaoyu Cao , Minghong Fang , Jia Liu , and Neil\u00a0Zhenqiang Gong . 2021 . FLTrust: Byzantine-robust Federated Learning via Trust Bootstrapping . Network and Distributed System Security Symposium (2021), 1\u201318. Xiaoyu Cao, Minghong Fang, Jia Liu, and Neil\u00a0Zhenqiang Gong. 2021. FLTrust: Byzantine-robust Federated Learning via Trust Bootstrapping. Network and Distributed System Security Symposium (2021), 1\u201318."},{"key":"e_1_3_2_1_5_1","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Fang Minghong","year":"2020","unstructured":"Minghong Fang , Xiaoyu Cao , Jinyuan Jia , and Neil\u00a0Zhenqiang Gong . 2020 . Local Model Poisoning Attacks to Byzantine-Robust Federated Learning . In 29th USENIX Security Symposium (USENIX Security 20) . Boston, MA. https:\/\/www.usenix.org\/conference\/usenixsecurity20\/presentation\/fang Minghong Fang, Xiaoyu Cao, Jinyuan Jia, and Neil\u00a0Zhenqiang Gong. 2020. Local Model Poisoning Attacks to Byzantine-Robust Federated Learning. In 29th USENIX Security Symposium (USENIX Security 20). Boston, MA. https:\/\/www.usenix.org\/conference\/usenixsecurity20\/presentation\/fang"},{"key":"e_1_3_2_1_6_1","volume-title":"The Limitations of Federated Learning in Sybil Settings. In 23rd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2020","author":"Fung Clement","year":"2020","unstructured":"Clement Fung , Chris J.\u00a0M. Yoon , and Ivan Beschastnikh . 2020 . The Limitations of Federated Learning in Sybil Settings. In 23rd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2020 ). USENIX Association, San Sebastian, 301\u2013316. https:\/\/www.usenix.org\/conference\/raid 2020\/presentation\/fung Clement Fung, Chris J.\u00a0M. Yoon, and Ivan Beschastnikh. 2020. The Limitations of Federated Learning in Sybil Settings. In 23rd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2020). USENIX Association, San Sebastian, 301\u2013316. https:\/\/www.usenix.org\/conference\/raid2020\/presentation\/fung"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2019.2940820"},{"key":"e_1_3_2_1_8_1","volume-title":"On the Convergence of FedAvg on Non-IID Data. In International Conference on Learning Representations. https:\/\/openreview.net\/forum?id=HJxNAnVtDS","author":"Li Xiang","year":"2020","unstructured":"Xiang Li , Kaixuan Huang , Wenhao Yang , Shusen Wang , and Zhihua Zhang . 2020 . On the Convergence of FedAvg on Non-IID Data. In International Conference on Learning Representations. https:\/\/openreview.net\/forum?id=HJxNAnVtDS Xiang Li, Kaixuan Huang, Wenhao Yang, Shusen Wang, and Zhihua Zhang. 2020. On the Convergence of FedAvg on Non-IID Data. In International Conference on Learning Representations. https:\/\/openreview.net\/forum?id=HJxNAnVtDS"},{"key":"e_1_3_2_1_9_1","unstructured":"H.\u00a0Brendan McMahan Eider Moore Daniel Ramage Seth Hampson and Blaise\u00a0Ag\u00fcera y Arcas. 2017. Communication-Efficient Learning of Deep Networks from Decentralized Data. In AISTATS.  H.\u00a0Brendan McMahan Eider Moore Daniel Ramage Seth Hampson and Blaise\u00a0Ag\u00fcera y Arcas. 2017. Communication-Efficient Learning of Deep Networks from Decentralized Data. In AISTATS."},{"key":"e_1_3_2_1_10_1","volume-title":"Proceedings of the 35th International Conference on Machine Learning (ICML). 3521\u20133530","author":"Mhamdi Mahdi\u00a0El","year":"2018","unstructured":"El\u00a0 Mahdi\u00a0El Mhamdi , Rachid Guerraoui , and S\u00e9bastien Rouault . 2018 . The hidden vulnerability of distributed learning in byzantium . In Proceedings of the 35th International Conference on Machine Learning (ICML). 3521\u20133530 . Bulyan paper. El\u00a0Mahdi\u00a0El Mhamdi, Rachid Guerraoui, and S\u00e9bastien Rouault. 2018. The hidden vulnerability of distributed learning in byzantium. In Proceedings of the 35th International Conference on Machine Learning (ICML). 3521\u20133530. Bulyan paper."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140451"},{"key":"e_1_3_2_1_12_1","volume-title":"Manipulating the Byzantine: Optimizing Model Poisoning Attacks and Defenses for Federated Learning","author":"Shejwalkar Virat","year":"2021","unstructured":"Virat Shejwalkar and Amir Houmansadr . 2021. Manipulating the Byzantine: Optimizing Model Poisoning Attacks and Defenses for Federated Learning . Internet Society ( 2021 ), 18. Virat Shejwalkar and Amir Houmansadr. 2021. Manipulating the Byzantine: Optimizing Model Poisoning Attacks and Defenses for Federated Learning. Internet Society (2021), 18."},{"key":"e_1_3_2_1_13_1","unstructured":"Virginia Smith Chao-Kai Chiang Maziar Sanjabi and Ameet\u00a0S Talwalkar. 2017. Federated multi-task learning. In Advances in Neural Information Processing Systems. 4424\u20134434.  Virginia Smith Chao-Kai Chiang Maziar Sanjabi and Ameet\u00a0S Talwalkar. 2017. Federated multi-task learning. In Advances in Neural Information Processing Systems. 4424\u20134434."},{"key":"e_1_3_2_1_14_1","volume-title":"Local SGD converges fast and communicates little. arXiv preprint arXiv:1805.09767","author":"Stich U","year":"2018","unstructured":"Sebastian\u00a0 U Stich . 2018. Local SGD converges fast and communicates little. arXiv preprint arXiv:1805.09767 ( 2018 ). Sebastian\u00a0U Stich. 2018. Local SGD converges fast and communicates little. arXiv preprint arXiv:1805.09767 (2018)."},{"key":"e_1_3_2_1_15_1","volume-title":"Sparsified SGD with memory. Advances in Neural Information Processing Systems 31","author":"Stich U","year":"2018","unstructured":"Sebastian\u00a0 U Stich , Jean-Baptiste Cordonnier , and Martin Jaggi . 2018. Sparsified SGD with memory. Advances in Neural Information Processing Systems 31 ( 2018 ). Sebastian\u00a0U Stich, Jean-Baptiste Cordonnier, and Martin Jaggi. 2018. Sparsified SGD with memory. Advances in Neural Information Processing Systems 31 (2018)."},{"key":"e_1_3_2_1_16_1","volume-title":"FABA: An Algorithm for Fast Aggregation against Byzantine Attacks in Distributed Neural Networks.. In IJCAI. 4824\u20134830.","author":"Xia Qi","year":"2019","unstructured":"Qi Xia , Zeyi Tao , Zijiang Hao , and Qun Li . 2019 . FABA: An Algorithm for Fast Aggregation against Byzantine Attacks in Distributed Neural Networks.. In IJCAI. 4824\u20134830. Qi Xia, Zeyi Tao, Zijiang Hao, and Qun Li. 2019. FABA: An Algorithm for Fast Aggregation against Byzantine Attacks in Distributed Neural Networks.. In IJCAI. 4824\u20134830."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/3339474"},{"key":"e_1_3_2_1_18_1","volume-title":"International Conference on Machine Learning. PMLR, 5650\u20135659","author":"Yin Dong","year":"2018","unstructured":"Dong Yin , Yudong Chen , Ramchandran Kannan , and Peter Bartlett . 2018 . Byzantine-robust distributed learning: Towards optimal statistical rates . In International Conference on Machine Learning. PMLR, 5650\u20135659 . Dong Yin, Yudong Chen, Ramchandran Kannan, and Peter Bartlett. 2018. Byzantine-robust distributed learning: Towards optimal statistical rates. In International Conference on Machine Learning. PMLR, 5650\u20135659."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.33015693"},{"key":"e_1_3_2_1_20_1","volume-title":"Batchcrypt: Efficient homomorphic encryption for cross-silo federated learning. In 2020 { USENIX} Annual Technical Conference ({ USENIX}{ ATC} 20). 493\u2013506.","author":"Zhang Chengliang","year":"2020","unstructured":"Chengliang Zhang , Suyi Li , Junzhe Xia , Wei Wang , Feng Yan , and Yang Liu . 2020 . Batchcrypt: Efficient homomorphic encryption for cross-silo federated learning. In 2020 { USENIX} Annual Technical Conference ({ USENIX}{ ATC} 20). 493\u2013506. Chengliang Zhang, Suyi Li, Junzhe Xia, Wei Wang, Feng Yan, and Yang Liu. 2020. Batchcrypt: Efficient homomorphic encryption for cross-silo federated learning. In 2020 { USENIX} Annual Technical Conference ({ USENIX}{ ATC} 20). 493\u2013506."},{"key":"e_1_3_2_1_21_1","volume-title":"2012 IEEE 51st IEEE Conference on Decision and Control (CDC). IEEE, 6792\u20136792","author":"Zhang Yuchen","year":"2012","unstructured":"Yuchen Zhang , John\u00a0 C Duchi , and Martin\u00a0 J Wainwright . 2012 . Communication-efficient algorithms for statistical optimization . In 2012 IEEE 51st IEEE Conference on Decision and Control (CDC). IEEE, 6792\u20136792 . Yuchen Zhang, John\u00a0C Duchi, and Martin\u00a0J Wainwright. 2012. Communication-efficient algorithms for statistical optimization. In 2012 IEEE 51st IEEE Conference on Decision and Control (CDC). IEEE, 6792\u20136792."}],"event":{"name":"ASIA CCS '23: ACM ASIA Conference on Computer and Communications Security","location":"Melbourne VIC Australia","acronym":"ASIA CCS '23","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the ACM Asia Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3579856.3582836","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/abs\/10.1145\/3579856.3582836","content-type":"text\/html","content-version":"vor","intended-application":"syndication"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T17:51:28Z","timestamp":1750182688000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3579856.3582836"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,7,10]]},"references-count":21,"alternative-id":["10.1145\/3579856.3582836","10.1145\/3579856"],"URL":"https:\/\/doi.org\/10.1145\/3579856.3582836","relation":{},"subject":[],"published":{"date-parts":[[2023,7,10]]},"assertion":[{"value":"2023-07-10","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}