{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,20]],"date-time":"2026-07-20T14:13:09Z","timestamp":1784556789238,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":28,"publisher":"ACM","license":[{"start":{"date-parts":[[2025,11,22]],"date-time":"2025-11-22T00:00:00Z","timestamp":1763769600000},"content-version":"vor","delay-in-days":3,"URL":"http:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000001","name":"NSF (National Science Foundation)","doi-asserted-by":"publisher","award":["CNS-2238680,CNS-2207204,CNS-2247794"],"award-info":[{"award-number":["CNS-2238680,CNS-2207204,CNS-2247794"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,11,19]]},"DOI":"10.1145\/3719027.3744839","type":"proceedings-article","created":{"date-parts":[[2025,11,22]],"date-time":"2025-11-22T23:32:38Z","timestamp":1763854358000},"page":"1230-1244","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":2,"title":["Mitigating Data Poisoning Attacks to Local Differential Privacy"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0003-5205-9610","authenticated-orcid":false,"given":"Xiaolin","family":"Li","sequence":"first","affiliation":[{"name":"Purdue University, West Lafayette, IN, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8207-9717","authenticated-orcid":false,"given":"Ninghui","family":"Li","sequence":"additional","affiliation":[{"name":"Purdue University, West Lafayette, IN, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8973-2328","authenticated-orcid":false,"given":"Boyang","family":"Wang","sequence":"additional","affiliation":[{"name":"The University of Cincinnati, Cincinnati, OH, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0458-0092","authenticated-orcid":false,"given":"Wenhai","family":"Sun","sequence":"additional","affiliation":[{"name":"Purdue University, West Lafayette, IN, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2025,11,22]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2024. Emoji Stats. https:\/\/www.emojistats.org\/"},{"key":"e_1_3_2_1_2_1","unstructured":"2024. San Francisco Fire Department Calls for Service. http:\/\/bit.ly\/336sddL"},{"key":"e_1_3_2_1_3_1","volume-title":"Practical locally private heavy hitters. Advances in Neural Information Processing Systems 30","author":"Bassily Raef","year":"2017","unstructured":"Raef Bassily, Kobbi Nissim, Uri Stemmer, and Abhradeep Guha Thakurta. 2017. Practical locally private heavy hitters. Advances in Neural Information Processing Systems 30 (2017)."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/2746539.2746632"},{"key":"e_1_3_2_1_5_1","volume-title":"30th USENIX Security Symposium. 947--964","author":"Cao Xiaoyu","year":"2021","unstructured":"Xiaoyu Cao, Jinyuan Jia, and Neil Zhenqiang Gong. 2021. Data poisoning attacks to local differential privacy protocols. In 30th USENIX Security Symposium. 947--964."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00001"},{"key":"e_1_3_2_1_7_1","volume-title":"Local privacy and statistical minimax rates. In 2013 IEEE 54th annual Symposium on Foundations of Computer Science","author":"Duchi John C","unstructured":"John C Duchi, Michael I Jordan, and Martin J Wainwright. 2013. Local privacy and statistical minimax rates. In 2013 IEEE 54th annual Symposium on Foundations of Computer Science. IEEE, 429--438."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1080\/01621459.2017.1389735"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1016\/0167-7152(91)90170-V"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660348"},{"key":"e_1_3_2_1_11_1","volume-title":"LDPGuard: Defenses against data poisoning attacks to local differential privacy protocols","author":"Huang Kai","year":"2024","unstructured":"Kai Huang, Gaoya Ouyang, Qingqing Ye, Haibo Hu, Bolong Zheng, Xi Zhao, Ruiyuan Zhang, and Xiaofang Zhou. 2024. LDPGuard: Defenses against data poisoning attacks to local differential privacy protocols. IEEE Transactions on Knowledge and Data Engineering (2024)."},{"key":"e_1_3_2_1_12_1","volume-title":"Extremal mechanisms for local differential privacy. Advances in Neural Information Processing Systems 27","author":"Kairouz Peter","year":"2014","unstructured":"Peter Kairouz, Sewoong Oh, and Pramod Viswanath. 2014. Extremal mechanisms for local differential privacy. Advances in Neural Information Processing Systems 27 (2014)."},{"key":"e_1_3_2_1_13_1","volume-title":"32nd USENIX Security Symposium. 1739--1756","author":"Li Xiaoguang","year":"2023","unstructured":"Xiaoguang Li, Ninghui Li, Wenhai Sun, Neil Zhenqiang Gong, and Hui Li. 2023. Fine-grained poisoning attack to local differential privacy protocols for mean and variance estimation. In 32nd USENIX Security Symposium. 1739--1756."},{"key":"e_1_3_2_1_14_1","volume-title":"Mitigating Data Poisoning Attacks to Local Differential Privacy. arXiv preprint arXiv:2506.02156","author":"Li Xiaolin","year":"2025","unstructured":"Xiaolin Li, Ninghui Li, Boyang Wang, and Wenhai Sun. 2025. Mitigating Data Poisoning Attacks to Local Differential Privacy. arXiv preprint arXiv:2506.02156 (2025)."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2025.241521"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/3318464.3389700"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"crossref","unstructured":"Karl Pearson. 1896. VII. Mathematical contributions to the theory of evolution.\u2014III. Regression heredity and panmixia. Philosophical Transactions of the Royal Society of London. Series A containing papers of a mathematical or physical character 187 (1896) 253--318.","DOI":"10.1098\/rsta.1896.0007"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978409"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE60146.2024.00132"},{"key":"e_1_3_2_1_20_1","first-page":"1","article-title":"Learning with privacy at scale","volume":"1","author":"Team ADP","year":"2017","unstructured":"ADP Team et al. 2017. Learning with privacy at scale. Apple Mach. Learn. J 1, 8 (2017), 1--25.","journal-title":"Apple Mach. Learn. J"},{"key":"e_1_3_2_1_21_1","volume-title":"Data Poisoning Attacks to Locally Differentially Private Frequent Itemset Mining Protocols. arXiv preprint arXiv:2406.19466","author":"Tong Wei","year":"2024","unstructured":"Wei Tong, Haoyu Chen, Jiacheng Niu, and Sheng Zhong. 2024. Data Poisoning Attacks to Locally Differentially Private Frequent Itemset Mining Protocols. arXiv preprint arXiv:2406.19466 (2024)."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE.2019.00063"},{"key":"e_1_3_2_1_23_1","volume-title":"26th USENIX Security Symposium. 729--745","author":"Wang Tianhao","year":"2017","unstructured":"Tianhao Wang, Jeremiah Blocki, Ninghui Li, and Somesh Jha. 2017. Locally differentially private protocols for frequency estimation. In 26th USENIX Security Symposium. 729--745."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/3299869.3319891"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2019.2927695"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24157"},{"key":"e_1_3_2_1_27_1","volume-title":"31st USENIX Security Symposium. 519--536","author":"Wu Yongji","year":"2022","unstructured":"Yongji Wu, Xiaoyu Cao, Jinyuan Jia, and Neil Zhenqiang Gong. 2022. Poisoning attacks to local differential privacy protocols for key-value data. In 31st USENIX Security Symposium. 519--536."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00018"}],"event":{"name":"CCS '25: ACM SIGSAC Conference on Computer and Communications Security","location":"Taipei Taiwan","acronym":"CCS '25","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3719027.3744839","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3719027.3744839","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,22]],"date-time":"2025-12-22T22:12:30Z","timestamp":1766441550000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3719027.3744839"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,11,19]]},"references-count":28,"alternative-id":["10.1145\/3719027.3744839","10.1145\/3719027"],"URL":"https:\/\/doi.org\/10.1145\/3719027.3744839","relation":{},"subject":[],"published":{"date-parts":[[2025,11,19]]},"assertion":[{"value":"2025-11-22","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}