{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,25]],"date-time":"2026-08-25T15:51:21Z","timestamp":1787673081479,"version":"build-2736575974"},"reference-count":32,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2025,12,2]],"date-time":"2025-12-02T00:00:00Z","timestamp":1764633600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2025,12,2]],"date-time":"2025-12-02T00:00:00Z","timestamp":1764633600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62476095"],"award-info":[{"award-number":["62476095"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Cybersecurity"],"abstract":"<jats:title>Abstract<\/jats:title>\n                  <jats:p>Data poisoning attacks present a significant challenge to the integrity and reliability of federated learning (FL) systems, where model training occurs collaboratively across decentralized devices. These attacks involve the deliberate injection of malicious data to corrupt the model\u2019s training process, ultimately undermining its performance. Given the decentralized nature of FL and the lack of direct access to local data, detecting and mitigating these attacks becomes particularly difficult, especially in unsupervised scenarios where labeled data is unavailable. In this paper, we introduce a novel Federated Data Sanitization Defense to address these security threats in federated learning environments. This defense mechanism leverages federated clustering to group model updates based on semantic consistency, identifying and isolating outlier updates that are likely to be poisoned. A targeted data sanitization strategy is then applied to filter out malicious data, ensuring that only trustworthy information is used to update the global model. This decentralized process occurs on each participating device, enabling real-time detection and mitigation of data poisoning attacks. Through extensive experiments, we validate the effectiveness of Federated Data Sanitization Defense, demonstrating its ability to enhance the security and robustness of federated learning systems against data poisoning, while preserving privacy and model integrity.<\/jats:p>","DOI":"10.1186\/s42400-025-00444-8","type":"journal-article","created":{"date-parts":[[2025,12,1]],"date-time":"2025-12-01T23:02:53Z","timestamp":1764630173000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Distributed clustering meets federated learning: a clustering-based approach to data poisoning mitigation"],"prefix":"10.1186","volume":"8","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6278-120X","authenticated-orcid":false,"given":"Chong","family":"Chen","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Siquan","family":"Huang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Leyu","family":"Shi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yanhong","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ying","family":"Gao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,12,2]]},"reference":[{"key":"444_CR1","unstructured":"Bagdasaryan E, Veit A, Hua Y, Estrin D, et al. (2020) How to backdoor federated learning. In: Chiappa S, Calandra R (eds) Proceedings of the twenty third international conference on artificial intelligence and statistics. Proceedings of Machine Learning Research, vol 108, pp 2938\u20132948"},{"key":"444_CR2","unstructured":"Biggio B, Nelson B, Laskov P (2012) Poisoning attacks against support vector machines. arXiv preprint arXiv:1206.6389"},{"key":"444_CR3","unstructured":"Blanchard P, El\u00a0Mhamdi EM, Guerraoui R, et al. (2017) Machine learning with adversaries: Byzantine tolerant gradient descent. In: Advances in neural information processing systems. 30"},{"key":"444_CR4","unstructured":"Cai W, Gao M, Jiang Y, et al. (2022) Hierarchical domain adaptation projective dictionary pair learning model for eeg classification in iomt systems. IEEE Trans Comput Soc Syst 1\u20139"},{"key":"444_CR5","doi-asserted-by":"crossref","unstructured":"Cao D, Chang S, Lin Z, et al. (2019) Understanding distributed poisoning attack in federated learning. In: 2019 IEEE 25th international conference on parallel and distributed systems (ICPADS), pp 233\u2013239","DOI":"10.1109\/ICPADS47876.2019.00042"},{"key":"444_CR6","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/j.cose.2015.03.006","volume":"52","author":"W Cerroni","year":"2015","unstructured":"Cerroni W, Moro G, Pasolini R et al (2015) Decentralized detection of network attacks through p2p data clustering of snmp data. Comput Secur 52:1\u201316","journal-title":"Comput Secur"},{"issue":"4","key":"444_CR7","doi-asserted-by":"publisher","first-page":"83","DOI":"10.1109\/MIS.2020.2988604","volume":"35","author":"Y Chen","year":"2020","unstructured":"Chen Y, Qin X, Wang J et al (2020) Fedhealth: a federated transfer learning framework for wearable healthcare. IEEE Intell Syst 35(4):83\u201393","journal-title":"IEEE Intell Syst"},{"key":"444_CR8","doi-asserted-by":"crossref","unstructured":"Deng Z, Yang X, Xu S, et al. (2021) Libre: a practical bayesian approach to adversarial detection. In: Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition, pp 972\u2013982","DOI":"10.1109\/CVPR46437.2021.00103"},{"key":"444_CR9","unstructured":"Dennis DK, Li T, Smith V (2021) Heterogeneity for the win: One-shot federated clustering. In: International conference on machine learning, pp 2611\u20132620"},{"key":"444_CR10","doi-asserted-by":"crossref","unstructured":"Dong Y, Yang X, Deng Z, et al. (2021) Black-box detection of backdoor attacks with limited information and data. In: Proceedings of the IEEE\/CVF international conference on computer vision, pp 16482\u201316491","DOI":"10.1109\/ICCV48922.2021.01617"},{"key":"444_CR11","unstructured":"Fung C, Yoon CJM, Beschastnikh I (2018) Mitigating sybils in federated learning poisoning. arXiv preprint arXiv:1808.04866"},{"key":"444_CR12","unstructured":"Ghosh A, Chung J, Yin D, et al. (2020) An efficient framework for clustered federated learning. In: Advances in neural information processing systems, vol 33, pp 19586\u201319597"},{"key":"444_CR13","unstructured":"Ghosh A, Chung J, Yin D, et al. (2020) An efficient framework for clustered federated learning. In: Advances in neural information processing systems"},{"key":"444_CR14","unstructured":"Ghosh A, Hong J, Yin D, et al. (2019) Robust federated learning in a heterogeneous environment. arXiv preprint arXiv:1906.06629"},{"issue":"10","key":"444_CR15","doi-asserted-by":"publisher","first-page":"6526","DOI":"10.1109\/TII.2022.3156645","volume":"18","author":"J Guo","year":"2022","unstructured":"Guo J, Li H, Huang F et al (2022) Adfl: a poisoning attack defense framework for horizontal federated learning. IEEE Trans Indu Inf 18(10):6526\u20136536","journal-title":"IEEE Trans Indu Inf"},{"key":"444_CR16","unstructured":"Hayes J, Ohrimenko O (2018) Contamination attacks and mitigation in multi-party machine learning. In: Advances in neural information processing systems"},{"key":"444_CR17","doi-asserted-by":"crossref","unstructured":"He K, Zhang X, Ren S, et al. (2016) Deep residual learning for image recognition. In: 2016 IEEE conference on computer vision and pattern recognition (CVPR), pp 770\u2013778","DOI":"10.1109\/CVPR.2016.90"},{"key":"444_CR18","unstructured":"Huang J, Feng Q, Huang Z, et al. (2023) Fast algorithms for distributed k-clustering with outliers. In: Krause A, Brunskill E, Cho K, Engelhardt B, Sabato S, Scarlett J (eds) Proceedings of the 40th international conference on machine learning. Proceedings of Machine Learning Research. vol 202, pp 13845\u201313868"},{"key":"444_CR19","doi-asserted-by":"publisher","first-page":"678","DOI":"10.1109\/ACCESS.2015.2437951","volume":"3","author":"SMR Islam","year":"2015","unstructured":"Islam SMR, Kwak D, Kabir MH et al (2015) The internet of things for health care: a comprehensive survey. IEEE Access 3:678\u2013708","journal-title":"IEEE Access"},{"key":"444_CR20","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103319","volume":"132","author":"Y Li","year":"2023","unstructured":"Li Y, Yuan D, Sani AS et al (2023) Enhancing federated learning robustness in adversarial environment through clustering non-iid features. Comput Secur 132:103319","journal-title":"Comput Secur"},{"key":"444_CR21","unstructured":"McMahan B, Moore E, Ramage D, et al. (2017) Communication-efficient learning of deep networks from decentralized data. In: Artificial intelligence and statistics, pp 1273\u20131282"},{"key":"444_CR22","doi-asserted-by":"publisher","first-page":"60","DOI":"10.1016\/j.cose.2018.06.003","volume":"78","author":"HH Nguyen","year":"2018","unstructured":"Nguyen HH (2018) Privacy-preserving mechanisms for k-modes clustering. Comput Secur 78:60\u201375","journal-title":"Comput Secur"},{"key":"444_CR23","unstructured":"Nguyen TD, Rieger P, Chen H, et al. (2022) FLAME: taming backdoors in federated learning. In: 31st USENIX Security Symposium (USENIX Security 22). Boston, USENIX Association, pp 1415\u20131432"},{"key":"444_CR24","unstructured":"Shen S, Tople S, Saxena P. Auror: Defending against poisoning attacks in collaborative deep learning systems. In: Proceedings of the 32nd annual conference on computer security applications. New York: ACSAC \u201916, Association for Computing Machinery, pp 508\u2013519"},{"issue":"13","key":"444_CR25","doi-asserted-by":"publisher","first-page":"11365","DOI":"10.1109\/JIOT.2021.3128646","volume":"9","author":"G Sun","year":"2022","unstructured":"Sun G, Cong Y, Dong J et al (2022) Data poisoning attacks on federated machine learning. IEEE Internet Things J 9(13):11365\u201311375","journal-title":"IEEE Internet Things J"},{"key":"444_CR26","doi-asserted-by":"publisher","first-page":"456","DOI":"10.1016\/j.ins.2018.04.065","volume":"479","author":"P Sun","year":"2019","unstructured":"Sun P, Li J, Alam Bhuiyan MZ et al (2019) Modeling and clustering attacker activities in iot through machine learning techniques. Inf Sci 479:456\u2013471","journal-title":"Inf Sci"},{"key":"444_CR27","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103414","volume":"133","author":"Y Wang","year":"2023","unstructured":"Wang Y, Zhai DH, Xia Y (2023) Scfl: Mitigating backdoor attacks in federated learning based on svd and clustering. Comput Secur 133:103414","journal-title":"Comput Secur"},{"key":"444_CR28","unstructured":"Wang Y, Mianjy P, Arora R (2021) Robust learning for data poisoning attacks. In: International conference on machine learning, pp 10859\u201310869"},{"issue":"8","key":"444_CR29","doi-asserted-by":"publisher","first-page":"2818","DOI":"10.1109\/TMC.2020.3045266","volume":"21","author":"Q Wu","year":"2022","unstructured":"Wu Q, Chen X, Zhou Z, Zhang J (2022) Fedhome: Cloud-edge based personalized federated learning for in-home health monitoring. IEEE Trans Mob Comput 21(8):2818\u20132832","journal-title":"IEEE Trans Mob Comput"},{"key":"444_CR30","unstructured":"Yang J, Shi R, Wei D, et al. (2021) Medmnist v2: A large-scale lightweight benchmark for 2d and 3d biomedical image classification. arXiv preprint arXiv:2110.14795"},{"issue":"2","key":"444_CR31","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3298981","volume":"10","author":"Q Yang","year":"2019","unstructured":"Yang Q, Liu Y, Chen T et al (2019) Federated machine learning: Concept and applications. ACM Trans Intell Syst Technol (TIST) 10(2):1\u201319","journal-title":"ACM Trans Intell Syst Technol (TIST)"},{"key":"444_CR32","unstructured":"Yin D, Chen Y, Kannan R, et al. (2018) Byzantine-robust distributed learning: towards optimal statistical rates. In: International conference on machine learning, pp 5650\u20135659"}],"container-title":["Cybersecurity"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s42400-025-00444-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1186\/s42400-025-00444-8\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s42400-025-00444-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,1]],"date-time":"2025-12-01T23:03:00Z","timestamp":1764630180000},"score":1,"resource":{"primary":{"URL":"https:\/\/cybersecurity.springeropen.com\/articles\/10.1186\/s42400-025-00444-8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,12,2]]},"references-count":32,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2025,12]]}},"alternative-id":["444"],"URL":"https:\/\/doi.org\/10.1186\/s42400-025-00444-8","relation":{},"ISSN":["2523-3246"],"issn-type":[{"value":"2523-3246","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,12,2]]},"assertion":[{"value":"18 February 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"29 June 2025","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"2 December 2025","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare that they have no known competition for financial interests or personal relationships that could have appeared to influence the work reported in this document.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}],"article-number":"108"}}