{"id":"https://openalex.org/W2963422767","doi":null,"title":"Analyzing Federated Learning through an Adversarial Lens","display_name":"Analyzing Federated Learning through an Adversarial Lens","publication_year":2019,"publication_date":"2019-05-24","ids":{"openalex":"https://openalex.org/W2963422767","mag":"2963422767"},"language":"en","primary_location":{"id":"mag:2963422767","doi":null,"is_oa":false,"landing_page_url":"http://proceedings.mlr.press/v97/bhagoji19a/bhagoji19a.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306419644","display_name":"International Conference on Machine Learning","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"International Conference on Machine Learning","raw_type":null},"volume":null,"type":"conference-paper","indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5003032696","display_name":"Arjun Nitin Bhagoji","orcid":"https://orcid.org/0000-0002-2803-5649","observed_orcids":["https://orcid.org/0000-0002-2803-5649"]},"institutions":[{"id":"https://openalex.org/I20089843","display_name":"Princeton University","ror":"https://ror.org/00hx57361","country_code":"US","type":"education","lineage":["https://openalex.org/I20089843"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Arjun Nitin Bhagoji","raw_affiliation_strings":["Princeton University"],"raw_orcid":"https://orcid.org/0000-0002-2803-5649","affiliations":[{"raw_affiliation_string":"Princeton University","institution_ids":["https://openalex.org/I20089843"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101527369","display_name":"Supriyo Chakraborty","orcid":"https://orcid.org/0000-0003-3697-0044","observed_orcids":["https://orcid.org/0000-0003-3697-0044"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Supriyo Chakraborty","raw_affiliation_strings":["IBM"],"raw_orcid":"https://orcid.org/0000-0003-3697-0044","affiliations":[{"raw_affiliation_string":"IBM","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015619835","display_name":"Prateek Mittal","orcid":"https://orcid.org/0000-0002-4057-0118","observed_orcids":["https://orcid.org/0000-0002-4057-0118"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Prateek Mittal","raw_affiliation_strings":["Center for Information Technology Policy"],"raw_orcid":"https://orcid.org/0000-0002-4057-0118","affiliations":[{"raw_affiliation_string":"Center for Information Technology Policy","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5041645148","display_name":"Seraphin B. Calo","orcid":"https://orcid.org/0000-0003-4668-3989","observed_orcids":["https://orcid.org/0000-0003-4668-3989"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Seraphin Calo","raw_affiliation_strings":["IBM"],"raw_orcid":"https://orcid.org/0000-0003-4668-3989","affiliations":[{"raw_affiliation_string":"IBM","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":17.7907,"has_fulltext":false,"cited_by_count":188,"citation_normalized_percentile":{"value":0.99437379,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"634","last_page":"643"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7289999723434448,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7289999723434448,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.2703000009059906,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/federated-learning","display_name":"federated learning","score":0.9829999804496765},{"id":"https://openalex.org/keywords/model-poisoning-attacks","display_name":"model poisoning","score":0.9879999756813049},{"id":"https://openalex.org/keywords/attack-stealth","display_name":"attack stealth","score":0.7590000033378601},{"id":"https://openalex.org/keywords/adversarial-training","display_name":"adversarial training","score":0.6570000052452087},{"id":"https://openalex.org/keywords/alternating-optimization","display_name":"alternating optimization","score":0.8960000276565552},{"id":"https://openalex.org/keywords/parameter-estimation","display_name":"parameter estimation","score":0.7120000123977661},{"id":"https://openalex.org/keywords/interpretability","display_name":"interpretability","score":0.8149999976158142},{"id":"https://openalex.org/keywords/visual-explanations","display_name":"visual explanations","score":0.7910000085830688},{"id":"https://openalex.org/keywords/privacy-preserving-machine-learning","display_name":"privacy-preserving machine learning","score":0.6790000200271606},{"id":"https://openalex.org/keywords/defense-strategy","display_name":"defense strategy","score":0.5170000195503235}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8354209661483765},{"id":"https://openalex.org/C2781067378","wikidata":"https://www.wikidata.org/wiki/Q17027399","display_name":"Interpretability","level":2,"score":0.8057301640510559},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.7335083484649658},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6811398267745972},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5234227180480957},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.5142552256584167},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5130690336227417},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.4900411367416382},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.48531240224838257},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.47937944531440735},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.47301414608955383},{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.44121187925338745},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.4193599820137024},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.41362982988357544},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"mag:2963422767","doi":null,"is_oa":false,"landing_page_url":"http://proceedings.mlr.press/v97/bhagoji19a/bhagoji19a.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306419644","display_name":"International Conference on Machine Learning","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"International Conference on Machine Learning","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"sustainable_development_goals_aurora":[{"display_name":"Peace, justice, and strong institutions","score":0.6800000071525574,"id":"https://metadata.un.org/sdg/16"}],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4404030380","https://openalex.org/W3136620885","https://openalex.org/W4412939403","https://openalex.org/W4402215177","https://openalex.org/W3095915292","https://openalex.org/W3200002062","https://openalex.org/W7117986509","https://openalex.org/W3138198612","https://openalex.org/W4387185397","https://openalex.org/W6983527847"],"abstract_inverted_index":{"Federated":[0],"learning":[1,46,195],"distributes":[2],"model":[3,24,41,62,152,181],"training":[4,16,116],"among":[5],"a":[6,49,65,75,142,174],"multitude":[7],"of":[8,40,67,77,88,97,144,151,192],"agents,":[9],"who,":[10],"guided":[11],"by":[12,48,125],"privacy":[13],"concerns,":[14],"perform":[15],"using":[17,126],"their":[18],"local":[19],"data":[20],"but":[21],"share":[22],"only":[23],"parameter":[25,127],"updates,":[26],"for":[27,114,129,154],"iterative":[28],"aggregation":[29],"at":[30],"the":[31,38,55,61,89,95,115,119,130,163,190,193,198],"server.":[32],"In":[33],"this":[34,82],"work,":[35],"we":[36,105,140],"explore":[37,74],"threat":[39],"poisoning":[42,182],"attacks":[43,183],"on":[44,136],"federated":[45,194],"initiated":[47],"single,":[50],"non-colluding":[51],"malicious":[52,90,158],"agent":[53],"where":[54],"adversarial":[56,120],"objective":[57],"is":[58],"to":[59,63,79,93,134,147,200],"cause":[60],"misclassify":[64],"set":[66],"chosen":[68],"inputs":[69],"with":[70,85],"high":[71],"confidence.":[72],"We":[73,122],"number":[76],"strategies":[78],"carry":[80,179],"out":[81,180],"attack,":[83],"starting":[84],"simple":[86],"boosting":[87],"agent's":[91],"update":[92],"overcome":[94],"effects":[96],"other":[98],"agents'":[99,132],"updates.":[100],"To":[101],"increase":[102],"attack":[103,137],"stealth,":[104,187],"propose":[106],"an":[107],"alternating":[108],"minimization":[109],"strategy,":[110],"which":[111],"alternately":[112],"optimizes":[113],"loss":[117],"and":[118,157,160,197],"objective.":[121],"follow":[123],"up":[124],"estimation":[128],"benign":[131,156],"updates":[133],"improve":[135],"success.":[138],"Finally,":[139],"use":[141],"suite":[143],"interpretability":[145],"techniques":[146],"generate":[148],"visual":[149],"explanations":[150,164],"decisions":[153],"both":[155],"models":[159],"show":[161],"that":[162,172],"are":[165],"nearly":[166],"visually":[167],"indistinguishable.":[168],"Our":[169],"results":[170],"indicate":[171],"even":[173],"highly":[175],"constrained":[176],"adversary":[177],"can":[178],"while":[184],"simultaneously":[185],"maintaining":[186],"thus":[188],"highlighting":[189],"vulnerability":[191],"setting":[196],"need":[199],"develop":[201],"effective":[202],"defense":[203],"strategies.":[204]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":16},{"year":2021,"cited_by_count":84},{"year":2020,"cited_by_count":69},{"year":2019,"cited_by_count":17}],"updated_date":"2026-10-12T09:40:04.860316","created_date":"2019-07-30T00:00:00"}