{"id":"https://openalex.org/W4412939403","doi":"https://doi.org/10.1109/tdsc.2025.3594175","title":"AMA: Adaptive Model Poisoning Attacks Towards Federated Learning","display_name":"AMA: Adaptive Model Poisoning Attacks Towards Federated Learning","publication_year":2025,"publication_date":"2025-08-04","ids":{"openalex":"https://openalex.org/W4412939403","doi":"https://doi.org/10.1109/tdsc.2025.3594175"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2025.3594175","doi":"https://doi.org/10.1109/tdsc.2025.3594175","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3594175","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","ccf-a","cwts-core","dongbi-a","jufo-3","norway-2","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100602148","display_name":"Di Wu","orcid":"https://orcid.org/0000-0001-6979-3537","observed_orcids":["https://orcid.org/0000-0001-6979-3537"]},"institutions":[{"id":"https://openalex.org/I87445476","display_name":"Xi'an Jiaotong University","ror":"https://ror.org/017zhmm22","country_code":"CN","type":"education","lineage":["https://openalex.org/I87445476"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Di Wu","raw_affiliation_strings":["School of Computer Science and Technology, Xi’an Jiaotong Univiersity, Xi’an, China","School of Computer Science and Technology, Xi'an Jiaotong Univiersity, China"],"raw_orcid":"https://orcid.org/0000-0001-6979-3537","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Xi’an Jiaotong Univiersity, Xi’an, China","institution_ids":["https://openalex.org/I87445476"]},{"raw_affiliation_string":"School of Computer Science and Technology, Xi'an Jiaotong Univiersity, China","institution_ids":["https://openalex.org/I87445476"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Qi Guo","orcid":"https://orcid.org/0000-0001-5507-3424","observed_orcids":["https://orcid.org/0000-0001-5507-3424"]},"institutions":[{"id":"https://openalex.org/I87445476","display_name":"Xi'an Jiaotong University","ror":"https://ror.org/017zhmm22","country_code":"CN","type":"education","lineage":["https://openalex.org/I87445476"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qi Guo","raw_affiliation_strings":["School of Computer Science and Technology, Xi’an Jiaotong Univiersity, Xi’an, China","School of Computer Science and Technology, Xi'an Jiaotong Univiersity, China"],"raw_orcid":"https://orcid.org/0000-0001-5507-3424","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Xi’an Jiaotong Univiersity, Xi’an, China","institution_ids":["https://openalex.org/I87445476"]},{"raw_affiliation_string":"School of Computer Science and Technology, Xi'an Jiaotong Univiersity, China","institution_ids":["https://openalex.org/I87445476"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052373347","display_name":"Yong Qi","orcid":"https://orcid.org/0000-0002-7682-5653","observed_orcids":["https://orcid.org/0000-0002-7682-5653"]},"institutions":[{"id":"https://openalex.org/I87445476","display_name":"Xi'an Jiaotong University","ror":"https://ror.org/017zhmm22","country_code":"CN","type":"education","lineage":["https://openalex.org/I87445476"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yong Qi","raw_affiliation_strings":["School of Computer Science and Technology, Xi’an Jiaotong Univiersity, Xi’an, China","School of Computer Science and Technology, Xi'an Jiaotong Univiersity, China"],"raw_orcid":"https://orcid.org/0000-0002-7682-5653","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Xi’an Jiaotong Univiersity, Xi’an, China","institution_ids":["https://openalex.org/I87445476"]},{"raw_affiliation_string":"School of Computer Science and Technology, Xi'an Jiaotong Univiersity, China","institution_ids":["https://openalex.org/I87445476"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021497508","display_name":"Saiyu Qi","orcid":"https://orcid.org/0000-0002-0394-4432","observed_orcids":["https://orcid.org/0000-0002-0394-4432"]},"institutions":[{"id":"https://openalex.org/I87445476","display_name":"Xi'an Jiaotong University","ror":"https://ror.org/017zhmm22","country_code":"CN","type":"education","lineage":["https://openalex.org/I87445476"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Saiyu Qi","raw_affiliation_strings":["School of Computer Science and Technology, Xi’an Jiaotong Univiersity, Xi’an, China","School of Computer Science and Technology, Xi'an Jiaotong Univiersity, China"],"raw_orcid":"https://orcid.org/0000-0002-0394-4432","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Xi’an Jiaotong Univiersity, Xi’an, China","institution_ids":["https://openalex.org/I87445476"]},{"raw_affiliation_string":"School of Computer Science and Technology, Xi'an Jiaotong Univiersity, China","institution_ids":["https://openalex.org/I87445476"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5073922452","display_name":"Qian Li","orcid":"https://orcid.org/0000-0002-0110-451X","observed_orcids":["https://orcid.org/0000-0002-0110-451X","https://orcid.org/0009-0006-8583-3504"]},"institutions":[{"id":"https://openalex.org/I87445476","display_name":"Xi'an Jiaotong University","ror":"https://ror.org/017zhmm22","country_code":"CN","type":"education","lineage":["https://openalex.org/I87445476"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qian Li","raw_affiliation_strings":["Ministry of Education Key Laboratory for Intelligent Networks and Network Security, School of Cyber Science and Engineering, Xi’an Jiaotong University, Xi’an, China","School of Computer Science and Technology, Xi'an Jiaotong Univiersity, China"],"raw_orcid":"https://orcid.org/0000-0002-0110-451X","affiliations":[{"raw_affiliation_string":"Ministry of Education Key Laboratory for Intelligent Networks and Network Security, School of Cyber Science and Engineering, Xi’an Jiaotong University, Xi’an, China","institution_ids":["https://openalex.org/I87445476"]},{"raw_affiliation_string":"School of Computer Science and Technology, Xi'an Jiaotong Univiersity, China","institution_ids":["https://openalex.org/I87445476"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I87445476"],"apc_list":{"value":2645,"currency":"USD","value_usd":2645},"apc_paid":null,"fwci":2.9095,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.91687434,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"22","issue":"6","first_page":"7125","last_page":"7138"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.5282999873161316,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.5282999873161316,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.47049999237060547,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/federated-learning","display_name":"federated learning","score":0.8259999752044678},{"id":"https://openalex.org/keywords/model-poisoning-attacks","display_name":"model poisoning","score":0.9900000095367432},{"id":"https://openalex.org/keywords/adaptive-attacks","display_name":"adaptive attacks","score":0.8690000176429749},{"id":"https://openalex.org/keywords/robust-federated-learning","display_name":"robust federated learning","score":0.7940000295639038},{"id":"https://openalex.org/keywords/fedavg","display_name":"FedAvg","score":0.6579999923706055},{"id":"https://openalex.org/keywords/median-aggregation","display_name":"median aggregation","score":0.5180000066757202}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7841203808784485},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6047033071517944},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4177652597427368}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3594175","doi":"https://doi.org/10.1109/tdsc.2025.3594175","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3594175","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","ccf-a","cwts-core","dongbi-a","jufo-3","norway-2","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"sustainable_development_goals_aurora":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W2174868984","https://openalex.org/W2194775991","https://openalex.org/W2516574342","https://openalex.org/W2535690855","https://openalex.org/W2767079719","https://openalex.org/W2798720628","https://openalex.org/W2962763344","https://openalex.org/W2963318081","https://openalex.org/W2984242138","https://openalex.org/W2995022099","https://openalex.org/W2996769125","https://openalex.org/W3127520698","https://openalex.org/W3138153888","https://openalex.org/W3138597937","https://openalex.org/W3198262235","https://openalex.org/W4221155325","https://openalex.org/W4226047321","https://openalex.org/W4288057793","https://openalex.org/W4296831829","https://openalex.org/W4408750083"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Federated":[0],"Learning":[1],"(FL)":[2],"is":[3],"vulnerable":[4],"to":[5,35,49,66,105,133,156],"model":[6,70,92,102,116,127,177],"poisoning":[7,71,117,178],"attacks,":[8],"where":[9],"malicious":[10,37,131,154,160],"updates":[11,28,42,132,142,195],"(e.g.,":[12],"gradients)":[13],"can":[14],"adversely":[15],"interfere":[16],"with":[17],"the":[18,27,40,75,85,97,100,125,130,135,140,149,153,159,164,167,171,174,196],"global":[19,136],"model.":[20,137],"Existing":[21],"attacks":[22,56],"typically":[23],"rely":[24],"heavily":[25],"on":[26,74,201],"of":[29,87,99,139,152,170,176,198],"benign":[30,41,141],"clients":[31],"and":[32,43,58,103,143,173,194,207],"aggregation":[33,44,144],"algorithms":[34,45],"craft":[36,158],"updates.":[38,161],"However,":[39],"are":[46],"usually":[47],"hard":[48],"access":[50],"for":[51],"attackers,":[52],"which":[53,123],"makes":[54],"their":[55],"weak":[57],"volatile.":[59],"Therefore,":[60],"in":[61],"this":[62],"work,":[63],"we":[64,79,111,146],"aim":[65],"design":[67],"an":[68],"adaptive":[69,115],"attack":[72,118,134,192,199],"based":[73],"agnostic":[76],"adversary.":[77],"Specifically,":[78],"propose":[80],"a":[81,113],"new":[82],"concept":[83],"from":[84],"perspective":[86],"adversarial":[88,91,126],"learning,":[89],"called":[90],"perturbation.":[93],"This":[94],"perturbation":[95,128],"targets":[96],"parameters":[98],"local":[101],"aims":[104],"maximally":[106],"mislead":[107],"its":[108],"predictions.":[109],"Then,":[110],"develop":[112],"novel":[114],"namedAdversarial":[119],"Model":[120],"Attack":[121],"(AMA),":[122],"utilizes":[124],"as":[129],"Instead":[138],"algorithms,":[145],"only":[147],"leverage":[148],"original":[150],"data":[151],"client":[155],"adaptively":[157],"AMA":[162,189],"resolves":[163],"conflict":[165],"between":[166],"knowledge":[168],"requirement":[169],"adversary":[172],"impact":[175,200],"attacks.":[179],"Empirical":[180],"results":[181],"against":[182],"multiple":[183],"robust":[184],"FL":[185],"methods":[186,193],"show":[187],"that":[188],"surpasses":[190],"state-of-the-art":[191],"benchmark":[197],"Fedavg,":[202],"Trimean,":[203],"Multi-Krum,":[204],"FoundationFL,":[205],"RFA,":[206],"Median.":[208]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":1}],"updated_date":"2026-10-14T16:39:01.820549","created_date":"2025-10-10T00:00:00"}