{"id":"https://openalex.org/W7130714740","doi":"https://doi.org/10.4018/979-8-3373-6224-3.ch002","title":"Overview of Adversarial AI and Data Poisoning in Federated Learning","display_name":"Overview of Adversarial AI and Data Poisoning in Federated Learning","publication_year":2026,"publication_date":"2026-02-20","ids":{"openalex":"https://openalex.org/W7130714740","doi":"https://doi.org/10.4018/979-8-3373-6224-3.ch002"},"language":"en","primary_location":{"id":"doi:10.4018/979-8-3373-6224-3.ch002","doi":"https://doi.org/10.4018/979-8-3373-6224-3.ch002","is_oa":false,"landing_page_url":"https://doi.org/10.4018/979-8-3373-6224-3.ch002","pdf_url":null,"source":{"id":"https://openalex.org/S4210180746","display_name":"Advances in computational intelligence and robotics book series","issn_l":"2327-042X","issn":["2327-042X","2327-0411"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core"],"host_organization":"https://openalex.org/P4310320424","host_organization_name":"IGI Global","host_organization_lineage":["https://openalex.org/P4310320424"],"host_organization_lineage_names":["IGI Global"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Advances in Computational Intelligence and Robotics","raw_type":"book-chapter"},"volume":{"id":"https://openalex.org/W7130690435","display_name":"Adversarial AI and Data Poisoning in Federated Learning"},"type":"book-chapter","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5073983402","display_name":"Mohammed Firdos Alam Sheikh","orcid":"https://orcid.org/0000-0002-8405-8482","observed_orcids":["https://orcid.org/0000-0002-8405-8482"]},"institutions":[{"id":"https://openalex.org/I4210126659","display_name":"Poornima University","ror":"https://ror.org/03gnqp653","country_code":"IN","type":"education","lineage":["https://openalex.org/I4210126659"]}],"countries":["IN"],"is_corresponding":true,"raw_author_name":"Mohammed Firdos Alam Sheikh","raw_affiliation_strings":["Poornima University, India"],"raw_orcid":"https://orcid.org/0000-0002-8405-8482","affiliations":[{"raw_affiliation_string":"Poornima University, India","institution_ids":["https://openalex.org/I4210126659"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5073983402"],"corresponding_institution_ids":["https://openalex.org/I4210126659"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"25","last_page":"38"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.7207000255584717,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.7207000255584717,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.2786000072956085,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/federated-learning","display_name":"federated learning","score":0.9179999828338623},{"id":"https://openalex.org/keywords/data-poisoning-attacks","display_name":"data poisoning","score":0.8840000033378601},{"id":"https://openalex.org/keywords/adversarial-attacks","display_name":"adversarial attacks","score":0.9449999928474426},{"id":"https://openalex.org/keywords/backdoor-attacks","display_name":"backdoor attacks","score":0.8220000267028809},{"id":"https://openalex.org/keywords/label-flipping","display_name":"label flipping","score":0.9160000085830688},{"id":"https://openalex.org/keywords/robust-aggregation","display_name":"robust aggregation","score":0.8730000257492065},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"anomaly detection","score":0.968999981880188},{"id":"https://openalex.org/keywords/differential-privacy","display_name":"differential privacy","score":0.9990000128746033},{"id":"https://openalex.org/keywords/blockchain","display_name":"blockchain","score":0.8180000185966492},{"id":"https://openalex.org/keywords/data-privacy","display_name":"data privacy","score":0.7760000228881836},{"id":"https://openalex.org/keywords/attack-taxonomy","display_name":"attack taxonomy","score":0.5059999823570251},{"id":"https://openalex.org/keywords/defense-strategy","display_name":"defense strategy","score":0.8510000109672546}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8895999789237976},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.8737999796867371},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7190999984741211},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.597000002861023},{"id":"https://openalex.org/C2779965156","wikidata":"https://www.wikidata.org/wiki/Q5227350","display_name":"Data sharing","level":3,"score":0.5849000215530396},{"id":"https://openalex.org/C23130292","wikidata":"https://www.wikidata.org/wiki/Q5275358","display_name":"Differential privacy","level":2,"score":0.583299994468689},{"id":"https://openalex.org/C132964779","wikidata":"https://www.wikidata.org/wiki/Q2110223","display_name":"Raw data","level":2,"score":0.5819000005722046},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.4894999861717224},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.38999998569488525},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.3776000142097473},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3508000075817108},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.32519999146461487},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.3122999966144562},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.3050000071525574},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.30480000376701355},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.28029999136924744},{"id":"https://openalex.org/C69360830","wikidata":"https://www.wikidata.org/wiki/Q1172237","display_name":"Data Protection Act 1998","level":2,"score":0.27399998903274536},{"id":"https://openalex.org/C47487241","wikidata":"https://www.wikidata.org/wiki/Q5227230","display_name":"Data access","level":2,"score":0.2615000009536743},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2603999972343445},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.2572000026702881},{"id":"https://openalex.org/C70061542","wikidata":"https://www.wikidata.org/wiki/Q989016","display_name":"Distributed database","level":2,"score":0.25519999861717224},{"id":"https://openalex.org/C2777211547","wikidata":"https://www.wikidata.org/wiki/Q17141490","display_name":"Training (meteorology)","level":2,"score":0.2508000135421753}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.4018/979-8-3373-6224-3.ch002","doi":"https://doi.org/10.4018/979-8-3373-6224-3.ch002","is_oa":false,"landing_page_url":"https://doi.org/10.4018/979-8-3373-6224-3.ch002","pdf_url":null,"source":{"id":"https://openalex.org/S4210180746","display_name":"Advances in computational intelligence and robotics book series","issn_l":"2327-042X","issn":["2327-042X","2327-0411"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core"],"host_organization":"https://openalex.org/P4310320424","host_organization_name":"IGI Global","host_organization_lineage":["https://openalex.org/P4310320424"],"host_organization_lineage_names":["IGI Global"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Advances in Computational Intelligence and Robotics","raw_type":"book-chapter"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W2900509115","https://openalex.org/W3111919937","https://openalex.org/W3136620885","https://openalex.org/W4206821108","https://openalex.org/W4221145471","https://openalex.org/W4226021524","https://openalex.org/W4281477281","https://openalex.org/W4285554319","https://openalex.org/W4295806247","https://openalex.org/W4312761046","https://openalex.org/W4385656593","https://openalex.org/W4387911072","https://openalex.org/W4392263521","https://openalex.org/W7133242533"],"related_works":["https://openalex.org/W7140311257","https://openalex.org/W6949237741","https://openalex.org/W4402215177","https://openalex.org/W7130730745","https://openalex.org/W4392410739","https://openalex.org/W4414499539","https://openalex.org/W3203600060","https://openalex.org/W7138238878","https://openalex.org/W4410146262","https://openalex.org/W4413222592"],"abstract_inverted_index":{"Federated":[0],"Learning":[1],"(FL)":[2],"is":[3,114],"an":[4],"emerging":[5],"decentralized":[6],"machine":[7],"learning":[8],"paradigm":[9],"that":[10],"enables":[11],"multiple":[12],"clients":[13,33],"to":[14,44,116],"collaboratively":[15],"train":[16],"a":[17],"global":[18,47],"model":[19,60],"without":[20],"sharing":[21],"raw":[22],"data,":[23],"thereby":[24],"preserving":[25],"data":[26,70],"privacy.":[27],".":[28],"In":[29],"adversarial":[30,88],"settings,":[31],"malicious":[32],"can":[34],"inject":[35],"carefully":[36],"crafted":[37],"inputs":[38],"or":[39,50,71],"manipulate":[40],"local":[41],"training":[42,69],"updates":[43],"degrade":[45],"the":[46,82],"model's":[48],"performance":[49],"embed":[51],"backdoors.":[52],"Data":[53],"poisoning":[54,90],"attacks,":[55],"including":[56],"label":[57],"flipping":[58],"and":[59,85,89,95,108,119,129],"update":[61],"manipulation,":[62],"pose":[63],"significant":[64],"threats":[65,113],"by":[66],"subtly":[67],"corrupting":[68],"gradients,":[72],"often":[73],"bypassing":[74],"conventional":[75],"anomaly":[76,104],"detection":[77],"methods.":[78],"This":[79],"paper":[80],"reviews":[81],"taxonomy,":[83],"mechanisms,":[84],"impacts":[86],"of":[87],"attacks":[91],"in":[92,126],"FL":[93,121],"environments,":[94],"explores":[96],"current":[97],"defense":[98],"strategies":[99],"such":[100],"as":[101],"robust":[102],"aggregation,":[103],"detection,":[105],"differential":[106],"privacy,":[107],"blockchain":[109],"integration.":[110],"Understanding":[111],"these":[112],"crucial":[115],"developing":[117],"secure":[118],"reliable":[120],"systems":[122],"for":[123],"real-world":[124],"applications":[125],"healthcare,":[127],"finance,":[128],"IoT.":[130]},"counts_by_year":[],"updated_date":"2026-11-12T12:28:57.059296","created_date":"2026-02-21T00:00:00"}