{"id":"https://openalex.org/W7225178772","doi":"https://doi.org/10.5281/zenodo.23905646","title":"How Robust Are Robust Aggregators? Model Poisoning in Federated Learning under Data Heterogeneity","display_name":"How Robust Are Robust Aggregators? Model Poisoning in Federated Learning under Data Heterogeneity","publication_year":2026,"publication_date":"2026-11-03","ids":{"openalex":"https://openalex.org/W7225178772","doi":"https://doi.org/10.5281/zenodo.23905646"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.23905646","doi":"https://doi.org/10.5281/zenodo.23905646","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23905646","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"volume":null,"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.23905646","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5160395649","display_name":"john glody KUBIKULA-ve","orcid":"https://orcid.org/0009-0009-1335-600X","observed_orcids":["https://orcid.org/0009-0009-1335-600X"]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"KUBIKULA-ve, john glody","raw_affiliation_strings":["Independent Researcher"],"raw_orcid":"https://orcid.org/0009-0009-1335-600X","affiliations":[{"raw_affiliation_string":"Independent Researcher","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5160395649"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.004000000189989805,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12535","display_name":"Machine Learning and Data Classification","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/federated-learning","display_name":"federated learning","score":0.8100000023841858},{"id":"https://openalex.org/keywords/model-poisoning-attacks","display_name":"model poisoning","score":0.7870000004768372},{"id":"https://openalex.org/keywords/robust-aggregation","display_name":"robust aggregation","score":0.9190000295639038},{"id":"https://openalex.org/keywords/data-heterogeneity","display_name":"data heterogeneity","score":0.9879999756813049},{"id":"https://openalex.org/keywords/non-iid-data","display_name":"non-IID data","score":0.8849999904632568},{"id":"https://openalex.org/keywords/malicious-clients","display_name":"malicious clients","score":0.6800000071525574},{"id":"https://openalex.org/keywords/fedavg","display_name":"FedAvg","score":0.7919999957084656},{"id":"https://openalex.org/keywords/krum","display_name":"Krum","score":0.5770000219345093},{"id":"https://openalex.org/keywords/trimmed-mean","display_name":"trimmed mean","score":0.7609999775886536},{"id":"https://openalex.org/keywords/dirichlet-distribution","display_name":"Dirichlet distribution","score":0.753000020980835},{"id":"https://openalex.org/keywords/fashion-mnist","display_name":"Fashion-MNIST","score":0.6859999895095825}],"concepts":[{"id":"https://openalex.org/C66882249","wikidata":"https://www.wikidata.org/wiki/Q169336","display_name":"Homogeneous","level":2,"score":0.6876000165939331},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6373999714851379},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.48809999227523804},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.44830000400543213},{"id":"https://openalex.org/C191795146","wikidata":"https://www.wikidata.org/wiki/Q3878446","display_name":"Norm (philosophy)","level":2,"score":0.4318999946117401},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.3278000056743622},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3244999945163727},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.31690001487731934},{"id":"https://openalex.org/C149782125","wikidata":"https://www.wikidata.org/wiki/Q160039","display_name":"Econometrics","level":1,"score":0.2955000102519989},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.28999999165534973},{"id":"https://openalex.org/C2988186277","wikidata":"https://www.wikidata.org/wiki/Q5915793","display_name":"Location data","level":2,"score":0.2865999937057495},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.2863999903202057},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.26809999346733093},{"id":"https://openalex.org/C2984074130","wikidata":"https://www.wikidata.org/wiki/Q73539779","display_name":"R package","level":2,"score":0.25999999046325684},{"id":"https://openalex.org/C2992444157","wikidata":"https://www.wikidata.org/wiki/Q775079","display_name":"Single point","level":3,"score":0.2596000134944916},{"id":"https://openalex.org/C77553402","wikidata":"https://www.wikidata.org/wiki/Q13222579","display_name":"Upper and lower bounds","level":2,"score":0.2524999976158142},{"id":"https://openalex.org/C92207270","wikidata":"https://www.wikidata.org/wiki/Q939253","display_name":"Matrix norm","level":3,"score":0.25189998745918274},{"id":"https://openalex.org/C82578977","wikidata":"https://www.wikidata.org/wiki/Q16773055","display_name":"Data aggregator","level":3,"score":0.25110000371932983}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5281/zenodo.23905646","doi":"https://doi.org/10.5281/zenodo.23905646","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23905646","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},{"id":"doi:10.5281/zenodo.23905647","doi":"https://doi.org/10.5281/zenodo.23905647","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23905647","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.5281/zenodo.23905646","doi":"https://doi.org/10.5281/zenodo.23905646","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23905646","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4308829388","https://openalex.org/W4408970748","https://openalex.org/W7223209531","https://openalex.org/W4417163395","https://openalex.org/W4387185306","https://openalex.org/W4394761340","https://openalex.org/W3217545051","https://openalex.org/W4415031729","https://openalex.org/W4402215177","https://openalex.org/W7084060968"],"abstract_inverted_index":{"Federated":[0],"learning":[1],"trains":[2],"a":[3,13],"shared":[4],"model":[5],"acrossmany":[6],"clients":[7],"without":[8,115],"collecting":[9],"their":[10],"data,":[11,37,95],"but":[12,96],"few":[14],"maliciousclients":[15],"can":[16],"sabotage":[17],"training":[18],"by":[19],"sending":[20],"falsified":[21],"updates.":[22],"Robustaggregation":[23],"rules":[24,50,135],"are":[25],"designed":[26],"to":[27],"resist":[28],"such":[29],"attacks,":[30],"yet":[31],"theyare":[32],"often":[33],"evaluated":[34,138],"on":[35,65],"homogeneous":[36],"whereas":[38],"real":[39],"clientshold":[40],"heterogeneous":[41,102],"data.":[42,103],"We":[43,69],"study":[44],"how":[45],"data":[46],"heterogeneity":[47,72],"affectsfive":[48],"aggregation":[49,134],"(FedAvg,":[51],"coordinate-wise":[52],"median,":[53],"trimmedmean,":[54],"Krum":[55],"and":[56],"norm":[57,117],"clipping)":[58],"under":[59,139],"four":[60],"poisoning":[61],"attacks,in":[62],"585":[63],"experiments":[64],"Fashion-MNIST":[66],"with":[67,79,92,100],"Dirichlet-partitionedclients.":[68],"find":[70],"that":[71],"strongly":[73],"amplifies":[74],"the":[75,83,127],"attacks:under":[76],"sign":[77],"flipping":[78],"20%":[80],"malicious":[81],"clients,":[82],"robust":[84,133],"ruleslose":[85],"less":[86,110],"than":[87,112],"2":[88],"points":[89,99,109],"of":[90],"accuracy":[91],"nearly":[93],"IID":[94],"8":[97],"to12":[98],"highly":[101],"In":[104],"this":[105],"setting,":[106],"Krumis":[107],"39":[108],"accurate":[111],"FedAvg":[113],"even":[114],"attackers,while":[116],"clipping,":[118],"which":[119],"bounds":[120],"each":[121],"client\u2019s":[122],"influence":[123],"withoutdiscarding":[124],"updates,":[125],"is":[126],"most":[128],"resilient.":[129],"These":[130],"results":[131],"suggestthat":[132],"should":[136],"be":[137],"realisticnon-IID":[140],"conditions.":[141]},"counts_by_year":[],"updated_date":"2026-11-05T12:25:35.769452","created_date":"2026-11-04T00:00:00"}