{"id":"https://openalex.org/W4376288676","doi":"https://doi.org/10.1051/sands/2023006","title":"MPHM: Model poisoning attacks on federal learning using historical information momentum","display_name":"MPHM: Model poisoning attacks on federal learning using historical information momentum","publication_year":2023,"publication_date":"2023-01-01","ids":{"openalex":"https://openalex.org/W4376288676","doi":"https://doi.org/10.1051/sands/2023006"},"language":"en","primary_location":{"id":"doi:10.1051/sands/2023006","is_oa":true,"landing_page_url":"https://doi.org/10.1051/sands/2023006","pdf_url":"https://sands.edpsciences.org/articles/sands/pdf/forth/sands20220018.pdf","source":{"id":"https://openalex.org/S4387281467","display_name":"Security and Safety","issn_l":"2826-1275","issn":["2826-1275"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319748","host_organization_name":"EDP Sciences","host_organization_lineage":["https://openalex.org/P4310319748"],"host_organization_lineage_names":["EDP Sciences"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Security and Safety","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://sands.edpsciences.org/articles/sands/pdf/forth/sands20220018.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5072249624","display_name":"Lei Shi","orcid":"https://orcid.org/0000-0002-1170-3911"},"institutions":[{"id":"https://openalex.org/I38877650","display_name":"Zhengzhou University","ror":"https://ror.org/04ypx8c21","country_code":"CN","type":"education","lineage":["https://openalex.org/I38877650"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lei Shi","raw_affiliation_strings":["School of Cyber Science and Engineering, Zhengzhou University; SongShan Laboratory, Zhengzhou, 450000, China"],"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Zhengzhou University; SongShan Laboratory, Zhengzhou, 450000, China","institution_ids":["https://openalex.org/I38877650"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016496386","display_name":"Zhen Chen","orcid":"https://orcid.org/0000-0003-3355-3464"},"institutions":[{"id":"https://openalex.org/I38877650","display_name":"Zhengzhou University","ror":"https://ror.org/04ypx8c21","country_code":"CN","type":"education","lineage":["https://openalex.org/I38877650"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhen Chen","raw_affiliation_strings":["School of Cyber Science and Engineering, Zhengzhou University; SongShan Laboratory, Zhengzhou, 450000, China"],"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Zhengzhou University; SongShan Laboratory, Zhengzhou, 450000, China","institution_ids":["https://openalex.org/I38877650"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016550690","display_name":"Yucheng Shi","orcid":"https://orcid.org/0000-0002-8070-5363"},"institutions":[{"id":"https://openalex.org/I162868743","display_name":"Tianjin University","ror":"https://ror.org/012tb2g32","country_code":"CN","type":"education","lineage":["https://openalex.org/I162868743"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yucheng Shi","raw_affiliation_strings":["College of Intelligence and Computing, Tianjin University, 300072, China"],"affiliations":[{"raw_affiliation_string":"College of Intelligence and Computing, Tianjin University, 300072, China","institution_ids":["https://openalex.org/I162868743"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031389355","display_name":"Wei Lin","orcid":"https://orcid.org/0000-0003-3069-9652"},"institutions":[{"id":"https://openalex.org/I38877650","display_name":"Zhengzhou University","ror":"https://ror.org/04ypx8c21","country_code":"CN","type":"education","lineage":["https://openalex.org/I38877650"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lin Wei","raw_affiliation_strings":["School of Cyber Science and Engineering, Zhengzhou University; SongShan Laboratory, Zhengzhou, 450000, China"],"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Zhengzhou University; SongShan Laboratory, Zhengzhou, 450000, China","institution_ids":["https://openalex.org/I38877650"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001959760","display_name":"Yongcai Tao","orcid":"https://orcid.org/0000-0003-3098-3960"},"institutions":[{"id":"https://openalex.org/I38877650","display_name":"Zhengzhou University","ror":"https://ror.org/04ypx8c21","country_code":"CN","type":"education","lineage":["https://openalex.org/I38877650"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yongcai Tao","raw_affiliation_strings":["School of Computer and Artificial Intelligence, Zhengzhou University, 450000, China"],"affiliations":[{"raw_affiliation_string":"School of Computer and Artificial Intelligence, Zhengzhou University, 450000, China","institution_ids":["https://openalex.org/I38877650"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114193859","display_name":"Mengyang He","orcid":null},"institutions":[{"id":"https://openalex.org/I38877650","display_name":"Zhengzhou University","ror":"https://ror.org/04ypx8c21","country_code":"CN","type":"education","lineage":["https://openalex.org/I38877650"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mengyang He","raw_affiliation_strings":["School of Cyber Science and Engineering, Zhengzhou University; SongShan Laboratory, Zhengzhou, 450000, China"],"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Zhengzhou University; SongShan Laboratory, Zhengzhou, 450000, China","institution_ids":["https://openalex.org/I38877650"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006029284","display_name":"Qingxian Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I38877650","display_name":"Zhengzhou University","ror":"https://ror.org/04ypx8c21","country_code":"CN","type":"education","lineage":["https://openalex.org/I38877650"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qingxian Wang","raw_affiliation_strings":["School of Cyber Science and Engineering, Zhengzhou University; SongShan Laboratory, Zhengzhou, 450000, China"],"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Zhengzhou University; SongShan Laboratory, Zhengzhou, 450000, China","institution_ids":["https://openalex.org/I38877650"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083918663","display_name":"Yuan Zhou","orcid":"https://orcid.org/0000-0002-1583-7570"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yuan Zhou","raw_affiliation_strings":["Zhengzhou Zhengda lnformation Technology Co., Ltd, 450001, China"],"affiliations":[{"raw_affiliation_string":"Zhengzhou Zhengda lnformation Technology Co., Ltd, 450001, China","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5085521381","display_name":"Yufei Gao","orcid":"https://orcid.org/0000-0002-2356-0700"},"institutions":[{"id":"https://openalex.org/I38877650","display_name":"Zhengzhou University","ror":"https://ror.org/04ypx8c21","country_code":"CN","type":"education","lineage":["https://openalex.org/I38877650"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Yufei Gao","raw_affiliation_strings":["School of Cyber Science and Engineering, Zhengzhou University; SongShan Laboratory, Zhengzhou, 450000, China"],"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Zhengzhou University; SongShan Laboratory, Zhengzhou, 450000, China","institution_ids":["https://openalex.org/I38877650"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":9,"corresponding_author_ids":["https://openalex.org/A5085521381"],"corresponding_institution_ids":["https://openalex.org/I38877650"],"apc_list":null,"apc_paid":null,"fwci":0.3516,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.63952897,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":96},"biblio":{"volume":"2","issue":null,"first_page":"2023006","last_page":"2023006"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9768000245094299,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7265059351921082},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6993013620376587},{"id":"https://openalex.org/keywords/federated-learning","display_name":"Federated learning","score":0.6367006301879883},{"id":"https://openalex.org/keywords/upload","display_name":"Upload","score":0.5249060392379761},{"id":"https://openalex.org/keywords/compromise","display_name":"Compromise","score":0.4916861653327942},{"id":"https://openalex.org/keywords/information-sharing","display_name":"Information sharing","score":0.4223147928714752},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.29521644115448},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.19465169310569763},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.09926724433898926},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.09779214859008789}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7265059351921082},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6993013620376587},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.6367006301879883},{"id":"https://openalex.org/C71901391","wikidata":"https://www.wikidata.org/wiki/Q7126699","display_name":"Upload","level":2,"score":0.5249060392379761},{"id":"https://openalex.org/C46355384","wikidata":"https://www.wikidata.org/wiki/Q726686","display_name":"Compromise","level":2,"score":0.4916861653327942},{"id":"https://openalex.org/C2776854237","wikidata":"https://www.wikidata.org/wiki/Q6031064","display_name":"Information sharing","level":2,"score":0.4223147928714752},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.29521644115448},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.19465169310569763},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.09926724433898926},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.09779214859008789}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1051/sands/2023006","is_oa":true,"landing_page_url":"https://doi.org/10.1051/sands/2023006","pdf_url":"https://sands.edpsciences.org/articles/sands/pdf/forth/sands20220018.pdf","source":{"id":"https://openalex.org/S4387281467","display_name":"Security and Safety","issn_l":"2826-1275","issn":["2826-1275"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319748","host_organization_name":"EDP Sciences","host_organization_lineage":["https://openalex.org/P4310319748"],"host_organization_lineage_names":["EDP Sciences"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Security and Safety","raw_type":"journal-article"},{"id":"pmh:oai:edpsciences.org:dkey/10.1051/sands/2023006","is_oa":true,"landing_page_url":null,"pdf_url":"https://sands.edpsciences.org/10.1051/sands/2023006/pdf","source":{"id":"https://openalex.org/S4306400744","display_name":"Springer Link (Chiba Institute of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I8488066","host_organization_name":"Chiba Institute of Technology","host_organization_lineage":["https://openalex.org/I8488066"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"https://doi.org/10.1051/sands/2023006","raw_type":"Text"},{"id":"pmh:oai:doaj.org/article:bcb235c0736141df8e870fd0e3aa2e0a","is_oa":true,"landing_page_url":"https://doaj.org/article/bcb235c0736141df8e870fd0e3aa2e0a","pdf_url":null,"source":{"id":"https://openalex.org/S112646816","display_name":"SHILAP Revista de lepidopterolog\u00eda","issn_l":"0300-5267","issn":["0300-5267","2340-4078"],"is_oa":true,"is_in_doaj":true,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Security and Safety, Vol 2, p 2023006 (2023)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1051/sands/2023006","is_oa":true,"landing_page_url":"https://doi.org/10.1051/sands/2023006","pdf_url":"https://sands.edpsciences.org/articles/sands/pdf/forth/sands20220018.pdf","source":{"id":"https://openalex.org/S4387281467","display_name":"Security and Safety","issn_l":"2826-1275","issn":["2826-1275"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319748","host_organization_name":"EDP Sciences","host_organization_lineage":["https://openalex.org/P4310319748"],"host_organization_lineage_names":["EDP Sciences"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Security and Safety","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1023174783","display_name":null,"funder_award_id":"2020YFB1712401","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G3919970536","display_name":null,"funder_award_id":"2018YFB1701400","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"}],"funders":[{"id":"https://openalex.org/F4320322766","display_name":"Zhengzhou University","ror":"https://ror.org/04ypx8c21"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4376288676.pdf"},"referenced_works_count":27,"referenced_works":["https://openalex.org/W2541884796","https://openalex.org/W2618530766","https://openalex.org/W2734358244","https://openalex.org/W2962763344","https://openalex.org/W2964043980","https://openalex.org/W2982302101","https://openalex.org/W3030742901","https://openalex.org/W3043758338","https://openalex.org/W3087391814","https://openalex.org/W3091870957","https://openalex.org/W3107632872","https://openalex.org/W3119593986","https://openalex.org/W3136620885","https://openalex.org/W3138153888","https://openalex.org/W3138954712","https://openalex.org/W3176224843","https://openalex.org/W3199788090","https://openalex.org/W3206162503","https://openalex.org/W3213330817","https://openalex.org/W4200109442","https://openalex.org/W4205661586","https://openalex.org/W4213110664","https://openalex.org/W4224316323","https://openalex.org/W4226493408","https://openalex.org/W4229455429","https://openalex.org/W4285205197","https://openalex.org/W4288057793"],"related_works":["https://openalex.org/W2801622120","https://openalex.org/W2164141394","https://openalex.org/W1967649051","https://openalex.org/W3036524962","https://openalex.org/W4240977217","https://openalex.org/W2508088450","https://openalex.org/W4214750239","https://openalex.org/W2389434635","https://openalex.org/W2279908259","https://openalex.org/W2811264706"],"abstract_inverted_index":{"Federated":[0,17],"learning(FL)":[1],"development":[2],"has":[3],"grown":[4],"increasingly":[5],"strong":[6],"with":[7,187],"the":[8,56,65,75,78,92,105,108,119,137,145,156,160,166,180,184,194,203,206],"increased":[9],"emphasis":[10],"on":[11,136],"data":[12,35],"for":[13],"individuals":[14],"and":[15,104,117,172],"industry.":[16],"learning":[18,39,50],"allows":[19],"individual":[20],"participants":[21],"to":[22,42,55,74,91,99,112,177,210],"jointly":[23],"train":[24],"a":[25,130],"global":[26,66,120,185,207],"model":[27,67,84,94,121,132,186,208],"without":[28],"sharing":[29],"local":[30,72,93,102,161],"data,":[31],"which":[32,163],"significantly":[33,201],"enhances":[34],"privacy.":[36],"However,":[37],"federated":[38,49],"is":[40,97],"vulnerable":[41],"poisoning":[43,85,133,213],"attacks":[44,86],"by":[45,68,151],"malicious":[46,71,149,168],"participants.":[47,82],"Since":[48],"does":[51],"not":[52],"have":[53],"access":[54],"participants\u2019":[57],"training":[58],"process,":[59],"i.e.":[60],",":[61],"attackers":[62],"can":[63,200],"compromise":[64],"uploading":[69],"elaborate":[70],"updates":[73,103,150,169],"server":[76],"under":[77],"guise":[79],"of":[80,139,183,205],"normal":[81],"Current":[83],"usually":[87],"add":[88],"small":[89],"perturbations":[90,154],"after":[95],"it":[96],"trained":[98],"craft":[100],"harmful":[101],"attacker":[106,146],"finds":[107],"appropriate":[109],"perturbation":[110],"size":[111],"bypass":[113],"robust":[114],"detection":[115],"methods":[116],"corrupt":[118,202],"as":[122,124],"much":[123],"possible.":[125],"In":[126],"contrast,":[127],"we":[128],"propose":[129],"novel":[131],"attack":[134,175,199],"based":[135],"momentum":[138],"history":[140],"information":[141,158],"(MPHM),":[142],"that":[143,192],"is,":[144],"makes":[147],"new":[148,167],"dynamically":[152],"crafting":[153],"using":[155],"historical":[157],"in":[159,193],"training,":[162],"will":[164],"make":[165],"more":[170],"effective":[171],"stealthy.":[173],"Our":[174],"aims":[176],"indiscriminately":[178],"reduce":[179],"testing":[181],"accuracy":[182,204],"minimal":[188],"information.":[189],"Experiments":[190],"show":[191],"classical":[195],"defense":[196],"case,":[197],"our":[198],"compared":[209],"other":[211],"advanced":[212],"attacks.":[214]},"counts_by_year":[{"year":2025,"cited_by_count":2}],"updated_date":"2026-03-20T23:20:44.827607","created_date":"2023-05-13T00:00:00"}
