{"id":"https://openalex.org/W4388855518","doi":"https://doi.org/10.1109/cluster52292.2023.00014","title":"FedGuard: Selective Parameter Aggregation for Poisoning Attack Mitigation in Federated Learning","display_name":"FedGuard: Selective Parameter Aggregation for Poisoning Attack Mitigation in Federated Learning","publication_year":2023,"publication_date":"2023-10-31","ids":{"openalex":"https://openalex.org/W4388855518","doi":"https://doi.org/10.1109/cluster52292.2023.00014"},"language":"en","primary_location":{"id":"doi:10.1109/cluster52292.2023.00014","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cluster52292.2023.00014","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE International Conference on Cluster Computing (CLUSTER)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://hal.science/hal-04208787/document","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5033665666","display_name":"Melvin Chelli","orcid":"https://orcid.org/0000-0001-5260-9393"},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Melvin Chelli","raw_affiliation_strings":["Saarland Informatics Campus,Deutsches Forschungszentrum Für Künstliche Intelligenz (DFKI),Germany"],"affiliations":[{"raw_affiliation_string":"Saarland Informatics Campus,Deutsches Forschungszentrum Für Künstliche Intelligenz (DFKI),Germany","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042565655","display_name":"C\u00e9dric Prigent","orcid":"https://orcid.org/0000-0002-1836-7965"},"institutions":[{"id":"https://openalex.org/I56067802","display_name":"Universit\u00e9 de Rennes","ror":"https://ror.org/015m7wh34","country_code":"FR","type":"education","lineage":["https://openalex.org/I56067802"]},{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I2802519937","display_name":"Institut de Recherche en Informatique et Syst\u00e8mes Al\u00e9atoires","ror":"https://ror.org/00myn0z94","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I1326498283","https://openalex.org/I205703379","https://openalex.org/I2802204017","https://openalex.org/I2802519937","https://openalex.org/I28221208","https://openalex.org/I4210127572","https://openalex.org/I4210159245","https://openalex.org/I56067802"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"C\u00e9dric Prigent","raw_affiliation_strings":["University of Rennes,Inria, CNRS, IRISA,Rennes,France","KerData - Scalable Storage for Clouds and Beyond (Campus de Beaulieu 35042 Rennes cedex - France)"],"affiliations":[{"raw_affiliation_string":"University of Rennes,Inria, CNRS, IRISA,Rennes,France","institution_ids":["https://openalex.org/I56067802","https://openalex.org/I2802519937","https://openalex.org/I1294671590"]},{"raw_affiliation_string":"KerData - Scalable Storage for Clouds and Beyond (Campus de Beaulieu 35042 Rennes cedex - France)","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057963772","display_name":"Ren\u00e9 Schubotz","orcid":"https://orcid.org/0000-0003-4336-9484"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ren\u00e9 Schubotz","raw_affiliation_strings":["Saarland Informatics Campus,Deutsches Forschungszentrum Für Künstliche Intelligenz (DFKI),Germany"],"affiliations":[{"raw_affiliation_string":"Saarland Informatics Campus,Deutsches Forschungszentrum Für Künstliche Intelligenz (DFKI),Germany","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086689035","display_name":"Alexandru Costan","orcid":"https://orcid.org/0000-0003-3111-6308"},"institutions":[{"id":"https://openalex.org/I56067802","display_name":"Universit\u00e9 de Rennes","ror":"https://ror.org/015m7wh34","country_code":"FR","type":"education","lineage":["https://openalex.org/I56067802"]},{"id":"https://openalex.org/I2802519937","display_name":"Institut de Recherche en Informatique et Syst\u00e8mes Al\u00e9atoires","ror":"https://ror.org/00myn0z94","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I1326498283","https://openalex.org/I205703379","https://openalex.org/I2802204017","https://openalex.org/I2802519937","https://openalex.org/I28221208","https://openalex.org/I4210127572","https://openalex.org/I4210159245","https://openalex.org/I56067802"]},{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Alexandru Costan","raw_affiliation_strings":["University of Rennes,Inria, CNRS, IRISA,Rennes,France","KerData - Scalable Storage for Clouds and Beyond (Campus de Beaulieu 35042 Rennes cedex - France)"],"affiliations":[{"raw_affiliation_string":"University of Rennes,Inria, CNRS, IRISA,Rennes,France","institution_ids":["https://openalex.org/I56067802","https://openalex.org/I2802519937","https://openalex.org/I1294671590"]},{"raw_affiliation_string":"KerData - Scalable Storage for Clouds and Beyond (Campus de Beaulieu 35042 Rennes cedex - France)","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077818565","display_name":"Gabriel Antoniu","orcid":"https://orcid.org/0000-0001-6525-3736"},"institutions":[{"id":"https://openalex.org/I56067802","display_name":"Universit\u00e9 de Rennes","ror":"https://ror.org/015m7wh34","country_code":"FR","type":"education","lineage":["https://openalex.org/I56067802"]},{"id":"https://openalex.org/I2802519937","display_name":"Institut de Recherche en Informatique et Syst\u00e8mes Al\u00e9atoires","ror":"https://ror.org/00myn0z94","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I1326498283","https://openalex.org/I205703379","https://openalex.org/I2802204017","https://openalex.org/I2802519937","https://openalex.org/I28221208","https://openalex.org/I4210127572","https://openalex.org/I4210159245","https://openalex.org/I56067802"]},{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Gabriel Antoniu","raw_affiliation_strings":["University of Rennes,Inria, CNRS, IRISA,Rennes,France","KerData - Scalable Storage for Clouds and Beyond (Campus de Beaulieu 35042 Rennes cedex - France)"],"affiliations":[{"raw_affiliation_string":"University of Rennes,Inria, CNRS, IRISA,Rennes,France","institution_ids":["https://openalex.org/I56067802","https://openalex.org/I2802519937","https://openalex.org/I1294671590"]},{"raw_affiliation_string":"KerData - Scalable Storage for Clouds and Beyond (Campus de Beaulieu 35042 Rennes cedex - France)","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021207420","display_name":"Lo\u00efc Cudennec","orcid":"https://orcid.org/0000-0002-6476-4574"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lo\u00efc Cudennec","raw_affiliation_strings":["DGA Maîtrise de l’Information,Rennes,France"],"affiliations":[{"raw_affiliation_string":"DGA Maîtrise de l’Information,Rennes,France","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5026514026","display_name":"Philipp Slusallek","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Philipp Slusallek","raw_affiliation_strings":["Saarland Informatics Campus,Deutsches Forschungszentrum Für Künstliche Intelligenz (DFKI),Germany"],"affiliations":[{"raw_affiliation_string":"Saarland Informatics Campus,Deutsches Forschungszentrum Für Künstliche Intelligenz (DFKI),Germany","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5033665666"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.6176,"has_fulltext":true,"cited_by_count":9,"citation_normalized_percentile":{"value":0.86999322,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"72","last_page":"81"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12262","display_name":"Hate Speech and Cyberbullying Detection","score":0.9004999995231628,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7790950536727905},{"id":"https://openalex.org/keywords/resilience","display_name":"Resilience (materials science)","score":0.5911088585853577},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.5097164511680603},{"id":"https://openalex.org/keywords/generative-grammar","display_name":"Generative grammar","score":0.48731526732444763},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4482099711894989},{"id":"https://openalex.org/keywords/enhanced-data-rates-for-gsm-evolution","display_name":"Enhanced Data Rates for GSM Evolution","score":0.43229860067367554},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4250754117965698},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.418782114982605},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.41232192516326904}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7790950536727905},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.5911088585853577},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.5097164511680603},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.48731526732444763},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4482099711894989},{"id":"https://openalex.org/C162307627","wikidata":"https://www.wikidata.org/wiki/Q204833","display_name":"Enhanced Data Rates for GSM Evolution","level":2,"score":0.43229860067367554},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4250754117965698},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.418782114982605},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.41232192516326904},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.0},{"id":"https://openalex.org/C97355855","wikidata":"https://www.wikidata.org/wiki/Q11473","display_name":"Thermodynamics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/cluster52292.2023.00014","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cluster52292.2023.00014","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE International Conference on Cluster Computing (CLUSTER)","raw_type":"proceedings-article"},{"id":"pmh:oai:HAL:hal-04208787v1","is_oa":true,"landing_page_url":"https://hal.science/hal-04208787","pdf_url":"https://hal.science/hal-04208787/document","source":{"id":"https://openalex.org/S4406922461","display_name":"SPIRE - Sciences Po Institutional REpository","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Cluster 2023 - IEEE International Conference on Cluster Computing, Oct 2023, Santa Fe, New Mexico, United States. pp.1-10, ⟨10.1109/CLUSTER52292.2023.00014⟩","raw_type":"Conference papers"}],"best_oa_location":{"id":"pmh:oai:HAL:hal-04208787v1","is_oa":true,"landing_page_url":"https://hal.science/hal-04208787","pdf_url":"https://hal.science/hal-04208787/document","source":{"id":"https://openalex.org/S4406922461","display_name":"SPIRE - Sciences Po Institutional REpository","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Cluster 2023 - IEEE International Conference on Cluster Computing, Oct 2023, Santa Fe, New Mexico, United States. pp.1-10, ⟨10.1109/CLUSTER52292.2023.00014⟩","raw_type":"Conference papers"},"sustainable_development_goals":[{"score":0.5799999833106995,"id":"https://metadata.un.org/sdg/13","display_name":"Climate action"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320311649","display_name":"Ministry of Education","ror":"https://ror.org/036nq5137"}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4388855518.pdf"},"referenced_works_count":39,"referenced_works":["https://openalex.org/W1583837637","https://openalex.org/W1959608418","https://openalex.org/W2112796928","https://openalex.org/W2559840118","https://openalex.org/W2614254310","https://openalex.org/W2990138404","https://openalex.org/W2990595670","https://openalex.org/W3002416713","https://openalex.org/W3016169665","https://openalex.org/W3040492708","https://openalex.org/W3046449784","https://openalex.org/W3083403771","https://openalex.org/W3087391814","https://openalex.org/W3096831136","https://openalex.org/W3098488418","https://openalex.org/W3105976275","https://openalex.org/W3118840986","https://openalex.org/W3177173743","https://openalex.org/W3203600060","https://openalex.org/W3213330817","https://openalex.org/W4200411312","https://openalex.org/W4205488455","https://openalex.org/W4248393784","https://openalex.org/W4290948380","https://openalex.org/W6640963894","https://openalex.org/W6687045409","https://openalex.org/W6695838908","https://openalex.org/W6743821447","https://openalex.org/W6748786018","https://openalex.org/W6755594918","https://openalex.org/W6757292943","https://openalex.org/W6767676916","https://openalex.org/W6770634426","https://openalex.org/W6771941255","https://openalex.org/W6773366154","https://openalex.org/W6781358840","https://openalex.org/W6788531746","https://openalex.org/W6791645686","https://openalex.org/W7043792491"],"related_works":["https://openalex.org/W2380075625","https://openalex.org/W4390549206","https://openalex.org/W4390718435","https://openalex.org/W3137171911","https://openalex.org/W4237784285","https://openalex.org/W2374712251","https://openalex.org/W4383031710","https://openalex.org/W3211753092","https://openalex.org/W2386000789","https://openalex.org/W4379540039"],"abstract_inverted_index":{"Minimizing":[0],"the":[1,27,30,80,102,137,207],"attack":[2],"surface":[3],"of":[4,12,29,83,104,162,211],"Federated":[5],"Learning":[6],"(FL)":[7],"systems":[8],"is":[9,112,119],"a":[10,74,106,147],"field":[11],"active":[13],"research.":[14],"FL":[15,76,107],"turns":[16],"out":[17],"to":[18,22,56,63,88,152,180],"be":[19,153],"highly":[20],"vulnerable":[21],"various":[23],"threats":[24],"coming":[25],"from":[26,136,206],"edge":[28],"network.":[31],"Current":[32],"approaches":[33,158],"rely":[34,67],"on":[35,68],"robust":[36],"aggregation,":[37],"anomaly":[38],"detection":[39],"and":[40,99,165],"generative":[41,81,110],"models":[42,111],"for":[43],"defending":[44],"against":[45,91,159,203],"poisoning":[46,92,204],"attacks.":[47],"Yet,":[48],"they":[49,66],"either":[50],"have":[51],"limited":[52],"defensive":[53],"capabilities":[54,82],"due":[55],"their":[57],"underlying":[58],"design":[59],"or":[60,196],"are":[61],"impractical":[62],"use":[64],"as":[65],"constraining":[69],"building":[70],"blocks.We":[71],"introduce":[72],"FedGuard,":[73],"novel":[75],"framework":[77],"that":[78],"utilizes":[79],"Conditional":[84],"Variational":[85],"AutoEncoders":[86],"(CVAE)":[87],"effectively":[89],"defend":[90],"attacks":[93,163,205],"with":[94,126,178],"tuneable":[95],"overhead":[96],"in":[97,120,146,176],"communication":[98],"computation.":[100],"Whilst":[101],"idea":[103],"hardening":[105],"system":[108],"using":[109],"not":[113,192],"entirely":[114],"new,":[115],"FedGuard\u2019s":[116],"original":[117],"contribution":[118],"its":[121],"selective":[122],"parameter":[123,127],"aggregation":[124],"operator":[125],"selection":[128],"being":[129],"driven":[130],"by":[131,141],"synthetic":[132],"validation":[133],"data":[134],"sampled":[135],"CVAEs":[138],"trained":[139],"locally":[140],"each":[142],"participating":[143],"party.Experimental":[144],"evaluations":[145],"100-client":[148],"setup":[149],"demonstrates":[150],"FedGuard":[151,173,190],"more":[154],"effective":[155],"than":[156],"previous":[157],"several":[160],"types":[161],"(label":[164],"sign":[166],"flipping,":[167],"additive":[168],"noise,":[169],"same":[170],"value":[171],"attacks).":[172],"successfully":[174],"defends":[175],"scenarios":[177],"up":[179],"50%":[181],"malicious":[182],"peers":[183],"where":[184],"other":[185],"strategies":[186],"fail.":[187],"In":[188],"addition,":[189],"does":[191],"require":[193],"auxiliary":[194],"datasets":[195],"centralized":[197],"(pre-)":[198],"training.":[199,213],"It":[200],"provides":[201],"resilience":[202],"very":[208],"first":[209],"round":[210],"federated":[212]},"counts_by_year":[{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":4}],"updated_date":"2026-03-11T14:59:36.786465","created_date":"2025-10-10T00:00:00"}