{"id":"https://openalex.org/W4408354917","doi":"https://doi.org/10.1109/icassp49660.2025.10889398","title":"RPPFL: Robust and Privacy-Preserving Federated Learning via Trusted Execution Environments","display_name":"RPPFL: Robust and Privacy-Preserving Federated Learning via Trusted Execution Environments","publication_year":2025,"publication_date":"2025-03-12","ids":{"openalex":"https://openalex.org/W4408354917","doi":"https://doi.org/10.1109/icassp49660.2025.10889398"},"language":"en","primary_location":{"id":"doi:10.1109/icassp49660.2025.10889398","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp49660.2025.10889398","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2025 - 2025 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100450095","display_name":"Xiaolei Zhang","orcid":"https://orcid.org/0000-0001-9415-3136"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaolei Zhang","raw_affiliation_strings":["Peking University,School of Computer Science"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Peking University,School of Computer Science","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084285196","display_name":"Zhaoyu Chen","orcid":"https://orcid.org/0000-0001-9076-2890"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhaoyu Chen","raw_affiliation_strings":["Peking University,School of Software and Microelectronics"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Peking University,School of Software and Microelectronics","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052615522","display_name":"G Chen","orcid":null},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guangpu Chen","raw_affiliation_strings":["Peking University,School of Software and Microelectronics"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Peking University,School of Software and Microelectronics","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012219174","display_name":"Xinyu Feng","orcid":"https://orcid.org/0000-0002-2578-6906"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinyu Feng","raw_affiliation_strings":["Peking University,School of Software and Microelectronics"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Peking University,School of Software and Microelectronics","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035938543","display_name":"Qingni Shen","orcid":"https://orcid.org/0000-0002-0605-6043"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qingni Shen","raw_affiliation_strings":["Peking University,School of Software and Microelectronics"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Peking University,School of Software and Microelectronics","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5041563693","display_name":"Zhonghai Wu","orcid":"https://orcid.org/0000-0003-1268-836X"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhonghai Wu","raw_affiliation_strings":["Peking University,School of Computer Science"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Peking University,School of Computer Science","institution_ids":["https://openalex.org/I20231570"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I20231570"],"apc_list":null,"apc_paid":null,"fwci":5.5622,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.95439081,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9829999804496765,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9829999804496765,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11005","display_name":"Radiation Effects in Electronics","score":0.977400004863739,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9679999947547913,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7887442111968994},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4870324730873108},{"id":"https://openalex.org/keywords/direct-anonymous-attestation","display_name":"Direct Anonymous Attestation","score":0.4716975688934326},{"id":"https://openalex.org/keywords/trusted-computing","display_name":"Trusted Computing","score":0.41401082277297974},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.3582313656806946}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7887442111968994},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4870324730873108},{"id":"https://openalex.org/C169796023","wikidata":"https://www.wikidata.org/wiki/Q3708936","display_name":"Direct Anonymous Attestation","level":3,"score":0.4716975688934326},{"id":"https://openalex.org/C2776831232","wikidata":"https://www.wikidata.org/wiki/Q966812","display_name":"Trusted Computing","level":2,"score":0.41401082277297974},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3582313656806946}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icassp49660.2025.10889398","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp49660.2025.10889398","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2025 - 2025 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.4099999964237213}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W2112796928","https://openalex.org/W2536058570","https://openalex.org/W2553625606","https://openalex.org/W2788633781","https://openalex.org/W3001001866","https://openalex.org/W3006403184","https://openalex.org/W3169231731","https://openalex.org/W3174440551","https://openalex.org/W3176786489","https://openalex.org/W3214271738","https://openalex.org/W4385656593","https://openalex.org/W4386645919","https://openalex.org/W4388145633","https://openalex.org/W4388462135","https://openalex.org/W4390043054","https://openalex.org/W4390660272","https://openalex.org/W4391069054","https://openalex.org/W4392904898","https://openalex.org/W4392908091","https://openalex.org/W4394580959","https://openalex.org/W4394698571","https://openalex.org/W4399052117","https://openalex.org/W4399358245","https://openalex.org/W4400194588","https://openalex.org/W4400411662","https://openalex.org/W4400877759","https://openalex.org/W4401198241","https://openalex.org/W6712237015","https://openalex.org/W6770634426","https://openalex.org/W6866641287"],"related_works":["https://openalex.org/W2372678089","https://openalex.org/W2695299078","https://openalex.org/W2355956995","https://openalex.org/W2390768934","https://openalex.org/W2350048275","https://openalex.org/W2086874776","https://openalex.org/W2377235694","https://openalex.org/W2028268185","https://openalex.org/W2168345601","https://openalex.org/W2001281341"],"abstract_inverted_index":{"Federated":[0],"Learning":[1],"(FL)":[2],"is":[3,23,105,119],"a":[4,42,47,83,101,108,155,184],"distributed":[5],"framework":[6,87],"that":[7,92,144],"enables":[8],"multi-participant":[9],"collaborative":[10],"model":[11,32,75,104,166,188],"training":[12,71,159,176],"without":[13],"the":[14,115],"need":[15],"for":[16,88,122],"data":[17,35,113],"sharing.":[18],"Despite":[19],"its":[20],"advantages,":[21],"FL":[22,65],"vulnerable":[24],"to":[25,53,125,134,169],"poisoning":[26,127,149,191],"and":[27,34,49,57,73,85,95,138,150,161],"inference":[28,151],"attacks,":[29,152],"which":[30,118],"compromise":[31],"accuracy":[33],"privacy.":[36],"Trusted":[37],"execution":[38,51],"environments":[39],"(TEEs)":[40],"offer":[41],"potential":[43],"solution":[44],"by":[45,178],"providing":[46],"secure":[48,109],"isolated":[50],"space":[52],"address":[54],"these":[55,79],"security":[56],"privacy":[58],"concerns":[59],"in":[60,158,187],"FL.":[61],"However,":[62],"existing":[63],"TEE-based":[64],"schemes":[66],"often":[67],"suffer":[68],"from":[69],"reduced":[70],"speed":[72,160],"compromised":[74],"accuracy.":[76,167],"To":[77],"mitigate":[78],"issues,":[80],"we":[81,130],"propose":[82],"robust":[84],"privacy-preserving":[86],"federated":[89],"learning":[90],"(RPPFL)":[91],"leverages":[93],"TEE":[94],"pseudorandom":[96,132],"masking.":[97],"In":[98],"our":[99,172],"approach,":[100],"trusted":[102],"local":[103,112,136,175],"trained":[106],"on":[107,165],"subset":[110],"of":[111],"within":[114],"client-side":[116],"TEE,":[117],"then":[120],"used":[121],"anomaly":[123],"detection":[124],"resist":[126],"attacks.":[128,192],"Additionally,":[129],"employ":[131],"masking":[133],"obfuscate":[135],"updates":[137],"global":[139],"parameters.":[140],"Experimental":[141],"results":[142],"indicate":[143],"RPPFL":[145],"effectively":[146],"counters":[147],"both":[148],"with":[153,181],"only":[154],"minimal":[156],"decrease":[157],"no":[162],"adverse":[163],"impact":[164],"Compared":[168],"full-TEE":[170],"approaches,":[171],"method":[173],"improved":[174],"efficiency":[177],"10\u00d7":[179],",":[180],"less":[182],"than":[183],"9%":[185],"loss":[186],"performance":[189],"under":[190]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":2}],"updated_date":"2026-08-27T14:10:00.468798","created_date":"2025-10-10T00:00:00"}