{"id":"https://openalex.org/W4416158886","doi":"https://doi.org/10.1109/iwcmc69287.2026.11579822","title":"Graph Representation-Based Model Poisoning on the Heterogeneous Internet of Agents","display_name":"Graph Representation-Based Model Poisoning on the Heterogeneous Internet of Agents","publication_year":2026,"publication_date":"2026-06-01","ids":{"openalex":"https://openalex.org/W4416158886","doi":"https://doi.org/10.1109/iwcmc69287.2026.11579822"},"language":null,"primary_location":{"id":"doi:10.1109/iwcmc69287.2026.11579822","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iwcmc69287.2026.11579822","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 International Wireless Communications and Mobile Computing (IWCMC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2511.07176","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Hanlin Cai","orcid":null},"institutions":[{"id":"https://openalex.org/I241749","display_name":"University of Cambridge","ror":"https://ror.org/013meh722","country_code":"GB","type":"education","lineage":["https://openalex.org/I241749"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Hanlin Cai","raw_affiliation_strings":["University of Cambridge,Internet of Everything (IoE) Group,Department of Engineering,Cambridge,UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Cambridge,Internet of Everything (IoE) Group,Department of Engineering,Cambridge,UK","institution_ids":["https://openalex.org/I241749"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Haofan Dong","orcid":null},"institutions":[{"id":"https://openalex.org/I241749","display_name":"University of Cambridge","ror":"https://ror.org/013meh722","country_code":"GB","type":"education","lineage":["https://openalex.org/I241749"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Haofan Dong","raw_affiliation_strings":["University of Cambridge,Internet of Everything (IoE) Group,Department of Engineering,Cambridge,UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Cambridge,Internet of Everything (IoE) Group,Department of Engineering,Cambridge,UK","institution_ids":["https://openalex.org/I241749"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Houtianfu Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I241749","display_name":"University of Cambridge","ror":"https://ror.org/013meh722","country_code":"GB","type":"education","lineage":["https://openalex.org/I241749"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Houtianfu Wang","raw_affiliation_strings":["University of Cambridge,Internet of Everything (IoE) Group,Department of Engineering,Cambridge,UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Cambridge,Internet of Everything (IoE) Group,Department of Engineering,Cambridge,UK","institution_ids":["https://openalex.org/I241749"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100399848","display_name":"Kai Li","orcid":"https://orcid.org/0000-0002-0517-2392"},"institutions":[{"id":"https://openalex.org/I241749","display_name":"University of Cambridge","ror":"https://ror.org/013meh722","country_code":"GB","type":"education","lineage":["https://openalex.org/I241749"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Kai Li","raw_affiliation_strings":["University of Cambridge,Internet of Everything (IoE) Group,Department of Engineering,Cambridge,UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Cambridge,Internet of Everything (IoE) Group,Department of Engineering,Cambridge,UK","institution_ids":["https://openalex.org/I241749"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Sai Zou","orcid":null},"institutions":[{"id":"https://openalex.org/I178232147","display_name":"Guizhou University","ror":"https://ror.org/02wmsc916","country_code":"CN","type":"education","lineage":["https://openalex.org/I178232147"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Sai Zou","raw_affiliation_strings":["Guizhou University,Guiyang,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Guizhou University,Guiyang,China","institution_ids":["https://openalex.org/I178232147"]}]},{"author_position":"last","author":{"id":null,"display_name":"Ozgur B. Akan","orcid":null},"institutions":[{"id":"https://openalex.org/I241749","display_name":"University of Cambridge","ror":"https://ror.org/013meh722","country_code":"GB","type":"education","lineage":["https://openalex.org/I241749"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Ozgur B. Akan","raw_affiliation_strings":["University of Cambridge,Internet of Everything (IoE) Group,Department of Engineering,Cambridge,UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Cambridge,Internet of Everything (IoE) Group,Department of Engineering,Cambridge,UK","institution_ids":["https://openalex.org/I241749"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"956","last_page":"961"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.7781000137329102,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.7781000137329102,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.03240000084042549,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14347","display_name":"Big Data and Digital Economy","score":0.03060000017285347,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7009000182151794},{"id":"https://openalex.org/keywords/upload","display_name":"Upload","score":0.5116999745368958},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.510699987411499},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.5038999915122986},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4693000018596649},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.39100000262260437},{"id":"https://openalex.org/keywords/subgradient-method","display_name":"Subgradient method","score":0.3750999867916107},{"id":"https://openalex.org/keywords/autoencoder","display_name":"Autoencoder","score":0.3702000081539154},{"id":"https://openalex.org/keywords/matching","display_name":"Matching (statistics)","score":0.3553999960422516},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.3280999958515167}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7558000087738037},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7009000182151794},{"id":"https://openalex.org/C71901391","wikidata":"https://www.wikidata.org/wiki/Q7126699","display_name":"Upload","level":2,"score":0.5116999745368958},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.510699987411499},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.5038999915122986},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4693000018596649},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.44040000438690186},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4065999984741211},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.39100000262260437},{"id":"https://openalex.org/C158968445","wikidata":"https://www.wikidata.org/wiki/Q7631150","display_name":"Subgradient method","level":2,"score":0.3750999867916107},{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.3702000081539154},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.3553999960422516},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.349700003862381},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3425000011920929},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.3280999958515167},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.32670000195503235},{"id":"https://openalex.org/C7606001","wikidata":"https://www.wikidata.org/wiki/Q4686702","display_name":"Adversary model","level":3,"score":0.3253999948501587},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3222000002861023},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.31790000200271606},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.3122999966144562},{"id":"https://openalex.org/C146380142","wikidata":"https://www.wikidata.org/wiki/Q1137726","display_name":"Directed graph","level":2,"score":0.31130000948905945},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.30140000581741333},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.2985999882221222},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.29600000381469727},{"id":"https://openalex.org/C22607594","wikidata":"https://www.wikidata.org/wiki/Q5375150","display_name":"Enabling","level":2,"score":0.28870001435279846},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.2822999954223633},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.28139999508857727},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.27970001101493835},{"id":"https://openalex.org/C88230418","wikidata":"https://www.wikidata.org/wiki/Q131476","display_name":"Graph theory","level":2,"score":0.2757999897003174},{"id":"https://openalex.org/C2779545769","wikidata":"https://www.wikidata.org/wiki/Q5135364","display_name":"Closeness","level":2,"score":0.26330000162124634},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2623000144958496},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.25440001487731934},{"id":"https://openalex.org/C118463975","wikidata":"https://www.wikidata.org/wiki/Q220849","display_name":"Digital signature","level":3,"score":0.2529999911785126},{"id":"https://openalex.org/C47796450","wikidata":"https://www.wikidata.org/wiki/Q508378","display_name":"Intelligent transportation system","level":2,"score":0.2513999938964844},{"id":"https://openalex.org/C197657726","wikidata":"https://www.wikidata.org/wiki/Q174733","display_name":"Bipartite graph","level":3,"score":0.25119999051094055},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.25099998712539673}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1109/iwcmc69287.2026.11579822","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iwcmc69287.2026.11579822","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 International Wireless Communications and Mobile Computing (IWCMC)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2511.07176","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2511.07176","pdf_url":"https://arxiv.org/pdf/2511.07176","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:doi:10.48550/arxiv.2511.07176","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},{"id":"doi:10.48550/arxiv.2511.07176","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2511.07176","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2511.07176","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2511.07176","pdf_url":"https://arxiv.org/pdf/2511.07176","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322725","display_name":"China Scholarship Council","ror":"https://ror.org/04atp4p48"},{"id":"https://openalex.org/F4320337504","display_name":"Research and Development","ror":"https://ror.org/027s68j25"}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4416158886.pdf"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Internet":[0],"of":[1,72],"Agents":[2],"(IoA)":[3],"envisions":[4],"a":[5,30,80,94,100,170],"unified,":[6],"agent-centric":[7],"paradigm":[8],"where":[9,59],"heterogeneous":[10],"large":[11],"language":[12],"model":[13,56,83],"(LLM)":[14],"agents":[15,37],"can":[16,61,146],"interconnect":[17],"and":[18,98,108,122,168],"collaborate":[19],"at":[20],"scale.":[21],"Within":[22],"this":[23],"paradigm,":[24],"federated":[25],"fine-tuning":[26],"(FFT)":[27],"serves":[28],"as":[29],"key":[31],"enabler":[32],"that":[33,130,141],"allows":[34],"distributed":[35],"LLM":[36,43,152],"to":[38,55,65,68,92,104,126,173],"co-train":[39],"an":[40],"intelligent":[41],"global":[42,75],"without":[44],"centralizing":[45],"local":[46],"datasets.":[47],"However,":[48],"the":[49,66,70,73,142,174],"FFT-enabled":[50],"IoA":[51,176],"systems":[52],"remain":[53],"vulnerable":[54],"poisoning":[57,84],"attacks,":[58],"adversaries":[60],"upload":[62],"malicious":[63,110,128],"updates":[64,91,129],"server":[67],"degrade":[69],"performance":[71],"aggregated":[74],"LLM.":[76],"This":[77],"paper":[78],"proposes":[79],"graph":[81,97,102],"representation-based":[82],"(GRMP)":[85],"attack,":[86],"which":[87],"exploits":[88],"overheard":[89],"benign":[90,159],"construct":[93],"feature":[95],"correlation":[96],"employs":[99],"variational":[101],"autoencoder":[103],"capture":[105],"structural":[106],"dependencies":[107],"generate":[109],"updates.":[111],"A":[112],"novel":[113],"attack":[114,145],"algorithm":[115],"is":[116],"developed":[117],"based":[118],"on":[119],"augmented":[120],"Lagrangian":[121],"subgradient":[123],"descent":[124],"methods":[125],"optimize":[127],"preserve":[131],"benign-like":[132],"statistics":[133],"while":[134,154],"embedding":[135],"adversarial":[136],"objectives.":[137],"Experimental":[138],"results":[139],"show":[140],"proposed":[143],"GRMP":[144],"substantially":[147],"decrease":[148],"accuracy":[149],"across":[150],"different":[151],"models":[153],"remaining":[155],"statistically":[156],"consistent":[157],"with":[158],"updates,":[160],"thereby":[161],"evading":[162],"detection":[163],"by":[164],"existing":[165],"defense":[166],"mechanisms":[167],"underscoring":[169],"severe":[171],"threat":[172],"ambitious":[175],"paradigm.":[177]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-11-12T00:00:00"}