{"id":"https://openalex.org/W4375929024","doi":"https://doi.org/10.1109/tdsc.2023.3274119","title":"Covert Model Poisoning Against Federated Learning: Algorithm Design and Optimization","display_name":"Covert Model Poisoning Against Federated Learning: Algorithm Design and Optimization","publication_year":2023,"publication_date":"2023-05-08","ids":{"openalex":"https://openalex.org/W4375929024","doi":"https://doi.org/10.1109/tdsc.2023.3274119"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2023.3274119","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3274119","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5034649717","display_name":"Kang Wei","orcid":"https://orcid.org/0000-0001-8794-2153"},"institutions":[{"id":"https://openalex.org/I36399199","display_name":"Nanjing University of Science and Technology","ror":"https://ror.org/00xp9wg62","country_code":"CN","type":"education","lineage":["https://openalex.org/I36399199"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kang Wei","raw_affiliation_strings":["School of Electrical and Optical Engineering, Nanjing University of Science and Technology, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0001-8794-2153","affiliations":[{"raw_affiliation_string":"School of Electrical and Optical Engineering, Nanjing University of Science and Technology, Nanjing, China","institution_ids":["https://openalex.org/I36399199"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100691319","display_name":"Jun Li","orcid":"https://orcid.org/0000-0002-6239-2922"},"institutions":[{"id":"https://openalex.org/I36399199","display_name":"Nanjing University of Science and Technology","ror":"https://ror.org/00xp9wg62","country_code":"CN","type":"education","lineage":["https://openalex.org/I36399199"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jun Li","raw_affiliation_strings":["School of Electrical and Optical Engineering, Nanjing University of Science and Technology, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-6239-2922","affiliations":[{"raw_affiliation_string":"School of Electrical and Optical Engineering, Nanjing University of Science and Technology, Nanjing, China","institution_ids":["https://openalex.org/I36399199"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075722123","display_name":"Ming Ding","orcid":"https://orcid.org/0000-0002-3690-0321"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Ming Ding","raw_affiliation_strings":["Data61, CSIRO, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0002-3690-0321","affiliations":[{"raw_affiliation_string":"Data61, CSIRO, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103221383","display_name":"Chuan Ma","orcid":"https://orcid.org/0000-0001-6198-9498"},"institutions":[{"id":"https://openalex.org/I4210100356","display_name":"Ministry of Education","ror":"https://ror.org/018f7hf93","country_code":"CL","type":"government","lineage":["https://openalex.org/I4210100356"]},{"id":"https://openalex.org/I4210123185","display_name":"Zhejiang Lab","ror":"https://ror.org/02m2h7991","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210123185"]}],"countries":["CL","CN"],"is_corresponding":false,"raw_author_name":"Chuan Ma","raw_affiliation_strings":["Zhejiang Lab, Hangzhou, China","Key Laboratory of Computer Network and Information Integration (Southeast University), Ministry of Education"],"raw_orcid":"https://orcid.org/0000-0001-6198-9498","affiliations":[{"raw_affiliation_string":"Zhejiang Lab, Hangzhou, China","institution_ids":["https://openalex.org/I4210123185"]},{"raw_affiliation_string":"Key Laboratory of Computer Network and Information Integration (Southeast University), Ministry of Education","institution_ids":["https://openalex.org/I4210100356"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012803748","display_name":"Yo\u2013Seb Jeon","orcid":"https://orcid.org/0000-0002-2886-157X"},"institutions":[{"id":"https://openalex.org/I123900574","display_name":"Pohang University of Science and Technology","ror":"https://ror.org/04xysgw12","country_code":"KR","type":"education","lineage":["https://openalex.org/I123900574"]},{"id":"https://openalex.org/I193775966","display_name":"Yonsei University","ror":"https://ror.org/01wjejq96","country_code":"KR","type":"education","lineage":["https://openalex.org/I193775966"]},{"id":"https://openalex.org/I4210120602","display_name":"Advanced Institute of Convergence Technology","ror":"https://ror.org/01w62yz22","country_code":"KR","type":"facility","lineage":["https://openalex.org/I139264467","https://openalex.org/I4210120602"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Yo-Seb Jeon","raw_affiliation_strings":["Department of Electrical Engineering, POSTECH, Pohang, Gyeongbuk, South Korea","Department of Electrical Engineering, POSTECH, Pohang, Gyeongbuk, Republic of Korea","Institute for Convergence Research and Education in Advanced Technology, Yonsei University, Incheon, Republic of Korea"],"raw_orcid":"https://orcid.org/0000-0002-2886-157X","affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering, POSTECH, Pohang, Gyeongbuk, South Korea","institution_ids":["https://openalex.org/I123900574"]},{"raw_affiliation_string":"Department of Electrical Engineering, POSTECH, Pohang, Gyeongbuk, Republic of Korea","institution_ids":["https://openalex.org/I123900574"]},{"raw_affiliation_string":"Institute for Convergence Research and Education in Advanced Technology, Yonsei University, Incheon, Republic of Korea","institution_ids":["https://openalex.org/I193775966","https://openalex.org/I4210120602"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5042307561","display_name":"H. Vincent Poor","orcid":"https://orcid.org/0000-0002-2062-131X"},"institutions":[{"id":"https://openalex.org/I20089843","display_name":"Princeton University","ror":"https://ror.org/00hx57361","country_code":"US","type":"education","lineage":["https://openalex.org/I20089843"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"H. Vincent Poor","raw_affiliation_strings":["Department of Electrical and Computer Engineering, Princeton University, Princeton, NJ, USA"],"raw_orcid":"https://orcid.org/0000-0002-2062-131X","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Princeton University, Princeton, NJ, USA","institution_ids":["https://openalex.org/I20089843"]}]}],"institutions":[],"countries_distinct_count":5,"institutions_distinct_count":9,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2345,"currency":"USD","value_usd":2345},"apc_paid":null,"fwci":2.7676,"has_fulltext":false,"cited_by_count":21,"citation_normalized_percentile":{"value":0.91935084,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":"21","issue":"3","first_page":"1196","last_page":"1209"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.954200029373169,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7318437099456787},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.5269511342048645},{"id":"https://openalex.org/keywords/news-aggregator","display_name":"News aggregator","score":0.5218535661697388},{"id":"https://openalex.org/keywords/upload","display_name":"Upload","score":0.4695205092430115},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4404807686805725},{"id":"https://openalex.org/keywords/optimization-problem","display_name":"Optimization problem","score":0.41356849670410156},{"id":"https://openalex.org/keywords/mnist-database","display_name":"MNIST database","score":0.41156718134880066},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.39682644605636597},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.3060423731803894}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7318437099456787},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.5269511342048645},{"id":"https://openalex.org/C180505990","wikidata":"https://www.wikidata.org/wiki/Q498267","display_name":"News aggregator","level":2,"score":0.5218535661697388},{"id":"https://openalex.org/C71901391","wikidata":"https://www.wikidata.org/wiki/Q7126699","display_name":"Upload","level":2,"score":0.4695205092430115},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4404807686805725},{"id":"https://openalex.org/C137836250","wikidata":"https://www.wikidata.org/wiki/Q984063","display_name":"Optimization problem","level":2,"score":0.41356849670410156},{"id":"https://openalex.org/C190502265","wikidata":"https://www.wikidata.org/wiki/Q17069496","display_name":"MNIST database","level":3,"score":0.41156718134880066},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.39682644605636597},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.3060423731803894},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2023.3274119","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3274119","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.5,"display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G1049029497","display_name":null,"funder_award_id":"62002170","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2276391916","display_name":"\u4e0b\u4e00\u4ee3\u5f02\u6784\u8702\u7a9d\u7f51\u7edc\u4e2d\u9762\u5411\u79fb\u52a8\u8fb9\u7f18\u8ba1\u7b97\u67b6\u6784\u7684\u8ba1\u7b97\u8fc1\u79fb\u6280\u672f\u7814\u7a76","funder_award_id":"61872184","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3704888824","display_name":"Collaborative Research: SWIFT: Nonlinear and Inseparable Radar And Data (NIRAD) Transmission Framework for Pareto Efficient Spectrum Access in Future Wireless Networks","funder_award_id":"2128448","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7227091334","display_name":null,"funder_award_id":"30921013104","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322120","display_name":"National Research Foundation of Korea","ror":"https://ror.org/013aysd81"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":53,"referenced_works":["https://openalex.org/W2095577883","https://openalex.org/W2112796928","https://openalex.org/W2144906988","https://openalex.org/W2151298633","https://openalex.org/W2472333518","https://openalex.org/W2591882872","https://openalex.org/W2748789698","https://openalex.org/W2768475350","https://openalex.org/W2789911054","https://openalex.org/W2808367635","https://openalex.org/W2809857136","https://openalex.org/W2930926105","https://openalex.org/W2962763344","https://openalex.org/W2963456518","https://openalex.org/W2964043980","https://openalex.org/W2964162474","https://openalex.org/W2971544778","https://openalex.org/W2972594657","https://openalex.org/W2998368790","https://openalex.org/W3002416713","https://openalex.org/W3013124972","https://openalex.org/W3016632787","https://openalex.org/W3017123256","https://openalex.org/W3021654819","https://openalex.org/W3080136191","https://openalex.org/W3080580959","https://openalex.org/W3102424709","https://openalex.org/W3103245149","https://openalex.org/W3111818035","https://openalex.org/W3118608800","https://openalex.org/W3122294042","https://openalex.org/W3123159599","https://openalex.org/W3128515475","https://openalex.org/W3138153888","https://openalex.org/W3168495756","https://openalex.org/W3211856354","https://openalex.org/W3214271738","https://openalex.org/W4288057793","https://openalex.org/W4294106961","https://openalex.org/W4318619660","https://openalex.org/W4320081100","https://openalex.org/W4321321579","https://openalex.org/W6676935882","https://openalex.org/W6728757088","https://openalex.org/W6743581629","https://openalex.org/W6743821447","https://openalex.org/W6752600739","https://openalex.org/W6756840679","https://openalex.org/W6758201434","https://openalex.org/W6770634426","https://openalex.org/W6771536673","https://openalex.org/W6772898547","https://openalex.org/W6787972765"],"related_works":["https://openalex.org/W4386603768","https://openalex.org/W2950475743","https://openalex.org/W2886711096","https://openalex.org/W2750384547","https://openalex.org/W4380078352","https://openalex.org/W3046591097","https://openalex.org/W4389249638","https://openalex.org/W2733410219","https://openalex.org/W2734358244","https://openalex.org/W4388700941"],"abstract_inverted_index":{"Federated":[0],"learning":[1,19],"(FL),":[2],"as":[3,46,88,160,212,218],"a":[4,22,47,137,175,209,213,230,243],"type":[5],"of":[6,119,178,232,236],"distributed":[7],"machine":[8],"learning,":[9],"is":[10,44],"vulnerable":[11],"to":[12,39,60,75,124,206,248],"external":[13],"attacks":[14],"during":[15],"parameter":[16],"transmissions":[17],"between":[18,97],"agents":[20],"and":[21,101,152,163],"model":[23,37,48,100,205],"aggregator.":[24,69],"In":[25,52],"particular,":[26],"malicious":[27],"participant":[28],"clients":[29],"in":[30,186,234],"FL":[31],"can":[32,153,173,200,228],"purposefully":[33],"craft":[34],"their":[35],"uploaded":[36],"parameters":[38],"manipulate":[40,202],"system":[41],"outputs,":[42],"which":[43],"know":[45],"poisoning":[49],"(MP)":[50],"attack.":[51,167],"this":[53,120],"paper,":[54],"we":[55,83,108,129],"propose":[56,130],"effective":[57,151],"MP":[58,80,87],"algorithms":[59,72,111,134,149],"attack":[61,157,162],"the":[62,68,86,94,98,113,117,126,146,164,179,190,193,203,237,249],"classical":[63],"defensive":[64],"aggregation":[65],"Krum":[66,114,199],"at":[67],"The":[70],"proposed":[71,147,194],"are":[73,150],"designed":[74],"evade":[76],"detection,":[77],"i.e.,":[78],"covert":[79],"(CMP).":[81],"Specifically,":[82],"first":[84],"formulate":[85],"an":[89,225],"optimization":[90,121,127],"problem":[91],"by":[92,105],"minimizing":[93],"Euclidean":[95],"distance":[96],"manipulated":[99],"designated":[102],"one,":[103],"constrained":[104],"Krum.":[106],"Then,":[107],"develop":[109],"CMP":[110,133,148,172,195,222],"against":[112,198],"based":[115],"on":[116],"solutions":[118],"problem.":[122],"Furthermore,":[123],"reduce":[125],"complexity,":[128],"low":[131],"complexity":[132,245],"having":[135],"only":[136],"slight":[138],"performance":[139],"degradation.":[140],"Our":[141],"experimental":[142],"results":[143],"demonstrate":[144],"that":[145],"substantially":[154],"outperform":[155],"existing":[156],"mechanisms,":[158],"such":[159],"Arjun's":[161],"label":[165],"flipping":[166],"More":[168],"specifically,":[169],"our":[170,187,221],"original":[171,250],"achieve":[174,229],"high":[176],"rate":[177,231],"attacker's":[180,238],"accuracy":[181,239],"($\\approx":[182],"90\\%$).":[183],"For":[184],"example,":[185],"experiments":[188],"using":[189],"MNIST":[191],"dataset,":[192],"attacking":[196],"algorithm":[197,223],"successfully":[201],"aggregated":[204],"incorrectly":[207],"classify":[208],"given":[210],"digit":[211],"different":[214],"one":[215],"(e.g.,":[216],"9":[217],"8).":[219],"Meanwhile,":[220],"with":[224,242],"approximated":[226],"constraint":[227],"87%":[233],"terms":[235],"(attacker-desired":[240],"results),":[241],"73%":[244],"reduction":[246],"compared":[247],"CMP.":[251]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":11},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":1}],"updated_date":"2026-08-28T12:50:07.497085","created_date":"2025-10-10T00:00:00"}