{"id":"https://openalex.org/W4409882654","doi":"https://doi.org/10.1109/tdsc.2025.3564697","title":"Poisoning as a Post-Protection: Mitigating Membership Privacy Leakage From Gradient and Prediction of Federated Models","display_name":"Poisoning as a Post-Protection: Mitigating Membership Privacy Leakage From Gradient and Prediction of Federated Models","publication_year":2025,"publication_date":"2025-04-28","ids":{"openalex":"https://openalex.org/W4409882654","doi":"https://doi.org/10.1109/tdsc.2025.3564697"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2025.3564697","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3564697","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5104666790","display_name":"Gaoyang Liu","orcid":"https://orcid.org/0000-0003-2566-9360"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Gaoyang Liu","raw_affiliation_strings":["Hubei Key Laboratory of Internet of Intelligence, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0003-2566-9360","affiliations":[{"raw_affiliation_string":"Hubei Key Laboratory of Internet of Intelligence, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101306543","display_name":"Tianlong Xu","orcid":null},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tianlong Xu","raw_affiliation_strings":["Hubei Key Laboratory of Internet of Intelligence, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0009-0009-0308-213X","affiliations":[{"raw_affiliation_string":"Hubei Key Laboratory of Internet of Intelligence, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100397644","display_name":"Yang Yang","orcid":"https://orcid.org/0000-0002-6297-5722"},"institutions":[{"id":"https://openalex.org/I1327237609","display_name":"Ministry of Education of the People's Republic of China","ror":"https://ror.org/01mv9t934","country_code":"CN","type":"government","lineage":["https://openalex.org/I1327237609","https://openalex.org/I4210127390"]},{"id":"https://openalex.org/I4210110997","display_name":"Ministry of Education","ror":"https://ror.org/01xexqx38","country_code":"ME","type":"government","lineage":["https://openalex.org/I4210110997"]}],"countries":["CN","ME"],"is_corresponding":false,"raw_author_name":"Yang Yang","raw_affiliation_strings":["Key Laboratory of Intelligent Sensing System and Security, Ministry of Education, Wuhan, China","Key Laboratory of Intelligent Sensing System and Security, Ministry of Education, China"],"raw_orcid":"https://orcid.org/0000-0002-6297-5722","affiliations":[{"raw_affiliation_string":"Key Laboratory of Intelligent Sensing System and Security, Ministry of Education, Wuhan, China","institution_ids":["https://openalex.org/I1327237609","https://openalex.org/I4210110997"]},{"raw_affiliation_string":"Key Laboratory of Intelligent Sensing System and Security, Ministry of Education, China","institution_ids":["https://openalex.org/I1327237609"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070017771","display_name":"Ahmed M. Abdelmoniem","orcid":"https://orcid.org/0000-0002-1374-1882"},"institutions":[{"id":"https://openalex.org/I166337079","display_name":"Queen Mary University of London","ror":"https://ror.org/026zzn846","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I166337079"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Ahmed M. Abdelmoniem","raw_affiliation_strings":["School of Electronic Engineering and Computer Science, Queen Mary University of London, London, U.K","School of Electronic Engineering and Computer Science, Queen Mary University of London, U.K"],"raw_orcid":"https://orcid.org/0000-0002-1374-1882","affiliations":[{"raw_affiliation_string":"School of Electronic Engineering and Computer Science, Queen Mary University of London, London, U.K","institution_ids":["https://openalex.org/I166337079"]},{"raw_affiliation_string":"School of Electronic Engineering and Computer Science, Queen Mary University of London, U.K","institution_ids":["https://openalex.org/I166337079"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100337659","display_name":"Chen Wang","orcid":"https://orcid.org/0000-0003-1963-4954"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chen Wang","raw_affiliation_strings":["Hubei Key Laboratory of Internet of Intelligence, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0003-1963-4954","affiliations":[{"raw_affiliation_string":"Hubei Key Laboratory of Internet of Intelligence, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5039311485","display_name":"Jiangchuan Liu","orcid":"https://orcid.org/0000-0001-6592-1984"},"institutions":[{"id":"https://openalex.org/I18014758","display_name":"Simon Fraser University","ror":"https://ror.org/0213rcc28","country_code":"CA","type":"education","lineage":["https://openalex.org/I18014758"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Jiangchuan Liu","raw_affiliation_strings":["School of Computing Science, Simon Fraser University, Burnaby, BC, Canada"],"raw_orcid":"https://orcid.org/0000-0001-6592-1984","affiliations":[{"raw_affiliation_string":"School of Computing Science, Simon Fraser University, Burnaby, BC, Canada","institution_ids":["https://openalex.org/I18014758"]}]}],"institutions":[],"countries_distinct_count":4,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.792,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.70362819,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"22","issue":"5","first_page":"5277","last_page":"5290"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11860","display_name":"HIV, Drug Use, Sexual Risk","score":0.6395999789237976,"subfield":{"id":"https://openalex.org/subfields/2713","display_name":"Epidemiology"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},"topics":[{"id":"https://openalex.org/T11860","display_name":"HIV, Drug Use, Sexual Risk","score":0.6395999789237976,"subfield":{"id":"https://openalex.org/subfields/2713","display_name":"Epidemiology"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/leakage","display_name":"Leakage (economics)","score":0.672020673751831},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6015402674674988},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.596660852432251},{"id":"https://openalex.org/keywords/privacy-protection","display_name":"Privacy protection","score":0.5866100192070007},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.4813831150531769},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.32748347520828247}],"concepts":[{"id":"https://openalex.org/C2777042071","wikidata":"https://www.wikidata.org/wiki/Q6509304","display_name":"Leakage (economics)","level":2,"score":0.672020673751831},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6015402674674988},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.596660852432251},{"id":"https://openalex.org/C3017597292","wikidata":"https://www.wikidata.org/wiki/Q25052250","display_name":"Privacy protection","level":2,"score":0.5866100192070007},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.4813831150531769},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.32748347520828247},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C139719470","wikidata":"https://www.wikidata.org/wiki/Q39680","display_name":"Macroeconomics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3564697","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3564697","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.4099999964237213,"display_name":"Gender equality","id":"https://metadata.un.org/sdg/5"}],"awards":[{"id":"https://openalex.org/G2616141538","display_name":null,"funder_award_id":"62002104","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4137277356","display_name":null,"funder_award_id":"62272183","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5974767612","display_name":null,"funder_award_id":"62372343","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":41,"referenced_works":["https://openalex.org/W1873763122","https://openalex.org/W2053637704","https://openalex.org/W2473418344","https://openalex.org/W2535690855","https://openalex.org/W2795435272","https://openalex.org/W2884943453","https://openalex.org/W2912213068","https://openalex.org/W2930926105","https://openalex.org/W2963378725","https://openalex.org/W2963456518","https://openalex.org/W3008233947","https://openalex.org/W3024346083","https://openalex.org/W3033511014","https://openalex.org/W3045720734","https://openalex.org/W3110068734","https://openalex.org/W3136021864","https://openalex.org/W3172312230","https://openalex.org/W3173298348","https://openalex.org/W3193779274","https://openalex.org/W3209752568","https://openalex.org/W3213185541","https://openalex.org/W3214437258","https://openalex.org/W4206320562","https://openalex.org/W4210485920","https://openalex.org/W4214858327","https://openalex.org/W4214931017","https://openalex.org/W4224911292","https://openalex.org/W4226461837","https://openalex.org/W4230086993","https://openalex.org/W4280575929","https://openalex.org/W4285218634","https://openalex.org/W4295806247","https://openalex.org/W4300991139","https://openalex.org/W4308410741","https://openalex.org/W4312872760","https://openalex.org/W4385696518","https://openalex.org/W4385764329","https://openalex.org/W4387303170","https://openalex.org/W4387665628","https://openalex.org/W4390872063","https://openalex.org/W4391725330"],"related_works":["https://openalex.org/W2584827882","https://openalex.org/W3195097297","https://openalex.org/W3038106605","https://openalex.org/W2513267613","https://openalex.org/W3049084372","https://openalex.org/W2528109871","https://openalex.org/W2940702331","https://openalex.org/W2905822832","https://openalex.org/W4225340788","https://openalex.org/W4318485713"],"abstract_inverted_index":{"Federated":[0],"learning":[1,6],"(FL)":[2],"is":[3],"a":[4,14,40,47,82],"distributed":[5],"paradigm":[7],"that":[8,26,176],"enables":[9],"multiple":[10],"clients":[11],"to":[12,31,45,71,109,133],"train":[13,46],"unified":[15],"model":[16,108,120,147],"without":[17,145],"sharing":[18],"their":[19],"private":[20],"data.":[21],"However,":[22],"recent":[23],"works":[24],"demonstrate":[25],"FL":[27,49,58,107,143],"models":[28],"are":[29],"vulnerable":[30],"membership":[32],"inference":[33,93],"attacks":[34],"(MIAs),":[35],"which":[36,90],"can":[37],"infer":[38],"whether":[39],"data":[41,116],"sample":[42],"was":[43],"used":[44],"given":[48],"model.":[50],"Existing":[51],"countermeasures":[52],"either":[53],"require":[54],"far-reaching":[55],"modifications":[56],"of":[57,95,104,114],"training":[59,115,131,150],"process":[60,151],"or":[61,149],"enforce":[62],"extra":[63],"processing":[64],"in":[65,75],"prediction":[66,101,121,137],"phase,":[67],"yielding":[68],"them":[69],"unlikely":[70],"be":[72],"applied":[73],"well":[74],"practice.":[76],"In":[77],"this":[78],"paper,":[79],"we":[80],"design":[81],"post-protection":[83],"mechanism,":[84],"dubbed":[85],"<italic":[86,123,155,177],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[87,124,156,178],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">P<inline-formula><tex-math":[88,125,157,179],"notation=\"LaTeX\">$^{2}$</tex-math></inline-formula>-Protection</i>,":[89],"degrades":[91],"the":[92,100,105,111,119,135,141,182],"performance":[94],"MIAs":[96,168],"by":[97,185],"simultaneously":[98],"poisoning":[99],"and":[102,138,159,190],"gradient":[103,139],"target":[106,142],"reduce":[110],"privacy":[112],"leakage":[113],"while":[117],"keeping":[118],"accuracy.":[122],"notation=\"LaTeX\">$^{2}$</tex-math></inline-formula>-Protection</i>":[126,158,180],"only":[127],"involves":[128],"one":[129],"additional":[130],"round":[132],"embed":[134],"poisoned":[136],"into":[140],"model,":[144],"requiring":[146],"retraining":[148],"modification.":[152],"We":[153],"evaluate":[154],"compare":[160],"it":[161],"with":[162],"two":[163],"state-of-the-art":[164],"defenses":[165,184],"against":[166],"three":[167],"on":[169],"five":[170],"realistic":[171],"datasets.":[172],"Experimental":[173],"results":[174],"show":[175],"outperforms":[181],"existing":[183],"offering":[186],"limited":[187],"implement":[188],"overhead":[189],"improved":[191],"utility-privacy":[192],"trade-off.":[193]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}