{"id":"https://openalex.org/W4413155647","doi":"https://doi.org/10.1109/tdsc.2025.3598683","title":"Targeted Poisoning Attacks Against Vertical Federated Learning via Embedding Manipulation","display_name":"Targeted Poisoning Attacks Against Vertical Federated Learning via Embedding Manipulation","publication_year":2025,"publication_date":"2025-08-13","ids":{"openalex":"https://openalex.org/W4413155647","doi":"https://doi.org/10.1109/tdsc.2025.3598683"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2025.3598683","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3598683","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Junlin Liu","orcid":"https://orcid.org/0000-0002-4981-1010"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Junlin Liu","raw_affiliation_strings":["National Engineering Research Center for Mobile Network Technologies, Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-4981-1010","affiliations":[{"raw_affiliation_string":"National Engineering Research Center for Mobile Network Technologies, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090327058","display_name":"Xinchen Lyu","orcid":"https://orcid.org/0000-0003-0404-4310"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinchen Lyu","raw_affiliation_strings":["National Engineering Research Center for Mobile Network Technologies, Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-0404-4310","affiliations":[{"raw_affiliation_string":"National Engineering Research Center for Mobile Network Technologies, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056079858","display_name":"Chenshan Ren","orcid":"https://orcid.org/0000-0002-7058-2910"},"institutions":[{"id":"https://openalex.org/I145897649","display_name":"Minzu University of China","ror":"https://ror.org/0044e2g62","country_code":"CN","type":"education","lineage":["https://openalex.org/I145897649"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chenshan Ren","raw_affiliation_strings":["School of Information Engineering, Minzu University of China, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-7058-2910","affiliations":[{"raw_affiliation_string":"School of Information Engineering, Minzu University of China, Beijing, China","institution_ids":["https://openalex.org/I145897649"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5018587643","display_name":"Qimei Cui","orcid":"https://orcid.org/0000-0003-1720-220X"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qimei Cui","raw_affiliation_strings":["National Engineering Research Center for Mobile Network Technologies, Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-1720-220X","affiliations":[{"raw_affiliation_string":"National Engineering Research Center for Mobile Network Technologies, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.2699,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.85102396,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":"22","issue":"6","first_page":"7535","last_page":"7551"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9840999841690063,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9578999876976013,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7515659332275391},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5659749507904053},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.5121135711669922},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.25994253158569336}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7515659332275391},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5659749507904053},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.5121135711669922},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.25994253158569336}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3598683","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3598683","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Gender equality","score":0.5,"id":"https://metadata.un.org/sdg/5"}],"awards":[{"id":"https://openalex.org/G2094305956","display_name":null,"funder_award_id":"62371059","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8087325236","display_name":null,"funder_award_id":"62301622","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W2007972815","https://openalex.org/W2151298633","https://openalex.org/W2193428859","https://openalex.org/W2194775991","https://openalex.org/W2304927286","https://openalex.org/W2807363941","https://openalex.org/W2912213068","https://openalex.org/W2962858109","https://openalex.org/W2970408908","https://openalex.org/W3015636663","https://openalex.org/W3021654819","https://openalex.org/W3031339255","https://openalex.org/W3040685212","https://openalex.org/W3087391814","https://openalex.org/W3138153888","https://openalex.org/W4226461837","https://openalex.org/W4229455429","https://openalex.org/W4288758078","https://openalex.org/W4328053081","https://openalex.org/W4375929024","https://openalex.org/W4376464626","https://openalex.org/W4378587102","https://openalex.org/W4380763515","https://openalex.org/W4381744411","https://openalex.org/W4385448260","https://openalex.org/W4385695509","https://openalex.org/W4386804452","https://openalex.org/W4387848535","https://openalex.org/W4391093146","https://openalex.org/W4391903604","https://openalex.org/W4402210816","https://openalex.org/W4405717542"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2081900870","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890"],"abstract_inverted_index":{"Vertical":[0],"Federated":[1],"Learning":[2],"(VFL)":[3],"enables":[4],"collaborative":[5],"multi-agent":[6],"model":[7,30,43,116],"training":[8],"with":[9],"distributed":[10],"feature":[11,40],"spaces.":[12],"Compared":[13],"to":[14,113,126,134,186,197],"horizontal":[15],"federated":[16],"learning":[17,65,177],"(HFL),":[18],"poisoning":[19,73,88],"attacks":[20,54,193],"in":[21,57,78,208],"VFL":[22,207],"confront":[23],"the":[24,33,47,72,79,106,110,115,128,132,144,188,203],"challenges":[25],"of":[26,59,82,166],"partial/incomplete":[27],"data":[28],"and":[29,42,61,84,95,102,158,170,173],"information,":[31],"i.e.,":[32,90],"adversary":[34],"only":[35],"has":[36],"its":[37],"local":[38],"input":[39],"space":[41],"structure":[44,81],"without":[45],"knowing":[46],"ground-truth":[48],"labels":[49],"or":[50],"server-side":[51],"model.":[52],"Existing":[53],"are":[55,194],"inefficient":[56],"terms":[58],"stability":[60,172],"scalability":[62],"under":[63,175],"different":[64,176,183],"configurations.":[66,178],"In":[67,118],"this":[68],"paper,":[69],"we":[70],"design":[71],"framework":[74],"via":[75],"embedding":[76,92,97],"manipulation":[77,93,98],"model-partitioning":[80],"VFL,":[83],"propose":[85],"two":[86],"efficient":[87],"attacks,":[89],"layer":[91,125],"(LMP)":[94],"perturbation":[96],"(PMP).":[99],"Both":[100],"LMP":[101,120,159],"PMP":[103,130,157],"meticulously":[104],"transform":[105],"benign":[107,145],"embeddings":[108,146],"into":[109,143],"poisoned":[111],"ones":[112],"dominate":[114],"prediction.":[117],"particular,":[119],"blends":[121],"a":[122,136],"malicious":[123],"trigger":[124],"poison":[127],"embedding.":[129],"exploits":[131],"gradients":[133],"generate":[135],"universal":[137],"perturbation,":[138],"which":[139],"can":[140],"be":[141],"injected":[142],"for":[147,153,206],"poisoning.":[148],"We":[149,179],"conduct":[150,181],"extensive":[151],"experiments":[152],"attack":[154,163],"performance":[155],"evaluation.":[156],"achieve":[160],"an":[161],"average":[162],"success":[164],"rate":[165],"more":[167],"than":[168],"0.9,":[169],"keep":[171],"robustness":[174],"further":[180],"six":[182],"defense":[184],"methods":[185],"evaluate":[187],"proposed":[189,192],"attacks.":[190],"The":[191],"still":[195],"shown":[196],"succeed":[198],"against":[199],"these":[200],"defenses,":[201],"necessitating":[202],"advanced":[204],"defenses":[205],"future":[209],"work.":[210]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}