{"id":"https://openalex.org/W4415971166","doi":"https://doi.org/10.1109/tdsc.2025.3630175","title":"How to Defend Against Large-Scale Model Poisoning Attacks in Federated Learning: A Vertical Solution","display_name":"How to Defend Against Large-Scale Model Poisoning Attacks in Federated Learning: A Vertical Solution","publication_year":2025,"publication_date":"2025-11-06","ids":{"openalex":"https://openalex.org/W4415971166","doi":"https://doi.org/10.1109/tdsc.2025.3630175"},"language":null,"primary_location":{"id":"doi:10.1109/tdsc.2025.3630175","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3630175","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Jinbo Wang","orcid":"https://orcid.org/0000-0001-6562-818X"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jinbo Wang","raw_affiliation_strings":["School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu, China"],"raw_orcid":"https://orcid.org/0000-0001-6562-818X","affiliations":[{"raw_affiliation_string":"School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Ruijin Wang","orcid":"https://orcid.org/0000-0002-2222-9178"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ruijin Wang","raw_affiliation_strings":["School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu, China"],"raw_orcid":"https://orcid.org/0000-0002-2222-9178","affiliations":[{"raw_affiliation_string":"School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5076831677","display_name":"Fengli Zhang","orcid":"https://orcid.org/0000-0003-2300-8817"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fengli Zhang","raw_affiliation_strings":["School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu, China"],"raw_orcid":"https://orcid.org/0000-0003-2300-8817","affiliations":[{"raw_affiliation_string":"School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I150229711"],"apc_list":{"value":2645,"currency":"USD","value_usd":2645},"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.11029298,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"2","first_page":"2745","last_page":"2759"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5938000082969666,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5938000082969666,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.2678000032901764,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.023600000888109207,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7529000043869019},{"id":"https://openalex.org/keywords/federated-learning","display_name":"Federated learning","score":0.517300009727478},{"id":"https://openalex.org/keywords/curse-of-dimensionality","display_name":"Curse of dimensionality","score":0.4677000045776367},{"id":"https://openalex.org/keywords/independent-and-identically-distributed-random-variables","display_name":"Independent and identically distributed random variables","score":0.41589999198913574},{"id":"https://openalex.org/keywords/convergence","display_name":"Convergence (economics)","score":0.40779998898506165},{"id":"https://openalex.org/keywords/space","display_name":"Space (punctuation)","score":0.3529999852180481},{"id":"https://openalex.org/keywords/dimensionality-reduction","display_name":"Dimensionality reduction","score":0.3490000069141388}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8041999936103821},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7529000043869019},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.517300009727478},{"id":"https://openalex.org/C111030470","wikidata":"https://www.wikidata.org/wiki/Q1430460","display_name":"Curse of dimensionality","level":2,"score":0.4677000045776367},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.44620001316070557},{"id":"https://openalex.org/C141513077","wikidata":"https://www.wikidata.org/wiki/Q378542","display_name":"Independent and identically distributed random variables","level":3,"score":0.41589999198913574},{"id":"https://openalex.org/C2777303404","wikidata":"https://www.wikidata.org/wiki/Q759757","display_name":"Convergence (economics)","level":2,"score":0.40779998898506165},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3546999990940094},{"id":"https://openalex.org/C2778572836","wikidata":"https://www.wikidata.org/wiki/Q380933","display_name":"Space (punctuation)","level":2,"score":0.3529999852180481},{"id":"https://openalex.org/C70518039","wikidata":"https://www.wikidata.org/wiki/Q16000077","display_name":"Dimensionality reduction","level":2,"score":0.3490000069141388},{"id":"https://openalex.org/C59218005","wikidata":"https://www.wikidata.org/wiki/Q17027571","display_name":"Horizontal and vertical","level":2,"score":0.3262999951839447},{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.3215000033378601},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.30480000376701355},{"id":"https://openalex.org/C70061542","wikidata":"https://www.wikidata.org/wiki/Q989016","display_name":"Distributed database","level":2,"score":0.2775999903678894},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.26739999651908875},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2590999901294708},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.2549000084400177}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3630175","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3630175","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G45930046","display_name":null,"funder_award_id":"62271128","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5027770759","display_name":null,"funder_award_id":"U2333207","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5422189942","display_name":null,"funder_award_id":"62472020","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W1993305004","https://openalex.org/W2108598243","https://openalex.org/W2194775991","https://openalex.org/W2586432806","https://openalex.org/W2963456518","https://openalex.org/W3138153888","https://openalex.org/W3147249397","https://openalex.org/W3198262235","https://openalex.org/W3204937802","https://openalex.org/W4226047321","https://openalex.org/W4229455429","https://openalex.org/W4285206772","https://openalex.org/W4290948380","https://openalex.org/W4296881208","https://openalex.org/W4322736917","https://openalex.org/W4366815236","https://openalex.org/W4407466185","https://openalex.org/W4408724354","https://openalex.org/W4415796111"],"related_works":[],"abstract_inverted_index":{"Federated":[0],"Learning":[1],"(FL)":[2],"is":[3,162],"inherently":[4],"vulnerable":[5],"to":[6,11,34,103,125],"model":[7,63],"poisoning":[8,47,174,187],"attacks":[9,48],"owing":[10],"its":[12],"distributed":[13,196],"architecture.":[14],"Existing":[15],"defense":[16,93],"mechanisms":[17],"typically":[18],"adopt":[19],"a":[20,66,85,91,105,139,149],"horizontal":[21,41,74],"strategy\u2014aggregating":[22],"and":[23,76,127,165,191,194],"processing":[24],"all":[25],"user":[26],"gradients":[27,98,111,124,147],"(model":[28],"updates)":[29],"within":[30],"each":[31],"communication":[32],"round":[33],"derive":[35],"optimal":[36,81],"aggregated":[37],"gradients.":[38],"However,":[39],"such":[40],"approaches":[42],"fail":[43],"completely":[44],"under":[45,172],"large-scale":[46],"involving":[49],"more":[50],"than":[51],"50%":[52],"of":[53,80],"participants.":[54],"In":[55],"this":[56],"work,":[57],"motivated":[58],"by":[59],"the":[60,78,109,113],"observation":[61],"that":[62,95,144,160],"convergence":[64],"follows":[65],"highly":[67],"predictable":[68],"trajectory,":[69],"we":[70],"depart":[71],"from":[72,99],"conventional":[73],"paradigms":[75],"reformulate":[77],"problem":[79],"gradient":[82],"aggregation":[83],"along":[84],"vertical":[86],"dimension.":[87],"We":[88],"introduce":[89],"VERT,":[90],"novel":[92],"framework":[94],"leverages":[96],"historical":[97],"previous":[100],"global":[101],"rounds":[102],"train":[104],"predictor,":[106],"which":[107],"forecasts":[108],"expected":[110],"for":[112,131],"current":[114],"round.":[115],"These":[116],"predictions":[117],"are":[118],"then":[119],"compared":[120],"against":[121],"actual":[122],"submitted":[123],"identify":[126],"select":[128],"reliable":[129],"updates":[130],"aggregation.":[132],"To":[133],"enhance":[134],"computational":[135],"efficiency,":[136],"VERT":[137,161,180],"incorporates":[138],"lightweight":[140],"dimensionality":[141],"reduction":[142],"module":[143],"projects":[145],"high-dimensional":[146],"into":[148],"lower-dimensional":[150],"space":[151],"without":[152],"compromising":[153],"representational":[154],"capacity.":[155],"Extensive":[156],"experimental":[157],"results":[158],"demonstrate":[159],"both":[163],"efficient":[164],"scalable,":[166],"outperforming":[167],"state-of-the-art":[168],"(SOTA)":[169],"defenses":[170],"even":[171],"extreme":[173],"scenarios":[175],"(\u226580%":[176],"malicious":[177],"users).":[178],"Furthermore,":[179],"consistently":[181],"achieves":[182],"superior":[183],"robustness":[184],"across":[185],"low":[186],"rates":[188],"(20%,":[189],"40%)":[190],"non":[192],"independent":[193],"identically":[195],"(non-IID)":[197],"data":[198],"settings.":[199]},"counts_by_year":[],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2025-11-06T00:00:00"}