{"id":"https://openalex.org/W4416078095","doi":"https://doi.org/10.1109/tdsc.2025.3630811","title":"Hidden Threats in Federated Unlearning: Camouflaged Poisoning Attacks and Their Unlearning Consequences","display_name":"Hidden Threats in Federated Unlearning: Camouflaged Poisoning Attacks and Their Unlearning Consequences","publication_year":2025,"publication_date":"2025-11-10","ids":{"openalex":"https://openalex.org/W4416078095","doi":"https://doi.org/10.1109/tdsc.2025.3630811"},"language":null,"primary_location":{"id":"doi:10.1109/tdsc.2025.3630811","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3630811","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Kun Gao","orcid":"https://orcid.org/0000-0003-1822-6617"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Kun Gao","raw_affiliation_strings":["School of Computer Science, University of Technology Sydney, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0003-1822-6617","affiliations":[{"raw_affiliation_string":"School of Computer Science, University of Technology Sydney, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Tianqing Zhu","orcid":"https://orcid.org/0000-0003-3411-7947"},"institutions":[{"id":"https://openalex.org/I6469544","display_name":"City University of Macau","ror":"https://ror.org/04gpd4q15","country_code":"MO","type":"education","lineage":["https://openalex.org/I6469544"]}],"countries":["MO"],"is_corresponding":false,"raw_author_name":"Tianqing Zhu","raw_affiliation_strings":["Faculty of Data Science, City University of Macau, Macao, China","Faculty of Data Science, City University of Macau, Macao SAR, China"],"raw_orcid":"https://orcid.org/0000-0003-3411-7947","affiliations":[{"raw_affiliation_string":"Faculty of Data Science, City University of Macau, Macao, China","institution_ids":["https://openalex.org/I6469544"]},{"raw_affiliation_string":"Faculty of Data Science, City University of Macau, Macao SAR, China","institution_ids":["https://openalex.org/I6469544"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065910481","display_name":"Dayong Ye","orcid":"https://orcid.org/0000-0002-7561-0992"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]},{"id":"https://openalex.org/I6469544","display_name":"City University of Macau","ror":"https://ror.org/04gpd4q15","country_code":"MO","type":"education","lineage":["https://openalex.org/I6469544"]}],"countries":["AU","MO"],"is_corresponding":false,"raw_author_name":"Dayong Ye","raw_affiliation_strings":["Faculty of Data Science, City University of Macau, Macao, China","School of Computer Science, University of Technology Sydney, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0002-7561-0992","affiliations":[{"raw_affiliation_string":"Faculty of Data Science, City University of Macau, Macao, China","institution_ids":["https://openalex.org/I6469544"]},{"raw_affiliation_string":"School of Computer Science, University of Technology Sydney, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100461646","display_name":"Bo Liu","orcid":"https://orcid.org/0000-0002-3603-6617"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Bo Liu","raw_affiliation_strings":["School of Computer Science, University of Technology Sydney, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0002-3603-6617","affiliations":[{"raw_affiliation_string":"School of Computer Science, University of Technology Sydney, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5051406984","display_name":"Wanlei Zhou","orcid":"https://orcid.org/0000-0002-1680-2521"},"institutions":[{"id":"https://openalex.org/I6469544","display_name":"City University of Macau","ror":"https://ror.org/04gpd4q15","country_code":"MO","type":"education","lineage":["https://openalex.org/I6469544"]}],"countries":["MO"],"is_corresponding":false,"raw_author_name":"Wanlei Zhou","raw_affiliation_strings":["Faculty of Data Science, City University of Macau, Macao, China","Faculty of Data Science, City University of Macau, Macao SAR, China"],"raw_orcid":"https://orcid.org/0000-0002-1680-2521","affiliations":[{"raw_affiliation_string":"Faculty of Data Science, City University of Macau, Macao, China","institution_ids":["https://openalex.org/I6469544"]},{"raw_affiliation_string":"Faculty of Data Science, City University of Macau, Macao SAR, China","institution_ids":["https://openalex.org/I6469544"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2645,"currency":"USD","value_usd":2645},"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.11167074,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"2","first_page":"2934","last_page":"2948"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7734000086784363,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7734000086784363,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.14720000326633453,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.012600000016391277,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.8528000116348267},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7824000120162964},{"id":"https://openalex.org/keywords/compromise","display_name":"Compromise","score":0.7199000120162964},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.5418000221252441},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.4271000027656555},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.40610000491142273},{"id":"https://openalex.org/keywords/corporate-governance","display_name":"Corporate governance","score":0.4027000069618225},{"id":"https://openalex.org/keywords/information-sensitivity","display_name":"Information sensitivity","score":0.3873000144958496}],"concepts":[{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.8528000116348267},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7824000120162964},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7710000276565552},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7572000026702881},{"id":"https://openalex.org/C46355384","wikidata":"https://www.wikidata.org/wiki/Q726686","display_name":"Compromise","level":2,"score":0.7199000120162964},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.5418000221252441},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.49300000071525574},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.4271000027656555},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.40610000491142273},{"id":"https://openalex.org/C39389867","wikidata":"https://www.wikidata.org/wiki/Q380767","display_name":"Corporate governance","level":2,"score":0.4027000069618225},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.3873000144958496},{"id":"https://openalex.org/C89611455","wikidata":"https://www.wikidata.org/wiki/Q6804646","display_name":"Mechanism (biology)","level":2,"score":0.37049999833106995},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.3497999906539917},{"id":"https://openalex.org/C69360830","wikidata":"https://www.wikidata.org/wiki/Q1172237","display_name":"Data Protection Act 1998","level":2,"score":0.3427000045776367},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.33059999346733093},{"id":"https://openalex.org/C512654426","wikidata":"https://www.wikidata.org/wiki/Q19652","display_name":"Public domain","level":2,"score":0.3303999900817871},{"id":"https://openalex.org/C2778717966","wikidata":"https://www.wikidata.org/wiki/Q4189076","display_name":"Protection mechanism","level":3,"score":0.31869998574256897},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.3021000027656555},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3005000054836273},{"id":"https://openalex.org/C33762810","wikidata":"https://www.wikidata.org/wiki/Q461671","display_name":"Data integrity","level":2,"score":0.29670000076293945},{"id":"https://openalex.org/C2776650193","wikidata":"https://www.wikidata.org/wiki/Q264661","display_name":"Obstacle","level":2,"score":0.28619998693466187},{"id":"https://openalex.org/C7606001","wikidata":"https://www.wikidata.org/wiki/Q4686702","display_name":"Adversary model","level":3,"score":0.2791000008583069},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.2687999904155731}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3630811","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3630811","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2851340439","display_name":null,"funder_award_id":"FDCT 0080/2024/RIA2","funder_id":"https://openalex.org/F4320321655","funder_display_name":"Science and Technology Development Fund"}],"funders":[{"id":"https://openalex.org/F4320321655","display_name":"Science and Technology Development Fund","ror":"https://ror.org/044vr6g03"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W1488996941","https://openalex.org/W3023153742","https://openalex.org/W3026797990","https://openalex.org/W3087391814","https://openalex.org/W3107632872","https://openalex.org/W3118241334","https://openalex.org/W3136620885","https://openalex.org/W3180608480","https://openalex.org/W3196371845","https://openalex.org/W3197363474","https://openalex.org/W3199974954","https://openalex.org/W3200780444","https://openalex.org/W4294811443","https://openalex.org/W4313547874","https://openalex.org/W4379652910","https://openalex.org/W4386421331","https://openalex.org/W4386737489","https://openalex.org/W4387784496","https://openalex.org/W4388486450","https://openalex.org/W4388873098","https://openalex.org/W4391093136","https://openalex.org/W4391547484","https://openalex.org/W4391620743","https://openalex.org/W4394691969","https://openalex.org/W4399263198","https://openalex.org/W4400076000","https://openalex.org/W4401396935","https://openalex.org/W4401508209","https://openalex.org/W4401568040","https://openalex.org/W4403937513","https://openalex.org/W4405909491","https://openalex.org/W4412475861","https://openalex.org/W4413147085","https://openalex.org/W4413158183"],"related_works":[],"abstract_inverted_index":{"Due":[0],"to":[1,29,41,83,94,140,175,192,209],"the":[2,19,26,31,37,54,58,96,101,159,163,176,187,197,211,224,231,238],"growing":[3,27],"emphasis":[4],"on":[5,119,196],"privacy":[6,66],"and":[7,36,44,68,98,117],"data":[8,35,45],"governance":[9],"in":[10,18,71,215],"machine":[11],"learning,":[12,23],"federated":[13,22,73,141,239],"unlearning,":[14],"an":[15],"emerging":[16],"concept":[17],"domain":[20],"of":[21,34,63,100,115,154,178,180,213,220,226,233],"stems":[24],"from":[25],"need":[28],"address":[30],"dynamic":[32],"nature":[33],"evolving":[38],"requirements":[39],"related":[40],"privacy,":[42],"compliance,":[43],"management.":[46],"However,":[47],"there":[48],"are":[49,107,166],"some":[50,146,179],"security":[51],"risks":[52],"during":[53,112,237],"unlearning":[55,102,216,240],"process,":[56],"including":[57],"potential":[59,205],"for":[60,206],"adversarial":[61],"manipulation":[62],"model":[64],"integrity,":[65],"breaches,":[67],"performance":[69],"degradation":[70],"a":[72,135,151,173,193,203,234],"learning":[74],"framework.":[75],"Although":[76],"existing":[77],"research":[78],"has":[79],"proposed":[80],"various":[81],"defenses":[82],"mitigate":[84],"these":[85,181,207],"risks,":[86],"significant":[87],"vulnerabilities":[88],"remain":[89],"that":[90,162,229],"can":[91],"be":[92],"exploited":[93],"undermine":[95],"integrity":[97],"effectiveness":[99,212],"process.":[103,241],"Current":[104],"attack":[105,137,188,222],"methods":[106],"limited":[108],"by":[109],"their":[110,124],"detectability":[111],"training,":[113],"lack":[114],"persistence,":[116],"reliance":[118],"test-time":[120],"triggers,":[121],"which":[122],"reduces":[123],"overall":[125],"effectiveness.":[126],"In":[127,143],"this":[128,144,185,221],"paper,":[129],"we":[130],"introduce":[131],"camouflaged":[132],"poisoning":[133],"attacks,":[134],"novel":[136],"paradigm":[138],"relevant":[139],"unlearning.":[142],"approach,":[145],"adversary":[147,170],"clients":[148,228],"initially":[149],"infuse":[150],"small":[152],"number":[153],"meticulously":[155],"designed":[156],"points":[157],"into":[158],"dataset,":[160],"ensuring":[161],"model's":[164,198],"predictions":[165],"barely":[167],"influenced.":[168],"The":[169,200,218],"then":[171],"makes":[172],"request":[174],"exclusion":[177],"malicious":[182],"clients.":[183],"At":[184],"juncture,":[186],"is":[189],"activated,":[190],"leading":[191],"detrimental":[194],"impact":[195],"predictions.":[199],"outcomes":[201],"reveal":[202],"substantial":[204],"strategies":[208],"compromise":[210],"models":[214],"scenarios.":[217],"essence":[219],"involves":[223],"creation":[225],"deceptive":[227],"conceal":[230],"influence":[232],"contaminated":[235],"dataset":[236]},"counts_by_year":[],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2025-11-10T00:00:00"}