{"id":"https://openalex.org/W7125611399","doi":"https://doi.org/10.1109/tdsc.2026.3657365","title":"DMPA: Durable Model Poisoning Attack Against Fairness and Robustness in Efficient Federated Learning Systems","display_name":"DMPA: Durable Model Poisoning Attack Against Fairness and Robustness in Efficient Federated Learning Systems","publication_year":2026,"publication_date":"2026-01-23","ids":{"openalex":"https://openalex.org/W7125611399","doi":"https://doi.org/10.1109/tdsc.2026.3657365"},"language":null,"primary_location":{"id":"doi:10.1109/tdsc.2026.3657365","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3657365","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1109/tdsc.2026.3657365","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5000429286","display_name":"Jionghui Jiang","orcid":"https://orcid.org/0000-0002-5239-9004"},"institutions":[{"id":"https://openalex.org/I159948400","display_name":"Jinan University","ror":"https://ror.org/02xe5ns62","country_code":"CN","type":"education","lineage":["https://openalex.org/I159948400"]},{"id":"https://openalex.org/I4210139618","display_name":"Shanghai Key Laboratory of Trustworthy Computing","ror":"https://ror.org/030qbr085","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210139618"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jionghui Jiang","raw_affiliation_strings":["Engineering Research Center of Trustworthy AI (Ministry of Education), Jinan University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0009-0000-0946-183X","affiliations":[{"raw_affiliation_string":"Engineering Research Center of Trustworthy AI (Ministry of Education), Jinan University, Guangzhou, China","institution_ids":["https://openalex.org/I159948400","https://openalex.org/I4210139618"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080178175","display_name":"Fengrui Hao","orcid":"https://orcid.org/0000-0002-5951-3789"},"institutions":[{"id":"https://openalex.org/I159948400","display_name":"Jinan University","ror":"https://ror.org/02xe5ns62","country_code":"CN","type":"education","lineage":["https://openalex.org/I159948400"]},{"id":"https://openalex.org/I4210139618","display_name":"Shanghai Key Laboratory of Trustworthy Computing","ror":"https://ror.org/030qbr085","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210139618"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fengrui Hao","raw_affiliation_strings":["Engineering Research Center of Trustworthy AI (Ministry of Education), Jinan University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-5951-3789","affiliations":[{"raw_affiliation_string":"Engineering Research Center of Trustworthy AI (Ministry of Education), Jinan University, Guangzhou, China","institution_ids":["https://openalex.org/I159948400","https://openalex.org/I4210139618"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5121645781","display_name":"Tianlong Gu","orcid":null},"institutions":[{"id":"https://openalex.org/I159948400","display_name":"Jinan University","ror":"https://ror.org/02xe5ns62","country_code":"CN","type":"education","lineage":["https://openalex.org/I159948400"]},{"id":"https://openalex.org/I4210139618","display_name":"Shanghai Key Laboratory of Trustworthy Computing","ror":"https://ror.org/030qbr085","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210139618"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tianlong Gu","raw_affiliation_strings":["Engineering Research Center of Trustworthy AI (Ministry of Education), Jinan University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-1593-1292","affiliations":[{"raw_affiliation_string":"Engineering Research Center of Trustworthy AI (Ministry of Education), Jinan University, Guangzhou, China","institution_ids":["https://openalex.org/I159948400","https://openalex.org/I4210139618"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025289290","display_name":"Ke Wang","orcid":"https://orcid.org/0000-0001-7189-9293"},"institutions":[{"id":"https://openalex.org/I159948400","display_name":"Jinan University","ror":"https://ror.org/02xe5ns62","country_code":"CN","type":"education","lineage":["https://openalex.org/I159948400"]},{"id":"https://openalex.org/I4210139618","display_name":"Shanghai Key Laboratory of Trustworthy Computing","ror":"https://ror.org/030qbr085","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210139618"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ke Wang","raw_affiliation_strings":["Engineering Research Center of Trustworthy AI (Ministry of Education), Jinan University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-2460-7758","affiliations":[{"raw_affiliation_string":"Engineering Research Center of Trustworthy AI (Ministry of Education), Jinan University, Guangzhou, China","institution_ids":["https://openalex.org/I159948400","https://openalex.org/I4210139618"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123769129","display_name":"Xiaoli Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I159948400","display_name":"Jinan University","ror":"https://ror.org/02xe5ns62","country_code":"CN","type":"education","lineage":["https://openalex.org/I159948400"]},{"id":"https://openalex.org/I4210139618","display_name":"Shanghai Key Laboratory of Trustworthy Computing","ror":"https://ror.org/030qbr085","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210139618"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoli Liu","raw_affiliation_strings":["Engineering Research Center of Trustworthy AI (Ministry of Education), Jinan University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-6488-9732","affiliations":[{"raw_affiliation_string":"Engineering Research Center of Trustworthy AI (Ministry of Education), Jinan University, Guangzhou, China","institution_ids":["https://openalex.org/I159948400","https://openalex.org/I4210139618"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5123746335","display_name":"Zhangbin Wen","orcid":null},"institutions":[{"id":"https://openalex.org/I4210100070","display_name":"Guangzhou Mechanical Engineering Research Institute (China)","ror":"https://ror.org/0114hcc46","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210100070"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhangbin Wen","raw_affiliation_strings":["Guangzhou Research Institute of Information Technology, Guangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Guangzhou Research Institute of Information Technology, Guangzhou, China","institution_ids":["https://openalex.org/I4210100070"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":19.5928,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.9858479,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":"23","issue":"3","first_page":"5655","last_page":"5671"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.8130999803543091,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.8130999803543091,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.06620000302791595,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14347","display_name":"Big Data and Digital Economy","score":0.014800000004470348,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.8259000182151794},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.612500011920929},{"id":"https://openalex.org/keywords/federated-learning","display_name":"Federated learning","score":0.6040999889373779},{"id":"https://openalex.org/keywords/trustworthiness","display_name":"Trustworthiness","score":0.5582000017166138},{"id":"https://openalex.org/keywords/compromise","display_name":"Compromise","score":0.4399000108242035},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.4088999927043915},{"id":"https://openalex.org/keywords/durability","display_name":"Durability","score":0.3853999972343445},{"id":"https://openalex.org/keywords/attack-model","display_name":"Attack model","score":0.36910000443458557}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8776000142097473},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.8259000182151794},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.612500011920929},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.6040999889373779},{"id":"https://openalex.org/C153701036","wikidata":"https://www.wikidata.org/wiki/Q659974","display_name":"Trustworthiness","level":2,"score":0.5582000017166138},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.531499981880188},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.44600000977516174},{"id":"https://openalex.org/C46355384","wikidata":"https://www.wikidata.org/wiki/Q726686","display_name":"Compromise","level":2,"score":0.4399000108242035},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.4088999927043915},{"id":"https://openalex.org/C104304963","wikidata":"https://www.wikidata.org/wiki/Q5316114","display_name":"Durability","level":2,"score":0.3853999972343445},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.37959998846054077},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.36910000443458557},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.3686999976634979},{"id":"https://openalex.org/C2780980858","wikidata":"https://www.wikidata.org/wiki/Q110022","display_name":"Dual (grammatical number)","level":2,"score":0.36500000953674316},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.3555000126361847},{"id":"https://openalex.org/C152124472","wikidata":"https://www.wikidata.org/wiki/Q1204361","display_name":"Redundancy (engineering)","level":2,"score":0.28529998660087585},{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.27570000290870667},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.26460000872612},{"id":"https://openalex.org/C70061542","wikidata":"https://www.wikidata.org/wiki/Q989016","display_name":"Distributed database","level":2,"score":0.26249998807907104},{"id":"https://openalex.org/C107645828","wikidata":"https://www.wikidata.org/wiki/Q12070446","display_name":"System model","level":2,"score":0.2599000036716461},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.2565999925136566}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2026.3657365","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3657365","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/tdsc.2026.3657365","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3657365","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.43224188685417175,"id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G351810823","display_name":null,"funder_award_id":"62336003","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8327241554","display_name":null,"funder_award_id":"U22A2099","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":42,"referenced_works":["https://openalex.org/W1988720110","https://openalex.org/W1994616650","https://openalex.org/W2112796928","https://openalex.org/W2972828425","https://openalex.org/W2977090839","https://openalex.org/W3027472889","https://openalex.org/W3122462552","https://openalex.org/W3131796779","https://openalex.org/W3134548480","https://openalex.org/W3138153888","https://openalex.org/W3160147580","https://openalex.org/W3174380182","https://openalex.org/W3190703008","https://openalex.org/W3193066552","https://openalex.org/W3195419053","https://openalex.org/W3213330817","https://openalex.org/W4226173202","https://openalex.org/W4281639882","https://openalex.org/W4285554319","https://openalex.org/W4286888406","https://openalex.org/W4288057793","https://openalex.org/W4295308234","https://openalex.org/W4319454067","https://openalex.org/W4375929024","https://openalex.org/W4382317630","https://openalex.org/W4385768086","https://openalex.org/W4386072282","https://openalex.org/W4390025778","https://openalex.org/W4390830156","https://openalex.org/W4390904993","https://openalex.org/W4392931300","https://openalex.org/W4392967724","https://openalex.org/W4394923028","https://openalex.org/W4394923525","https://openalex.org/W4406047340","https://openalex.org/W4409723583","https://openalex.org/W4410114621","https://openalex.org/W4410852248","https://openalex.org/W4411485189","https://openalex.org/W4412939403","https://openalex.org/W4413925824","https://openalex.org/W7133188813"],"related_works":[],"abstract_inverted_index":{"Federated":[0],"Learning":[1],"(FL)":[2],"systems":[3,29,205],"are":[4,30],"increasingly":[5],"deployed":[6],"across":[7],"multiple":[8],"clients":[9],"to":[10,32,35,54,117,121,133],"efficiently":[11],"train":[12],"a":[13,87,129],"shared":[14],"model":[15,36,48,138],"over":[16,192],"local":[17,60],"data,":[18],"thereby":[19],"effectively":[20],"addressing":[21],"data":[22],"silos":[23],"and":[24,100,148],"reducing":[25],"communication.":[26],"However,":[27],"FL":[28,82,104,204],"known":[31],"be":[33,71],"susceptible":[34],"poisoning":[37,139],"attacks":[38],"by":[39,172,194],"malicious":[40],"clients,":[41,64],"who":[42],"aim":[43],"at":[44],"deteriorating":[45],"the":[46,55,59,77,111,115,135,169,187],"global":[47],"accuracy":[49,61,166],"through":[50],"sending":[51],"corrupted":[52],"updates":[53,120],"central":[56],"server.":[57],"Meanwhile,":[58],"discrepancy":[62],"among":[63],"called":[65,91],"as":[66],"performance":[67,170],"fairness,":[68],"could":[69],"also":[70,182],"exacerbated,":[72],"which":[73],"is":[74,146],"one":[75],"of":[76,80,102,137,165,189],"major":[78],"concerns":[79],"trustworthy":[81],"systems.":[83,105],"This":[84],"paper":[85],"proposes":[86],"novel":[88],"attack":[89,190],"framework":[90],"Durable":[92],"Model":[93],"Poisoning":[94],"Attack":[95],"(DMPA),":[96],"targeting":[97],"both":[98],"fairness":[99,171],"robustness":[101],"efficient":[103,203],"To":[106],"implement":[107],"DMPA,":[108],"we":[109,127],"design":[110],"over-unlearning":[112],"strategy,":[113],"enabling":[114],"adversary":[116],"generate":[118],"poisoned":[119],"compromise":[122],"partial":[123],"clients'":[124],"performance.":[125],"Furthermore,":[126],"develop":[128],"dual":[130],"projection":[131],"mechanism":[132],"improve":[134],"durability":[136,188],"attacks.":[140],"Extensive":[141],"experiments":[142,181,201],"demonstrate":[143],"that":[144,184],"DMPA":[145,156,185],"powerful":[147],"effective":[149],"even":[150],"against":[151],"robust":[152],"aggregation":[153],"rules.":[154],"Particularly,":[155],"achieves":[157],"average":[158],"<inline-formula":[159,173,195],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[160,174,196],"xmlns:xlink=\"http://www.w3.org/1999/xlink\"><tex-math":[161,175,197],"notation=\"LaTeX\">$7.6\\times$</tex-math></inline-formula>":[162],"higher":[163],"reduction":[164],"while":[167],"decreasing":[168],"notation=\"LaTeX\">$3.0\\times$</tex-math></inline-formula>":[176],"compared":[177],"with":[178],"baselines.":[179],"The":[180],"indicated":[183],"extends":[186],"impacts":[191],"baselines":[193],"notation=\"LaTeX\">$8.5\\times$</tex-math></inline-formula>.":[198],"In":[199],"addition,":[200],"in":[202],"disclose":[206],"their":[207],"vulnerability.":[208]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2026-01-25T00:00:00"}