{"id":"https://openalex.org/W4410115649","doi":"https://doi.org/10.1109/tifs.2025.3564879","title":"VFLMonitor: Defending One-Party Hijacking Attacks in Vertical Federated Learning","display_name":"VFLMonitor: Defending One-Party Hijacking Attacks in Vertical Federated Learning","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4410115649","doi":"https://doi.org/10.1109/tifs.2025.3564879"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2025.3564879","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3564879","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5002113782","display_name":"Xiangrui Xu","orcid":"https://orcid.org/0000-0003-3759-4706"},"institutions":[{"id":"https://openalex.org/I143413998","display_name":"Qingdao University of Science and Technology","ror":"https://ror.org/041j8js14","country_code":"CN","type":"education","lineage":["https://openalex.org/I143413998"]},{"id":"https://openalex.org/I21193070","display_name":"Beijing Jiaotong University","ror":"https://ror.org/01yj56c84","country_code":"CN","type":"education","lineage":["https://openalex.org/I21193070"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiangrui Xu","raw_affiliation_strings":["School of Information Science and Technology, Qingdao University of Science and Technology, Qingdao, China","Beijing Key Laboratory of Security and Privacy in Intelligent Transportation, Beijing Jiaotong University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-3759-4706","affiliations":[{"raw_affiliation_string":"School of Information Science and Technology, Qingdao University of Science and Technology, Qingdao, China","institution_ids":["https://openalex.org/I143413998"]},{"raw_affiliation_string":"Beijing Key Laboratory of Security and Privacy in Intelligent Transportation, Beijing Jiaotong University, Beijing, China","institution_ids":["https://openalex.org/I21193070"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051321153","display_name":"Yiwen Zhao","orcid":null},"institutions":[{"id":"https://openalex.org/I1174212","display_name":"University of Southern California","ror":"https://ror.org/03taz7m60","country_code":"US","type":"education","lineage":["https://openalex.org/I1174212"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yiwen Zhao","raw_affiliation_strings":["Thomas Lord Department of Computer Science, University of Southern California, Los Angeles, CA, USA"],"raw_orcid":"https://orcid.org/0009-0005-7961-3719","affiliations":[{"raw_affiliation_string":"Thomas Lord Department of Computer Science, University of Southern California, Los Angeles, CA, USA","institution_ids":["https://openalex.org/I1174212"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001937964","display_name":"Yufei Han","orcid":"https://orcid.org/0000-0002-9035-6718"},"institutions":[{"id":"https://openalex.org/I1326498283","display_name":"Institut national de recherche en sciences et technologies du num\u00e9rique","ror":"https://ror.org/02kvxyf05","country_code":"FR","type":"government","lineage":["https://openalex.org/I1326498283"]},{"id":"https://openalex.org/I4210133778","display_name":"Centre Inria de l'Universit\u00e9 de Rennes","ror":"https://ror.org/04040yw90","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1326498283","https://openalex.org/I4210133778"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Yufei Han","raw_affiliation_strings":["INRIA, Rennes, Brittany, France"],"raw_orcid":"https://orcid.org/0000-0002-9035-6718","affiliations":[{"raw_affiliation_string":"INRIA, Rennes, Brittany, France","institution_ids":["https://openalex.org/I4210133778","https://openalex.org/I1326498283"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102344218","display_name":"Zhu Yongsheng","orcid":"https://orcid.org/0009-0007-8424-9418"},"institutions":[{"id":"https://openalex.org/I21193070","display_name":"Beijing Jiaotong University","ror":"https://ror.org/01yj56c84","country_code":"CN","type":"education","lineage":["https://openalex.org/I21193070"]},{"id":"https://openalex.org/I4210141966","display_name":"China Academy of Railway Sciences","ror":"https://ror.org/051wv2j09","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210141966"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yongsheng Zhu","raw_affiliation_strings":["Institute of Computing Technologies, China Academy of Railway Sciences Corporation Ltd., Beijing, China","Beijing Key Laboratory of Security and Privacy in Intelligent Transportation, Beijing Jiaotong University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Computing Technologies, China Academy of Railway Sciences Corporation Ltd., Beijing, China","institution_ids":["https://openalex.org/I4210141966"]},{"raw_affiliation_string":"Beijing Key Laboratory of Security and Privacy in Intelligent Transportation, Beijing Jiaotong University, Beijing, China","institution_ids":["https://openalex.org/I21193070"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059369429","display_name":"Zhen Han","orcid":"https://orcid.org/0000-0002-3688-873X"},"institutions":[{"id":"https://openalex.org/I21193070","display_name":"Beijing Jiaotong University","ror":"https://ror.org/01yj56c84","country_code":"CN","type":"education","lineage":["https://openalex.org/I21193070"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhen Han","raw_affiliation_strings":["Beijing Key Laboratory of Security and Privacy in Intelligent Transportation, Beijing Jiaotong University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-3688-873X","affiliations":[{"raw_affiliation_string":"Beijing Key Laboratory of Security and Privacy in Intelligent Transportation, Beijing Jiaotong University, Beijing, China","institution_ids":["https://openalex.org/I21193070"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040791046","display_name":"Guangquan Xu","orcid":"https://orcid.org/0000-0001-8701-3944"},"institutions":[{"id":"https://openalex.org/I162868743","display_name":"Tianjin University","ror":"https://ror.org/012tb2g32","country_code":"CN","type":"education","lineage":["https://openalex.org/I162868743"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guangquan Xu","raw_affiliation_strings":["Tianjin Key Laboratory of Advanced Networking (TANK), College of Intelligence and Computing, Tianjin University, Tianjin, China"],"raw_orcid":"https://orcid.org/0000-0001-8701-3944","affiliations":[{"raw_affiliation_string":"Tianjin Key Laboratory of Advanced Networking (TANK), College of Intelligence and Computing, Tianjin University, Tianjin, China","institution_ids":["https://openalex.org/I162868743"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5106482064","display_name":"Bin Wang","orcid":"https://orcid.org/0009-0001-0883-9594"},"institutions":[{"id":"https://openalex.org/I4210123185","display_name":"Zhejiang Lab","ror":"https://ror.org/02m2h7991","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210123185"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bin Wang","raw_affiliation_strings":["Zhejiang Key Laboratory of Artificial Intelligence of Things (AIoT) Network and Data Security, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang Key Laboratory of Artificial Intelligence of Things (AIoT) Network and Data Security, Hangzhou, China","institution_ids":["https://openalex.org/I4210123185"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058611515","display_name":"Shouling Ji","orcid":"https://orcid.org/0000-0003-4268-372X"},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]},{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shouling Ji","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University, Zhejiang, China","Zhejiang University [Hangzhou, China] (866 Yuhangtang Road * Hangzhou * Zhejiang Province * 310058 * P. R. China - China)"],"raw_orcid":"https://orcid.org/0000-0003-4268-372X","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University, Zhejiang, China","institution_ids":["https://openalex.org/I168879160"]},{"raw_affiliation_string":"Zhejiang University [Hangzhou, China] (866 Yuhangtang Road * Hangzhou * Zhejiang Province * 310058 * P. R. China - China)","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100777576","display_name":"Wei Wang","orcid":"https://orcid.org/0000-0002-5974-1589"},"institutions":[{"id":"https://openalex.org/I87445476","display_name":"Xi'an Jiaotong University","ror":"https://ror.org/017zhmm22","country_code":"CN","type":"education","lineage":["https://openalex.org/I87445476"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wei Wang","raw_affiliation_strings":["Ministry of Education Key Laboratory for Intelligent Networks and Network Security, Xi’an Jiaotong University, Xi’an, China"],"raw_orcid":"https://orcid.org/0000-0002-5974-1589","affiliations":[{"raw_affiliation_string":"Ministry of Education Key Laboratory for Intelligent Networks and Network Security, Xi’an Jiaotong University, Xi’an, China","institution_ids":["https://openalex.org/I87445476"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":11,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.792,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.90418232,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":"20","issue":null,"first_page":"4828","last_page":"4843"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9940000176429749,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9447000026702881,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8278894424438477},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.599968433380127},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.3344351053237915},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.33344322443008423},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.328466534614563}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8278894424438477},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.599968433380127},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3344351053237915},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.33344322443008423},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.328466534614563}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tifs.2025.3564879","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3564879","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},{"id":"pmh:oai:HAL:hal-05426773v1","is_oa":false,"landing_page_url":"https://hal.science/hal-05426773","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Transactions on Information Forensics and Security, 2025, 20, pp.4828-4843. ⟨10.1109/TIFS.2025.3564879⟩","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Gender equality","id":"https://metadata.un.org/sdg/5","score":0.6000000238418579}],"awards":[{"id":"https://openalex.org/G1858642095","display_name":null,"funder_award_id":"U23A20304","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3550020321","display_name":null,"funder_award_id":"U21A20463","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4030524084","display_name":null,"funder_award_id":"L221014","funder_id":"https://openalex.org/F4320334977","funder_display_name":"Beijing Municipal Natural Science Foundation"},{"id":"https://openalex.org/G7465859601","display_name":null,"funder_award_id":"U22B2027","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320334977","display_name":"Beijing Municipal Natural Science Foundation","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Vertical":[0],"Federated":[1],"Learning":[2],"(VFL)":[3],"is":[4],"susceptible":[5],"to":[6,26,98,124,141],"various":[7],"one-party":[8,191],"hijacking":[9,80,102,192],"attacks,":[10,16,193],"such":[11],"as":[12,75],"Replay":[13],"and":[14,49,100,118,152,182],"Generation":[15],"where":[17],"a":[18,66,89,120,135,196],"single":[19],"malicious":[20,130],"client":[21],"can":[22,73,179],"manipulate":[23],"the":[24,43,58],"model":[25],"produce":[27],"attacker-specified":[28],"results,":[29],"thereby":[30,147],"compromising":[31],"its":[32],"reliability":[33],"in":[34,57,112,145,187],"real-world":[35,163],"deployments.":[36],"In":[37],"this":[38,84],"paper,":[39],"we":[40,86],"first":[41],"uncover":[42],"underlying":[44],"mechanisms":[45],"of":[46,190],"these":[47,71,95,129],"attacks":[48,53],"observe":[50],"that":[51,93,177],"successful":[52],"induce":[54],"significant":[55],"discrepancies":[56,72,97],"embedding-label":[59,96],"associations":[60],"across":[61],"different":[62,167],"clients.":[63],"We":[64],"establish":[65],"theoretical":[67],"framework":[68],"demonstrating":[69],"how":[70],"serve":[74],"reliable":[76],"indicators":[77],"for":[78,201],"detecting":[79],"attempts.":[81],"Building":[82],"upon":[83],"insight,":[85],"propose":[87],"VFLMonitor,":[88],"robust":[90],"defense":[91,154],"mechanism":[92],"leverages":[94],"detect":[99],"mitigate":[101],"attacks.":[103],"Specifically,":[104],"VFLMonitor":[105,133,178],"identifies":[106],"suspicious":[107],"queries":[108],"by":[109],"analyzing":[110],"differences":[111],"label":[113],"estimations":[114],"from":[115],"multiple":[116],"clients":[117],"applies":[119],"majority":[121],"voting":[122],"rule":[123],"correct":[125],"or":[126],"filter":[127],"out":[128],"queries.":[131,203],"Moreover,":[132],"introduces":[134],"novel":[136],"regularization":[137],"strategy":[138],"during":[139],"training":[140],"reduce":[142],"intra-class":[143],"variance":[144],"embeddings,":[146],"enhancing":[148],"their":[149],"discriminative":[150],"power":[151],"improving":[153],"effectiveness.":[155],"Extensive":[156],"experi21":[157],"ments":[158],"were":[159],"conducted":[160],"on":[161],"5":[162],"datasets":[164],"against":[165],"2":[166],"attack":[168,172],"types":[169,189],"under":[170],"3":[171],"scenarios.":[173],"The":[174],"results":[175],"demonstrate":[176],"effectively":[180],"identify":[181],"exclude":[183],"potential":[184],"hijacked":[185],"requests":[186],"all":[188],"while":[194],"maintaining":[195],"meager":[197],"false":[198],"positive":[199],"rate":[200],"legitimate":[202]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-07-10T05:49:55.623906","created_date":"2025-10-10T00:00:00"}