{"id":"https://openalex.org/W4416961238","doi":"https://doi.org/10.1109/tifs.2025.3639985","title":"G 2 uardFL: Safeguarding Federated Learning Against Backdoor Attacks via Attributed Client Graph Clustering","display_name":"G 2 uardFL: Safeguarding Federated Learning Against Backdoor Attacks via Attributed Client Graph Clustering","publication_year":2025,"publication_date":"2025-12-03","ids":{"openalex":"https://openalex.org/W4416961238","doi":"https://doi.org/10.1109/tifs.2025.3639985"},"language":null,"primary_location":{"id":"doi:10.1109/tifs.2025.3639985","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3639985","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100647391","display_name":"Hao Yu","orcid":"https://orcid.org/0000-0001-9044-4841"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hao Yu","raw_affiliation_strings":["College of Computer Science and Technology, National University of Defense Technology, Changsha, China"],"raw_orcid":"https://orcid.org/0000-0001-9044-4841","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, National University of Defense Technology, Changsha, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103221383","display_name":"Chuan Ma","orcid":"https://orcid.org/0000-0001-6198-9498"},"institutions":[{"id":"https://openalex.org/I158842170","display_name":"Chongqing University","ror":"https://ror.org/023rhb549","country_code":"CN","type":"education","lineage":["https://openalex.org/I158842170"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chuan Ma","raw_affiliation_strings":["College of Computer, Chongqing University, Chongqing, China"],"raw_orcid":"https://orcid.org/0000-0001-6198-9498","affiliations":[{"raw_affiliation_string":"College of Computer, Chongqing University, Chongqing, China","institution_ids":["https://openalex.org/I158842170"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100457574","display_name":"Meng Liu","orcid":"https://orcid.org/0000-0003-3900-4204"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Meng Liu","raw_affiliation_strings":["College of Computer Science and Technology, National University of Defense Technology, Changsha, China"],"raw_orcid":"https://orcid.org/0000-0003-3900-4204","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, National University of Defense Technology, Changsha, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061219446","display_name":"Tianyu Du","orcid":"https://orcid.org/0000-0003-0896-0690"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tianyu Du","raw_affiliation_strings":["School of Software Technology, Zhejiang University, Hangzhou, Zhejiang, China"],"raw_orcid":"https://orcid.org/0000-0003-0896-0690","affiliations":[{"raw_affiliation_string":"School of Software Technology, Zhejiang University, Hangzhou, Zhejiang, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075722123","display_name":"Ming Ding","orcid":"https://orcid.org/0000-0002-3690-0321"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Ming Ding","raw_affiliation_strings":["Data61, CSIRO, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0002-3690-0321","affiliations":[{"raw_affiliation_string":"Data61, CSIRO, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079461118","display_name":"Tao Xiang","orcid":"https://orcid.org/0000-0002-9439-4623"},"institutions":[{"id":"https://openalex.org/I158842170","display_name":"Chongqing University","ror":"https://ror.org/023rhb549","country_code":"CN","type":"education","lineage":["https://openalex.org/I158842170"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tao Xiang","raw_affiliation_strings":["College of Computer, Chongqing University, Chongqing, China"],"raw_orcid":"https://orcid.org/0000-0002-9439-4623","affiliations":[{"raw_affiliation_string":"College of Computer, Chongqing University, Chongqing, China","institution_ids":["https://openalex.org/I158842170"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058611515","display_name":"Shouling Ji","orcid":"https://orcid.org/0000-0003-4268-372X"},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shouling Ji","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University, Hangzhou, Zhejiang, China"],"raw_orcid":"https://orcid.org/0000-0003-4268-372X","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University, Hangzhou, Zhejiang, China","institution_ids":["https://openalex.org/I168879160"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101727888","display_name":"Xinwang Liu","orcid":"https://orcid.org/0000-0001-9066-1475"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinwang Liu","raw_affiliation_strings":["College of Computer Science and Technology, National University of Defense Technology, Changsha, China"],"raw_orcid":"https://orcid.org/0000-0001-9066-1475","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, National University of Defense Technology, Changsha, China","institution_ids":["https://openalex.org/I170215575"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2645,"currency":"USD","value_usd":2645},"apc_paid":null,"fwci":10.7471,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.98124018,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":100},"biblio":{"volume":"21","issue":null,"first_page":"516","last_page":"531"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.3677999973297119,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.3677999973297119,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.2824000120162964,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.10019999742507935,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9617000222206116},{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.7135000228881836},{"id":"https://openalex.org/keywords/federated-learning","display_name":"Federated learning","score":0.6771000027656555},{"id":"https://openalex.org/keywords/safeguarding","display_name":"Safeguarding","score":0.5921000242233276},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.4422000050544739},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.423799991607666},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.38269999623298645},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.37290000915527344}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9617000222206116},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8579999804496765},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.7135000228881836},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.6771000027656555},{"id":"https://openalex.org/C2776743756","wikidata":"https://www.wikidata.org/wiki/Q5097921","display_name":"Safeguarding","level":2,"score":0.5921000242233276},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4684000015258789},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.4422000050544739},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.423799991607666},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.38269999623298645},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.37290000915527344},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.365200012922287},{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.32499998807907104},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.31310001015663147},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.30720001459121704},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.3012999892234802},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2865999937057495},{"id":"https://openalex.org/C2987255567","wikidata":"https://www.wikidata.org/wiki/Q33002955","display_name":"Knowledge graph","level":2,"score":0.25949999690055847},{"id":"https://openalex.org/C175154964","wikidata":"https://www.wikidata.org/wiki/Q380077","display_name":"Task analysis","level":3,"score":0.2590999901294708},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.25699999928474426},{"id":"https://openalex.org/C95922358","wikidata":"https://www.wikidata.org/wiki/Q5432725","display_name":"False positive rate","level":2,"score":0.25679999589920044},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2556000053882599},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.25369998812675476},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.25200000405311584}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2025.3639985","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3639985","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1813241943","display_name":null,"funder_award_id":"CSTB2025TIAD-STX0032","funder_id":"https://openalex.org/F4320336740","funder_display_name":"Chongqing Municipality Key Research and Development Program of China"},{"id":"https://openalex.org/G2455478723","display_name":null,"funder_award_id":"62276271","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2822742771","display_name":null,"funder_award_id":"62572083","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5737921325","display_name":null,"funder_award_id":"62325604","funder_id":"https://openalex.org/F4320336125","funder_display_name":"National Science Fund for Distinguished Young Scholars"},{"id":"https://openalex.org/G6562299470","display_name":null,"funder_award_id":"62441618","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320336125","display_name":"National Science Fund for Distinguished Young Scholars","ror":null},{"id":"https://openalex.org/F4320336740","display_name":"Chongqing Municipality Key Research and Development Program of China","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":42,"referenced_works":["https://openalex.org/W151377110","https://openalex.org/W2027595342","https://openalex.org/W2064675550","https://openalex.org/W2112796928","https://openalex.org/W2194775991","https://openalex.org/W2572107491","https://openalex.org/W2606065148","https://openalex.org/W2808409763","https://openalex.org/W2896422817","https://openalex.org/W2934843808","https://openalex.org/W2997909961","https://openalex.org/W3087463235","https://openalex.org/W3127520698","https://openalex.org/W3138153888","https://openalex.org/W3138597937","https://openalex.org/W3175215793","https://openalex.org/W3175919946","https://openalex.org/W3185513611","https://openalex.org/W3214330255","https://openalex.org/W4213446860","https://openalex.org/W4214807529","https://openalex.org/W4220825043","https://openalex.org/W4221129260","https://openalex.org/W4226047321","https://openalex.org/W4290948380","https://openalex.org/W4312266567","https://openalex.org/W4312996082","https://openalex.org/W4366203286","https://openalex.org/W4382237486","https://openalex.org/W4385187226","https://openalex.org/W4387359750","https://openalex.org/W4388856889","https://openalex.org/W4391724758","https://openalex.org/W4393161237","https://openalex.org/W4399374631","https://openalex.org/W4400076000","https://openalex.org/W4400188454","https://openalex.org/W4403517682","https://openalex.org/W4403600947","https://openalex.org/W4404036747","https://openalex.org/W4407673009","https://openalex.org/W4417131378"],"related_works":[],"abstract_inverted_index":{"Federated":[0],"Learning":[1],"(FL)":[2],"offers":[3],"collaborative":[4],"model":[5,139],"training":[6],"across":[7],"multiple":[8],"decentralized":[9],"devices":[10],"without":[11],"the":[12,99,134,137,141,193,201,217,232,237,240,246],"need":[13],"to":[14,28,48,60,123,132,221],"share":[15],"data":[16,21],"directly,":[17],"enhancing":[18],"privacy":[19],"and":[20,127,140,163],"security.":[22],"However,":[23],"FL":[24,112,209],"systems":[25],"are":[26,46],"susceptible":[27],"backdoor":[29,170,185],"attacks,":[30,171],"where":[31],"malicious":[32,81,102,125,213],"clients":[33,103,126],"inject":[34],"poisoned":[35,56,142],"weights":[36,53],"during":[37],"training.":[38],"Existing":[39],"defenses,":[40,155],"primarily":[41],"based":[42],"on":[43,192,197,231],"anomaly":[44],"detection,":[45],"prone":[47],"erroneous":[49],"rejections":[50],"of":[51,80,101,229,239,250],"normal":[52],"while":[54,187,223],"accepting":[55],"ones,":[57,143],"largely":[58],"due":[59],"shortcomings":[61],"in":[62,183,207],"quantifying":[63],"similarities":[64],"among":[65],"client":[66,119],"models.":[67],"Furthermore,":[68],"other":[69],"defenses":[70],"demonstrate":[71,179],"effectiveness":[72,182],"only":[73],"when":[74],"dealing":[75],"with":[76,153,211],"a":[77,94,118,189,225],"limited":[78],"number":[79],"clients,":[82,214],"typically":[83],"fewer":[84],"than":[85],"10%.":[86],"To":[87],"alleviate":[88],"these":[89],"vulnerabilities,":[90],"we":[91],"present":[92],"G2uardFL,":[93],"protective":[95],"framework":[96,116],"that":[97],"translates":[98],"detection":[100],"into":[104],"an":[105,129,208],"attributed":[106],"graph":[107,120],"clustering":[108,121],"problem,":[109],"thus":[110],"safeguarding":[111],"systems.":[113],"Specifically,":[114],"this":[115],"employs":[117],"approach":[122],"identify":[124],"integrates":[128],"adaptive":[130],"mechanism":[131],"amplify":[133],"discrepancy":[135],"between":[136],"aggregated":[138,194],"effectively":[144],"eliminating":[145],"embedded":[146],"backdoors.":[147],"Through":[148],"empirical":[149],"evaluation,":[150],"comparing":[151],"G2uardFL":[152,215],"cutting-edge":[154],"such":[156],"as":[157],"FLAME":[158],"(USENIX":[159],"Security":[160],"2022)":[161,166],"[37]":[162],"DeepSight":[164],"(NDSS":[165],"[43],":[167],"against":[168],"various":[169],"including":[172],"3DFed":[173],"(SP":[174],"2023)":[175],"[26],":[176],"our":[177],"results":[178],"its":[180],"significant":[181],"mitigating":[184],"attacks":[186],"having":[188],"negligible":[190],"impact":[191],"model\u2019s":[195],"performance":[196,228,238],"benign":[198],"samples":[199],"(i.e.,":[200],"primary":[202,226],"task":[203,227],"performance).":[204],"For":[205],"instance,":[206],"system":[210],"25%":[212],"reduces":[216],"attack":[218,247],"success":[219,248],"rate":[220,249],"10.61%,":[222],"maintaining":[224],"80.98%":[230],"CIFAR-10":[233],"dataset.":[234],"This":[235],"surpasses":[236],"best-performing":[241],"baseline,":[242],"which":[243],"merely":[244],"achieves":[245],"19.54%.":[251]},"counts_by_year":[{"year":2026,"cited_by_count":9},{"year":2025,"cited_by_count":1}],"updated_date":"2026-08-28T12:50:07.497085","created_date":"2025-12-03T00:00:00"}