{"id":"https://openalex.org/W7124850519","doi":"https://doi.org/10.1109/tifs.2026.3655513","title":"EndPCA: Ensemble Defense With Provably Convergent Aggregation Against Poisoning Attacks in Federated Learning","display_name":"EndPCA: Ensemble Defense With Provably Convergent Aggregation Against Poisoning Attacks in Federated Learning","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7124850519","doi":"https://doi.org/10.1109/tifs.2026.3655513"},"language":null,"primary_location":{"id":"doi:10.1109/tifs.2026.3655513","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2026.3655513","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100405281","display_name":"Mingyue Zhang","orcid":"https://orcid.org/0000-0002-3003-8902"},"institutions":[{"id":"https://openalex.org/I142108993","display_name":"Southwest University","ror":"https://ror.org/01kj4z117","country_code":"CN","type":"education","lineage":["https://openalex.org/I142108993"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingyue Zhang","raw_affiliation_strings":["College of Computer and Information Science, Southwest University, Chongqing, China"],"raw_orcid":"https://orcid.org/0000-0002-3003-8902","affiliations":[{"raw_affiliation_string":"College of Computer and Information Science, Southwest University, Chongqing, China","institution_ids":["https://openalex.org/I142108993"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123402749","display_name":"Chenyu Hu","orcid":null},"institutions":[{"id":"https://openalex.org/I142108993","display_name":"Southwest University","ror":"https://ror.org/01kj4z117","country_code":"CN","type":"education","lineage":["https://openalex.org/I142108993"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chenyu Hu","raw_affiliation_strings":["College of Computer and Information Science, Southwest University, Chongqing, China"],"raw_orcid":"https://orcid.org/0009-0004-9123-4036","affiliations":[{"raw_affiliation_string":"College of Computer and Information Science, Southwest University, Chongqing, China","institution_ids":["https://openalex.org/I142108993"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123393061","display_name":"Xuelian Cao","orcid":null},"institutions":[{"id":"https://openalex.org/I142108993","display_name":"Southwest University","ror":"https://ror.org/01kj4z117","country_code":"CN","type":"education","lineage":["https://openalex.org/I142108993"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xuelian Cao","raw_affiliation_strings":["College of Computer and Information Science, Southwest University, Chongqing, China"],"raw_orcid":"https://orcid.org/0000-0002-2227-9896","affiliations":[{"raw_affiliation_string":"College of Computer and Information Science, Southwest University, Chongqing, China","institution_ids":["https://openalex.org/I142108993"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005494115","display_name":"Atul Sajjanhar","orcid":"https://orcid.org/0000-0002-0445-0573"},"institutions":[{"id":"https://openalex.org/I149704539","display_name":"Deakin University","ror":"https://ror.org/02czsnj07","country_code":"AU","type":"education","lineage":["https://openalex.org/I149704539"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Atul Sajjanhar","raw_affiliation_strings":["Deakin University, Melbourne, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0002-0445-0573","affiliations":[{"raw_affiliation_string":"Deakin University, Melbourne, VIC, Australia","institution_ids":["https://openalex.org/I149704539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111672227","display_name":"Zheng Yang","orcid":null},"institutions":[{"id":"https://openalex.org/I142108993","display_name":"Southwest University","ror":"https://ror.org/01kj4z117","country_code":"CN","type":"education","lineage":["https://openalex.org/I142108993"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zheng Yang","raw_affiliation_strings":["College of Computer and Information Science, Southwest University, Chongqing, China"],"raw_orcid":"https://orcid.org/0000-0001-8610-9936","affiliations":[{"raw_affiliation_string":"College of Computer and Information Science, Southwest University, Chongqing, China","institution_ids":["https://openalex.org/I142108993"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016187400","display_name":"Muneeb Ul Hassan","orcid":"https://orcid.org/0000-0001-5109-9547"},"institutions":[{"id":"https://openalex.org/I149704539","display_name":"Deakin University","ror":"https://ror.org/02czsnj07","country_code":"AU","type":"education","lineage":["https://openalex.org/I149704539"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Muneeb Ul Hassan","raw_affiliation_strings":["Deakin University, Melbourne, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0001-5109-9547","affiliations":[{"raw_affiliation_string":"Deakin University, Melbourne, VIC, Australia","institution_ids":["https://openalex.org/I149704539"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Zhi Jin","orcid":"https://orcid.org/0000-0003-1087-226X"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhi Jin","raw_affiliation_strings":["School of Computer Science, Peking University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-1087-226X","affiliations":[{"raw_affiliation_string":"School of Computer Science, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5123376984","display_name":"Jialong Li","orcid":null},"institutions":[{"id":"https://openalex.org/I150744194","display_name":"Waseda University","ror":"https://ror.org/00ntfnx83","country_code":"JP","type":"education","lineage":["https://openalex.org/I150744194"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Jialong Li","raw_affiliation_strings":["Waseda Institute for Advanced Study, Waseda University, Tokyo, Japan"],"raw_orcid":"https://orcid.org/0000-0003-4327-1807","affiliations":[{"raw_affiliation_string":"Waseda Institute for Advanced Study, Waseda University, Tokyo, Japan","institution_ids":["https://openalex.org/I150744194"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.076549,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"21","issue":null,"first_page":"1438","last_page":"1453"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5741999745368958,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5741999745368958,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.3140999972820282,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.012799999676644802,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/federated-learning","display_name":"Federated learning","score":0.7531999945640564},{"id":"https://openalex.org/keywords/entropy","display_name":"Entropy (arrow of time)","score":0.5285999774932861},{"id":"https://openalex.org/keywords/convergence","display_name":"Convergence (economics)","score":0.4708999991416931},{"id":"https://openalex.org/keywords/byzantine-fault-tolerance","display_name":"Byzantine fault tolerance","score":0.4415000081062317},{"id":"https://openalex.org/keywords/ensemble-learning","display_name":"Ensemble learning","score":0.42969998717308044},{"id":"https://openalex.org/keywords/bounded-function","display_name":"Bounded function","score":0.423799991607666}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8795999884605408},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.7531999945640564},{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.5285999774932861},{"id":"https://openalex.org/C2777303404","wikidata":"https://www.wikidata.org/wiki/Q759757","display_name":"Convergence (economics)","level":2,"score":0.4708999991416931},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4458000063896179},{"id":"https://openalex.org/C168021876","wikidata":"https://www.wikidata.org/wiki/Q1353446","display_name":"Byzantine fault tolerance","level":3,"score":0.4415000081062317},{"id":"https://openalex.org/C45942800","wikidata":"https://www.wikidata.org/wiki/Q245652","display_name":"Ensemble learning","level":2,"score":0.42969998717308044},{"id":"https://openalex.org/C34388435","wikidata":"https://www.wikidata.org/wiki/Q2267362","display_name":"Bounded function","level":2,"score":0.423799991607666},{"id":"https://openalex.org/C204323151","wikidata":"https://www.wikidata.org/wiki/Q905424","display_name":"Range (aeronautics)","level":2,"score":0.375900000333786},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3400000035762787},{"id":"https://openalex.org/C4679612","wikidata":"https://www.wikidata.org/wiki/Q866298","display_name":"Aggregate (composite)","level":2,"score":0.3253999948501587},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.3208000063896179},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.29510000348091125},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.27900001406669617},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.2786000072956085},{"id":"https://openalex.org/C171752962","wikidata":"https://www.wikidata.org/wiki/Q255166","display_name":"Kullback\u2013Leibler divergence","level":2,"score":0.2736000120639801},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.26809999346733093}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2026.3655513","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2026.3655513","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G6056230449","display_name":null,"funder_award_id":"62372386","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6363971553","display_name":null,"funder_award_id":"2025YFE0220300","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7305520508","display_name":null,"funder_award_id":"62402400","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7698593203","display_name":null,"funder_award_id":"SWU-KQ23005","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":37,"referenced_works":["https://openalex.org/W1968969471","https://openalex.org/W1988790447","https://openalex.org/W1999588868","https://openalex.org/W2296719434","https://openalex.org/W2601243251","https://openalex.org/W2753783305","https://openalex.org/W2962763344","https://openalex.org/W2965497096","https://openalex.org/W2998402482","https://openalex.org/W3013561710","https://openalex.org/W3042070225","https://openalex.org/W3097496264","https://openalex.org/W3127520698","https://openalex.org/W3128385712","https://openalex.org/W3138153888","https://openalex.org/W3138597937","https://openalex.org/W3155189475","https://openalex.org/W4213110664","https://openalex.org/W4213251304","https://openalex.org/W4214758645","https://openalex.org/W4221129260","https://openalex.org/W4281398987","https://openalex.org/W4290948380","https://openalex.org/W4304091855","https://openalex.org/W4312383650","https://openalex.org/W4312996082","https://openalex.org/W4377293783","https://openalex.org/W4382237486","https://openalex.org/W4383068680","https://openalex.org/W4384948739","https://openalex.org/W4385187226","https://openalex.org/W4385270107","https://openalex.org/W4391724758","https://openalex.org/W4404036747","https://openalex.org/W4409014393","https://openalex.org/W4410358938","https://openalex.org/W4412536328"],"related_works":[],"abstract_inverted_index":{"Despite":[0],"its":[1,110],"success":[2],"in":[3],"many":[4],"applications,":[5],"federated":[6],"learning":[7],"is":[8],"increasingly":[9],"vulnerable":[10],"to":[11,57,74],"sophisticated":[12],"poisoning":[13,80],"attacks.":[14],"Existing":[15],"defenses,":[16],"particularly":[17],"Byzantine":[18],"Robust":[19],"Aggregation":[20],"Rules":[21],"(BRARs),":[22],"offer":[23],"some":[24],"protection":[25],"but":[26],"rely":[27],"on":[28],"strong":[29],"assumptions":[30],"or":[31],"challenging":[32],"technical":[33],"prerequisites.":[34],"To":[35],"address":[36],"these":[37],"shortcomings,":[38],"we":[39],"propose":[40],"an":[41,64],"<italic":[42],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[43],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">ensemble":[44],"defense":[45],"with":[46,96],"provably":[47],"convergent":[48],"aggregation</i>":[49],"(EndPCA).":[50],"By":[51],"using":[52],"the":[53],"entropy":[54],"weight":[55],"method":[56],"consolidate":[58],"scores":[59],"from":[60],"multiple":[61],"BRARs":[62,73],"into":[63],"ensemble":[65],"trust":[66],"score,":[67],"it":[68],"effectively":[69],"integrates":[70],"heterogeneous":[71],"weak":[72],"resist":[75],"a":[76],"wide":[77],"range":[78],"of":[79,94],"attacks":[81],"under":[82],"practical":[83],"assumptions.":[84],"We":[85],"formally":[86],"prove":[87],"that":[88,103],"EndPCA":[89,104],"can":[90],"provide":[91],"theoretical":[92],"guarantees":[93],"convergence":[95],"bounded":[97],"error.":[98],"Our":[99],"empirical":[100],"evaluations":[101],"show":[102],"consistently":[105],"outperforms":[106],"existing":[107],"BRARs,":[108],"demonstrating":[109],"effectiveness":[111],"across":[112],"various":[113],"scenarios.":[114]},"counts_by_year":[],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2026-01-21T00:00:00"}