{"id":"https://openalex.org/W7154158124","doi":"https://doi.org/10.1109/tifs.2026.3683603","title":"Leveraging Confidence Consistency for Poisoned Sample Detection in Vertical Federated Learning","display_name":"Leveraging Confidence Consistency for Poisoned Sample Detection in Vertical Federated Learning","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7154158124","doi":"https://doi.org/10.1109/tifs.2026.3683603"},"language":null,"primary_location":{"id":"doi:10.1109/tifs.2026.3683603","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2026.3683603","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Haoran Cheng","orcid":"https://orcid.org/0009-0005-8089-5346"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haoran Cheng","raw_affiliation_strings":["School of Computer Science and Technology, University of Science and Technology of China, Hefei, China"],"raw_orcid":"https://orcid.org/0009-0005-8089-5346","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, University of Science and Technology of China, Hefei, China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100322320","display_name":"Lan Zhang","orcid":"https://orcid.org/0000-0003-1004-8588"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lan Zhang","raw_affiliation_strings":["School of Computer Science and Technology, University of Science and Technology of China, Hefei, China"],"raw_orcid":"https://orcid.org/0000-0003-1004-8588","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, University of Science and Technology of China, Hefei, China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123789720","display_name":"Quanchao Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I180662265","display_name":"China Mobile (China)","ror":"https://ror.org/05gftfe97","country_code":"CN","type":"company","lineage":["https://openalex.org/I180662265"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Quanchao Liu","raw_affiliation_strings":["Department of Security Technology Research, China Mobile Research Institute, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Security Technology Research, China Mobile Research Institute, Beijing, China","institution_ids":["https://openalex.org/I180662265"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111332562","display_name":"Yetian He","orcid":null},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yetian He","raw_affiliation_strings":["School of Computer Science and Technology, University of Science and Technology of China, Hefei, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, University of Science and Technology of China, Hefei, China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103789158","display_name":"Junyang Wang","orcid":"https://orcid.org/0009-0006-0716-136X"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Junyang Wang","raw_affiliation_strings":["School of Computer Science and Technology, University of Science and Technology of China, Hefei, China"],"raw_orcid":"https://orcid.org/0009-0006-0716-136X","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, University of Science and Technology of China, Hefei, China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5133493513","display_name":"Peng Ran","orcid":null},"institutions":[{"id":"https://openalex.org/I180662265","display_name":"China Mobile (China)","ror":"https://ror.org/05gftfe97","country_code":"CN","type":"company","lineage":["https://openalex.org/I180662265"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peng Ran","raw_affiliation_strings":["Department of Security Technology Research, China Mobile Research Institute, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Security Technology Research, China Mobile Research Institute, Beijing, China","institution_ids":["https://openalex.org/I180662265"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.42071986,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"21","issue":null,"first_page":"4831","last_page":"4845"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.7646999955177307,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.7646999955177307,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11719","display_name":"Data Quality and Management","score":0.04089999943971634,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.032499998807907104,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/consistency","display_name":"Consistency (knowledge bases)","score":0.57669997215271},{"id":"https://openalex.org/keywords/sample","display_name":"Sample (material)","score":0.5206000208854675},{"id":"https://openalex.org/keywords/federated-learning","display_name":"Federated learning","score":0.47350001335144043},{"id":"https://openalex.org/keywords/data-consistency","display_name":"Data consistency","score":0.31949999928474426}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8434000015258789},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.57669997215271},{"id":"https://openalex.org/C198531522","wikidata":"https://www.wikidata.org/wiki/Q485146","display_name":"Sample (material)","level":2,"score":0.5206000208854675},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.47350001335144043},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4221999943256378},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.32249999046325684},{"id":"https://openalex.org/C93361087","wikidata":"https://www.wikidata.org/wiki/Q4426698","display_name":"Data consistency","level":2,"score":0.31949999928474426},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3158999979496002},{"id":"https://openalex.org/C70061542","wikidata":"https://www.wikidata.org/wiki/Q989016","display_name":"Distributed database","level":2,"score":0.3003000020980835},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.2596000134944916}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2026.3683603","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2026.3683603","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.4456339478492737,"display_name":"Zero hunger","id":"https://metadata.un.org/sdg/2"}],"awards":[{"id":"https://openalex.org/G1978388244","display_name":null,"funder_award_id":"2021YFB2900103","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G4218037261","display_name":null,"funder_award_id":"62441228","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4405030403","display_name":null,"funder_award_id":"202423k09020016","funder_id":"https://openalex.org/F4320334897","funder_display_name":"Natural Science Foundation of Anhui Province"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320334897","display_name":"Natural Science Foundation of Anhui Province","ror":null},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Vertical":[0],"federated":[1,49],"learning":[2,50],"(VFL)":[3],"enables":[4],"multiple":[5,140],"parties":[6],"with":[7],"non-overlapping":[8],"features":[9,37],"to":[10,27,35,68,87,156],"collaboratively":[11],"train":[12],"a":[13,78,96,173],"model":[14,40,107,120],"without":[15],"sharing":[16],"raw":[17,36],"data.":[18],"However,":[19],"its":[20],"split-learning":[21],"architecture":[22],"makes":[23],"VFL":[24,54,188],"particularly":[25],"vulnerable":[26,67],"targeted":[28],"backdoor":[29,70,113,177],"attacks,":[30],"while":[31],"also":[32],"limiting":[33],"access":[34],"and":[38,121,154,181],"complete":[39],"parameters.":[41],"These":[42],"constraints":[43],"render":[44],"defenses":[45,55],"developed":[46],"for":[47,176,185],"horizontal":[48],"inapplicable.":[51],"Moreover,":[52],"existing":[53],"neglect":[56],"the":[57,62,118,123,183],"defender\u2019s":[58],"privileged":[59,85],"role":[60],"as":[61],"label":[63],"holder,":[64],"leaving":[65],"them":[66],"adaptive":[69,165],"strategies.":[71],"In":[72],"this":[73,84],"paper,":[74],"we":[75],"propose":[76],"CONFIRM,":[77],"post-training":[79],"defense":[80,178],"framework":[81],"that":[82,143,169],"leverages":[83],"position":[86],"detect":[88],"poisoned":[89,99,130],"samples.":[90],"Our":[91],"approach":[92],"is":[93],"driven":[94],"by":[95],"key":[97],"insight:":[98],"samples":[100,131],"exhibit":[101],"abnormally":[102],"stable":[103],"prediction":[104,126],"confidence":[105],"under":[106],"perturbations,":[108],"an":[109],"intrinsic":[110],"property":[111],"of":[112,125],"attacks.":[114,166],"By":[115],"actively":[116],"perturbing":[117],"top":[119],"measuring":[122],"consistency":[124],"confidence,":[127],"CONFIRM":[128,144,161],"detects":[129],"based":[132],"on":[133],"their":[134],"perturbation":[135],"robustness.":[136],"Extensive":[137],"experiments":[138],"across":[139],"benchmarks":[141],"show":[142],"consistently":[145],"outperforms":[146],"state-of-the-art":[147],"methods,":[148],"achieving":[149],"AUROC":[150],"scores":[151],"exceeding":[152],"99.9%":[153],"up":[155],"21.2%":[157],"higher":[158],"F1-scores.":[159],"Furthermore,":[160],"remains":[162],"effective":[163],"against":[164],"We":[167],"believe":[168],"our":[170],"findings":[171],"highlight":[172],"promising":[174],"direction":[175],"in":[179],"VFL,":[180],"pave":[182],"way":[184],"more":[186],"secure":[187],"systems.":[189]},"counts_by_year":[],"updated_date":"2026-05-16T06:04:12.930555","created_date":"2026-04-14T00:00:00"}