{"id":"https://openalex.org/W4416922287","doi":"https://doi.org/10.1109/tnnls.2025.3636440","title":"User Isolation Poisoning on Decentralized Federated Learning: An Adversarial Message-Passing Graph Neural Network Approach","display_name":"User Isolation Poisoning on Decentralized Federated Learning: An Adversarial Message-Passing Graph Neural Network Approach","publication_year":2025,"publication_date":"2025-12-02","ids":{"openalex":"https://openalex.org/W4416922287","doi":"https://doi.org/10.1109/tnnls.2025.3636440","pmid":"https://pubmed.ncbi.nlm.nih.gov/41329589"},"language":"en","primary_location":{"id":"doi:10.1109/tnnls.2025.3636440","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnnls.2025.3636440","pdf_url":null,"source":{"id":"https://openalex.org/S4210175523","display_name":"IEEE Transactions on Neural Networks and Learning Systems","issn_l":"2162-237X","issn":["2162-237X","2162-2388"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Neural Networks and Learning Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","pubmed"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100399848","display_name":"Kai Li","orcid":"https://orcid.org/0000-0002-0517-2392"},"institutions":[{"id":"https://openalex.org/I172980758","display_name":"Kennesaw State University","ror":"https://ror.org/00jeqjx33","country_code":"US","type":"education","lineage":["https://openalex.org/I172980758"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kai Li","raw_affiliation_strings":["Department of Information Technology, Kennesaw State University, Marietta, GA, USA"],"raw_orcid":"https://orcid.org/0000-0002-0517-2392","affiliations":[{"raw_affiliation_string":"Department of Information Technology, Kennesaw State University, Marietta, GA, USA","institution_ids":["https://openalex.org/I172980758"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066484218","display_name":"Yilei Liang","orcid":"https://orcid.org/0000-0002-0520-8105"},"institutions":[{"id":"https://openalex.org/I241749","display_name":"University of Cambridge","ror":"https://ror.org/013meh722","country_code":"GB","type":"education","lineage":["https://openalex.org/I241749"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Yilei Liang","raw_affiliation_strings":["Department of Computer Science and Technology, University of Cambridge, Cambridge, U.K"],"raw_orcid":"https://orcid.org/0000-0002-0520-8105","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, University of Cambridge, Cambridge, U.K","institution_ids":["https://openalex.org/I241749"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056748708","display_name":"P\u00edetro Li\u00f3","orcid":"https://orcid.org/0000-0002-0540-5053"},"institutions":[{"id":"https://openalex.org/I241749","display_name":"University of Cambridge","ror":"https://ror.org/013meh722","country_code":"GB","type":"education","lineage":["https://openalex.org/I241749"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Pietro Li\u00f2","raw_affiliation_strings":["Department of Computer Science and Technology, University of Cambridge, Cambridge, U.K"],"raw_orcid":"https://orcid.org/0000-0002-0540-5053","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, University of Cambridge, Cambridge, U.K","institution_ids":["https://openalex.org/I241749"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101544825","display_name":"Wei Ni","orcid":"https://orcid.org/0000-0002-4933-594X"},"institutions":[{"id":"https://openalex.org/I12079687","display_name":"Edith Cowan University","ror":"https://ror.org/05jhnwe22","country_code":"AU","type":"education","lineage":["https://openalex.org/I12079687"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Wei Ni","raw_affiliation_strings":["School of Engineering, Edith Cowan University, Perth, Australia"],"raw_orcid":"https://orcid.org/0000-0002-4933-594X","affiliations":[{"raw_affiliation_string":"School of Engineering, Edith Cowan University, Perth, Australia","institution_ids":["https://openalex.org/I12079687"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042212040","display_name":"Falko Dressler","orcid":"https://orcid.org/0000-0002-1989-1750"},"institutions":[{"id":"https://openalex.org/I4577782","display_name":"Technische Universit\u00e4t Berlin","ror":"https://ror.org/03v4gjf40","country_code":"DE","type":"education","lineage":["https://openalex.org/I4577782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Falko Dressler","raw_affiliation_strings":["School of Electrical Engineering and Computer Science, TU Berlin, Telecommunication Networks Group (TKN), Berlin, Germany"],"raw_orcid":"https://orcid.org/0000-0002-1989-1750","affiliations":[{"raw_affiliation_string":"School of Electrical Engineering and Computer Science, TU Berlin, Telecommunication Networks Group (TKN), Berlin, Germany","institution_ids":["https://openalex.org/I4577782"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062093738","display_name":"Jon Crowcroft","orcid":"https://orcid.org/0000-0002-7013-0121"},"institutions":[{"id":"https://openalex.org/I241749","display_name":"University of Cambridge","ror":"https://ror.org/013meh722","country_code":"GB","type":"education","lineage":["https://openalex.org/I241749"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Jon Crowcroft","raw_affiliation_strings":["Department of Computer Science and Technology, University of Cambridge, Cambridge, U.K"],"raw_orcid":"https://orcid.org/0000-0002-7013-0121","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, University of Cambridge, Cambridge, U.K","institution_ids":["https://openalex.org/I241749"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5042130660","display_name":"\u00d6zg\u00fcr B. Akan","orcid":"https://orcid.org/0000-0003-2523-3858"},"institutions":[{"id":"https://openalex.org/I241749","display_name":"University of Cambridge","ror":"https://ror.org/013meh722","country_code":"GB","type":"education","lineage":["https://openalex.org/I241749"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Ozgur B. Akan","raw_affiliation_strings":["Department of Engineering, Division of Electrical Engineering, University of Cambridge, Cambridge, U.K"],"raw_orcid":"https://orcid.org/0000-0003-2523-3858","affiliations":[{"raw_affiliation_string":"Department of Engineering, Division of Electrical Engineering, University of Cambridge, Cambridge, U.K","institution_ids":["https://openalex.org/I241749"]}]}],"institutions":[],"countries_distinct_count":4,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.3042,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.86919317,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"37","issue":"6","first_page":"2619","last_page":"2633"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.33799999952316284,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.33799999952316284,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.3037000000476837,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.23739999532699585,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6779999732971191},{"id":"https://openalex.org/keywords/isolation","display_name":"Isolation (microbiology)","score":0.612500011920929},{"id":"https://openalex.org/keywords/federated-learning","display_name":"Federated learning","score":0.5728999972343445},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.49970000982284546},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.4950000047683716},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.45339998602867126},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.4343999922275543},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.3926999866962433}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8068000078201294},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6779999732971191},{"id":"https://openalex.org/C2775941552","wikidata":"https://www.wikidata.org/wiki/Q25212305","display_name":"Isolation (microbiology)","level":2,"score":0.612500011920929},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.5728999972343445},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.49970000982284546},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4950000047683716},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4627000093460083},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.45339998602867126},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.4343999922275543},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4032999873161316},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.3926999866962433},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.3741999864578247},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3675999939441681},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.32989999651908875},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.30889999866485596},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.3037000000476837},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3028999865055084},{"id":"https://openalex.org/C120174047","wikidata":"https://www.wikidata.org/wiki/Q847073","display_name":"Euclidean distance","level":2,"score":0.3005000054836273},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.2851000130176544},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.27480000257492065},{"id":"https://openalex.org/C129782007","wikidata":"https://www.wikidata.org/wiki/Q162886","display_name":"Euclidean geometry","level":2,"score":0.2574000060558319},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.25049999356269836},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.25049999356269836}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tnnls.2025.3636440","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnnls.2025.3636440","pdf_url":null,"source":{"id":"https://openalex.org/S4210175523","display_name":"IEEE Transactions on Neural Networks and Learning Systems","issn_l":"2162-237X","issn":["2162-237X","2162-2388"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Neural Networks and Learning Systems","raw_type":"journal-article"},{"id":"pmid:41329589","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/41329589","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE transactions on neural networks and learning systems","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"This":[0],"article":[1],"proposes":[2],"a":[3,29,79,124],"new":[4,47],"cyberattack":[5],"on":[6],"decentralized":[7],"federated":[8],"learning":[9,41,71],"(DFL),":[10],"named":[11],"user":[12,31],"isolation":[13],"poisoning":[14],"(UIP).":[15],"While":[16],"following":[17],"the":[18,40,46,53,65,70,96,101,127,132,146,162],"standard":[19],"DFL":[20,147,166],"protocol":[21],"of":[22,45,55,110,136,165],"receiving":[23],"and":[24,34,169,175],"aggregating":[25],"benign":[26,56,112,137],"local":[27,113,138],"models,":[28,139],"malicious":[30,128],"strategically":[32],"generates":[33],"distributes":[35],"compromised":[36],"updates":[37],"to":[38,51,68],"undermine":[39],"process.":[42,148],"The":[43,149],"objective":[44],"UIP":[48,151],"attack":[49,152],"is":[50,153],"diminish":[52],"impact":[54],"users":[57,129],"by":[58,167],"isolating":[59],"their":[60,142],"model":[61,67,82,114],"updates,":[62],"thereby":[63,140],"manipulating":[64],"shared":[66],"reduce":[69],"accuracy.":[72],"To":[73],"realize":[74],"this":[75],"attack,":[76],"we":[77],"design":[78],"novel":[80],"threat":[81],"that":[83,158],"leverages":[84],"an":[85],"adversarial":[86,97],"message-passing":[87],"graph":[88],"(MPG)":[89],"neural":[90],"network.":[91],"Through":[92],"iterative":[93],"message":[94],"passing,":[95],"MPG":[98],"progressively":[99],"refines":[100],"representations":[102],"(also":[103],"known":[104],"as":[105],"embeddings":[106],"or":[107],"hidden":[108],"states)":[109],"each":[111],"update.":[115],"By":[116],"orchestrating":[117],"feature":[118],"exchanges":[119],"among":[120],"connected":[121],"nodes":[122],"in":[123,155],"targeted":[125],"manner,":[126],"effectively":[130,160],"curtail":[131],"genuine":[133],"data":[134],"features":[135],"diminishing":[141],"overall":[143],"influence":[144],"within":[145],"MPG-based":[150],"implemented":[154],"PyTorch,":[156],"demonstrating":[157],"it":[159],"reduces":[161],"test":[163],"accuracy":[164],"49.5%":[168],"successfully":[170],"evades":[171],"existing":[172],"cosine":[173],"similarity-":[174],"Euclidean":[176],"distance-based":[177],"defense":[178],"strategies.":[179]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-12-02T00:00:00"}