{"id":"https://openalex.org/W4417285847","doi":"https://doi.org/10.1109/tpami.2025.3646639","title":"Exploring the Vulnerabilities of Federated Learning: A Deep Dive Into Gradient Inversion Attacks","display_name":"Exploring the Vulnerabilities of Federated Learning: A Deep Dive Into Gradient Inversion Attacks","publication_year":2025,"publication_date":"2025-12-22","ids":{"openalex":"https://openalex.org/W4417285847","doi":"https://doi.org/10.1109/tpami.2025.3646639","pmid":"https://pubmed.ncbi.nlm.nih.gov/41428904"},"language":"en","primary_location":{"id":"doi:10.1109/tpami.2025.3646639","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tpami.2025.3646639","pdf_url":null,"source":{"id":"https://openalex.org/S199944782","display_name":"IEEE Transactions on Pattern Analysis and Machine Intelligence","issn_l":"0162-8828","issn":["0162-8828","1939-3539","2160-9292"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Pattern Analysis and Machine Intelligence","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref","datacite","pubmed"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2503.11514","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Pengxin Guo","orcid":"https://orcid.org/0009-0002-4042-795X"},"institutions":[{"id":"https://openalex.org/I177725633","display_name":"Chinese University of Hong Kong","ror":"https://ror.org/00t33hh48","country_code":"HK","type":"education","lineage":["https://openalex.org/I177725633"]},{"id":"https://openalex.org/I889458895","display_name":"University of Hong Kong","ror":"https://ror.org/02zhqgq86","country_code":"HK","type":"education","lineage":["https://openalex.org/I889458895"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Pengxin Guo","raw_affiliation_strings":["School of Computing and Data Science, The University of Hong Kong, Hong Kong, China"],"raw_orcid":"https://orcid.org/0009-0002-4042-795X","affiliations":[{"raw_affiliation_string":"School of Computing and Data Science, The University of Hong Kong, Hong Kong, China","institution_ids":["https://openalex.org/I177725633","https://openalex.org/I889458895"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Runxi Wang","orcid":"https://orcid.org/0009-0000-5956-1150"},"institutions":[{"id":"https://openalex.org/I177725633","display_name":"Chinese University of Hong Kong","ror":"https://ror.org/00t33hh48","country_code":"HK","type":"education","lineage":["https://openalex.org/I177725633"]},{"id":"https://openalex.org/I889458895","display_name":"University of Hong Kong","ror":"https://ror.org/02zhqgq86","country_code":"HK","type":"education","lineage":["https://openalex.org/I889458895"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Runxi Wang","raw_affiliation_strings":["School of Computing and Data Science, The University of Hong Kong, Hong Kong, China"],"raw_orcid":"https://orcid.org/0009-0000-5956-1150","affiliations":[{"raw_affiliation_string":"School of Computing and Data Science, The University of Hong Kong, Hong Kong, China","institution_ids":["https://openalex.org/I177725633","https://openalex.org/I889458895"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101293443","display_name":"Shuang Zeng","orcid":null},"institutions":[{"id":"https://openalex.org/I889458895","display_name":"University of Hong Kong","ror":"https://ror.org/02zhqgq86","country_code":"HK","type":"education","lineage":["https://openalex.org/I889458895"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Shuang Zeng","raw_affiliation_strings":["Department of Mathematics, The University of Hong Kong, Hong Kong, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Mathematics, The University of Hong Kong, Hong Kong, China","institution_ids":["https://openalex.org/I889458895"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102328869","display_name":"Jinjing Zhu","orcid":"https://orcid.org/0000-0001-7279-0951"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jinjing Zhu","raw_affiliation_strings":["Thrust of Artificial Intelligence, The Hong Kong University of Science and Technology (Guangzhou), Guangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Thrust of Artificial Intelligence, The Hong Kong University of Science and Technology (Guangzhou), Guangzhou, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":null,"display_name":"Haoning Jiang","orcid":"https://orcid.org/0009-0007-9000-6930"},"institutions":[{"id":"https://openalex.org/I3045169105","display_name":"Southern University of Science and Technology","ror":"https://ror.org/049tv2d57","country_code":"CN","type":"education","lineage":["https://openalex.org/I3045169105"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haoning Jiang","raw_affiliation_strings":["Department of Electronic and Electrical Engineering, Southern University of Science and Technology, Shenzhen, China"],"raw_orcid":"https://orcid.org/0009-0007-9000-6930","affiliations":[{"raw_affiliation_string":"Department of Electronic and Electrical Engineering, Southern University of Science and Technology, Shenzhen, China","institution_ids":["https://openalex.org/I3045169105"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101689857","display_name":"Yanran Wang","orcid":"https://orcid.org/0000-0001-5881-5016"},"institutions":[{"id":"https://openalex.org/I97018004","display_name":"Stanford University","ror":"https://ror.org/00f54p054","country_code":"US","type":"education","lineage":["https://openalex.org/I97018004"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yanran Wang","raw_affiliation_strings":["Department of Biomedical Data Science, Stanford University, Stanford, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Biomedical Data Science, Stanford University, Stanford, CA, USA","institution_ids":["https://openalex.org/I97018004"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067640436","display_name":"Yuyin Zhou","orcid":"https://orcid.org/0000-0003-2232-9563"},"institutions":[{"id":"https://openalex.org/I185103710","display_name":"University of California, Santa Cruz","ror":"https://ror.org/03s65by71","country_code":"US","type":"education","lineage":["https://openalex.org/I185103710"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yuyin Zhou","raw_affiliation_strings":["Department of Computer Science and Engineering, University of California, Santa Cruz, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, University of California, Santa Cruz, CA, USA","institution_ids":["https://openalex.org/I185103710"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100442823","display_name":"Feifei Wang","orcid":"https://orcid.org/0000-0002-7422-2779"},"institutions":[{"id":"https://openalex.org/I889458895","display_name":"University of Hong Kong","ror":"https://ror.org/02zhqgq86","country_code":"HK","type":"education","lineage":["https://openalex.org/I889458895"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Feifei Wang","raw_affiliation_strings":["Department of Electrical and Electronic Engineering, The University of Hong Kong, Hong Kong, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical and Electronic Engineering, The University of Hong Kong, Hong Kong, China","institution_ids":["https://openalex.org/I889458895"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Hui Xiong","orcid":"https://orcid.org/0000-0001-6016-6465"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hui Xiong","raw_affiliation_strings":["Thrust of Artificial Intelligence, The Hong Kong University of Science and Technology (Guangzhou), Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-6016-6465","affiliations":[{"raw_affiliation_string":"Thrust of Artificial Intelligence, The Hong Kong University of Science and Technology (Guangzhou), Guangzhou, China","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5083630052","display_name":"Liangqiong Qu","orcid":"https://orcid.org/0000-0001-8235-7852"},"institutions":[{"id":"https://openalex.org/I177725633","display_name":"Chinese University of Hong Kong","ror":"https://ror.org/00t33hh48","country_code":"HK","type":"education","lineage":["https://openalex.org/I177725633"]},{"id":"https://openalex.org/I889458895","display_name":"University of Hong Kong","ror":"https://ror.org/02zhqgq86","country_code":"HK","type":"education","lineage":["https://openalex.org/I889458895"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Liangqiong Qu","raw_affiliation_strings":["School of Computing and Data Science, The University of Hong Kong, Hong Kong, China"],"raw_orcid":"https://orcid.org/0000-0001-8235-7852","affiliations":[{"raw_affiliation_string":"School of Computing and Data Science, The University of Hong Kong, Hong Kong, China","institution_ids":["https://openalex.org/I177725633","https://openalex.org/I889458895"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.9887,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.95250013,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":99},"biblio":{"volume":"48","issue":"4","first_page":"4810","last_page":"4826"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9057000279426575,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9057000279426575,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.05590000003576279,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.007799999788403511,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/limiting","display_name":"Limiting","score":0.6011999845504761},{"id":"https://openalex.org/keywords/categorization","display_name":"Categorization","score":0.5418000221252441},{"id":"https://openalex.org/keywords/pipeline","display_name":"Pipeline (software)","score":0.41260001063346863},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.4115000069141388},{"id":"https://openalex.org/keywords/data-sharing","display_name":"Data sharing","score":0.40790000557899475},{"id":"https://openalex.org/keywords/private-information-retrieval","display_name":"Private information retrieval","score":0.38749998807907104},{"id":"https://openalex.org/keywords/inversion","display_name":"Inversion (geology)","score":0.38280001282691956},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.3813000023365021}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7924000024795532},{"id":"https://openalex.org/C188198153","wikidata":"https://www.wikidata.org/wiki/Q1613840","display_name":"Limiting","level":2,"score":0.6011999845504761},{"id":"https://openalex.org/C94124525","wikidata":"https://www.wikidata.org/wiki/Q912550","display_name":"Categorization","level":2,"score":0.5418000221252441},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5260000228881836},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.41260001063346863},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.4115000069141388},{"id":"https://openalex.org/C2779965156","wikidata":"https://www.wikidata.org/wiki/Q5227350","display_name":"Data sharing","level":3,"score":0.40790000557899475},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3953999876976013},{"id":"https://openalex.org/C99221444","wikidata":"https://www.wikidata.org/wiki/Q1532069","display_name":"Private information retrieval","level":2,"score":0.38749998807907104},{"id":"https://openalex.org/C1893757","wikidata":"https://www.wikidata.org/wiki/Q3653001","display_name":"Inversion (geology)","level":3,"score":0.38280001282691956},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.3813000023365021},{"id":"https://openalex.org/C2776854237","wikidata":"https://www.wikidata.org/wiki/Q6031064","display_name":"Information sharing","level":2,"score":0.3594000041484833},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.35339999198913574},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.30799999833106995},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.3019999861717224},{"id":"https://openalex.org/C132964779","wikidata":"https://www.wikidata.org/wiki/Q2110223","display_name":"Raw data","level":2,"score":0.289900004863739},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2874999940395355},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.2865999937057495},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.28220000863075256},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.2515000104904175}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1109/tpami.2025.3646639","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tpami.2025.3646639","pdf_url":null,"source":{"id":"https://openalex.org/S199944782","display_name":"IEEE Transactions on Pattern Analysis and Machine Intelligence","issn_l":"0162-8828","issn":["0162-8828","1939-3539","2160-9292"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Pattern Analysis and Machine Intelligence","raw_type":"journal-article"},{"id":"pmid:41428904","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/41428904","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE transactions on pattern analysis and machine intelligence","raw_type":null},{"id":"pmh:oai:arXiv.org:2503.11514","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2503.11514","pdf_url":"https://arxiv.org/pdf/2503.11514","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2503.11514","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2503.11514","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2503.11514","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2503.11514","pdf_url":"https://arxiv.org/pdf/2503.11514","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4100402671","display_name":null,"funder_award_id":"62306253","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6967667819","display_name":null,"funder_award_id":"T2522030","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Federated":[0],"Learning":[1],"(FL)":[2],"has":[3,162],"emerged":[4],"as":[5],"a":[6,47,96,177],"promising":[7],"privacy-preserving":[8],"collaborative":[9],"model":[10],"training":[11],"paradigm":[12],"without":[13],"sharing":[14],"raw":[15],"data.":[16],"However,":[17],"recent":[18],"studies":[19,70],"have":[20,44,71],"revealed":[21],"that":[22,137,148,206,214],"private":[23],"information":[24,32],"can":[25,217],"still":[26,57],"be":[27,210],"leaked":[28],"through":[29],"shared":[30],"gradient":[31],"and":[33,51,81,101,115,123,142,165,187,193,204],"attacked":[34],"by":[35],"Gradient":[36],"Inversion":[37],"Attacks":[38],"(GIA).":[39],"While":[40],"many":[41,163],"GIA":[42,80,100,110,113,117,129],"methods":[43,55,104],"been":[45],"proposed,":[46],"detailed":[48],"analysis,":[49],"evaluation,":[50],"summary":[52],"of":[53,79,99,128,202],"these":[54,228],"are":[56],"lacking.":[58],"Although":[59],"various":[60],"survey":[61],"papers":[62],"summarize":[63],"existing":[64,103],"privacy":[65,191],"attacks":[66],"in":[67,86,130],"FL,":[68,131],"few":[69],"conducted":[72],"extensive":[73],"experiments":[74],"to":[75,181,225],"unveil":[76],"the":[77,125,135,151,200],"effectiveness":[78],"their":[82,139],"associated":[83],"limiting":[84],"factors":[85,136],"this":[87,91],"context.":[88],"To":[89],"fill":[90],"gap,":[92],"we":[93,120,175,207],"first":[94],"undertake":[95],"systematic":[97],"review":[98],"categorize":[102],"into":[105,134],"three":[106,126],"types,":[107],"i.e.,":[108],"optimization-based":[109],"(OP-GIA),":[111],"generation-based":[112],"(GEN-GIA),":[114],"analytics-based":[116],"(ANA-GIA).":[118],"Then,":[119],"comprehensively":[121],"analyze":[122],"evaluate":[124],"types":[127],"providing":[132],"insights":[133],"influence":[138],"performance,":[140,159],"practicality,":[141],"potential":[143],"threats.":[144],"Our":[145],"findings":[146],"indicate":[147],"OP-GIA":[149],"is":[150,167],"most":[152],"practical":[153],"attack":[154],"setting":[155],"despite":[156],"its":[157],"unsatisfactory":[158],"while":[160],"GEN-GIA":[161],"dependencies":[164],"ANA-GIA":[166],"easily":[168],"detectable,":[169],"making":[170],"them":[171],"both":[172],"impractical.":[173],"Finally,":[174],"offer":[176],"three-stage":[178],"defense":[179],"pipeline":[180],"users":[182],"when":[183],"designing":[184],"FL":[185,223],"frameworks":[186,224],"protocols":[188],"for":[189],"better":[190],"protection":[192],"share":[194],"some":[195],"future":[196],"research":[197],"directions":[198],"from":[199],"perspectives":[201],"attackers":[203],"defenders":[205],"believe":[208],"should":[209],"pursued.":[211],"We":[212],"hope":[213],"our":[215],"study":[216],"help":[218],"researchers":[219],"design":[220],"more":[221],"robust":[222],"defend":[226],"against":[227],"attacks.":[229]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2025-10-10T00:00:00"}