{"id":"https://openalex.org/W4396843895","doi":"https://doi.org/10.1145/3589335.3651490","title":"Detecting Poisoning Attacks on Federated Learning Using Gradient-Weighted Class Activation Mapping","display_name":"Detecting Poisoning Attacks on Federated Learning Using Gradient-Weighted Class Activation Mapping","publication_year":2024,"publication_date":"2024-05-12","ids":{"openalex":"https://openalex.org/W4396843895","doi":"https://doi.org/10.1145/3589335.3651490"},"language":"en","primary_location":{"id":"doi:10.1145/3589335.3651490","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3589335.3651490","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3589335.3651490","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Companion Proceedings of the ACM Web Conference 2024","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3589335.3651490","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5023908179","display_name":"Jingjing Zheng","orcid":"https://orcid.org/0000-0002-5728-9453"},"institutions":[{"id":"https://openalex.org/I4210137384","display_name":"Centre for Health Technology and Services Research","ror":"https://ror.org/0434vme59","country_code":"PT","type":"facility","lineage":["https://openalex.org/I4210137384"]}],"countries":["PT"],"is_corresponding":false,"raw_author_name":"Jingjing Zheng","raw_affiliation_strings":["ISEP, CISTER Research Centre, Porto, Portugal"],"raw_orcid":"https://orcid.org/0000-0002-5728-9453","affiliations":[{"raw_affiliation_string":"ISEP, CISTER Research Centre, Porto, Portugal","institution_ids":["https://openalex.org/I4210137384"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100399848","display_name":"Kai Li","orcid":"https://orcid.org/0000-0002-0517-2392"},"institutions":[{"id":"https://openalex.org/I241749","display_name":"University of Cambridge","ror":"https://ror.org/013meh722","country_code":"GB","type":"education","lineage":["https://openalex.org/I241749"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Kai Li","raw_affiliation_strings":["University of Cambridge, Cambridge, United Kingdom"],"raw_orcid":"https://orcid.org/0000-0002-0517-2392","affiliations":[{"raw_affiliation_string":"University of Cambridge, Cambridge, United Kingdom","institution_ids":["https://openalex.org/I241749"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049765501","display_name":"Xin Yuan","orcid":"https://orcid.org/0000-0002-9167-1613"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xin Yuan","raw_affiliation_strings":["CSIRO, Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0002-9167-1613","affiliations":[{"raw_affiliation_string":"CSIRO, Sydney, Australia","institution_ids":["https://openalex.org/I1292875679"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Wei Ni","orcid":"https://orcid.org/0000-0003-0780-4637"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Wei Ni","raw_affiliation_strings":["CSIRO, Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0003-0780-4637","affiliations":[{"raw_affiliation_string":"CSIRO, Sydney, Australia","institution_ids":["https://openalex.org/I1292875679"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5078183455","display_name":"Eduardo Tovar","orcid":"https://orcid.org/0000-0001-8979-3876"},"institutions":[{"id":"https://openalex.org/I4210137384","display_name":"Centre for Health Technology and Services Research","ror":"https://ror.org/0434vme59","country_code":"PT","type":"facility","lineage":["https://openalex.org/I4210137384"]}],"countries":["PT"],"is_corresponding":false,"raw_author_name":"Eduardo Tovar","raw_affiliation_strings":["CISTER Research Centre, Porto, Portugal"],"raw_orcid":"https://orcid.org/0000-0001-8979-3876","affiliations":[{"raw_affiliation_string":"CISTER Research Centre, Porto, Portugal","institution_ids":["https://openalex.org/I4210137384"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":12,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"714","last_page":"717"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9908999800682068,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9890999794006348,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7606469392776489},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.6673868894577026},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4114410877227783},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3738865554332733}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7606469392776489},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.6673868894577026},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4114410877227783},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3738865554332733}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3589335.3651490","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3589335.3651490","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3589335.3651490","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Companion Proceedings of the ACM Web Conference 2024","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3589335.3651490","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3589335.3651490","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3589335.3651490","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Companion Proceedings of the ACM Web Conference 2024","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4396843895.pdf"},"referenced_works_count":11,"referenced_works":["https://openalex.org/W2067713319","https://openalex.org/W2194775991","https://openalex.org/W2295107390","https://openalex.org/W2743138268","https://openalex.org/W2912083425","https://openalex.org/W2962858109","https://openalex.org/W2963446712","https://openalex.org/W2982083293","https://openalex.org/W4290948380","https://openalex.org/W4293195534","https://openalex.org/W4389261134"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052","https://openalex.org/W2382290278","https://openalex.org/W4395014643"],"abstract_inverted_index":{"This":[0],"paper":[1],"proposes":[2],"a":[3,28,43,58],"new":[4],"defense":[5],"mechanism,":[6],"namely,":[7],"GCAMA,":[8],"against":[9],"model":[10,50,55,118],"poisoning":[11],"attacks":[12],"on":[13],"Federated":[14],"learning":[15,91],"(FL),":[16],"which":[17],"integrates":[18],"<u>G</u>radient-weighted":[19],"<u>C</u>lass":[20],"<u>A</u>ctivation":[21],"<u>M</u>apping":[22],"(GradCAM)":[23],"and":[24,71,81,88,95,100],"<u>A</u>utoencoder":[25],"to":[26,35,120],"offer":[27],"scientifically":[29],"more":[30],"powerful":[31],"detection":[32],"capability":[33],"compared":[34,119],"existing":[36],"Euclidean":[37],"distance-based":[38],"approaches.":[39],"Particularly,":[40],"GCAMA":[41,110],"generates":[42],"heat":[44,69,79],"map":[45],"for":[46],"each":[47,53],"uploaded":[48],"local":[49,54,83],"update,":[51],"transforming":[52],"update":[56],"into":[57],"lower-dimensional,":[59],"visual":[60],"representation,":[61],"thereby":[62],"accentuating":[63],"the":[64,68,73,121],"hidden":[65],"features":[66],"of":[67,76,115],"maps":[70,80],"increasing":[72],"success":[74],"rate":[75],"identifying":[77],"anomalous":[78],"malicious":[82],"models.":[84],"We":[85],"test":[86,113],"ResNet-18":[87],"MobileNetV3-Large":[89],"deep":[90],"models":[92],"with":[93],"CIFAR-10":[94],"GTSRB":[96],"datasets":[97],"under":[98],"Non-Independent":[99],"Identically":[101],"Distributed":[102],"(Non-IID)":[103],"setting,":[104],"respectively.":[105],"The":[106],"results":[107],"demonstrate":[108],"that":[109],"offers":[111],"superior":[112],"accuracy":[114],"FL":[116],"global":[117],"state-of-the-art":[122],"methods.":[123],"Our":[124],"code":[125],"is":[126],"available":[127],"at:":[128],"https://github.com/jjzgeeks/GradCAM-AE":[129]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}