{"id":"https://openalex.org/W4401863166","doi":"https://doi.org/10.1145/3637528.3671545","title":"FedSecurity: A Benchmark for Attacks and Defenses in Federated Learning and Federated LLMs","display_name":"FedSecurity: A Benchmark for Attacks and Defenses in Federated Learning and Federated LLMs","publication_year":2024,"publication_date":"2024-08-24","ids":{"openalex":"https://openalex.org/W4401863166","doi":"https://doi.org/10.1145/3637528.3671545"},"language":"en","primary_location":{"id":"doi:10.1145/3637528.3671545","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3637528.3671545","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3637528.3671545","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 30th ACM SIGKDD Conference on Knowledge Discovery and Data Mining","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3637528.3671545","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101755193","display_name":"Shanshan Han","orcid":"https://orcid.org/0000-0002-2788-8834"},"institutions":[{"id":"https://openalex.org/I204250578","display_name":"University of California, Irvine","ror":"https://ror.org/04gyf1771","country_code":"US","type":"education","lineage":["https://openalex.org/I204250578"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Shanshan Han","raw_affiliation_strings":["University of California, Irvine, Irvine, CA, USA"],"affiliations":[{"raw_affiliation_string":"University of California, Irvine, Irvine, CA, USA","institution_ids":["https://openalex.org/I204250578"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056993728","display_name":"Baturalp Buyukates","orcid":"https://orcid.org/0000-0002-5941-0667"},"institutions":[{"id":"https://openalex.org/I1174212","display_name":"University of Southern California","ror":"https://ror.org/03taz7m60","country_code":"US","type":"education","lineage":["https://openalex.org/I1174212"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Baturalp Buyukates","raw_affiliation_strings":["University of Southern California, Los Angeles, CA, USA"],"affiliations":[{"raw_affiliation_string":"University of Southern California, Los Angeles, CA, USA","institution_ids":["https://openalex.org/I1174212"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066820318","display_name":"Zijian Hu","orcid":"https://orcid.org/0000-0001-8167-8566"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zijian Hu","raw_affiliation_strings":["TensorOpera Inc., Palo Alto, CA, USA"],"affiliations":[{"raw_affiliation_string":"TensorOpera Inc., Palo Alto, CA, USA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014047957","display_name":"Han Jin","orcid":"https://orcid.org/0000-0003-0148-9031"},"institutions":[{"id":"https://openalex.org/I1174212","display_name":"University of Southern California","ror":"https://ror.org/03taz7m60","country_code":"US","type":"education","lineage":["https://openalex.org/I1174212"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Han Jin","raw_affiliation_strings":["University of Southern California, Los Angeles, CA, USA"],"affiliations":[{"raw_affiliation_string":"University of Southern California, Los Angeles, CA, USA","institution_ids":["https://openalex.org/I1174212"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030446964","display_name":"Weizhao Jin","orcid":null},"institutions":[{"id":"https://openalex.org/I1174212","display_name":"University of Southern California","ror":"https://ror.org/03taz7m60","country_code":"US","type":"education","lineage":["https://openalex.org/I1174212"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Weizhao Jin","raw_affiliation_strings":["University of Southern California, Los Angeles, CA, USA"],"affiliations":[{"raw_affiliation_string":"University of Southern California, Los Angeles, CA, USA","institution_ids":["https://openalex.org/I1174212"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109962243","display_name":"Lichao Sun","orcid":"https://orcid.org/0000-0002-5660-2102"},"institutions":[{"id":"https://openalex.org/I186143895","display_name":"Lehigh University","ror":"https://ror.org/012afjb06","country_code":"US","type":"education","lineage":["https://openalex.org/I186143895"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Lichao Sun","raw_affiliation_strings":["Lehigh University, Bethlehem, PA, USA"],"affiliations":[{"raw_affiliation_string":"Lehigh University, Bethlehem, PA, USA","institution_ids":["https://openalex.org/I186143895"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100334518","display_name":"Xiaoyang Wang","orcid":"https://orcid.org/0000-0003-4213-0762"},"institutions":[{"id":"https://openalex.org/I183874917","display_name":"Urbana University","ror":"https://ror.org/04kp3hw27","country_code":"US","type":"education","lineage":["https://openalex.org/I183874917"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xiaoyang Wang","raw_affiliation_strings":["UIUC, Urbana, IL, USA"],"affiliations":[{"raw_affiliation_string":"UIUC, Urbana, IL, USA","institution_ids":["https://openalex.org/I183874917"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101759485","display_name":"Wenxuan Wu","orcid":"https://orcid.org/0000-0002-5371-1186"},"institutions":[{"id":"https://openalex.org/I91045830","display_name":"Texas A&M University","ror":"https://ror.org/01f5ytq51","country_code":"US","type":"education","lineage":["https://openalex.org/I91045830"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Wenxuan Wu","raw_affiliation_strings":["Texas A&amp;M University, College Station, TX, USA"],"affiliations":[{"raw_affiliation_string":"Texas A&amp;M University, College Station, TX, USA","institution_ids":["https://openalex.org/I91045830"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007625243","display_name":"Chulin Xie","orcid":"https://orcid.org/0000-0002-5460-3785"},"institutions":[{"id":"https://openalex.org/I183874917","display_name":"Urbana University","ror":"https://ror.org/04kp3hw27","country_code":"US","type":"education","lineage":["https://openalex.org/I183874917"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chulin Xie","raw_affiliation_strings":["UIUC, Urbana, IL, USA"],"affiliations":[{"raw_affiliation_string":"UIUC, Urbana, IL, USA","institution_ids":["https://openalex.org/I183874917"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024257250","display_name":"Yuhang Yao","orcid":"https://orcid.org/0000-0002-7045-0002"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yuhang Yao","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, PA, USA"],"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, PA, USA","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113104877","display_name":"Kai Zhang","orcid":"https://orcid.org/0000-0003-3190-083X"},"institutions":[{"id":"https://openalex.org/I186143895","display_name":"Lehigh University","ror":"https://ror.org/012afjb06","country_code":"US","type":"education","lineage":["https://openalex.org/I186143895"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kai Zhang","raw_affiliation_strings":["Lehigh University, Bethlehem, PA, USA"],"affiliations":[{"raw_affiliation_string":"Lehigh University, Bethlehem, PA, USA","institution_ids":["https://openalex.org/I186143895"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100708489","display_name":"Qifan Zhang","orcid":"https://orcid.org/0000-0002-9278-9576"},"institutions":[{"id":"https://openalex.org/I204250578","display_name":"University of California, Irvine","ror":"https://ror.org/04gyf1771","country_code":"US","type":"education","lineage":["https://openalex.org/I204250578"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Qifan Zhang","raw_affiliation_strings":["University of California, Irvine, Irvine, CA, USA"],"affiliations":[{"raw_affiliation_string":"University of California, Irvine, Irvine, CA, USA","institution_ids":["https://openalex.org/I204250578"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100624916","display_name":"Yuhui Zhang","orcid":"https://orcid.org/0000-0002-5769-3456"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuhui Zhang","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085243096","display_name":"Carlee Joe\u2010Wong","orcid":"https://orcid.org/0000-0003-0785-9291"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Carlee Joe-Wong","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, PA, USA"],"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, PA, USA","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5112726818","display_name":"Salman Avestimehr","orcid":null},"institutions":[{"id":"https://openalex.org/I1174212","display_name":"University of Southern California","ror":"https://ror.org/03taz7m60","country_code":"US","type":"education","lineage":["https://openalex.org/I1174212"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Salman Avestimehr","raw_affiliation_strings":["University of Southern California, Los Angeles, CA, USA"],"affiliations":[{"raw_affiliation_string":"University of Southern California, Los Angeles, CA, USA","institution_ids":["https://openalex.org/I1174212"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5077042043","display_name":"Chaoyang He","orcid":"https://orcid.org/0009-0006-1803-1990"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chaoyang He","raw_affiliation_strings":["TensorOpera Inc., Palo Alto, CA, USA"],"affiliations":[{"raw_affiliation_string":"TensorOpera Inc., Palo Alto, CA, USA","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":16,"corresponding_author_ids":["https://openalex.org/A5101755193"],"corresponding_institution_ids":["https://openalex.org/I204250578"],"apc_list":null,"apc_paid":null,"fwci":8.5168,"has_fulltext":true,"cited_by_count":25,"citation_normalized_percentile":{"value":0.98068476,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"5070","last_page":"5081"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.8291000127792358},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6414265632629395},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.45559075474739075},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.32977843284606934},{"id":"https://openalex.org/keywords/geography","display_name":"Geography","score":0.06294646859169006}],"concepts":[{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.8291000127792358},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6414265632629395},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.45559075474739075},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.32977843284606934},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.06294646859169006},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3637528.3671545","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3637528.3671545","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3637528.3671545","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 30th ACM SIGKDD Conference on Knowledge Discovery and Data Mining","raw_type":"proceedings-article"},{"id":"pmh:oai:pure.atira.dk:publications/76b90ff9-fdf9-42fb-a217-cf7db23f2979","is_oa":true,"landing_page_url":"https://research.birmingham.ac.uk/en/publications/76b90ff9-fdf9-42fb-a217-cf7db23f2979","pdf_url":"https://pure-oai.bham.ac.uk/ws/files/295041423/3637528.3671545.pdf","source":{"id":"https://openalex.org/S4306402634","display_name":"University of Birmingham Research Portal (University of Birmingham)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79619799","host_organization_name":"University of Birmingham","host_organization_lineage":["https://openalex.org/I79619799"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Han, S, Buyukates, B, Hu, Z, Jin, H, Jin, W, Sun, L, Wang, X, Wu, W, Xie, C, Yao, Y, Zhang, K, Zhang, Q, Zhang, Y, Joe-Wong, C, Avestimehr, S & He, C 2024, FedSecurity : A Benchmark for Attacks and Defenses in Federated Learning and Federated LLMs. in KDD '24 : Proceedings of the 30th ACM SIGKDD Conference on Knowledge Discovery and Data Mining. Proceedings of the International Conference on Knowledge Discovery and Data Mining, Association for Computing Machinery (ACM), pp. 5070-5081, 30th ACM SIGKDD Conference on Knowledge Discovery and Data Mining, Barcelona, Spain, 25/08/24. https://doi.org/10.1145/3637528.3671545","raw_type":"contributionToPeriodical"}],"best_oa_location":{"id":"doi:10.1145/3637528.3671545","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3637528.3671545","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3637528.3671545","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 30th ACM SIGKDD Conference on Knowledge Discovery and Data Mining","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4401863166.pdf"},"referenced_works_count":44,"referenced_works":["https://openalex.org/W51265332","https://openalex.org/W1493526108","https://openalex.org/W2025965986","https://openalex.org/W2112796928","https://openalex.org/W2194775991","https://openalex.org/W2591882872","https://openalex.org/W2896422817","https://openalex.org/W2942091739","https://openalex.org/W2952782294","https://openalex.org/W2963334472","https://openalex.org/W2963456518","https://openalex.org/W2970482702","https://openalex.org/W3012360060","https://openalex.org/W3014541599","https://openalex.org/W3017371741","https://openalex.org/W3045720734","https://openalex.org/W3087391814","https://openalex.org/W3094163844","https://openalex.org/W3094542121","https://openalex.org/W3100779497","https://openalex.org/W3111919937","https://openalex.org/W3129831491","https://openalex.org/W3138153888","https://openalex.org/W3146157593","https://openalex.org/W3172018708","https://openalex.org/W3175919946","https://openalex.org/W3201919447","https://openalex.org/W3210259840","https://openalex.org/W3210763747","https://openalex.org/W3212946609","https://openalex.org/W3213649533","https://openalex.org/W4207073300","https://openalex.org/W4213446860","https://openalex.org/W4214758645","https://openalex.org/W4224942948","https://openalex.org/W4226047321","https://openalex.org/W4232172926","https://openalex.org/W4285554319","https://openalex.org/W4287822453","https://openalex.org/W4300991139","https://openalex.org/W4313042326","https://openalex.org/W4318479322","https://openalex.org/W4385062808","https://openalex.org/W4399943989"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2378211422","https://openalex.org/W2745001401","https://openalex.org/W4321353415","https://openalex.org/W2130974462","https://openalex.org/W2028665553","https://openalex.org/W2086519370","https://openalex.org/W972276598","https://openalex.org/W2087343574"],"abstract_inverted_index":{"This":[0],"paper":[1],"introduces":[2],"FedSecurity,":[3],"an":[4],"end-to-end":[5],"benchmark":[6],"that":[7,67,78],"serves":[8],"as":[9],"a":[10,69,99,144,170],"supplementary":[11],"component":[12],"of":[13,71,102,126,160,173],"the":[14,31,35,88,124],"FedML":[15],"library":[16],"for":[17,33],"simulating":[18],"adversarial":[19],"attacks":[20,72,127],"and":[21,42,57,76,110,112,118,128,133,135,141,147,155],"corresponding":[22],"defense":[23,58],"mechanisms":[24,81],"in":[25],"Federated":[26],"Learning":[27],"(FL).":[28],"FedSecurity":[29,86],"eliminates":[30],"need":[32],"implementing":[34],"fundamental":[36],"FL":[37,40,74,113],"procedures,":[38],"e.g.,":[39],"training":[41,159],"data":[43],"loading,":[44],"from":[45],"scratch,":[46],"thus":[47],"enables":[48,122],"users":[49],"to":[50,82,97,165],"focus":[51],"on":[52,169],"developing":[53],"their":[54],"own":[55],"attack":[56],"strategies.":[59],"It":[60,92],"contains":[61],"two":[62],"key":[63],"components,":[64],"including":[65],"FedAttacker":[66],"conducts":[68],"variety":[70],"during":[73],"training,":[75],"FedDefender":[77],"implements":[79],"defensive":[80],"counteract":[83],"these":[84],"attacks.":[85],"has":[87],"following":[89],"features:":[90],"i)":[91],"offers":[93],"extensive":[94],"customization":[95,142],"options":[96],"accommodate":[98],"broad":[100],"range":[101,172],"machine":[103],"learning":[104],"models":[105],"(e.g.,":[106,115],"Logistic":[107],"Regression,":[108],"ResNet,":[109],"GAN)":[111],"optimizers":[114],"FedAVG,":[116],"FedOPT,":[117],"FedNOVA);":[119],"ii)":[120],"it":[121,137],"exploring":[123],"effectiveness":[125],"defenses":[129],"across":[130],"different":[131],"datasets":[132],"models;":[134],"iii)":[136],"supports":[138],"flexible":[139],"configuration":[140,145],"through":[143,157],"file":[146],"some":[148],"APIs.":[149],"We":[150],"further":[151],"demonstrate":[152],"FedSecurity's":[153],"utility":[154],"adaptability":[156],"federated":[158],"Large":[161],"Language":[162],"Models":[163],"(LLMs)":[164],"showcase":[166],"its":[167],"potential":[168],"wide":[171],"complex":[174],"applications.":[175]},"counts_by_year":[{"year":2026,"cited_by_count":7},{"year":2025,"cited_by_count":11},{"year":2024,"cited_by_count":7}],"updated_date":"2026-04-10T15:06:20.359241","created_date":"2025-10-10T00:00:00"}
