{"id":"https://openalex.org/W4404006835","doi":"https://doi.org/10.1145/3702325","title":"DP-Poison: Poisoning Federated Learning under the Cover of Differential Privacy","display_name":"DP-Poison: Poisoning Federated Learning under the Cover of Differential Privacy","publication_year":2024,"publication_date":"2024-11-02","ids":{"openalex":"https://openalex.org/W4404006835","doi":"https://doi.org/10.1145/3702325"},"language":"en","primary_location":{"id":"doi:10.1145/3702325","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3702325","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3702325","source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3702325","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5072212265","display_name":"Haibin Zheng","orcid":"https://orcid.org/0000-0002-8997-5343"},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Haibin Zheng","raw_affiliation_strings":["Zhejiang University of Technology, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"Zhejiang University of Technology, Hangzhou, China","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101758654","display_name":"Jinyin Chen","orcid":"https://orcid.org/0000-0002-7153-2755"},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jinyin Chen","raw_affiliation_strings":["Zhejiang University of Technology, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"Zhejiang University of Technology, Hangzhou, China","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101784831","display_name":"Tao Liu","orcid":"https://orcid.org/0000-0002-5756-5614"},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tao Liu","raw_affiliation_strings":["Zhejiang University of Technology, Hangzhou, China","Zhejiang University of Technology, Hangzhou China"],"affiliations":[{"raw_affiliation_string":"Zhejiang University of Technology, Hangzhou, China","institution_ids":["https://openalex.org/I55712492"]},{"raw_affiliation_string":"Zhejiang University of Technology, Hangzhou China","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101535095","display_name":"Yao Cheng","orcid":"https://orcid.org/0000-0002-5781-5185"},"institutions":[{"id":"https://openalex.org/I4210115289","display_name":"T\u00dcV S\u00dcD (Singapore)","ror":"https://ror.org/021tea790","country_code":"SG","type":"company","lineage":["https://openalex.org/I4210115289","https://openalex.org/I4210115964"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Yao Cheng","raw_affiliation_strings":["TUV SUD Asia Pacific Pte. Ltd., Singapore, Singapore","TUV SUD Asia Pacific Pte. Ltd., Singapore Singapore"],"affiliations":[{"raw_affiliation_string":"TUV SUD Asia Pacific Pte. Ltd., Singapore, Singapore","institution_ids":["https://openalex.org/I4210115289"]},{"raw_affiliation_string":"TUV SUD Asia Pacific Pte. Ltd., Singapore Singapore","institution_ids":["https://openalex.org/I4210115289"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101331859","display_name":"Zhao Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhao Wang","raw_affiliation_strings":["Data Communication Science and Technology Research Institute, Beijing, China","Data Communication Science and Technology Research Institute, Beijing China"],"affiliations":[{"raw_affiliation_string":"Data Communication Science and Technology Research Institute, Beijing, China","institution_ids":[]},{"raw_affiliation_string":"Data Communication Science and Technology Research Institute, Beijing China","institution_ids":[]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yun Wang","orcid":"https://orcid.org/0009-0004-4480-8738"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yun Wang","raw_affiliation_strings":["Data Communication Science and Technology Research Institute, Beijing, China","Data Communication Science and Technology Research Institute, Beijing China"],"affiliations":[{"raw_affiliation_string":"Data Communication Science and Technology Research Institute, Beijing, China","institution_ids":[]},{"raw_affiliation_string":"Data Communication Science and Technology Research Institute, Beijing China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088741988","display_name":"Lan Gao","orcid":"https://orcid.org/0000-0002-6573-9848"},"institutions":[{"id":"https://openalex.org/I163151501","display_name":"Hangzhou Normal University","ror":"https://ror.org/014v1mr15","country_code":"CN","type":"education","lineage":["https://openalex.org/I163151501"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lan Gao","raw_affiliation_strings":["Hangzhou Normal University, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"Hangzhou Normal University, Hangzhou, China","institution_ids":["https://openalex.org/I163151501"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058611515","display_name":"Shouling Ji","orcid":"https://orcid.org/0000-0003-4268-372X"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]},{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]},{"id":"https://openalex.org/I4210138580","display_name":"Zhejiang Institute of Science and Technology Information","ror":"https://ror.org/04gq2fa58","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210138580"]},{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN","US"],"is_corresponding":false,"raw_author_name":"Shouling Ji","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University, Hangzhou, China and School of Electrical and Computer Engineering, Georgia Institute of Technology, Atlanta, United States","School of Electrical and Computer Engineering, Georgia Institute of Technology, Atlanta, United States","College of Computer Science and Technology, Zhejiang University, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University, Hangzhou, China and School of Electrical and Computer Engineering, Georgia Institute of Technology, Atlanta, United States","institution_ids":["https://openalex.org/I55712492","https://openalex.org/I4210138580"]},{"raw_affiliation_string":"School of Electrical and Computer Engineering, Georgia Institute of Technology, Atlanta, United States","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I168879160"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101722406","display_name":"Xuhong Zhang","orcid":"https://orcid.org/0000-0002-8571-9780"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xuhong Zhang","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":9,"corresponding_author_ids":["https://openalex.org/A5072212265"],"corresponding_institution_ids":["https://openalex.org/I55712492"],"apc_list":null,"apc_paid":null,"fwci":1.7075,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.87177644,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":"28","issue":"1","first_page":"1","last_page":"28"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9976999759674072,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/differential-privacy","display_name":"Differential privacy","score":0.749029278755188},{"id":"https://openalex.org/keywords/cover","display_name":"Cover (algebra)","score":0.6688631772994995},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5487570762634277},{"id":"https://openalex.org/keywords/differential","display_name":"Differential (mechanical device)","score":0.5383397936820984},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.5204982161521912},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.41909366846084595},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.3483957052230835},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.16559457778930664},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.11565348505973816}],"concepts":[{"id":"https://openalex.org/C23130292","wikidata":"https://www.wikidata.org/wiki/Q5275358","display_name":"Differential privacy","level":2,"score":0.749029278755188},{"id":"https://openalex.org/C2780428219","wikidata":"https://www.wikidata.org/wiki/Q16952335","display_name":"Cover (algebra)","level":2,"score":0.6688631772994995},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5487570762634277},{"id":"https://openalex.org/C93226319","wikidata":"https://www.wikidata.org/wiki/Q193137","display_name":"Differential (mechanical device)","level":2,"score":0.5383397936820984},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.5204982161521912},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.41909366846084595},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3483957052230835},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.16559457778930664},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.11565348505973816},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3702325","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3702325","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3702325","source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3702325","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3702325","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3702325","source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4134462825","display_name":null,"funder_award_id":"LDQ23F020001","funder_id":"https://openalex.org/F4320338464","funder_display_name":"Natural Science Foundation of Zhejiang Province"},{"id":"https://openalex.org/G7899456642","display_name":null,"funder_award_id":"62072406 and 62406286","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320338464","display_name":"Natural Science Foundation of Zhejiang Province","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4404006835.pdf"},"referenced_works_count":46,"referenced_works":["https://openalex.org/W1965969360","https://openalex.org/W2053637704","https://openalex.org/W2077905990","https://openalex.org/W2097571405","https://openalex.org/W2112796928","https://openalex.org/W2114776669","https://openalex.org/W2163605009","https://openalex.org/W2194775991","https://openalex.org/W2473418344","https://openalex.org/W2614081991","https://openalex.org/W2767079719","https://openalex.org/W2781091734","https://openalex.org/W2783522756","https://openalex.org/W2912083425","https://openalex.org/W2912213068","https://openalex.org/W2930926105","https://openalex.org/W2952782294","https://openalex.org/W2963456518","https://openalex.org/W2965721472","https://openalex.org/W2966002286","https://openalex.org/W2970408908","https://openalex.org/W2970606380","https://openalex.org/W2981347044","https://openalex.org/W2995191368","https://openalex.org/W2997347627","https://openalex.org/W3012360060","https://openalex.org/W3016632787","https://openalex.org/W3027749727","https://openalex.org/W3037624214","https://openalex.org/W3045013345","https://openalex.org/W3091476023","https://openalex.org/W3103245149","https://openalex.org/W3212382992","https://openalex.org/W4205228770","https://openalex.org/W4232172926","https://openalex.org/W4252654521","https://openalex.org/W4285605356","https://openalex.org/W4285606520","https://openalex.org/W4288277757","https://openalex.org/W4296391826","https://openalex.org/W4312944761","https://openalex.org/W4316661173","https://openalex.org/W4387046674","https://openalex.org/W4387968020","https://openalex.org/W4391216149","https://openalex.org/W4393254114"],"related_works":["https://openalex.org/W3038283795","https://openalex.org/W2604501336","https://openalex.org/W2734500670","https://openalex.org/W2558166297","https://openalex.org/W2315671126","https://openalex.org/W798507144","https://openalex.org/W2964481303","https://openalex.org/W1751413323","https://openalex.org/W2571704763","https://openalex.org/W4315488958"],"abstract_inverted_index":{"Federated":[0],"learning":[1],"(FL)":[2],"enables":[3],"resource-constrained":[4],"node":[5],"devices":[6],"to":[7,42,69,102,143,180],"learn":[8],"a":[9,81,114,148,194],"shared":[10],"model":[11,169],"while":[12,155,200],"keeping":[13,127],"the":[14,47,54,61,75,86,91,97,108,119,128,156,161,167,172,184,202],"training":[15],"data":[16],"local.":[17],"Since":[18],"recent":[19],"research":[20],"has":[21],"demonstrated":[22],"multiple":[23,140],"privacy":[24,38,50,132],"leakage":[25],"attacks":[26,32],"in":[27,94,123],"FL,":[28],"e.g.,":[29],"gradient":[30],"inference":[31,35],"and":[33,125],"membership":[34],"attacks,":[36],"differential":[37],"(DP)":[39],"is":[40,100,178],"applied":[41],"serve":[43],"as":[44],"one":[45],"of":[46,63,88,130],"most":[48],"effective":[49],"protection":[51],"mechanisms.":[52],"Despite":[53],"benefit":[55],"DP":[56,64,131,145,173],"brings,":[57],"we":[58,138],"observe":[59],"that":[60,154,176,191],"introduction":[62],"also":[65],"brings":[66],"random":[67],"changes":[68],"client":[70],"updates,":[71],"which":[72],"will":[73],"affect":[74],"robust":[76,120,185],"aggregation":[77,121,186],"algorithms.":[78,187],"We":[79],"reveal":[80],"novel":[82],"poisoning":[83],"attack":[84,93,99,197],"under":[85],"cover":[87],"DP,":[89],"named":[90],"DP-Poison":[92,98,192],"FL.":[95],"Specifically,":[96],"designed":[101],"achieve":[103,135],"four":[104,204],"goals:":[105],"(1)":[106],"maintaining":[107,201],"main":[109],"task":[110],"performance;":[111],"(2)":[112],"launching":[113],"successful":[115],"attack;":[116],"(3)":[117],"escaping":[118],"algorithms":[122],"FL;":[124],"(4)":[126],"effectiveness":[129],"protection.":[133],"To":[134],"these":[136],"goals,":[137],"design":[139],"optimization":[141,152],"goals":[142],"generate":[144],"noise":[146],"through":[147],"genetic":[149],"algorithm.":[150],"The":[151],"ensures":[153],"benign":[157],"updates":[158,163],"change":[159,165],"randomly,":[160],"malicious":[162],"can":[164],"toward":[166],"global":[168],"after":[170],"adding":[171],"noise,":[174],"so":[175],"it":[177],"easier":[179],"be":[181],"accepted":[182],"by":[183],"Extensive":[188],"experiments":[189],"show":[190],"achieves":[193],"nearly":[195],"100%":[196],"success":[198],"rate":[199],"proposed":[203],"goals.":[205]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":3}],"updated_date":"2026-04-09T08:11:56.329763","created_date":"2025-10-10T00:00:00"}