{"id":"https://openalex.org/W7163580713","doi":"https://doi.org/10.1145/3779208.3785390","title":"C <scp>lie</scp> ND: Client-Side Neuron-Level Detection against Poisoning Attacks on Cross-Silo Federated Learning","display_name":"C <scp>lie</scp> ND: Client-Side Neuron-Level Detection against Poisoning Attacks on Cross-Silo Federated Learning","publication_year":2026,"publication_date":"2026-06-01","ids":{"openalex":"https://openalex.org/W7163580713","doi":"https://doi.org/10.1145/3779208.3785390"},"language":null,"primary_location":{"id":"doi:10.1145/3779208.3785390","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3779208.3785390","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3779208.3785390","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5083683118","display_name":"Mengyao Ma","orcid":"https://orcid.org/0000-0002-5550-5845"},"institutions":[{"id":"https://openalex.org/I165143802","display_name":"The University of Queensland","ror":"https://ror.org/00rqy9422","country_code":"AU","type":"education","lineage":["https://openalex.org/I165143802"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Mengyao Ma","raw_affiliation_strings":["The University of Queensland, Brisbane, Australia"],"raw_orcid":"https://orcid.org/0000-0002-5550-5845","affiliations":[{"raw_affiliation_string":"The University of Queensland, Brisbane, Australia","institution_ids":["https://openalex.org/I165143802"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025035508","display_name":"S. Liu","orcid":"https://orcid.org/0000-0002-6438-5224"},"institutions":[{"id":"https://openalex.org/I165143802","display_name":"The University of Queensland","ror":"https://ror.org/00rqy9422","country_code":"AU","type":"education","lineage":["https://openalex.org/I165143802"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Shuofeng Liu","raw_affiliation_strings":["The University of Queensland, Brisbane, Australia"],"raw_orcid":"https://orcid.org/0000-0002-6438-5224","affiliations":[{"raw_affiliation_string":"The University of Queensland, Brisbane, Australia","institution_ids":["https://openalex.org/I165143802"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087395864","display_name":"Viet Vo","orcid":"https://orcid.org/0000-0002-5984-7981"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Viet Vo","raw_affiliation_strings":["Swinburne University of Technology, Melbourne, Australia"],"raw_orcid":"https://orcid.org/0000-0002-5984-7981","affiliations":[{"raw_affiliation_string":"Swinburne University of Technology, Melbourne, Australia","institution_ids":["https://openalex.org/I57093077"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137871959","display_name":"Minghong Fang","orcid":"https://orcid.org/0000-0002-1365-3911"},"institutions":[{"id":"https://openalex.org/I142740786","display_name":"University of Louisville","ror":"https://ror.org/01ckdn478","country_code":"US","type":"education","lineage":["https://openalex.org/I142740786"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Minghong Fang","raw_affiliation_strings":["University of Louisville, Kentucky, USA"],"raw_orcid":"https://orcid.org/0000-0002-1365-3911","affiliations":[{"raw_affiliation_string":"University of Louisville, Kentucky, USA","institution_ids":["https://openalex.org/I142740786"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137813824","display_name":"Surya Nepal","orcid":"https://orcid.org/0000-0002-3289-6599"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Surya Nepal","raw_affiliation_strings":["CSIRO's Data61, Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0002-3289-6599","affiliations":[{"raw_affiliation_string":"CSIRO's Data61, Sydney, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5015858067","display_name":"Guangdong Bai","orcid":"https://orcid.org/0000-0002-6390-9890"},"institutions":[{"id":"https://openalex.org/I168719708","display_name":"City University of Hong Kong","ror":"https://ror.org/03q8dnn23","country_code":"HK","type":"education","lineage":["https://openalex.org/I168719708"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Guangdong Bai","raw_affiliation_strings":["The University of Queensland, Brisbane, Australia and City University of Hong Kong, Kowloon Tong, China"],"raw_orcid":"https://orcid.org/0000-0002-6390-9890","affiliations":[{"raw_affiliation_string":"The University of Queensland, Brisbane, Australia and City University of Hong Kong, Kowloon Tong, China","institution_ids":["https://openalex.org/I168719708"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1108","last_page":"1124"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8027999997138977,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8027999997138977,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.06750000268220901,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10502","display_name":"Advanced Memory and Neural Computing","score":0.017899999395012856,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.29820001125335693},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.2728999853134155},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.2705000042915344},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.2703000009059906},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.2581999897956848}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6121000051498413},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.48410001397132874},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.29820001125335693},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2728999853134155},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.2705000042915344},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.2703000009059906},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.2581999897956848},{"id":"https://openalex.org/C108759981","wikidata":"https://www.wikidata.org/wiki/Q788590","display_name":"Authorization","level":2,"score":0.24079999327659607},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.2363000065088272},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.22920000553131104}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3779208.3785390","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3779208.3785390","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3779208.3785390","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3779208.3785390","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/2","score":0.5417574644088745,"display_name":"Zero hunger"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":35,"referenced_works":["https://openalex.org/W2007339694","https://openalex.org/W2018093805","https://openalex.org/W2079054072","https://openalex.org/W2108598243","https://openalex.org/W2149298154","https://openalex.org/W2535690855","https://openalex.org/W2793350103","https://openalex.org/W2883006946","https://openalex.org/W2962763344","https://openalex.org/W2963145730","https://openalex.org/W2963334472","https://openalex.org/W2985913519","https://openalex.org/W2995022099","https://openalex.org/W3017123256","https://openalex.org/W3138153888","https://openalex.org/W3138597937","https://openalex.org/W3204548896","https://openalex.org/W4233413206","https://openalex.org/W4288057793","https://openalex.org/W4290948380","https://openalex.org/W4383221498","https://openalex.org/W4385567819","https://openalex.org/W4388511650","https://openalex.org/W4391724758","https://openalex.org/W4391724779","https://openalex.org/W4402263968","https://openalex.org/W4402264021","https://openalex.org/W4402264320","https://openalex.org/W4402264543","https://openalex.org/W4402264552","https://openalex.org/W4403577360","https://openalex.org/W4405182932","https://openalex.org/W4408750083","https://openalex.org/W4411337828","https://openalex.org/W4411337956"],"related_works":[],"abstract_inverted_index":{"Poisoning":[0],"attacks":[1,106,190],"have":[2],"been":[3,86],"shown":[4],"to":[5,9,78,110,118,188,218],"pose":[6],"significant":[7,152],"threats":[8],"federated":[10],"learning":[11],"(FL),":[12],"including":[13],"both":[14,177],"untargeted":[15,180],"and":[16,82,179,183,210],"targeted":[17,178],"attacks.":[18,162],"To":[19,163],"mitigate":[20],"such":[21],"threats,":[22],"the":[23,31,35,71,102,108,111,120,125,139,165,231],"majority":[24],"of":[25,56,74,104,124,159,167,216,233],"existing":[26],"defenses":[27,47],"are":[28],"implemented":[29],"on":[30,50,65],"server":[32,109],"side":[33],"during":[34],"aggregation":[36],"process.":[37],"However,":[38],"as":[39,157,206,208],"data":[40,81],"remains":[41],"inherently":[42],"local":[43,57,80,135],"in":[44,129,142,245],"FL,":[45],"these":[46,143],"either":[48],"rely":[49,64],"unreliable":[51],"statistical":[52],"or":[53,59],"structural":[54],"properties":[55],"updates,":[58],"make":[60],"strong":[61],"assumptions":[62],"that":[63,100,198],"dataset":[66],"information.":[67],"As":[68],"a":[69,95,201,211],"result,":[70],"unique":[72],"advantage":[73],"clients":[75],"having":[76],"access":[77],"trusted":[79],"training":[83],"dynamics":[84],"has":[85],"largely":[87],"overlooked.":[88],"In":[89],"this":[90],"work,":[91],"we":[92,169],"propose":[93],"ClieND1,":[94],"novel":[96],"client-side":[97],"detection":[98,103,228],"framework":[99],"shifts":[101],"poisoning":[105,161,181,234],"from":[107],"client.":[112],"Specifically,":[113],"ClieND":[114,199],"enables":[115],"each":[116,130,145],"client":[117,146],"maintain":[119],"neuron":[121],"importance":[122],"scores":[123],"aggregated":[126],"global":[127],"model":[128],"round":[131],"by":[132,150,239],"leveraging":[133],"its":[134,186,226],"dataset.":[136],"Through":[137],"tracking":[138],"inter-round":[140],"changes":[141],"scores,":[144],"detects":[147],"abnormal":[148],"behavior":[149],"identifying":[151],"discrepancy":[153],"spikes,":[154],"which":[155,220],"serve":[156],"indicators":[158],"potential":[160],"evaluate":[164],"effectiveness":[166],"ClieND,":[168],"compare":[170],"it":[171],"against":[172],"three":[173],"state-of-the-art":[174],"baselines":[175],"under":[176],"attacks,":[182,235],"also":[184],"assess":[185],"ability":[187],"detect":[189],"at":[191],"an":[192,246],"early":[193,247],"stage.":[194],"Experimental":[195],"results":[196],"show":[197],"achieves":[200],"false":[202],"positive":[203,213],"rate":[204,214],"(FPR)":[205],"low":[207],"0.01":[209],"true":[212],"(TPR)":[215],"up":[217],"0.99,":[219],"significantly":[221],"outperforms":[222],"server-side":[223],"defenses,":[224],"demonstrating":[225],"high":[227],"accuracy.":[229],"Additionally,":[230],"existence":[232],"even":[236],"those":[237],"launched":[238],"adaptive":[240],"settings,":[241],"can":[242],"be":[243],"detected":[244],"stage":[248],"within":[249],"5":[250],"communication":[251],"rounds.":[252]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2026-06-05T00:00:00"}