{"id":"https://openalex.org/W7133297352","doi":"https://doi.org/10.1145/3799892","title":"Exploring Visual Explanations for Defending Federated Learning against Poisoning Attacks: Enhancing LayerCAM with Autoencoders","display_name":"Exploring Visual Explanations for Defending Federated Learning against Poisoning Attacks: Enhancing LayerCAM with Autoencoders","publication_year":2026,"publication_date":"2026-03-03","ids":{"openalex":"https://openalex.org/W7133297352","doi":"https://doi.org/10.1145/3799892"},"language":"en","primary_location":{"id":"doi:10.1145/3799892","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3799892","pdf_url":null,"source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1145/3799892","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5023908179","display_name":"Jingjing Zheng","orcid":"https://orcid.org/0000-0002-5728-9453"},"institutions":[{"id":"https://openalex.org/I2801044007","display_name":"York Minster","ror":"https://ror.org/01m3vxn57","country_code":"GB","type":"other","lineage":["https://openalex.org/I2801044007"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Jingjing Zheng","raw_affiliation_strings":["CISTER"],"raw_orcid":"https://orcid.org/0000-0002-5728-9453","affiliations":[{"raw_affiliation_string":"CISTER","institution_ids":["https://openalex.org/I2801044007"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5127982157","display_name":"Xin Yuan","orcid":null},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I4210101388","display_name":"Health Sciences and Nutrition","ror":"https://ror.org/0152bt112","country_code":"AU","type":"facility","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4210101388","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xin Yuan","raw_affiliation_strings":["Commonwealth Scientific and Industrial Research Organisation"],"raw_orcid":"https://orcid.org/0000-0002-9167-1613","affiliations":[{"raw_affiliation_string":"Commonwealth Scientific and Industrial Research Organisation","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I4210101388"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Kai Li","orcid":"https://orcid.org/0000-0002-0517-2392"},"institutions":[{"id":"https://openalex.org/I241749","display_name":"University of Cambridge","ror":"https://ror.org/013meh722","country_code":"GB","type":"education","lineage":["https://openalex.org/I241749"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Kai Li","raw_affiliation_strings":["University of Cambridge"],"raw_orcid":"https://orcid.org/0000-0002-0517-2392","affiliations":[{"raw_affiliation_string":"University of Cambridge","institution_ids":["https://openalex.org/I241749"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5127946699","display_name":"Wei Ni","orcid":null},"institutions":[{"id":"https://openalex.org/I4210101388","display_name":"Health Sciences and Nutrition","ror":"https://ror.org/0152bt112","country_code":"AU","type":"facility","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4210101388","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I4210121851","display_name":"Seth Research Foundation","ror":"https://ror.org/02x1t0474","country_code":"IN","type":"nonprofit","lineage":["https://openalex.org/I4210121851"]}],"countries":["AU","IN"],"is_corresponding":false,"raw_author_name":"Wei Ni","raw_affiliation_strings":["Commonwealth Scientific and Industrial Research Organization"],"raw_orcid":"https://orcid.org/0000-0003-0780-4637","affiliations":[{"raw_affiliation_string":"Commonwealth Scientific and Industrial Research Organization","institution_ids":["https://openalex.org/I4210101388","https://openalex.org/I4210121851"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5127949320","display_name":"Eduardo Tovar","orcid":null},"institutions":[{"id":"https://openalex.org/I2801044007","display_name":"York Minster","ror":"https://ror.org/01m3vxn57","country_code":"GB","type":"other","lineage":["https://openalex.org/I2801044007"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Eduardo Tovar","raw_affiliation_strings":["CISTER"],"raw_orcid":"https://orcid.org/0000-0001-8979-3876","affiliations":[{"raw_affiliation_string":"CISTER","institution_ids":["https://openalex.org/I2801044007"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5070310909","display_name":"Jon Crowcroft","orcid":null},"institutions":[{"id":"https://openalex.org/I241749","display_name":"University of Cambridge","ror":"https://ror.org/013meh722","country_code":"GB","type":"education","lineage":["https://openalex.org/I241749"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Jon Crowcroft","raw_affiliation_strings":["University of Cambridge"],"raw_orcid":"https://orcid.org/0000-0002-7013-0121","affiliations":[{"raw_affiliation_string":"University of Cambridge","institution_ids":["https://openalex.org/I241749"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.24826286,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"29","issue":"2","first_page":"1","last_page":"28"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9050999879837036,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9050999879837036,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.02410000003874302,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.01979999989271164,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/autoencoder","display_name":"Autoencoder","score":0.7548999786376953},{"id":"https://openalex.org/keywords/federated-learning","display_name":"Federated learning","score":0.5587000250816345},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.5523999929428101},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.46369999647140503},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.43810001015663147},{"id":"https://openalex.org/keywords/layer","display_name":"Layer (electronics)","score":0.421999990940094},{"id":"https://openalex.org/keywords/optimal-distinctiveness-theory","display_name":"Optimal distinctiveness theory","score":0.3709999918937683},{"id":"https://openalex.org/keywords/beijing","display_name":"Beijing","score":0.35190001130104065},{"id":"https://openalex.org/keywords/independent-and-identically-distributed-random-variables","display_name":"Independent and identically distributed random variables","score":0.3127000033855438}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7583000063896179},{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.7548999786376953},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.5587000250816345},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.5523999929428101},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5241000056266785},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.46369999647140503},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.43810001015663147},{"id":"https://openalex.org/C2779227376","wikidata":"https://www.wikidata.org/wiki/Q6505497","display_name":"Layer (electronics)","level":2,"score":0.421999990940094},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.39579999446868896},{"id":"https://openalex.org/C47385372","wikidata":"https://www.wikidata.org/wiki/Q7098943","display_name":"Optimal distinctiveness theory","level":2,"score":0.3709999918937683},{"id":"https://openalex.org/C2778304055","wikidata":"https://www.wikidata.org/wiki/Q657474","display_name":"Beijing","level":3,"score":0.35190001130104065},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.334199994802475},{"id":"https://openalex.org/C141513077","wikidata":"https://www.wikidata.org/wiki/Q378542","display_name":"Independent and identically distributed random variables","level":3,"score":0.3127000033855438},{"id":"https://openalex.org/C520049643","wikidata":"https://www.wikidata.org/wiki/Q189760","display_name":"Voting","level":3,"score":0.30410000681877136},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.3034000098705292},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.29910001158714294},{"id":"https://openalex.org/C132964779","wikidata":"https://www.wikidata.org/wiki/Q2110223","display_name":"Raw data","level":2,"score":0.2969000041484833},{"id":"https://openalex.org/C2779356469","wikidata":"https://www.wikidata.org/wiki/Q502918","display_name":"Counterfeit","level":2,"score":0.28439998626708984},{"id":"https://openalex.org/C2776151529","wikidata":"https://www.wikidata.org/wiki/Q3045304","display_name":"Object detection","level":3,"score":0.2782999873161316},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.27489998936653137},{"id":"https://openalex.org/C111696304","wikidata":"https://www.wikidata.org/wiki/Q2303697","display_name":"Sorting","level":2,"score":0.273499995470047},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.27230000495910645},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.2720000147819519},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2671000063419342},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.2646999955177307},{"id":"https://openalex.org/C2779628075","wikidata":"https://www.wikidata.org/wiki/Q1253258","display_name":"Downgrade","level":2,"score":0.26429998874664307},{"id":"https://openalex.org/C43711488","wikidata":"https://www.wikidata.org/wiki/Q7534783","display_name":"Skew","level":2,"score":0.2515000104904175}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3799892","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3799892","pdf_url":null,"source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"},{"id":"pmh:oai:www.repository.cam.ac.uk:1810/401539","is_oa":true,"landing_page_url":"https://www.repository.cam.ac.uk/handle/1810/401539","pdf_url":"https://www.repository.cam.ac.uk/bitstreams/a1a131fc-006c-4f06-b56f-303bb163da0c/download","source":{"id":"https://openalex.org/S4306401777","display_name":"Apollo (University of Cambridge)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I241749","host_organization_name":"University of Cambridge","host_organization_lineage":["https://openalex.org/I241749"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"}],"best_oa_location":{"id":"doi:10.1145/3799892","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3799892","pdf_url":null,"source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.46586596965789795,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G3574973028","display_name":null,"funder_award_id":"UIDB/04234/2020","funder_id":"https://openalex.org/F4320323642","funder_display_name":"Minist\u00e9rio da Ci\u00eancia, Tecnologia e Ensino Superior"},{"id":"https://openalex.org/G4497198408","display_name":null,"funder_award_id":"UIDP/UIDB/04234/2020","funder_id":"https://openalex.org/F4320334779","funder_display_name":"Funda\u00e7\u00e3o para a Ci\u00eancia e a Tecnologia"},{"id":"https://openalex.org/G505757079","display_name":null,"funder_award_id":"UIDP/UIDB/04234/2020","funder_id":"https://openalex.org/F4320323642","funder_display_name":"Minist\u00e9rio da Ci\u00eancia, Tecnologia e Ensino Superior"},{"id":"https://openalex.org/G5157446074","display_name":"Research Centre in Real-Time and Embedded Computing Systems","funder_award_id":"UIDB/04234/2020","funder_id":"https://openalex.org/F4320334779","funder_display_name":"Funda\u00e7\u00e3o para a Ci\u00eancia e a Tecnologia"}],"funders":[{"id":"https://openalex.org/F4320323642","display_name":"Minist\u00e9rio da Ci\u00eancia, Tecnologia e Ensino Superior","ror":"https://ror.org/045b9pr88"},{"id":"https://openalex.org/F4320334779","display_name":"Funda\u00e7\u00e3o para a Ci\u00eancia e a Tecnologia","ror":"https://ror.org/00snfqn58"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W2194775991","https://openalex.org/W2295107390","https://openalex.org/W2765793020","https://openalex.org/W2962858109","https://openalex.org/W2963318081","https://openalex.org/W2963446712","https://openalex.org/W2982083293","https://openalex.org/W3034429256","https://openalex.org/W3093791164","https://openalex.org/W3138153888","https://openalex.org/W3138597937","https://openalex.org/W3161272383","https://openalex.org/W3176482836","https://openalex.org/W3206807859","https://openalex.org/W3209576002","https://openalex.org/W4213446860","https://openalex.org/W4229455429","https://openalex.org/W4285166735","https://openalex.org/W4290948380","https://openalex.org/W4312996082","https://openalex.org/W4362598035","https://openalex.org/W4367046777","https://openalex.org/W4385573575","https://openalex.org/W4401851842","https://openalex.org/W4405014762","https://openalex.org/W7133248203"],"related_works":[],"abstract_inverted_index":{"Recent":[0],"attacks":[1],"on":[2,141],"federated":[3],"learning":[4],"(FL)":[5],"can":[6,12],"introduce":[7],"malicious":[8,103,127],"model":[9,34,67,89,122],"updates":[10],"that":[11,173],"circumvent":[13],"widely":[14],"adopted":[15],"Euclidean":[16],"distance-based":[17],"detection":[18,56,176],"methods.":[19],"This":[20],"article":[21],"proposes":[22],"a":[23,42,61,74,114,120],"novel":[24],"defense":[25,167],"strategy,":[26],"referred":[27],"to":[28,32],"as":[29,126],"LayerCAM-AE,":[30,113],"designed":[31],"counteract":[33],"poisoning":[35],"in":[36,98,112,159],"FL.":[37],"The":[38,79,169],"LayerCAM-AE":[39,59,174],"puts":[40],"forth":[41],"new":[43],"Layer":[44],"Class":[45],"Activation":[46],"Mapping":[47],"(LayerCAM)":[48],"integrated":[49],"with":[50,161],"an":[51],"autoencoder":[52,80],"(AE),":[53],"significantly":[54],"enhancing":[55],"capabilities.":[57],"Specifically,":[58],"generates":[60],"heat":[62,84,130],"map":[63],"for":[64],"each":[65],"local":[66,88,104,121],"update,":[68],"which":[69],"is":[70,117,124,205],"then":[71],"transformed":[72],"into":[73],"more":[75],"compact":[76],"visual":[77],"explanation.":[78],"processes":[81],"the":[82,87,96,108,142,162,192,199],"LayerCAM":[83],"maps":[85,101,131],"from":[86],"updates,":[90],"improving":[91],"their":[92],"distinctiveness":[93],"and":[94,102,144,152,156,165,191,201],"increasing":[95],"accuracy":[97,194],"spotting":[99],"anomalous":[100],"models.":[105,168],"To":[106],"mitigate":[107],"risk":[109],"of":[110,195],"misclassifications":[111],"voting":[115],"algorithm":[116],"developed,":[118],"where":[119],"update":[123],"flagged":[125],"if":[128],"its":[129],"are":[132,147],"consistently":[133],"suspicious":[134],"over":[135],"several":[136],"communication":[137],"rounds.":[138],"Extensive":[139],"tests":[140],"SVHN":[143],"CIFAR-100":[145],"datasets":[146],"performed":[148],"under":[149],"both":[150,198],"Independent":[151],"Identically":[153],"Distributed":[154],"(IID)":[155],"non-IID":[157],"settings":[158],"comparison":[160],"state-of-the-art":[163],"ResNet-50":[164,200],"REGNETY-800MF":[166],"experimental":[170],"results":[171],"show":[172],"increases":[175],"rates":[177],"(Recall:":[178],"1.0,":[179,181,185,188],"Precision:":[180],"FPR:":[182],"0.0,":[183],"Accuracy:":[184],"F1":[186],"score:":[187],"AUC:":[189],"1.0)":[190],"test":[193],"FL,":[196],"surpassing":[197],"REGNETY-800MF.":[202],"Our":[203],"code":[204],"available":[206],"at:":[207],"https://github.com/jjzgeeks/LayerCAM-AE":[208],".":[209]},"counts_by_year":[],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2026-03-04T00:00:00"}