{"id":"https://openalex.org/W4383221498","doi":"https://doi.org/10.1145/3579856.3590334","title":"LoDen: Making Every Client in Federated Learning a Defender Against the Poisoning Membership Inference Attacks","display_name":"LoDen: Making Every Client in Federated Learning a Defender Against the Poisoning Membership Inference Attacks","publication_year":2023,"publication_date":"2023-07-05","ids":{"openalex":"https://openalex.org/W4383221498","doi":"https://doi.org/10.1145/3579856.3590334"},"language":"en","primary_location":{"id":"doi:10.1145/3579856.3590334","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3579856.3590334","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://figshare.com/articles/conference_contribution/LoDen_Making_Every_Client_in_Federated_Learning_a_Defender_Against_the_Poisoning_Membership_Inference_Attacks/24031953","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5083683118","display_name":"Mengyao Ma","orcid":"https://orcid.org/0000-0002-5550-5845"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I165143802","display_name":"The University of Queensland","ror":"https://ror.org/00rqy9422","country_code":"AU","type":"education","lineage":["https://openalex.org/I165143802"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Mengyao Ma","raw_affiliation_strings":["The University of Queensland, Australia and CSIRO's Data61, Australia"],"raw_orcid":"https://orcid.org/0000-0002-5550-5845","affiliations":[{"raw_affiliation_string":"The University of Queensland, Australia and CSIRO's Data61, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679","https://openalex.org/I165143802"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100449630","display_name":"Yanjun Zhang","orcid":"https://orcid.org/0000-0001-5611-3483"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Yanjun Zhang","raw_affiliation_strings":["University of Technology Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0001-5611-3483","affiliations":[{"raw_affiliation_string":"University of Technology Sydney, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063839073","display_name":"M.A.P. Chamikara","orcid":"https://orcid.org/0000-0002-4286-3774"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Pathum Chamikara Mahawaga Arachchige","raw_affiliation_strings":["CSIRO's Data61, Australia"],"raw_orcid":"https://orcid.org/0000-0002-4286-3774","affiliations":[{"raw_affiliation_string":"CSIRO's Data61, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015011245","display_name":"Leo Yu Zhang","orcid":"https://orcid.org/0000-0001-9330-2662"},"institutions":[{"id":"https://openalex.org/I11701301","display_name":"Griffith University","ror":"https://ror.org/02sc3r913","country_code":"AU","type":"education","lineage":["https://openalex.org/I11701301"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Leo Yu Zhang","raw_affiliation_strings":["Griffith University, Australia"],"raw_orcid":"https://orcid.org/0000-0001-9330-2662","affiliations":[{"raw_affiliation_string":"Griffith University, Australia","institution_ids":["https://openalex.org/I11701301"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000678710","display_name":"Mohan Baruwal Chhetri","orcid":"https://orcid.org/0000-0002-6138-7742"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Mohan Baruwal Chhetri","raw_affiliation_strings":["CSIRO's Data61, Australia"],"raw_orcid":"https://orcid.org/0000-0002-6138-7742","affiliations":[{"raw_affiliation_string":"CSIRO's Data61, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5015858067","display_name":"Guangdong Bai","orcid":"https://orcid.org/0000-0002-6390-9890"},"institutions":[{"id":"https://openalex.org/I165143802","display_name":"The University of Queensland","ror":"https://ror.org/00rqy9422","country_code":"AU","type":"education","lineage":["https://openalex.org/I165143802"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Guangdong Bai","raw_affiliation_strings":["The University of Queensland, Australia"],"raw_orcid":"https://orcid.org/0000-0002-6390-9890","affiliations":[{"raw_affiliation_string":"The University of Queensland, Australia","institution_ids":["https://openalex.org/I165143802"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5083683118"],"corresponding_institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I165143802","https://openalex.org/I42894916"],"apc_list":null,"apc_paid":null,"fwci":1.7041,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.8726694,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"122","last_page":"135"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9484999775886536,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/federated-learning","display_name":"Federated learning","score":0.7877228260040283},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.7385318875312805},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7321197986602783},{"id":"https://openalex.org/keywords/sample","display_name":"Sample (material)","score":0.7317944765090942},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.7107235789299011},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5894611477851868},{"id":"https://openalex.org/keywords/gradient-descent","display_name":"Gradient descent","score":0.5050113797187805},{"id":"https://openalex.org/keywords/adversarial-machine-learning","display_name":"Adversarial machine learning","score":0.4706788659095764},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.45091280341148376},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.393681138753891},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.255919873714447},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.10504275560379028}],"concepts":[{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.7877228260040283},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.7385318875312805},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7321197986602783},{"id":"https://openalex.org/C198531522","wikidata":"https://www.wikidata.org/wiki/Q485146","display_name":"Sample (material)","level":2,"score":0.7317944765090942},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.7107235789299011},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5894611477851868},{"id":"https://openalex.org/C153258448","wikidata":"https://www.wikidata.org/wiki/Q1199743","display_name":"Gradient descent","level":3,"score":0.5050113797187805},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.4706788659095764},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.45091280341148376},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.393681138753891},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.255919873714447},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.10504275560379028},{"id":"https://openalex.org/C43617362","wikidata":"https://www.wikidata.org/wiki/Q170050","display_name":"Chromatography","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3579856.3590334","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3579856.3590334","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},{"id":"pmh:oai:figshare.com:article/24031953","is_oa":true,"landing_page_url":"https://figshare.com/articles/conference_contribution/LoDen_Making_Every_Client_in_Federated_Learning_a_Defender_Against_the_Poisoning_Membership_Inference_Attacks/24031953","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Text"},{"id":"pmh:oai:research-repository.griffith.edu.au:10072/425522","is_oa":true,"landing_page_url":"http://hdl.handle.net/10072/425522","pdf_url":null,"source":{"id":"https://openalex.org/S4306402548","display_name":"Griffith Research Online (Griffith University, Queensland, Australia)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I11701301","host_organization_name":"Griffith University","host_organization_lineage":["https://openalex.org/I11701301"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Conference output"}],"best_oa_location":{"id":"pmh:oai:figshare.com:article/24031953","is_oa":true,"landing_page_url":"https://figshare.com/articles/conference_contribution/LoDen_Making_Every_Client_in_Federated_Learning_a_Defender_Against_the_Poisoning_Membership_Inference_Attacks/24031953","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Text"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.46000000834465027,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W2007339694","https://openalex.org/W2053637704","https://openalex.org/W2473418344","https://openalex.org/W2752929869","https://openalex.org/W2884943453","https://openalex.org/W2912083425","https://openalex.org/W2912296587","https://openalex.org/W2942091739","https://openalex.org/W2963433607","https://openalex.org/W3033511014","https://openalex.org/W3097371090","https://openalex.org/W3100779497","https://openalex.org/W4200426685","https://openalex.org/W4205334064","https://openalex.org/W4315746341"],"related_works":["https://openalex.org/W4388150944","https://openalex.org/W4298221930","https://openalex.org/W4242235492","https://openalex.org/W4237162029","https://openalex.org/W4280588203","https://openalex.org/W4388949813","https://openalex.org/W4389313785","https://openalex.org/W2901933342","https://openalex.org/W4224316323","https://openalex.org/W4387796593"],"abstract_inverted_index":{"Federated":[0],"learning":[1,9],"(FL)":[2],"is":[3,61],"a":[4,62],"widely":[5],"used":[6],"distributed":[7],"machine":[8],"framework.":[10],"However,":[11],"recent":[12],"studies":[13],"have":[14],"shown":[15],"its":[16],"susceptibility":[17],"to":[18],"poisoning":[19],"membership":[20],"inference":[21],"attacks":[22],"(MIA).":[23],"In":[24],"MIA,":[25,82],"adversaries":[26],"maliciously":[27],"manipulate":[28],"the":[29,37,40,58,69,72,84],"local":[30],"updates":[31],"on":[32,50,66],"selected":[33],"samples":[34,51],"and":[35],"share":[36],"gradients":[38],"with":[39],"server":[41],"(i.e.,":[42],"poisoning).":[43],"Since":[44],"honest":[45],"clients":[46],"perform":[47],"gradient":[48],"descent":[49],"locally,":[52],"an":[53],"adversary":[54],"can":[55],"distinguish":[56],"whether":[57],"attacked":[59],"sample":[60,64],"training":[63],"based":[65],"observation":[67],"of":[68,71,77],"change":[70],"sample\u2019s":[73],"prediction.":[74],"This":[75],"type":[76],"attack":[78],"exacerbates":[79],"traditional":[80],"passive":[81],"yet":[83],"defense":[85],"mechanisms":[86],"remain":[87],"largely":[88],"unexplored.":[89]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":3}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}