{"id":"https://openalex.org/W7161580123","doi":"https://doi.org/10.48550/arxiv.2605.16098","title":"PCDM: A Diffusion-Based Data Poisoning Attack Against Federated Learning Systems","display_name":"PCDM: A Diffusion-Based Data Poisoning Attack Against Federated Learning Systems","publication_year":2026,"publication_date":"2026-05-15","ids":{"openalex":"https://openalex.org/W7161580123","doi":"https://doi.org/10.48550/arxiv.2605.16098"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.16098","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.16098","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.16098","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136358184","display_name":"Wei Feng Sun","orcid":"https://orcid.org/0000-0002-5176-8891"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sun, Wei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136363147","display_name":"Yijun Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Yijun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136406641","display_name":"Bo Gao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gao, Bo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136423260","display_name":"Ke Xiong","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xiong, Ke","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136358097","display_name":"Yuwei Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Yuwei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136374226","display_name":"Pingyi Fan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Fan, Pingyi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136429410","display_name":"Khaled Ben Letaief","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Letaief, Khaled Ben","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5360000133514404,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5360000133514404,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.34540000557899475,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.015300000086426735,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.6560999751091003},{"id":"https://openalex.org/keywords/consistency","display_name":"Consistency (knowledge bases)","score":0.5895000100135803},{"id":"https://openalex.org/keywords/federated-learning","display_name":"Federated learning","score":0.5841000080108643},{"id":"https://openalex.org/keywords/data-modeling","display_name":"Data modeling","score":0.3375999927520752},{"id":"https://openalex.org/keywords/data-consistency","display_name":"Data consistency","score":0.29409998655319214},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.28940001130104065},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.28870001435279846}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7135000228881836},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6560999751091003},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.5895000100135803},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.5841000080108643},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5063999891281128},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.3375999927520752},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.29660001397132874},{"id":"https://openalex.org/C93361087","wikidata":"https://www.wikidata.org/wiki/Q4426698","display_name":"Data consistency","level":2,"score":0.29409998655319214},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.28940001130104065},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.28870001435279846},{"id":"https://openalex.org/C33762810","wikidata":"https://www.wikidata.org/wiki/Q461671","display_name":"Data integrity","level":2,"score":0.2824000120162964},{"id":"https://openalex.org/C193519340","wikidata":"https://www.wikidata.org/wiki/Q891179","display_name":"Data loss","level":2,"score":0.2696000039577484},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.26910001039505005},{"id":"https://openalex.org/C92446256","wikidata":"https://www.wikidata.org/wiki/Q3306762","display_name":"Data validation","level":2,"score":0.26440000534057617},{"id":"https://openalex.org/C3017944768","wikidata":"https://www.wikidata.org/wiki/Q1450463","display_name":"Poison control","level":2,"score":0.26080000400543213},{"id":"https://openalex.org/C114289077","wikidata":"https://www.wikidata.org/wiki/Q3284399","display_name":"Statistical model","level":2,"score":0.25679999589920044},{"id":"https://openalex.org/C33954974","wikidata":"https://www.wikidata.org/wiki/Q486494","display_name":"Sensor fusion","level":2,"score":0.2563000023365021}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.16098","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.16098","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.16098","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.16098","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Federated":[0],"learning":[1],"(FL)":[2],"is":[3,168],"vulnerable":[4],"to":[5,10,28,69,98,171,192],"data":[6,17,46,55,79,125,193],"poisoning":[7,18,56,92,138],"attacks":[8,139],"due":[9],"its":[11],"distributed":[12],"nature.":[13],"Although":[14],"recent":[15],"GAN-based":[16],"methods":[19,179],"have":[20],"indicated":[21],"the":[22,34,74,95,101,129,177],"potential":[23],"of":[24,37,45,77,103],"using":[25],"generative":[26],"AI":[27],"generate":[29],"seemingly":[30],"legitimate":[31],"poisoned":[32,78,104,124],"data,":[33,105],"inherent":[35],"consistency":[36],"GAN":[38],"outputs":[39],"can":[40],"still":[41],"reveal":[42],"a":[43,53,63,115,158,189],"sign":[44],"poisoning.":[47],"In":[48],"this":[49],"paper,":[50],"we":[51],"propose":[52],"diffusion-based":[54],"framework":[57],"against":[58,140],"FL":[59,137,185],"systems,":[60],"which":[61,187],"leverages":[62],"Poisoning-Oriented":[64],"Conditional":[65],"Diffusion":[66],"Model":[67],"(PCDM)":[68],"enable":[70],"fine-grained":[71],"control":[72,100],"over":[73],"local":[75],"generation":[76,102],"while":[80,180],"ensuring":[81],"both":[82],"attack":[83,110],"effectiveness":[84],"and":[85,122,132,157],"stealthiness.":[86],"Our":[87,163],"PCDM":[88,167],"incorporates":[89],"an":[90],"adjustable":[91],"vector":[93],"within":[94],"global":[96,184],"context":[97],"precisely":[99],"with":[106,176],"theoretical":[107],"guarantees":[108],"on":[109,149],"performance.":[111],"Furthermore,":[112],"it":[113],"employs":[114],"novel":[116],"jumping":[117],"diffusion":[118],"strategy":[119],"for":[120,136],"lightweight":[121],"efficient":[123],"generation.":[126],"We":[127],"conduct":[128],"most":[130],"systematic":[131],"broad":[133],"experimental":[134],"evaluation":[135],"various":[141],"defenses,":[142],"including":[143],"advanced":[144],"Byzantine":[145],"robust":[146],"aggregation":[147],"mechanisms,":[148],"four":[150],"open":[151],"datasets:":[152],"MNIST,":[153],"Fashion-MNIST,":[154],"CIFAR-10,":[155],"CIFAR-100,":[156],"real-world":[159],"wireless-specific":[160],"dataset":[161],"VRAI.":[162],"results":[164],"demonstrate":[165],"that":[166],"less":[169],"likely":[170],"exhibit":[172],"statistical":[173],"anomalies":[174],"compared":[175],"state-of-the-art":[178],"more":[181],"effectively":[182],"degrading":[183],"performance,":[186],"poses":[188],"significant":[190],"risk":[191],"security":[194],"in":[195],"FL.":[196]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-19T00:00:00"}