{"total":255,"rows":[{"id":"2307.10616","title":"Heterogeneous Federated Learning: State-of-the-art and Research Challenges","created":"2023-07-20","cited_by_count":161,"area":null},{"id":"2105.11367","title":"FedScale: Benchmarking Model and System Performance of Federated Learning at Scale","created":"2021-05-24","cited_by_count":136,"area":null},{"id":"2104.11315","title":"SPECTRE: Defending Against Backdoor Attacks Using Robust Statistics","created":"2021-04-22","cited_by_count":130,"area":null},{"id":"2108.10241","title":"Back to the Drawing Board: A Critical Evaluation of Poisoning Attacks on Production Federated Learning","created":"2021-08-23","cited_by_count":118,"area":null},{"id":"2311.06750","title":"Federated Learning for Generalization, Robustness, Fairness: A Survey and Benchmark","created":"2023-11-12","cited_by_count":99,"area":null},{"id":"2206.10341","title":"Neurotoxin: Durable Backdoors in Federated Learning","created":"2022-06-12","cited_by_count":98,"area":null},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2104.14380","title":"PPFL: Privacy-preserving Federated Learning with Trusted Execution Environments","created":"2021-04-29","cited_by_count":93,"area":null},{"id":"2106.08283","title":"CRFL: Certifiably Robust Federated Learning against Backdoor Attacks","created":"2021-06-15","cited_by_count":91,"area":null},{"id":"2101.05428","title":"Federated Learning: Opportunities and Challenges","created":"2021-01-14","cited_by_count":84,"area":null},{"id":"2201.08135","title":"Survey on Federated Learning Threats: concepts, taxonomy on attacks and defences, experimental study and challenges","created":"2022-01-20","cited_by_count":84,"area":null},{"id":"2201.00763","title":"DeepSight: Mitigating Backdoor Attacks in Federated Learning Through Deep Model Inspection","created":"2022-01-03","cited_by_count":81,"area":null},{"id":"2105.00579","title":"BACKDOORL: Backdoor Attack against Competitive Reinforcement Learning","created":"2021-05-02","cited_by_count":68,"area":null},{"id":"2203.08669","title":"MPAF: Model Poisoning Attacks to Federated Learning based on Fake Clients","created":"2022-03-16","cited_by_count":68,"area":null},{"id":"2104.14362","title":"From Distributed Machine Learning to Federated Learning: A Survey","created":"2021-04-29","cited_by_count":66,"area":null},{"id":"2112.06274","title":"SparseFed: Mitigating Model Poisoning Attacks in Federated Learning with Sparsification","created":"2021-12-12","cited_by_count":46,"area":null},{"id":"2205.12709","title":"VeriFi: Towards Verifiable Federated Unlearning","created":"2022-05-25","cited_by_count":46,"area":"safety"},{"id":"2212.10717","title":"Hidden Poison: Machine Unlearning Enables Camouflaged Poisoning Attacks","created":"2022-12-21","cited_by_count":43,"area":"safety"},{"id":"2301.01299","title":"Recent Advances on Federated Learning: A Systematic Survey","created":"2023-01-03","cited_by_count":41,"area":null},{"id":"2210.12873","title":"FLIP: A Provable Defense Framework for Backdoor Mitigation in Federated Learning","created":"2022-10-23","cited_by_count":37,"area":null},{"id":"2109.13236","title":"FedIPR: Ownership Verification for Federated Deep Neural Network Models","created":"2021-09-27","cited_by_count":36,"area":"safety"},{"id":"2110.13864","title":"FL-WBC: Enhancing Robustness against Model Poisoning Attacks in Federated Learning from a Client Perspective","created":"2021-10-26","cited_by_count":36,"area":null},{"id":"2303.02213","title":"Backdoor Attacks and Defenses in Federated Learning: Survey, Challenges and Future Research Directions","created":"2023-03-03","cited_by_count":33,"area":null},{"id":"2111.11066","title":"FedCV: A Federated Learning Framework for Diverse Computer Vision Tasks","created":"2021-11-22","cited_by_count":32,"area":null},{"id":"2307.08925","title":"Integration of Large Language Models and Federated Learning","created":"2023-07-18","cited_by_count":31,"area":null},{"id":"2205.11765","title":"Byzantine-Robust Federated Learning with Optimal Statistical Rates and Privacy Guarantees","created":"2022-05-24","cited_by_count":30,"area":null},{"id":"2212.06325","title":"AFLGuard: Byzantine-robust Asynchronous Federated Learning","created":"2022-12-13","cited_by_count":29,"area":null},{"id":"2310.18933","title":"Label Poisoning is All You Need","created":"2023-10-29","cited_by_count":29,"area":"safety"},{"id":"2312.04432","title":"FreqFed: A Frequency Analysis-Based Approach for Mitigating Poisoning Attacks in Federated Learning","created":"2023-12-07","cited_by_count":27,"area":null},{"id":"2207.06343","title":"TCT: Convexifying Federated Learning using Bootstrapped Neural Tangent Kernels","created":"2022-07-13","cited_by_count":26,"area":null},{"id":"2107.03311","title":"RoFL: Robustness of Secure Federated Learning","created":"2021-07-07","cited_by_count":25,"area":null},{"id":"2301.00767","title":"A Survey on Federated Recommendation Systems","created":"2022-12-27","cited_by_count":25,"area":null},{"id":"2302.10637","title":"A Survey of Trustworthy Federated Learning with Perspectives on Security, Robustness, and Privacy","created":"2023-02-21","cited_by_count":24,"area":null},{"id":"2301.09508","title":"BayBFed: Bayesian Backdoor Defense for Federated Learning","created":"2023-01-23","cited_by_count":23,"area":null},{"id":"2303.06601","title":"Multi-metrics adaptively identifies backdoors in Federated learning","created":"2023-03-12","cited_by_count":23,"area":null},{"id":"2102.00655","title":"Curse or Redemption? How Data Heterogeneity Affects the Robustness of Federated Learning","created":"2021-02-01","cited_by_count":21,"area":"safety"},{"id":"2103.15947","title":"Federated Learning with Taskonomy for Non-IID Data","created":"2021-03-29","cited_by_count":21,"area":null},{"id":"2304.12961","title":"Chameleon: Adapting to Peer Images for Planting Durable Backdoors in Federated Learning","created":"2023-04-25","cited_by_count":21,"area":null},{"id":"2306.04959","title":"FedSecurity: Benchmarking Attacks and Defenses in Federated Learning and Federated LLMs","created":"2023-06-08","cited_by_count":21,"area":null},{"id":"2202.03672","title":"APPFL: Open-Source Software Framework for Privacy-Preserving Federated Learning","created":"2022-02-08","cited_by_count":20,"area":null},{"id":"2308.04466","title":"Backdoor Federated Learning by Poisoning Backdoor-Critical Layers","created":"2023-08-08","cited_by_count":18,"area":null},{"id":"2310.14848","title":"Zero-Knowledge Proof-based Verifiable Decentralized Machine Learning in Communication Network: A Comprehensive Survey","created":"2023-10-23","cited_by_count":18,"area":null},{"id":"2312.08667","title":"Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Survey","created":"2023-12-14","cited_by_count":18,"area":null},{"id":"2102.05257","title":"Robust Federated Learning with Attack-Adaptive Aggregation","created":"2021-02-10","cited_by_count":17,"area":"safety"},{"id":"2302.04228","title":"Federated Learning as Variational Inference: A Scalable Expectation Propagation Approach","created":"2023-02-08","cited_by_count":17,"area":null},{"id":"2302.12862","title":"FLINT: A Platform for Federated Learning Integration","created":"2023-02-24","cited_by_count":17,"area":null},{"id":"2112.05409","title":"Batch Label Inference and Replacement Attacks in Black-Boxed Vertical Federated Learning","created":"2021-12-10","cited_by_count":16,"area":null},{"id":"2302.01677","title":"Revisiting Personalized Federated Learning: Robustness Against Backdoor Attacks","created":"2023-02-03","cited_by_count":16,"area":null},{"id":"2404.17617","title":"Beyond Traditional Threats: A Persistent Backdoor Attack on Federated Learning","created":"2024-04-26","cited_by_count":16,"area":null},{"id":"2207.00872","title":"FL-Defender: Combating Targeted Attacks in Federated Learning","created":"2022-07-02","cited_by_count":15,"area":null},{"id":"2210.05929","title":"Few-shot Backdoor Attacks via Neural Tangent Kernels","created":"2022-10-12","cited_by_count":15,"area":null},{"id":"2308.05832","title":"FLShield: A Validation Based Federated Learning Framework to Defend Against Poisoning Attacks","created":"2023-08-10","cited_by_count":15,"area":null},{"id":"2110.03469","title":"Federated Learning from Small Datasets","created":"2021-10-07","cited_by_count":14,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2304.10638","title":"Get Rid Of Your Trail: Remotely Erasing Backdoors in Federated Learning","created":"2023-04-20","cited_by_count":13,"area":null},{"id":"2409.13864","title":"Persistent Backdoor Attacks in Continual Learning","created":"2024-09-20","cited_by_count":13,"area":null},{"id":"2210.10886","title":"Backdoor Attack and Defense in Federated Generative Adversarial Network-based Medical Image Synthesis","created":"2022-10-19","cited_by_count":12,"area":"safety"},{"id":"2301.12195","title":"BAFFLE: A Baseline of Backpropagation-Free Federated Learning","created":"2023-01-28","cited_by_count":12,"area":null},{"id":"2306.01356","title":"FedCIP: Federated Client Intellectual Property Protection with Traitor Tracking","created":"2023-06-02","cited_by_count":12,"area":"safety"},{"id":"2307.09048","title":"FedDefender: Client-Side Attack-Tolerant Federated Learning","created":"2023-07-18","cited_by_count":12,"area":null},{"id":"2304.08847","title":"BadVFL: Backdoor Attacks in Vertical Federated Learning","created":"2023-04-18","cited_by_count":10,"area":null},{"id":"2304.10783","title":"Denial-of-Service or Fine-Grained Control: Towards Flexible Model Poisoning Attacks on Federated Learning","created":"2023-04-21","cited_by_count":10,"area":null},{"id":"2201.02775","title":"ADI: Adversarial Dominating Inputs in Vertical Federated Learning Systems","created":"2022-01-08","cited_by_count":9,"area":null},{"id":"2203.11633","title":"Semi-Targeted Model Poisoning Attack on Federated Learning via Backward Error Analysis","created":"2022-03-22","cited_by_count":9,"area":null},{"id":"2204.14017","title":"Backdoor Attacks in Federated Learning by Rare Embeddings and Gradient Ensembling","created":"2022-04-29","cited_by_count":9,"area":null},{"id":"2301.09732","title":"Backdoor Attacks in Peer-to-Peer Federated Learning","created":"2023-01-23","cited_by_count":9,"area":null},{"id":"2306.04984","title":"G$^2$uardFL: Safeguarding Federated Learning Against Backdoor Attacks through Attributed Client Graph Clustering","created":"2023-06-08","cited_by_count":9,"area":null},{"id":"2311.16065","title":"A Survey on Vulnerability of Federated Learning: A Learning Algorithm Perspective","created":"2023-11-27","cited_by_count":9,"area":null},{"id":"2410.17431","title":"Meta Stackelberg Game: Robust Federated Learning against Adaptive and Mixed Poisoning Attacks","created":"2024-10-22","cited_by_count":9,"area":"deeprl"},{"id":"2102.05561","title":"Meta Federated Learning","created":"2021-02-10","cited_by_count":8,"area":"safety"},{"id":"2107.01477","title":"Byzantine-robust Federated Learning through Spatial-temporal Analysis of Local Model Updates","created":"2021-07-03","cited_by_count":8,"area":null},{"id":"2110.04350","title":"FRL: Federated Rank Learning","created":"2021-10-08","cited_by_count":8,"area":null},{"id":"2208.09894","title":"Byzantines can also Learn from History: Fall of Centered Clipping in Federated Learning","created":"2022-08-21","cited_by_count":8,"area":null},{"id":"2210.07376","title":"ScionFL: Efficient and Robust Secure Quantized Aggregation","created":"2022-10-13","cited_by_count":8,"area":null},{"id":"2303.03320","title":"Learning to Backdoor Federated Learning","created":"2023-03-06","cited_by_count":8,"area":null},{"id":"2304.00160","title":"Secure Federated Learning against Model Poisoning Attacks via Client Filtering","created":"2023-03-31","cited_by_count":8,"area":"safety"},{"id":"2308.14606","title":"On the Tradeoff between Privacy Preservation and Byzantine-Robustness in Decentralized Learning","created":"2023-08-28","cited_by_count":8,"area":null},{"id":"2309.03437","title":"Byzantine-Robust Federated Learning with Variance Reduction and Differential Privacy","created":"2023-09-07","cited_by_count":8,"area":null},{"id":"2310.06227","title":"Exploring adversarial attacks in federated learning for medical imaging","created":"2023-10-10","cited_by_count":8,"area":null},{"id":"2107.09546","title":"Responsible and Regulatory Conform Machine Learning for Medicine: A Survey of Challenges and Solutions","created":"2021-07-20","cited_by_count":7,"area":null},{"id":"2208.10273","title":"Long-Short History of Gradients is All You Need: Detecting Malicious and Unreliable Clients in Federated Learning","created":"2022-08-14","cited_by_count":7,"area":null},{"id":"2210.09305","title":"Thinking Two Moves Ahead: Anticipating Other Users Improves Backdoor Attacks in Federated Learning","created":"2022-10-17","cited_by_count":7,"area":"safety"},{"id":"2306.13800","title":"A First Order Meta Stackelberg Method for Robust Federated Learning","created":"2023-06-23","cited_by_count":7,"area":null},{"id":"2308.09318","title":"Towards Attack-tolerant Federated Learning via Critical Parameter Analysis","created":"2023-08-18","cited_by_count":7,"area":null},{"id":"2507.22908","title":"A Privacy-Preserving Federated Framework with Hybrid Quantum-Enhanced Learning for Financial Fraud Detection","created":"2025-07-15","cited_by_count":7,"area":null},{"id":"2106.14956","title":"Robust Distributed Optimization With Randomly Corrupted Gradients","created":"2021-06-28","cited_by_count":6,"area":null},{"id":"2302.09578","title":"On Feasibility of Server-side Backdoor Attacks on Split Learning","created":"2023-02-19","cited_by_count":6,"area":null},{"id":"2303.04887","title":"Memory-adaptive Depth-wise Heterogeneous Federated Learning","created":"2023-03-08","cited_by_count":6,"area":null},{"id":"2307.15017","title":"Samplable Anonymous Aggregation for Private Federated Data Analysis","created":"2023-07-27","cited_by_count":6,"area":null},{"id":"2309.16456","title":"Resisting Backdoor Attacks in Federated Learning via Bidirectional Elections and Individual Perspective","created":"2023-09-28","cited_by_count":6,"area":null},{"id":"2205.01184","title":"Performance Weighting for Robust Federated Learning Against Corrupted Sources","created":"2022-05-02","cited_by_count":5,"area":null},{"id":"2205.11736","title":"Towards a Defense Against Federated Backdoor Attacks Under Continuous Training","created":"2022-05-24","cited_by_count":5,"area":null},{"id":"2212.00322","title":"Hijack Vertical Federated Learning Models As One Party","created":"2022-12-01","cited_by_count":5,"area":null},{"id":"2310.05696","title":"Little is Enough: Boosting Privacy by Sharing Only Hard Labels in Federated Semi-Supervised Learning","created":"2023-10-09","cited_by_count":5,"area":null},{"id":"2405.20975","title":"ACE: A Model Poisoning Attack on Contribution Evaluation Methods in Federated Learning","created":"2024-05-31","cited_by_count":5,"area":null},{"id":"2411.12220","title":"DeTrigger: A Gradient-Centric Approach to Backdoor Attack Mitigation in Federated Learning","created":"2024-11-19","cited_by_count":5,"area":null},{"id":"2104.11700","title":"Robust Federated Learning by Mixture of Experts","created":"2021-04-23","cited_by_count":4,"area":"moe"},{"id":"2109.00202","title":"Federated Learning: Issues in Medical Application","created":"2021-09-01","cited_by_count":4,"area":null},{"id":"2110.03991","title":"Combining Differential Privacy and Byzantine Resilience in Distributed SGD","created":"2021-10-08","cited_by_count":4,"area":null},{"id":"2201.12211","title":"Backdoors Stuck At The Frontdoor: Multi-Agent Backdoor Attacks That Backfire","created":"2022-01-28","cited_by_count":4,"area":"safety"}],"next_cursor":"100"}