<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-03345683</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-17T12:41:57+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Secure Aggregation Against Malicious Users</title>
            <author role="aut">
              <persName>
                <forename type="first">Ferhat</forename>
                <surname>Karakoç</surname>
              </persName>
              <idno type="halauthorid">1178307-0</idno>
              <affiliation ref="#struct-1076459"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Melek</forename>
                <surname>Önen</surname>
              </persName>
              <email type="md5">581251444d86a8947a7cb94359a7132b</email>
              <email type="domain">eurecom.fr</email>
              <idno type="idhal" notation="numeric">1040493</idno>
              <idno type="halauthorid" notation="string">737703-1040493</idno>
              <idno type="ORCID">https://orcid.org/0000-0003-0269-9495</idno>
              <idno type="IDREF">https://www.idref.fr/110910850</idno>
              <affiliation ref="#struct-421532"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Zeki</forename>
                <surname>Bilgin</surname>
              </persName>
              <idno type="halauthorid">1105749-0</idno>
              <affiliation ref="#struct-1076460"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Centre De Documentation</forename>
                <surname>Eurecom</surname>
              </persName>
              <email type="md5">808fb6c747947adf4fb3953c09dd1636</email>
              <email type="domain">eurecom.fr</email>
            </editor>
            <funder ref="#projanr-50589"/>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2022-02-28 11:59:54</date>
              <date type="whenModified">2025-02-07 18:35:46</date>
              <date type="whenReleased">2022-03-09 11:32:08</date>
              <date type="whenProduced">2021-06-16</date>
              <date type="whenEndEmbargoed">2022-03-09</date>
              <ref type="file" target="https://hal.science/hal-03345683v1/document">
                <date notBefore="2022-03-09"/>
              </ref>
              <ref type="file" n="1" target="https://hal.science/hal-03345683v1/file/publi-6546%20%281%29.pdf" id="file-3590996-3150277">
                <date notBefore="2022-03-09"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="118606">
                <persName>
                  <forename>Centre De Documentation</forename>
                  <surname>Eurecom</surname>
                </persName>
                <email type="md5">808fb6c747947adf4fb3953c09dd1636</email>
                <email type="domain">eurecom.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-03345683</idno>
            <idno type="halUri">https://hal.science/hal-03345683</idno>
            <idno type="halBibtex">karakoc:hal-03345683</idno>
            <idno type="halRefHtml">&lt;i&gt;SACMAT 2021, 26th ACM Symposium on Access Control Models and Technologies&lt;/i&gt;, Jun 2021, Barcelona (virtual), Spain. pp.115-124, &lt;a target="_blank" href="https://dx.doi.org/10.1145/3450569.3463572"&gt;&amp;#x27E8;10.1145/3450569.3463572&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">SACMAT 2021, 26th ACM Symposium on Access Control Models and Technologies, Jun 2021, Barcelona (virtual), Spain. pp.115-124, &amp;#x27E8;10.1145/3450569.3463572&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://about.hal.science/hal-authorisation-v1/">HAL Authorization<ref corresp="#file-3590996-3150277"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="EURECOM">EURECOM</idno>
            <idno type="stamp" n="PNRIA">Programme National de Recherche en IA</idno>
            <idno type="stamp" n="3IA-COTEDAZUR">3IA Côte d’Azur – Interdisciplinary Institute for Artificial Intelligence</idno>
            <idno type="stamp" n="ANR">ANR</idno>
            <idno type="stamp" n="ANR-IA-19" corresp="ANR-IA">ANR-IA-19</idno>
            <idno type="stamp" n="ANR-IA">ANR-IA</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="0">No</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Secure Aggregation Against Malicious Users</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Ferhat</forename>
                    <surname>Karakoç</surname>
                  </persName>
                  <idno type="halauthorid">1178307-0</idno>
                  <affiliation ref="#struct-1076459"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Melek</forename>
                    <surname>Önen</surname>
                  </persName>
                  <email type="md5">581251444d86a8947a7cb94359a7132b</email>
                  <email type="domain">eurecom.fr</email>
                  <idno type="idhal" notation="numeric">1040493</idno>
                  <idno type="halauthorid" notation="string">737703-1040493</idno>
                  <idno type="ORCID">https://orcid.org/0000-0003-0269-9495</idno>
                  <idno type="IDREF">https://www.idref.fr/110910850</idno>
                  <affiliation ref="#struct-421532"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Zeki</forename>
                    <surname>Bilgin</surname>
                  </persName>
                  <idno type="halauthorid">1105749-0</idno>
                  <affiliation ref="#struct-1076460"/>
                </author>
              </analytic>
              <monogr>
                <title level="m">SACMAT '21: Proceedings of the 26th ACM Symposium on Access Control Models and Technologies</title>
                <meeting>
                  <title>SACMAT 2021, 26th ACM Symposium on Access Control Models and Technologies</title>
                  <date type="start">2021-06-16</date>
                  <date type="end">2021-06-18</date>
                  <settlement>Barcelona (virtual)</settlement>
                  <country key="ES">Spain</country>
                </meeting>
                <imprint>
                  <publisher>ACM</publisher>
                  <biblScope unit="pp">115-124</biblScope>
                  <date type="datePub">2021-06-16</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1145/3450569.3463572</idno>
              <ref type="publisher">http://sacmat.dista.uninsubria.it/2021/</ref>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <classCode scheme="halDomain" n="info.info-ia">Computer Science [cs]/Computer Aided Engineering</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Secure aggregation protocols allow anaggregator to compute the sum of multiple users' data in a privacy-preserving manner. Existing protocols assume that users from whom the data is collected, are fully trusted on the correctness of their individual inputs. We believe that this assumption is too strong, for example when such protocols are used for federated learning whereby the aggregator receives all users' contributions and aggregate them to train and obtain the joint model. A malicious user contributing with incorrect inputs can generate model poisoning or backdoor injection attacks without being detected. In this paper, we propose the first secure aggregation protocol that considers users as potentially malicious. This new protocol enables the correct computation of the aggregate result, in a privacy preserving manner, only if individual inputs belong to a legitimate interval. To this aim, the solution uses a newly designed oblivious programmable pseudo-random function. We validate our solution as a proof of concept under a federated learning scenario whereby potential backdoor injection attacks exist.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="institution" xml:id="struct-1076459" status="INCOMING">
          <orgName>Ericsson Research</orgName>
          <desc>
            <address>
              <addrLine>Istanbul</addrLine>
              <country key="TR"/>
            </address>
          </desc>
        </org>
        <org type="institution" xml:id="struct-421532" status="VALID">
          <orgName>Eurecom [Sophia Antipolis]</orgName>
          <desc>
            <address>
              <addrLine>Campus SophiaTech, 450 Route des Chappes, CS 50193 - 06904 Biot Sophia Antipolis cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.eurecom.fr/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-1076460" status="INCOMING">
          <orgName>Arçelik Research</orgName>
          <desc>
            <address>
              <addrLine>Istanbul</addrLine>
              <country key="TR"/>
            </address>
          </desc>
        </org>
      </listOrg>
      <listOrg type="projects">
        <org type="anrProject" xml:id="projanr-50589" status="VALID">
          <idno type="anr">ANR-19-P3IA-0002</idno>
          <orgName>3IA@cote d'azur</orgName>
          <desc>3IA Côte d'Azur</desc>
          <date type="start">2019</date>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>