<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-03815244</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-03T15:29:56+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Towards Mitigating Poisoning Attacks in Federated Learning</title>
            <author role="aut">
              <persName>
                <forename type="first">Elhattab</forename>
                <surname>Fatima</surname>
              </persName>
              <email type="md5">c092f0c72bcbc47896cd5bdf796196fb</email>
              <email type="domain">insa-lyon.fr</email>
              <idno type="idhal" notation="string">elhattab-fatima</idno>
              <idno type="idhal" notation="numeric">1173344</idno>
              <idno type="halauthorid" notation="string">2609506-1173344</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-8422-4209</idno>
              <affiliation ref="#struct-2003"/>
              <affiliation ref="#struct-394737"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Rania</forename>
                <surname>Talbi</surname>
              </persName>
              <email type="md5">399aac1ed1a8fc7bf8f33986e9d93e0c</email>
              <email type="domain">esi.dz</email>
              <idno type="idhal" notation="string">rania-talbi</idno>
              <idno type="idhal" notation="numeric">169823</idno>
              <idno type="halauthorid" notation="string">42163-169823</idno>
              <affiliation ref="#struct-2003"/>
              <affiliation ref="#struct-394737"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Sara</forename>
                <surname>Bouchenak</surname>
              </persName>
              <email type="md5">75dfe06633625005d012c39998467909</email>
              <email type="domain">insa-lyon.fr</email>
              <idno type="idhal" notation="string">sara-bouchenak</idno>
              <idno type="idhal" notation="numeric">6304</idno>
              <idno type="halauthorid" notation="string">16711-6304</idno>
              <idno type="IDREF">https://www.idref.fr/179480510</idno>
              <affiliation ref="#struct-2003"/>
              <affiliation ref="#struct-394737"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Vlad</forename>
                <surname>Nitu</surname>
              </persName>
              <email type="md5">4bd79bc6a7f6bc98015b19be1a2f70be</email>
              <email type="domain">insa-lyon.fr</email>
              <idno type="idhal" notation="string">vlad-nitu</idno>
              <idno type="idhal" notation="numeric">749417</idno>
              <idno type="halauthorid" notation="string">54076-749417</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-7996-3963</idno>
              <idno type="IDREF">https://www.idref.fr/225604760</idno>
              <affiliation ref="#struct-2003"/>
              <affiliation ref="#struct-394737"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Elhattab</forename>
                <surname>Fatima</surname>
              </persName>
              <email type="md5">c092f0c72bcbc47896cd5bdf796196fb</email>
              <email type="domain">insa-lyon.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2022-10-14 14:50:19</date>
              <date type="whenModified">2025-09-03 10:46:32</date>
              <date type="whenReleased">2022-10-25 11:49:06</date>
              <date type="whenProduced">2021-07-05</date>
              <date type="whenEndEmbargoed">2022-10-14</date>
              <ref type="file" target="https://hal.science/hal-03815244v1/document">
                <date notBefore="2022-10-14"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://hal.science/hal-03815244v1/file/ComPAS_2021_ARMOR.pdf" id="file-3815244-3347247">
                <date notBefore="2022-10-14"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="1328521">
                <persName>
                  <forename>Elhattab</forename>
                  <surname>Fatima</surname>
                </persName>
                <email type="md5">c092f0c72bcbc47896cd5bdf796196fb</email>
                <email type="domain">insa-lyon.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-03815244</idno>
            <idno type="halUri">https://hal.science/hal-03815244</idno>
            <idno type="halBibtex">fatima:hal-03815244</idno>
            <idno type="halRefHtml">&lt;i&gt;ComPAS’2021 : Parallélisme/ Architecture/ Système MILC-Lyon&lt;/i&gt;, Jul 2021, Lyon, France</idno>
            <idno type="halRef">ComPAS’2021 : Parallélisme/ Architecture/ Système MILC-Lyon, Jul 2021, Lyon, France</idno>
            <availability status="restricted">
              <licence target="https://about.hal.science/hal-authorisation-v1/">HAL Authorization<ref corresp="#file-3815244-3347247"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="UNIV-LYON1">Université Claude Bernard - Lyon I</idno>
            <idno type="stamp" n="UNIV-LYON2">Université Lumière Lyon 2</idno>
            <idno type="stamp" n="INSA-LYON">Institut National des Sciences Appliquées de Lyon</idno>
            <idno type="stamp" n="EC-LYON">Ecole Centrale de Lyon</idno>
            <idno type="stamp" n="LIRIS" corresp="UNIV-LYON1">Laboratoire d'InfoRmatique en Image et Systèmes d'information</idno>
            <idno type="stamp" n="LYON2">Université Lyon2</idno>
            <idno type="stamp" n="INSA-GROUPE">Groupe INSA</idno>
            <idno type="stamp" n="UDL">UDL</idno>
            <idno type="stamp" n="UNIV-LYON">Université de Lyon</idno>
            <idno type="stamp" n="HAL-LYON-2-NOUVELLE-VERSION">Nouvelle version portail </idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="0">No</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Towards Mitigating Poisoning Attacks in Federated Learning</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Elhattab</forename>
                    <surname>Fatima</surname>
                  </persName>
                  <email type="md5">c092f0c72bcbc47896cd5bdf796196fb</email>
                  <email type="domain">insa-lyon.fr</email>
                  <idno type="idhal" notation="string">elhattab-fatima</idno>
                  <idno type="idhal" notation="numeric">1173344</idno>
                  <idno type="halauthorid" notation="string">2609506-1173344</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-8422-4209</idno>
                  <affiliation ref="#struct-2003"/>
                  <affiliation ref="#struct-394737"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Rania</forename>
                    <surname>Talbi</surname>
                  </persName>
                  <email type="md5">399aac1ed1a8fc7bf8f33986e9d93e0c</email>
                  <email type="domain">esi.dz</email>
                  <idno type="idhal" notation="string">rania-talbi</idno>
                  <idno type="idhal" notation="numeric">169823</idno>
                  <idno type="halauthorid" notation="string">42163-169823</idno>
                  <affiliation ref="#struct-2003"/>
                  <affiliation ref="#struct-394737"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Sara</forename>
                    <surname>Bouchenak</surname>
                  </persName>
                  <email type="md5">75dfe06633625005d012c39998467909</email>
                  <email type="domain">insa-lyon.fr</email>
                  <idno type="idhal" notation="string">sara-bouchenak</idno>
                  <idno type="idhal" notation="numeric">6304</idno>
                  <idno type="halauthorid" notation="string">16711-6304</idno>
                  <idno type="IDREF">https://www.idref.fr/179480510</idno>
                  <affiliation ref="#struct-2003"/>
                  <affiliation ref="#struct-394737"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Vlad</forename>
                    <surname>Nitu</surname>
                  </persName>
                  <email type="md5">4bd79bc6a7f6bc98015b19be1a2f70be</email>
                  <email type="domain">insa-lyon.fr</email>
                  <idno type="idhal" notation="string">vlad-nitu</idno>
                  <idno type="idhal" notation="numeric">749417</idno>
                  <idno type="halauthorid" notation="string">54076-749417</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-7996-3963</idno>
                  <idno type="IDREF">https://www.idref.fr/225604760</idno>
                  <affiliation ref="#struct-2003"/>
                  <affiliation ref="#struct-394737"/>
                </author>
              </analytic>
              <monogr>
                <meeting>
                  <title>ComPAS’2021 : Parallélisme/ Architecture/ Système MILC-Lyon</title>
                  <date type="start">2021-07-05</date>
                  <date type="end">2021-07-09</date>
                  <settlement>Lyon</settlement>
                  <country key="FR">France</country>
                </meeting>
                <imprint/>
              </monogr>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Federated learning is a new machine learning trend that, guided by privacy goals, distributes learning across multiple participants who train the model collaboratively without sharing their data. Nonetheless, it is vulnerable to a variety of attacks such as data and model poisoning. In these attacks, adversaries attempt to inject a backdoor task in the model along with its main task during the training phase. After that, the injected backdoor is exploited at inference-time given a specific trigger. Many state-of-the-art mechanisms that rely on model update auditing have been proposed to mitigate poisoning attacks. We show in this paper that attackers are still capable to evade such detectors by crafting model updates that mimic benign ones. In this paper, we propose ARMOR, a novel mechanism that successfully detects these backdoor attacks in Federated Learning. We describe the design principles of ARMOR based on generative adversarial networks. And we present ARMOR's evaluation results on a real world dataset, which demonstrates that it outperforms its competitors.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="laboratory" xml:id="struct-2003" status="VALID">
          <idno type="IdRef">149705271</idno>
          <idno type="ISNI">0000000122577669</idno>
          <idno type="RNSR">200511875R</idno>
          <idno type="ROR">https://ror.org/04dv4he91</idno>
          <orgName>Laboratoire d'InfoRmatique en Image et Systèmes d'information</orgName>
          <orgName type="acronym">LIRIS</orgName>
          <date type="start">2003-01-01</date>
          <desc>
            <address>
              <addrLine>Bâtiment Blaise Pascal - 20, avenue Albert Einstein - 69621 Villeurbanne cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://liris.cnrs.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-33804" type="direct"/>
            <relation active="#struct-126765" type="direct"/>
            <relation active="#struct-301088" type="indirect"/>
            <relation active="#struct-194495" type="direct"/>
            <relation active="#struct-219748" type="direct"/>
            <relation active="#struct-301232" type="indirect"/>
            <relation name="UMR5205" active="#struct-441569" type="direct"/>
          </listRelation>
        </org>
        <org type="researchteam" xml:id="struct-394737" status="VALID">
          <orgName>Distribution, Recherche d'Information et Mobilité</orgName>
          <orgName type="acronym">DRIM</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
          </desc>
          <listRelation>
            <relation active="#struct-2003" type="direct"/>
            <relation active="#struct-33804" type="indirect"/>
            <relation active="#struct-126765" type="indirect"/>
            <relation active="#struct-301088" type="indirect"/>
            <relation active="#struct-194495" type="indirect"/>
            <relation active="#struct-219748" type="indirect"/>
            <relation active="#struct-301232" type="indirect"/>
            <relation name="UMR5205" active="#struct-441569" type="indirect"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-33804" status="VALID">
          <idno type="IdRef">02640334X</idno>
          <idno type="ISNI">0000 0001 2188 0906</idno>
          <idno type="ROR">https://ror.org/03rth4p18</idno>
          <idno type="Wikidata">Q4041</idno>
          <orgName>Université Lumière - Lyon 2</orgName>
          <orgName type="acronym">UL2</orgName>
          <desc>
            <address>
              <addrLine>86, rue Pasteur - 69007 Lyon</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-lyon2.fr</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-126765" status="VALID">
          <idno type="ROR">https://ror.org/05s6rge65</idno>
          <orgName>École Centrale de Lyon</orgName>
          <orgName type="acronym">ECL</orgName>
          <desc>
            <address>
              <addrLine>36 avenue Guy de Collongue - 69134 Ecully cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.ec-lyon.fr</ref>
          </desc>
          <listRelation>
            <relation active="#struct-301088" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-301088" status="VALID">
          <idno type="ROR">https://ror.org/01rk35k63</idno>
          <orgName>Université de Lyon</orgName>
          <desc>
            <address>
              <addrLine>92 rue Pasteur - CS 30122, 69361 Lyon Cedex 07</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.universite-lyon.fr/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-194495" status="VALID">
          <idno type="IdRef">026402823</idno>
          <idno type="ISNI">0000000121686185</idno>
          <idno type="ROR">https://ror.org/029brtt94</idno>
          <orgName>Université Claude Bernard Lyon 1</orgName>
          <orgName type="acronym">UCBL</orgName>
          <desc>
            <address>
              <addrLine>43, boulevard du 11 novembre 1918, 69622 Villeurbanne cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-lyon1.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-301088" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-219748" status="VALID">
          <idno type="IdRef">052444724</idno>
          <idno type="ISNI">0000 0001 2292 0228</idno>
          <orgName>Institut National des Sciences Appliquées de Lyon</orgName>
          <orgName type="acronym">INSA Lyon</orgName>
          <date type="start">1957-03-18</date>
          <desc>
            <address>
              <addrLine>20 Avenue Albert Einstein, 69621 Villeurbanne cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.insa-lyon.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-301088" type="direct"/>
            <relation active="#struct-301232" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-301232" status="VALID">
          <idno type="IdRef">162105150</idno>
          <orgName>Institut National des Sciences Appliquées</orgName>
          <orgName type="acronym">INSA</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>