Pith. sign in

Paper Citation Record · LEDGER

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning

As of 10 August 2026, this Paper Citation Record lists 59 of 59 outbound references and 2 inbound Pith citation observations for arXiv:2502.03801.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2502.03801 v1

Coverage vector

measured 59 of 59 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-09T00:45:23.424360Z

measured 61 of 61 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-10T06:31:04.303077+00:00

measured 2 of 2 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-07-12T17:18:42.590627Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-05-17T20:10:10.952322Z

Reference resolution

59 of 59 outbound references displayed

  • verified exact0
  • verified fuzzy47
  • unresolved11
  • parse uncertain0
  • malformed identifier1
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation caa862d7-3831-4790-a90d-e52bb910a1da · outbound

This paper cites Accessed: 2024-10-03.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Accessed: 2024-10-03

Reference 1

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:24.497542Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.139580Z digest=sha256:24edbb3870743de97792aee7d543af0637d6df2e0f817cb954b4c8717644ddf6

Observation 7e2eba99-9acc-48fa-ae26-769872b2a0cb · outbound

This paper cites Accessed: 2024-10-03.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Accessed: 2024-10-03

Reference 2

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:24.482622Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.145034Z digest=sha256:ce644293f4927ce0936006d5072b633b0fe039fdb9723314dfb677f52752a255

Observation 36a72f15-83b0-4d44-85dd-9e676778c33f · outbound

This paper cites How to backdoor federated learning.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning How to backdoor federated learning

Reference 3

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:24.466939Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.150396Z digest=sha256:f851e7ec94b3914ea6a35a609abe0b958c8ec507a7d22b3390054c9976555a14

Observation 56b6101a-93f3-4216-93bc-20719b8bbbcb · outbound

This paper cites A little is enough: Circumventing defenses for distributed learning.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning A little is enough: Circumventing defenses for distributed learning

Reference 4

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:24.452075Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.156110Z digest=sha256:83274eae9dbf9138983f5ed0e0fa133d6fabdb79ca7a85cbbf03c9461a440966

Observation 267eba6f-ef9a-4814-ae57-f0b958cf1ffd · outbound

This paper cites Analyzing federated learn- ing through an adversarial lens.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Analyzing federated learn- ing through an adversarial lens

Reference 5

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:24.436703Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.161379Z digest=sha256:8227b514dfabc321cceeffdd23d8660ad47331f1f6cea31dcc8174a408b57e2b

Observation 2e965971-e8a6-4006-8587-4a304374ec60 · outbound

This paper cites Poi- soning attacks against support vector machines.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Poi- soning attacks against support vector machines

Reference 6

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:24.418873Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.166284Z digest=sha256:8d1cff4cde6b03c2b675e9e18e54d975fd35b8646886dc5ab1c4ad0a3ac14447

Observation e43dd710-5d52-4e31-b9bf-4382161470d1 · outbound

This paper cites Machine learning with adver- saries: Byzantine tolerant gradient descent.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Machine learning with adver- saries: Byzantine tolerant gradient descent

Reference 7

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:24.403169Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.171457Z digest=sha256:39f7750076b1d86c54d65718d55823c4dae4529f09d7fb848bfeb7f64999cda7

Observation b7b81a7c-30f4-4602-904a-b29924c08e4e · outbound

This paper cites FLTrust: Byzantine-robust Federated Learning via Trust Bootstrapping.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning FLTrust: Byzantine-robust Federated Learning via Trust Bootstrapping

Reference 8

Resolution
unresolved
no resolver link, observed 2026-08-09T00:45:23.177668Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-09T00:45:23.177668Z digest=sha256:fd401a616f4227d5360c15979f58f04215b5496deba2175a921e855b18526c81

Observation 38aae817-6d41-4c50-8385-14a304912a8f · outbound

This paper cites Asynchronous byzantine machine learning (the case of sgd).

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Asynchronous byzantine machine learning (the case of sgd)

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:24.388075Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.182866Z digest=sha256:97c0aa918df8a7b33c8a64c2a7b52e31d075972da4f75d9e15399b1f57b12fb9

Observation 5e891a49-be58-4e05-a592-89a43bf6f7d4 · outbound

This paper cites Utilization of fate in risk management of credit in small and micro enterprises, 2020.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Utilization of fate in risk management of credit in small and micro enterprises, 2020

Reference 10

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:24.371702Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.187683Z digest=sha256:89de300919cf79904276d9da4ae15d027cedda1caa14fbcd715c2d9509d9c8d5

Observation 8c2ecbe4-2ddd-49ea-9403-2e32c4d6358d · outbound

This paper cites Local model poisoning attacks to {Byzantine- Robust} federated learning.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Local model poisoning attacks to {Byzantine- Robust} federated learning

Reference 11

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:24.354348Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.192220Z digest=sha256:463c4111c6e9e5feeaf139089801f1ca2118c3b80b9f5243ef90244cd94b3faf

Observation 9e59f55f-2424-4eec-bccd-06daf1ed1453 · outbound

This paper cites The limitations of federated learning in sybil set- tings.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning The limitations of federated learning in sybil set- tings

Reference 12

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:24.336484Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.197220Z digest=sha256:55681829cf815ed8592b3a1836200df07825d1f6bbc618bb247fe7c3c75fbf91

Observation 5c1e83ec-25c5-483c-8568-cf622de3de91 · outbound

This paper cites Backdoor attacks and defenses in federated learning: State-of-the-art, taxonomy, and future direc- tions.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Backdoor attacks and defenses in federated learning: State-of-the-art, taxonomy, and future direc- tions

Reference 13

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:24.320069Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.201902Z digest=sha256:1b45732b1e5d49fc04f0b58c0a0d21540558922074351268f93a74be5b01728b

Observation 961ec327-e2ca-48b1-8fe2-c6a6e4786e9c · outbound

This paper cites BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain

Reference 14

Resolution
unresolved
no resolver link, observed 2026-08-09T00:45:23.206674Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-09T00:45:23.206674Z digest=sha256:622c96fa7ca0d2e9680952ec64506ca330726612a29c6a4367d021269cce3cf7

Observation 9822d420-f33b-456b-a4a8-b4a0d1628b09 · outbound

This paper cites The hidden vulnerability of distributed learning in byzantium.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning The hidden vulnerability of distributed learning in byzantium

Reference 15

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:24.302985Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.212053Z digest=sha256:6969819b781beaa2abb2aeced8a6f2a07005507a8dc9cea2bd92221760617ba0

Observation 3073b29c-5ffe-4528-924c-16540e50197c · outbound

This paper cites Federated Learning for Mobile Keyboard Prediction.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Federated Learning for Mobile Keyboard Prediction

Reference 16

Resolution
unresolved
no resolver link, observed 2026-08-09T00:45:23.216836Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-09T00:45:23.216836Z digest=sha256:b41ca250b5d57ec3760a9cbd5cfda1f5d2422d2d64b8398bb7d41b37fb490cb5

Observation 185c4deb-10a9-4dc5-8fef-668a3e5be979 · outbound

This paper cites Deep Residual Learning for Image Recognition.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Deep Residual Learning for Image Recognition

Reference 17

Resolution
unresolved
no resolver link, observed 2026-08-09T00:45:23.222033Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-09T00:45:23.222033Z digest=sha256:f57e1d39fb9788c8726a9e637a770345a05f27eb7537c09bb2b164b21ab389b9

Observation 52e40c0e-b6bb-444a-910d-b4b981f43e8b · outbound

This paper cites Measuring the Effects of Non-Identical Data Distribution for Federated Visual Classification.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Measuring the Effects of Non-Identical Data Distribution for Federated Visual Classification

Reference 18

Resolution
unresolved
no resolver link, observed 2026-08-09T00:45:23.227518Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-09T00:45:23.227518Z digest=sha256:e99ee7b53285fcb15a26617b4d9312b9029e57d183f3aa74479286aa0921aad2

Observation c247c10a-38a2-4e2a-956c-5bc6da5b9626 · outbound

This paper cites Robust statis- tics.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Robust statis- tics

Reference 19

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:24.287781Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.232697Z digest=sha256:ccdfe7ff9a5b4606e908d5af674ddfa92930fdf4329b0b0bdf31459280dde3e8

Observation a5e3abd7-9903-43d7-8927-7d515e8164b9 · outbound

This paper cites Communication-efficient dis- tributed sgd with sketching.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Communication-efficient dis- tributed sgd with sketching

Reference 20

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:24.271863Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.237805Z digest=sha256:fc7d31ba46fe3ebcd8547a86ef9ce6570adba35fee66c8aa667c735b28a684e2

Observation 9e8cb98d-621f-4555-8efb-04612356affc · outbound

This paper cites Learning from history for byzantine robust optimiza- tion.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Learning from history for byzantine robust optimiza- tion

Reference 21

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:24.256416Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.242575Z digest=sha256:5c81a81aa553dd756466be5327ed7d381fe4b260d5d6a8e926a1c2656dea1f66

Observation 8ba39d6c-d412-4288-807d-dbd9f2aec3db · outbound

This paper cites Byzantine-robust learning on heterogeneous datasets via bucketing.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Byzantine-robust learning on heterogeneous datasets via bucketing

Reference 22

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:24.240902Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.247064Z digest=sha256:64f1670208da4b25b6518717d5f2ac5b7b4ec56f2de4826eec13f4d16143cdc1

Observation 59529125-3e64-40bb-826d-9d066d6a9529 · outbound

This paper cites Learning mul- tiple layers of features from tiny images.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Learning mul- tiple layers of features from tiny images

Reference 23

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:24.225421Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.251778Z digest=sha256:035d2a5f0856ff58c42f5d35a0254a516de99178aa2922ea38b6cf8510068b32

Observation 1022d868-e6e6-445e-a977-d8005e10ffd3 · outbound

This paper cites Ardis: a swedish historical handwritten digit dataset.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Ardis: a swedish historical handwritten digit dataset

Reference 24

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:24.210380Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.256488Z digest=sha256:b20f90ebfc8e335ed00abe145c5c29960c536b3469134c4dcecb3a085c7a3d3e

Observation a3d2f7bc-44f0-4cd1-8662-e59ad64b2d75 · outbound

This paper cites Gradient-based learning applied to document recognition.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Gradient-based learning applied to document recognition

Reference 25

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:24.195636Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.261251Z digest=sha256:d5f7ac148bd86a06ae1ffbc2143d798c91b07c52a947f57bf3d90d7c015fe81b

Observation 6307c78a-23ac-43b9-af61-38dc186da943 · outbound

This paper cites Gradient-based learning applied to document recognition.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Gradient-based learning applied to document recognition

Reference 26

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:24.180436Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.265809Z digest=sha256:172bcc9f7f28146088946a438c7b55a8625abf68f6d0e71661422c18ba99e346

Observation e57f4a53-a18b-4984-8d78-91b9471d137f · outbound

This paper cites 3dfed: Adaptive and extensible framework for covert backdoor attack in federated learning.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning 3dfed: Adaptive and extensible framework for covert backdoor attack in federated learning

Reference 27

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:24.164873Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.271087Z digest=sha256:695ed3b1c14d4ce0d4556691ff150a317697fa3633585f06517b00ed8d8a87fd

Observation 1dd5785f-4b31-4e89-8845-0a2168dbf32b · outbound

This paper cites An experimental study of byzantine-robust aggregation schemes in federated learning.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning An experimental study of byzantine-robust aggregation schemes in federated learning

Reference 28

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:24.035359Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.276008Z digest=sha256:fb270c0a17642207349dcf2e3acdd3857c84ef40cd85bd0ec784126dec48648c

Observation f70f5b96-1c09-4cc3-a297-c64c5ff39ea9 · outbound

This paper cites Federated learning in mobile edge networks: A comprehensive survey.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Federated learning in mobile edge networks: A comprehensive survey

Reference 29

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:24.019982Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.281660Z digest=sha256:5549056cd9514e002634067bd64fed50347e01a89c26e4b95d5caafa6540999f

Observation ee80dd94-3fe1-4229-a18e-7564d86fd306 · outbound

This paper cites Privacy and robustness in federated learning: Attacks and defenses.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Privacy and robustness in federated learning: Attacks and defenses

Reference 30

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:24.005260Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.286556Z digest=sha256:a00c911834ae743f3e1653531fd0d2dc5fa12504cdeb77faa498b2554f7d39ae

Observation 763670c2-c97d-42f1-a9ab-add475c8f2cd · outbound

This paper cites Communication-efficient learning of deep networks from decentralized data.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Communication-efficient learning of deep networks from decentralized data

Reference 31

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:23.989796Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.290991Z digest=sha256:a4437960bef6c9493bd321b02b89c3a09b38f1ea7f23ddb72bac519a490a2f22

Observation edba838d-347c-429d-939b-2667978e944b · outbound

This paper cites Feder- ated learning for internet of things: A comprehensive survey.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Feder- ated learning for internet of things: A comprehensive survey

Reference 32

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:23.974915Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.295550Z digest=sha256:5057147b86808f1631bd5ff151997f802b3dc186f553779917b784b42a32fb18

Observation 17d6d000-d4cd-4b16-90f0-9d8defe2adaf · outbound

This paper cites Federated learning for smart healthcare: A survey.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Federated learning for smart healthcare: A survey

Reference 33

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:23.959714Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.300066Z digest=sha256:bff7894af3e2a96ac0de9688455c5dd631df6ce695c37015340321248fe85e02

Observation 778b39f6-2dd0-474b-a496-612dcbc96b7d · outbound

This paper cites In 31st USENIX Security Sympo- sium (USENIX Security 22) , pages 1415–1432, 2022.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning In 31st USENIX Security Sympo- sium (USENIX Security 22) , pages 1415–1432, 2022

Reference 34

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:23.944796Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.304529Z digest=sha256:addb80aa6123dcf01eb24f0ae2ea27c9189d1ea099a2898ec4e7617e7d49f8ec

Observation 4d47fc2e-7ab4-419a-909f-fcdfa34f2129 · outbound

This paper cites Federated evaluation and tuning for on-device personalization: System de- sign & applications, 2022.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Federated evaluation and tuning for on-device personalization: System de- sign & applications, 2022

Reference 35

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:23.929664Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.309080Z digest=sha256:4a227034a565ac0fcec8aad19041f57fd0c1b1af0c0559cf082a7ef77a599b63

Observation d754262c-aec0-4b0c-a604-210812b5b944 · outbound

This paper cites Robust aggregation for federated learning.IEEE Trans- actions on Signal Processing, 70:1142–1154, 2022.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Robust aggregation for federated learning.IEEE Trans- actions on Signal Processing, 70:1142–1154, 2022

Reference 36

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:23.914333Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.313990Z digest=sha256:689b6d319da9f00cbba3907ebf88cef2ec26780428f351dd3a6dfcf7ec2ff7c9

Observation 25626163-08cc-46f0-9925-3aa64b72702f · outbound

This paper cites Federated Learning for Emoji Prediction in a Mobile Keyboard.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Federated Learning for Emoji Prediction in a Mobile Keyboard

Reference 37

Resolution
unresolved
no resolver link, observed 2026-08-09T00:45:23.318852Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-09T00:45:23.318852Z digest=sha256:20dfb52c1c0ed5d207718ececa6b558719f83e0ea7c324a47fd759ad6d04c885

Observation 1846147c-fc7f-4da6-9fb4-7d854f82b221 · outbound

This paper cites Reddi, Zachary Charles, Manzil Zaheer, Zachary Garrett, Keith Rush, Jakub Kone ˇcný, Sanjiv Kumar, and Hugh Brendan McMahan.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Reddi, Zachary Charles, Manzil Zaheer, Zachary Garrett, Keith Rush, Jakub Kone ˇcný, Sanjiv Kumar, and Hugh Brendan McMahan

Reference 38

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:23.899371Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.324132Z digest=sha256:a7b9f1acf3fc934d186a88632561e0a2f4ee6158d1439e774c2ba72c762d2ecb

Observation 1c69fcd3-9674-4f44-85d3-e4cc5d7a6c72 · outbound

This paper cites DeepSight: Mitigating Backdoor Attacks in Federated Learning Through Deep Model Inspection.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning DeepSight: Mitigating Backdoor Attacks in Federated Learning Through Deep Model Inspection

Reference 39

Resolution
unresolved
no resolver link, observed 2026-08-09T00:45:23.329331Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-09T00:45:23.329331Z digest=sha256:1458b658853c01737490efcdfe9accd5959da171277fc0340161b2823cc69650

Observation 5b61a302-533e-4d1c-a8bd-caf15e701351 · outbound

This paper cites Sok: Systematizing attack studies in federated learning–from sparseness to completeness.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Sok: Systematizing attack studies in federated learning–from sparseness to completeness

Reference 40

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:23.884598Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.334806Z digest=sha256:83c031c4440a7f9512e19749fc8271004657e08a287ef5691859405d728894d3

Observation 4ca53f48-7a24-4d29-b0d9-4fbeab2498ef · outbound

This paper cites Manipulating the byzantine: Optimizing model poisoning attacks and defenses for federated learning.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Manipulating the byzantine: Optimizing model poisoning attacks and defenses for federated learning

Reference 41

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:23.869648Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.339726Z digest=sha256:732ed388a612013b477ec0a9a89efa7da5ff0cbe2a40c143196c31371a78b875

Observation 8685fcd5-7d04-4d00-beb5-091f879d4521 · outbound

This paper cites Back to the drawing board: A critical evaluation of poisoning attacks on production federated learning.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Back to the drawing board: A critical evaluation of poisoning attacks on production federated learning

Reference 42

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:23.854653Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.344548Z digest=sha256:8aa0a09c195f487fe01341c0885c3f8368cdf8669b74747272101f4c70466df8

Observation e25065d7-aa4e-46c2-8884-0a4d96470269 · outbound

This paper cites Au- ror: Defending against poisoning attacks in collabora- tive deep learning systems.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Au- ror: Defending against poisoning attacks in collabora- tive deep learning systems

Reference 43

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:23.838942Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.349010Z digest=sha256:b62c21db8133980d05348d62d7801bc6d987421fdd451aeb30da3021168a1690

Observation 0c34ac9b-062c-45f2-9c6e-cb86f2a46a92 · outbound

This paper cites Sparsified sgd with memory.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Sparsified sgd with memory

Reference 44

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:23.821797Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.353769Z digest=sha256:4ba21b7baff5d89b473e4d7e16994969e00f20d7ad1b325d1d76feb6ea8ecc19

Observation cf2f4e1d-4d8e-41af-b84d-94b82fc955bd · outbound

This paper cites Can You Really Backdoor Federated Learning?.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Can You Really Backdoor Federated Learning?

Reference 45

Resolution
unresolved
no resolver link, observed 2026-08-09T00:45:23.358218Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-09T00:45:23.358218Z digest=sha256:cca9fdb7b1214ccf59d325051ad248a215269b3f291a1472434dfb181ee51320

Observation 2ee765d3-35ba-4de5-ac41-afc6f1a812f2 · outbound

This paper cites A compre- hensive survey on poisoning attacks and countermea- sures in machine learning.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning A compre- hensive survey on poisoning attacks and countermea- sures in machine learning

Reference 46

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:23.806685Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.363389Z digest=sha256:a51b7b8d3c7fa2cd101c2167d2838130d86ae020ec5d6c8e96d0301ab33a3598

Observation f01ffae3-68f6-4067-a955-0932d986859d · outbound

This paper cites Data and model poisoning backdoor attacks on wireless federated learn- ing, and the defense mechanisms: A comprehensive survey.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Data and model poisoning backdoor attacks on wireless federated learn- ing, and the defense mechanisms: A comprehensive survey

Reference 47

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:23.791672Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.367903Z digest=sha256:34111abb44467e6ab1b46fd103ede309bae7fe956ef1ce3432886d809cd60e8e

Observation 4f9409f7-923e-45f0-b74e-67c8afe3edfd · outbound

This paper cites Attack of the tails: Yes, you really can backdoor federated learn- ing.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Attack of the tails: Yes, you really can backdoor federated learn- ing

Reference 48

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:23.776035Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.372584Z digest=sha256:90ff7aec90b31f7ea023b3194216c89b556acdebe759954cc6470f0b4d582403

Observation 07c1508c-06ce-4236-bc17-7b2dbef81dbe · outbound

This paper cites Federated Learning with Matched Averaging.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Federated Learning with Matched Averaging

Reference 49

Resolution
unresolved
no resolver link, observed 2026-08-09T00:45:23.377212Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-09T00:45:23.377212Z digest=sha256:19ba626dc2df335d8bf210b1ea545e02557407721521e1823310ea8ac0ec6600

Observation cc04af7f-d0cc-44ab-83b4-71ce50f18545 · outbound

This paper cites Crfl: Certifiably robust federated learning against back- door attacks.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Crfl: Certifiably robust federated learning against back- door attacks

Reference 50

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:23.761033Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.382127Z digest=sha256:79d7aa4ba49a186d5e3400499e59e0bf2a75a678699eb305c5887ec464759841

Observation 28c1f131-35b9-4fe3-b407-c386d36b0d1a · outbound

This paper cites Dba: Distributed backdoor attacks against federated learn- ing.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Dba: Distributed backdoor attacks against federated learn- ing

Reference 51

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:23.745465Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.386739Z digest=sha256:3b3af4b9393c1a8ba63448c489640f4e196358449b47763294e4e6e13714cb4e

Observation 56318e87-f848-43e2-8d85-2398b31953bf · outbound

This paper cites Fall of empires: Breaking byzantine-tolerant sgd by in- ner product manipulation.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Fall of empires: Breaking byzantine-tolerant sgd by in- ner product manipulation

Reference 52

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:23.729048Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.391546Z digest=sha256:f4ec9e41cd4252390eba21eefe38956f4d9635db9f436ab91f029df2c6e4188b

Observation f63dd423-c4c2-4e05-9e6d-2289113658a2 · outbound

This paper cites Byzantine-robust Federated Learning through Collaborative Malicious Gradient Filtering.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Byzantine-robust Federated Learning through Collaborative Malicious Gradient Filtering

Reference 53

Resolution
unresolved
no resolver link, observed 2026-08-09T00:45:23.396082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-09T00:45:23.396082Z digest=sha256:4c82b97febc1cd2c3f4ee1fea052c67293a9620f0e39f1d1dde4277294bdf2d6

Observation bcf6aa56-8a22-4bee-af21-ea2413744101 · outbound

This paper cites Heterogeneous federated learning: State- of-the-art and research challenges.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Heterogeneous federated learning: State- of-the-art and research challenges

Reference 54

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:23.711572Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.400959Z digest=sha256:e1e75ceb05418ef1953a8d26510ca30bd99a24396e4366ddbe583023e9678a79

Observation f3ad6e4d-377b-47b0-93ea-15afba1ee3d5 · outbound

This paper cites Jailbreak Attacks and Defenses Against Large Language Models: A Survey.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Jailbreak Attacks and Defenses Against Large Language Models: A Survey

Reference 55

Resolution
unresolved
no resolver link, observed 2026-08-09T00:45:23.405459Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-09T00:45:23.405459Z digest=sha256:805bf0d676041192a31682bcd129000ea4566feecff240e9d908f6bc7a49a068

Observation 87e975f4-206c-4a99-8a4e-b2ba566cea8e · outbound

This paper cites Byzantine-robust distributed learning: Towards optimal statistical rates.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Byzantine-robust distributed learning: Towards optimal statistical rates

Reference 56

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:23.693865Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.410499Z digest=sha256:57455de9aae043c968a49bcf175495f88b0ff5f830f7cf5f204701330b618da2

Observation 98b4b011-f0d0-4f1c-9b7c-861a21d4c878 · outbound

This paper cites Bayesian nonparametric federated learning of neural networks.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Bayesian nonparametric federated learning of neural networks

Reference 57

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:23.678175Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.414894Z digest=sha256:b196f598dc41d1567c9ea0bef364b387f038cb010a7a59a1b0783f5353817914

Observation cf43b1bb-c255-4393-a875-73457b28d351 · outbound

This paper cites Fldetector: Defending federated learn- ing against model poisoning attacks via detecting mali- cious clients.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning Fldetector: Defending federated learn- ing against model poisoning attacks via detecting mali- cious clients

Reference 58

Resolution
verified fuzzy
raw_fallback, observed 2026-08-09T00:45:23.662069Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.419513Z digest=sha256:97963444449e5e457771ad50918e32287b1495ede97d4830711552a6f335454d

Observation 257b4679-642d-49e3-82ba-00d7cc148a4c · outbound

This paper cites batchrun.py.

SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning batchrun.py

Reference 59

Resolution
malformed identifier
raw_fallback, observed 2026-08-09T00:45:23.644754Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-08-09T00:45:23.424360Z digest=sha256:65b2022d4807ac429cca366a6a06f1db165660c912ef3f89bd553be38c92f222

Pith citing papers

Observation 0fee46c0-1ac6-4e71-9109-2513216b2db3 · inbound

FLARE: Adaptive Multi-Dimensional Reputation for Robust Client Reliability in Federated Learning cites this paper.

FLARE: Adaptive Multi-Dimensional Reputation for Robust Client Reliability in Federated Learning SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning

Reference 65

Resolution
verified exact
arxiv_id, observed 2026-05-17T20:10:10.954312Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

source=pdf_text observed=2026-05-17T20:08:21.578954Z digest=sha256:29abc673e3b9f907a269fad8b58439b0903d4a66f1b9159e8bb40dd16a38f383

Observation 88335609-46cf-4e7f-ac89-9de7938219af · inbound

Graph Representation Learning Augmented Model Manipulation on Federated Fine-Tuning of LLMs cites this paper.

Graph Representation Learning Augmented Model Manipulation on Federated Fine-Tuning of LLMs SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning

Reference 49

Resolution
unresolved
no resolver link, observed 2026-07-12T17:18:42.590627Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-07-12T17:18:42.590627Z digest=sha256:376ed385f1399f17f2e118c4a4bf89d4f340cb065bc078815679810a40751535