Demo Data from EDBT 2026 / reviewers in the wild / expert
Zhangbin Wen
dblp:436/2125
· DBLP profile ↗
1ranked-venue papers
0as first author
1since 2021 · last 2026
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Security and privacy · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
1 paper |
Security and privacy of machine learning · 100% | |
| Artificial intelligence
1 paper |
Trustworthy machine learning · 77% Efficient and distributed learning · 23% |
Topics — the 4 heaviest of 4, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Machine learning › Trustworthy machine learning
fairness |
1.0 | 1 | 2026 | DMPA: Durable Model Poisoning Attack Against Fairness and Robustness in Efficient Federated Learning Systems · IEEE Trans. Dependable Secur. Comput. 2026 |
Security and privacy of machine learning
federated learning security |
1.0 | 1 | 2026 | DMPA: Durable Model Poisoning Attack Against Fairness and Robustness in Efficient Federated Learning Systems · IEEE Trans. Dependable Secur. Comput. 2026 |
Security and privacy of machine learning › poisoning attack
model poisoning attack |
1.0 | 1 | 2026 | DMPA: Durable Model Poisoning Attack Against Fairness and Robustness in Efficient Federated Learning Systems · IEEE Trans. Dependable Secur. Comput. 2026 |
Machine learning › Efficient and distributed learning
federated learning |
0.3 | 1 | 2026 | DMPA: Durable Model Poisoning Attack Against Fairness and Robustness in Efficient Federated Learning Systems · IEEE Trans. Dependable Secur. Comput. 2026 |
Methods — techniques the papers use, named apart from their topics
over-unlearning · 2.0dual projection · 2.0
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2026 | DMPA: Durable Model Poisoning Attack Against Fairness and Robustness in Efficient Federated Learning SystemsabstractFederated Learning (FL) systems are increasingly deployed across multiple clients to efficiently train a shared model over local data, thereby effectively addressing data silos and reducing communication. However, FL systems are known to be susceptible to model poisoning attacks by malicious clients, who aim at deteriorating the global model accuracy through sending corrupted updates to the central server. Meanwhile, the local accuracy discrepancy among clients, called as performance fairness, could also be exacerbated, which is one of the major concerns of trustworthy FL systems. This paper proposes a novel attack framework called Durable Model Poisoning Attack (DMPA), targeting both fairness and robustness of efficient FL systems. To implement DMPA, we design the over-unlearning strategy, enabling the adversary to generate poisoned updates to compromise partial clients' performance. Furthermore, we develop a dual projection mechanism to improve the durability of model poisoning attacks. Extensive experiments demonstrate that DMPA is powerful and effective even against robust aggregation rules. Particularly, DMPA achieves average$7.6\times$higher reduction of accuracy while decreasing the performance fairness by$3.0\times$compared with baselines. The experiments also indicated that DMPA extends the durability of attack impacts over baselines by$8.5\times$. In addition, experiments in efficient FL systems disclose their vulnerability. Jionghui Jiang, Fengrui Hao, Tianlong Gu, Ke Wang 0068, Zhangbin Wen |
IEEE Trans. Dependable Secur. Comput. | 6 |