arXiv.itsnick.co

an independent field guide to 23 million papers from arXiv & OpenAlex — not affiliated with arXiv.org

Author

Anmin Fu

103 papers · 2010–2026

2010: 12011: 52012: 32013: 22014: 12015: 02016: 42017: 52018: 92019: 52020: 122021: 72022: 142023: 112024: 102025: 92026: 5
2010peak 14 in 20222026

Frequent co-authors

Papers

showing 1–25 of 103 RSS

VFL: A Verifiable Federated Learning with Privacy-Preserving for Big Data in Industrial IoT

Anmin Fu, Xianglong Zhang, Naixue Xiong +2 more

cs.CR · · cited 252× · arXiv ↗ · more like this ·

Due to the strong analytical ability of big data, deep learning has been widely applied to train the collected data in industrial IoT. However, for privacy issues, traditional data-gathering centralized learning is not applicable to industrial scenarios sensitive to training sets. Recently, federated learning has received widespread attention, since it trains a model by only relying on gradient aggregation without accessing training sets. But existing researches reveal that the shared gradient still retains the sensitive information of the training set. Even worse, a malicious aggregation server may return forged aggregated gradients. In this paper, we propose the VFL, verifiable federated learning with privacy-preserving for big data in industrial IoT. Specifically, we use Lagrange interpolation to elaborately set interpolation points for verifying the correctness of the aggregated…

Privacy-Preserving Federated Learning in Fog Computing

Chunyi Zhou, Anmin Fu, Shui Yu +3 more

Artificial Intelligence · IEEE Internet of Things Journal · · cited 248× · DOI ↗ · more like this ·

Federated learning can combine a large number of scattered user groups and train models collaboratively without uploading data sets, so as to avoid the server collecting user sensitive data. However, the model of federated learning will expose the training set information of users, and the uneven amount of data owned by users in multiple users' scenarios will lead to the inefficiency of training. In this article, we propose a privacy-preserving federated learning scheme in fog computing. Acting as a participant, each fog node is enabled to collect Internet-of-Things (IoT) device data and complete the learning task in our scheme. Such design effectively improves the low training efficiency and model accuracy caused by the uneven distribution of data and the large gap of computing power. We enable IoT device data to satisfy ε -differential privacy to resist data attacks and leverage the…

NPP: A New Privacy-Aware Public Auditing Scheme for Cloud Data Sharing with Group Users

Anmin Fu, Shui Yu, Yuqing Zhang +2 more

Information Systems · IEEE Transactions on Big Data · · cited 146× · DOI ↗ · more like this ·

Today, cloud storage becomes one of the critical services, because users can easily modify and share data with others in cloud. However, the integrity of shared cloud data is vulnerable to inevitable hardware faults, software failures or human errors. To ensure the integrity of the shared data, some schemes have been designed to allow public verifiers (i.e., third party auditors) to efficiently audit data integrity without retrieving the entire users’ data from cloud. Unfortunately, public auditing on the integrity of shared data may reveal data owners’ sensitive information to the third party auditor. In this paper, we propose a new privacy-aware public auditing mechanism for shared cloud data by constructing a homomorphic verifiable group signature. Unlike the existing solutions, our scheme requires at least <italic xmlns:mml="http://www.w3.org/1998/Math/MathML"…

A Privacy-Preserving and Verifiable Federated Learning Scheme

Xianglong Zhang, Anmin Fu, Huaqun Wang +2 more

Artificial Intelligence · · cited 109× · DOI ↗ · more like this ·

Due to the complexity of the data environment, many organizations prefer to train deep learning models together by sharing training sets. However, this process is always accompanied by the restriction of distributed storage and privacy. Federated learning addresses this challenge by only sharing gradients with the server without revealing training sets. Unfortunately, existing research has shown that the server could extract information of the training sets from shared gradients. Besides, the server may falsify the calculated result to affect the accuracy of the trained model. To solve the above problems, we propose a privacy-preserving and verifiable federated learning scheme. Our scheme focuses on processing shared gradients by combining the Chinese Remainder Theorem and the Paillier homomorphic encryption, which can realize privacy-preserving federated learning with low computation…

Efficient Certificateless Multi-Copy Integrity Auditing Scheme Supporting Data Dynamics

Lei Zhou, Anmin Fu, Guomin Yang +2 more

Information Systems · IEEE Transactions on Dependable and Secure Computing · · cited 96× · DOI ↗ · more like this ·

To improve data availability and durability, cloud users would like to store multiple copies of their original files at servers. The multi-copy auditing technique is proposed to provide users with the assurance that multiple copies are actually stored in the cloud. However, most multi-replica solutions rely on Public Key Infrastructure (PKI), which entails massive overhead of certificate computation and management. In this article, we propose an efficient multi-copy dynamic integrity auditing scheme by employing certificateless signatures (named MDSS), which gets rid of expensive certificate management overhead and avoids the key escrow problem in identity-based signatures. Specifically, we improve the classic Merkle Hash Tree (MHT) to achieve batch updates for multi-copy storage, which allows the communication overhead incurred for dynamics to be independent of the replica number. To…

ESDRA: An Efficient and Secure Distributed Remote Attestation Scheme for IoT Swarms

Boyu Kuang, Anmin Fu, Shui Yu +3 more

Computer Networks and Communications · IEEE Internet of Things Journal · · cited 77× · DOI ↗ · more like this ·

An Internet of Things (IoT) system generally contains thousands of heterogeneous devices which often operate in swarms-large, dynamic, and self-organizing networks. Remote attestation is an important cornerstone for the security of these IoT swarms, as it ensures the software integrity of swarm devices and protects them from attacks. However, current attestation schemes suffer from single point of failure verifier. In this paper, we propose an Efficient and Secure Distributed Remote Attestation (ESDRA) scheme for IoT swarms. We present the first many-to-one attestation scheme for device swarms, which reduces the possibility of single point of failure verifier. Moreover, we utilize distributed attestation to verify the integrity of each node and apply accusation mechanism to report the invaded nodes, which makes ESDRA much easier to feedback the certain compromised nodes and reduces the…

Provable Data Possession with Outsourced Data Transfer

Huaqun Wang, Debiao He, Anmin Fu +2 more

Information Systems · IEEE Transactions on Services Computing · · cited 77× · DOI ↗ · more like this ·

With the rapid development of cloud computing, more and more enterprises would like to upload and store their data in the public cloud. When the parts of the business of an enterprise are purchased by another enterprise, the corresponding data will be transferred to the acquiring enterprise. For the usual case, how to outsource the computation cost of data transfer to the cloud? How to ensure the remote purchased data integrity? Thus, it is important to study provable data possession with outsourced data transfer (DT-PDP). In this paper, for the first time, we propose the novel concept: DT-PDP. By taking use of DT-PDP, the following three security requirements can be satisfied: (1) the other un-purchased data security of acquired enterprise can be ensured; (2) the purchased data integrity and privacy can be ensured; (3) the data transferability&#x2019;s computation can be outsourced to…

A Novel Group-Based Handover Authentication Scheme with Privacy Preservation for Mobile WiMAX Networks

Anmin Fu, Shao-hua Lan, Bo Huang +2 more

Computer Networks and Communications · IEEE Communications Letters · · cited 59× · DOI ↗ · more like this ·

This letter proposes an efficient group-based handover authentication scheme for mobile WiMAX networks. When the first Mobile Station (MS) of the handover group moves from the service Base Station (BS) to a target BS, the service BS transmits all the handover group members security context to the target BS. Thus the rest of the MSs in the same handover group can bypass the Extensible Authentication Protocol (EAP) and the security context transfer phases to directly perform the handover authentication, which obviously reduces handover latency. Moreover, the proposed scheme not only meets the essential security requirements in handover authentication semantics (such as mutual authentication and resisting the domino effect) but also achieves privacy preservation.

Machine Unlearning: Taxonomy, Metrics, Applications, Challenges, and Prospects

Na Li, Chunyi Zhou, Yansong Gao +4 more

cs.LG · · cited 57× · arXiv ↗ · more like this ·

Personal digital data is a critical asset, and governments worldwide have enforced laws and regulations to protect data privacy. Data users have been endowed with the right to be forgotten of their data. In the course of machine learning (ML), the forgotten right requires a model provider to delete user data and its subsequent impact on ML models upon user requests. Machine unlearning emerges to address this, which has garnered ever-increasing attention from both industry and academia. While the area has developed rapidly, there is a lack of comprehensive surveys to capture the latest advancements. Recognizing this shortage, we conduct an extensive exploration to map the landscape of machine unlearning including the (fine-grained) taxonomy of unlearning algorithms under centralized and distributed settings, debate on approximate unlearning, verification and evaluation metrics…

Cloud-Based Outsourcing for Enabling Privacy-Preserving Large-Scale Non-Negative Matrix Factorization

Anmin Fu, Zhenzhu Chen, Yi Mu +3 more

Signal Processing · IEEE Transactions on Services Computing · · cited 51× · DOI ↗ · more like this ·

It is inevitable and evident that outsourcing complicated intensive tasks to public cloud vendors would be the primary option for resource-constrained clients in order to save cost. Unfortunately, the public cloud vendors are usually untrusted. They may inadvertently leak the data or misuse the user’s data, compromise user’s privacy or intentionally corrupt computational results to make the system unreliable. It is therefore important how to stop this happening whilst embracing the computational power of public cloud vendors. Non-negative matrix factorization (NMF) is a significant method for conducting data dimension reduction, which has been widely used in large-scale data processing. Nevertheless, due to its non-polynomial hardness, NMF cannot be conducted efficiently using local computation resources, especially when dealing with big data. Motivated by this issue, we address this by…

Dangerous Cloaking: Natural Trigger based Backdoor Attacks on Object Detectors in the Physical World

Hua Ma, Yinshan Li, Yansong Gao +7 more

cs.CV · · cited 45× · arXiv ↗ · more like this ·

Deep learning models have been shown to be vulnerable to recent backdoor attacks. A backdoored model behaves normally for inputs containing no attacker-secretly-chosen trigger and maliciously for inputs with the trigger. To date, backdoor attacks and countermeasures mainly focus on image classification tasks. And most of them are implemented in the digital world with digital triggers. Besides the classification tasks, object detection systems are also considered as one of the basic foundations of computer vision tasks. However, there is no investigation and understanding of the backdoor vulnerability of the object detector, even in the digital world with digital triggers. For the first time, this work demonstrates that existing object detectors are inherently susceptible to physical backdoor attacks. We use a natural T-shirt bought from a market as a trigger to enable the cloaking…

A privacy‐preserving group authentication protocol for machine‐type communication in LTE/LTE‐A networks

Anmin Fu, Jianye Song, Shuai Li +2 more

Computer Networks and Communications · Security and Communication Networks · · cited 44× · DOI ↗ · more like this ·

Abstract Machine‐type communication (MTC) is a very important application of the Internet of things. It has a vast market and application scenarios. However, supporting a large number of low‐power devices transmission is an important issue in long‐term evolution/long‐term evolution advanced (LTE/LTE‐A) networks. Specifically, when a large number of machine‐type communication devices (MTCDs) with low‐power consumption requirements simultaneously request access to the LTE/LTE‐A networks, each MTCD needs an independent complete access authentication process with core network, which may cause a serious signaling congestion in the core network. To solve this problem, in this paper, we propose a novel group authentication protocol with privacy‐preserving for MTC in the LTE/LTE‐A networks. The proposed protocol cannot only simultaneously authenticate a group of MTCDs and minimize the signaling…

Quantization Backdoors to Deep Learning Commercial Frameworks

Hua Ma, Huming Qiu, Yansong Gao +7 more

cs.CR · · cited 42× · arXiv ↗ · more like this ·

Currently, there is a burgeoning demand for deploying deep learning (DL) models on ubiquitous edge Internet of Things (IoT) devices attributed to their low latency and high privacy preservation. However, DL models are often large in size and require large-scale computation, which prevents them from being placed directly onto IoT devices, where resources are constrained and 32-bit floating-point (float-32) operations are unavailable. Commercial framework (i.e., a set of toolkits) empowered model quantization is a pragmatic solution that enables DL deployment on mobile devices and embedded systems by effortlessly post-quantizing a large high-precision model (e.g., float-32) into a small low-precision model (e.g., int-8) while retaining the model inference accuracy. However, their usability might be threatened by security vulnerabilities. This work reveals that the standard quantization…

Secure Collaborative Deep Learning Against GAN Attacks in the Internet of Things

Zhenzhu Chen, Anmin Fu, Yinghui Zhang +3 more

Artificial Intelligence · IEEE Internet of Things Journal · · cited 36× · DOI ↗ · more like this ·

Deep learning makes the Internet-of-Things (IoT) devices more attractive, and in turn, IoT facilitates the resolution of the contradiction between data collection and privacy concerns. IoT devices with small-scale computing power can contribute to model training without sharing data in collaborative learning. However, collaborative learning is susceptible to generative adversarial network (GAN) attack, where an adversary can pretend to be a participant engaging in the model training and learn other participants' data. In this article, we propose a secure collaborative deep learning model which resists GAN attacks. We isolate the participants from the model parameters, and realize the local model training of participants via the interaction mode, ensuring that neither the participants nor the server would have access to each other's data. In particular, we target convolutional neural…

SeShare: Secure cloud data sharing based on blockchain and public auditing

Longxia Huang, Gongxuan Zhang, Shui Yu +2 more

Information Systems · Concurrency and Computation Practice and Experience · · cited 36× · DOI ↗ · more like this ·

Summary In a data sharing group, each user can upload, modify, and access group files and a user is required to generate a new signature for the modified file after modification. There is a situation that two or more users modify the same file at almost the same time, which should be avoided as it gives rise to a signature conflict. However, the existing schemes do not take it into consideration. In this paper, we proposed a new mechanism SeShare for data storing based on blockchain to realize signature uniqueness, which solves the problem of generating signatures for the same file meanwhile by different group users. Specifically, we record every signature of a file in a blockchain in chronological order, and only one user is allowed to add new signature at the end of the blockchain when modification conflicts occur. On the other hand, to provide a secure data sharing service, SeShare…

A Fast Handover Authentication Mechanism Based on Ticket for IEEE 802.16m

Anmin Fu, Yuqing Zhang, Zhenchao Zhu +1 more

Computer Networks and Communications · IEEE Communications Letters · · cited 36× · DOI ↗ · more like this ·

IEEE 802.16 m is now under consideration by the ITU to become the IMT-Advanced standard. However, handover authentication is a critical issue in this area. In this letter, we propose a fast handover authentication mechanism based on ticket for IEEE 802.16 m. The credential ticket of Mobile Station (MS) is issued by the access Base Station (BS) using a multi-BS group key during the initial authentication. When the MS moves from the service BS to a target BS, it can show its ticket to the target BS and this BS can authenticate the MS without communicating with any other third party (e.g., previous BS and authentication server). Our analysis shows that the proposed scheme meets the security requirements in handover authentication semantics and provides robust efficiency in terms of communication overhead and computational cost.

Verifiable Privacy-Preserving Scheme Based on Vertical Federated Random Forest

Jinpeng Hou, Mang Su, Anmin Fu +1 more

Artificial Intelligence · IEEE Internet of Things Journal · · cited 35× · DOI ↗ · more like this ·

Presently, under the condition of privacy preserving, vertical federated learning (VFL) has played an important role in training the machine learning (ML) models in the application scenarios, such as medical prediction, fraud detection, in which the data is distributed vertically. Random forest (RF) is one of the most widely used ML methods in VFL, which has the advantages of strong predictive performance, availability, and the ability to parallel tasks. However, current research on privacy preserving of vertical federated RF is limited, and none of them can achieve the application level of security, that is, in a system where users are dynamically changing, not only privacy can be preserved, but also data integrity can be verified. Therefore, we propose a verifiable privacy-preserving scheme (VPRF) based on vertical federated RF, in which the users are dynamic change. First, we design…

Securing Cooperative Spectrum Sensing Against Collusive False Feedback Attack in Cognitive Radio Networks

Jingyu Feng, Shaoping Li, Shaoqing Lv +2 more

Computer Networks and Communications · IEEE Transactions on Vehicular Technology · · cited 35× · DOI ↗ · more like this ·

Cooperative spectrum sensing (CSS) is considered as a powerful approach to improve the utilization of scarce spectrum resources. However, CSS assumes that all secondary users (SU) always are honest, thus offering opportunities for attackers to launch spectrum sensing data falsification (SSDF) attack. To combat such threat, recent efforts have been made to trust mechanism. In this paper, we argue that powering CSS with trust mechanism is not enough. A vulnerability for trust mechanism is found, that is, the feedback data from initiator SUs are generally unchecked. Such feedback data corresponding to the spectrum status of primary users can be exploited by attackers to disturb trust mechanism in a collusive manner. Especially, collusive false feedback (CFF) attackers would form a clique to help each other. One of CFF attackers can disguise as an initiator SU who sends the feedback in…

A Privacy Preserving Handover Authentication Scheme for EAP-Based Wireless Networks

Jing Qi, Yuqing Zhang, Anmin Fu +1 more

Computer Networks and Communications · · cited 28× · DOI ↗ · more like this ·

Extensible Authentication Protocol (EAP) is a framework which aims to provide a flexible authentication for wireless networks. Due to the involvement of an EAP server and several round trips between a mobile node (MN) and the EAP server, a full EAP authentication takes about 1000ms which is unacceptable in a handover process. This paper proposes a privacy preserving handover authentication scheme for EAP-based wireless networks. We use the proxy signature scheme to accomplish authentication between MN and an access point (AP) without involving the third party. The detailed security analysis shows that our scheme can achieve the privacy preserving and forward/backward security. In addition, we evaluate the latency performance of the proposed scheme by the analysis and simulation. The results demonstrate that our scheme is more efficient in terms of computation and communication overheads.

WMDefense: Using Watermark to Defense Byzantine Attacks in Federated Learning

Xu Zheng, Qihao Dong, Anmin Fu

Artificial Intelligence · IEEE INFOCOM 2022 - IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS) · · cited 26× · DOI ↗ · more like this ·

Federated learning enables data owners to train a global ML model without exchanging data. However, the unique pattern of training in federated learning can be exploited by malicious adversaries. These malicious adversaries degrade the accuracy of the federated training model by sending malicious inputs during the federated training process. Existing Byzantine robust federated learning algorithms remain vulnerable to customized local model poisoning attacks because they are not designed with a suitable malicious client detection mechanism. To defend against the latest Byzantine attacks, this work proposes an effective algorithm, WMDefense, which identifies malicious clients by embedding a watermark to the global model and tracking the degree of watermark recession after local model training. Our experiments apply WMDefense to two recent Byzantine attack algorithms and validate them…

LinkBreaker: Breaking the Backdoor-Trigger Link in DNNs via Neurons Consistency Check

Zhenzhu Chen, Shang Wang, Anmin Fu +3 more

Artificial Intelligence · IEEE Transactions on Information Forensics and Security · · cited 26× · DOI ↗ · more like this ·

Backdoor attacks cause model misbehaving by first implanting backdoors in deep neural networks (DNNs) during training and then activating the backdoor via samples with triggers during inference. The compromised models could pose serious security risks to artificial intelligence systems, such as misidentifying ‘stop’ traffic sign into ‘80km/h’. In this paper, we investigate the connection characteristic between the backdoor and the trigger in DNNs and observe the fact that the backdoor is implanted via establishing a link between a cluster of neurons, representing the backdoor, and the triggers. Based on this observation, we design LinkBreaker, a new generic scheme for defending against backdoor attacks. In particular, LinkBreaker deploys a neuron consistency check mechanism for identifying compromised neuron set related to the trigger. Then, the LinkBreaker regulates the model to make…

Design and Evaluate Recomposited OR-AND-XOR-PUF

Jianrong Yao, Lihui Pang, Zhi Zhang +3 more

cs.CR · · cited 26× · arXiv ↗ · more like this ·

Physical Unclonable Function (PUF) is a hardware security primitive with a desirable feature of low-cost. Based on the space of challenge-response pairs (CRPs), it has two categories:weak PUF and strong PUF. Though designing a reliable and secure lightweight strong PUF is challenging, there is continuing efforts to fulfill this gap due to wide range of applications enabled by strong PUF. It was prospected that the combination of MAX and MIN bit-wise operation is promising for improving the modeling resilience when MAX and MIN are employed in the PUF recomposition. The main rationale lies on the fact that each bit-wise might be mainly vulnerable to one specific type of modeling attack, combining them can have an improved holistic resilience. This work is to first evaluate the main PUF performance, in particular,uniformity and reliability of the OR-AND-XOR-PUF(OAX-PUF)-(x, y, z)-OAX-PUF.…

CCA-Secure Revocable Identity-Based Encryption With Ciphertext Evolution in the Cloud

Yinxia Sun, Willy Susilo, Futai Zhang +1 more

Artificial Intelligence · IEEE Access · · cited 22× · DOI ↗ · more like this ·

Identity-based encryption (IBE) is a very attractive cryptographic primitive due to its unnecessity of any certificate managements. Nevertheless, the user revocation problem in IBE remains an elusive research problem and hence, it is an important research topic. One possible approach in achieving revocations is to update user's decryption keys. However, to avoid the need of secret channels, public time keys need to be issued to allow this update to occur. It is unfortunate that this method often suffers from two problems: 1) the user has to maintain linearly growing decryption keys; and 2) the revoked users can still access ciphertexts prior to revocation. At the first glance, proxy re-encryption technique may provide a solution to this problem, but the ciphertexts will become longer after each re-encryption, which makes it impractical. In this paper, we present a revocable…

TransCAB: Transferable Clean-Annotation Backdoor to Object Detection with Natural Trigger in Real-World

Hua Ma, Yinshan Li, Yansong Gao +6 more

cs.CV · · cited 20× · arXiv ↗ · more like this ·

Object detection is the foundation of various critical computer-vision tasks such as segmentation, object tracking, and event detection. To train an object detector with satisfactory accuracy, a large amount of data is required. However, due to the intensive workforce involved with annotating large datasets, such a data curation task is often outsourced to a third party or relied on volunteers. This work reveals severe vulnerabilities of such data curation pipeline. We propose MACAB that crafts clean-annotated images to stealthily implant the backdoor into the object detectors trained on them even when the data curator can manually audit the images. We observe that the backdoor effect of both misclassification and the cloaking are robustly achieved in the wild when the backdoor is activated with inconspicuously natural physical triggers. Backdooring non-classification object detection…

FeSA: Automatic Federated Swarm Attestation on Dynamic Large-Scale IoT Devices

Boyu Kuang, Anmin Fu, Yansong Gao +3 more

Computer Networks and Communications · IEEE Transactions on Dependable and Secure Computing · · cited 20× · DOI ↗ · more like this ·

Swarm attestation, as an important branch of Remote Attestation (RA), enables a trusted party ( <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">verifier</i> ) to verify the security states of multiple devices ( <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">provers</i> ) in a large network ( <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">swarm</i> ) simultaneously via a challenge-response mechanism. However, swarm attestation suffers from significant redundancy overhead since all devices in the swarm need to be attested in each attestation round. Besides, it faces challenges such as verifier-impersonation Denial of Service (DoS) attacks, highly dynamic networks, transient & self-relocating malware, and Time-Of-Check-Time-Of-Use (TOCTOU)…