中文
相关论文

相关论文: DEFEND: Poisoned Model Detection and Malicious Cli…

200 篇论文

Model poisoning attacks are critical security threats to Federated Learning (FL). Existing model poisoning attacks suffer from two key limitations: 1) they achieve suboptimal effectiveness when defenses are deployed, and/or 2) they require…

密码学与安全 · 计算机科学 2025-08-14 Yueqi Xie , Minghong Fang , Neil Zhenqiang Gong

Federated learning (FL) is a promising technique for learning-based functions in wireless networks, thanks to its distributed implementation capability. On the other hand, distributed learning may increase the risk of exposure to malicious…

机器学习 · 计算机科学 2025-04-28 Han Zhang , Hao Zhou , Medhat Elsayed , Majid Bavand , Raimundas Gaigalas , Yigit Ozcan , Melike Erol-Kantarci

As a distributed machine learning paradigm, Federated Learning (FL) enables large-scale clients to collaboratively train a model without sharing their raw data. However, due to the lack of data auditing for untrusted clients, FL is…

机器学习 · 计算机科学 2025-09-10 Yanxin Yang , Ming Hu , Xiaofei Xie , Yue Cao , Pengyu Zhang , Yihao Huang , Mingsong Chen

Poisoning attacks compromise the training phase of federated learning (FL) such that the learned global model misclassifies attacker-chosen inputs called target inputs. Existing defenses mainly focus on protecting the training phase of FL…

计算机视觉与模式识别 · 计算机科学 2025-10-15 Yuqi Jia , Minghong Fang , Hongbin Liu , Jinghuai Zhang , Neil Zhenqiang Gong

Federated learning is a distributed framework designed to address privacy concerns. However, it introduces new attack surfaces, which are especially prone when data is non-Independently and Identically Distributed. Existing approaches fail…

密码学与安全 · 计算机科学 2025-05-27 Hyejun Jeong , Hamin Son , Seohu Lee , Jayun Hyun , Tai-Myoung Chung

Decentralized Federated Learning (DFL), a paradigm for managing big data in a privacy-preserved manner, is still vulnerable to poisoning attacks where malicious clients tamper with data or models. Current defense methods often assume…

密码学与安全 · 计算机科学 2024-11-13 Chao Feng , Alberto Huertas Celdrán , Zien Zeng , Zi Ye , Jan von der Assen , Gerome Bovet , Burkhard Stiller

Federated learning (FL) is a distributed machine learning paradigm that enables training models on decentralized data. The field of FL security against poisoning attacks is plagued with confusion due to the proliferation of research that…

机器学习 · 计算机科学 2024-03-12 Hamid Mozaffari , Sunav Choudhary , Amir Houmansadr

Federated learning (FL) has garnered significant attention as a prominent privacy-preserving Machine Learning (ML) paradigm. Decentralized FL (DFL) eschews traditional FL's centralized server architecture, enhancing the system's robustness…

Federated Learning (FL) allows multiple clients to collaboratively train a Neural Network (NN) model on their private data without revealing the data. Recently, several targeted poisoning attacks against FL have been introduced. These…

密码学与安全 · 计算机科学 2022-01-04 Phillip Rieger , Thien Duc Nguyen , Markus Miettinen , Ahmad-Reza Sadeghi

Advances in distributed machine learning can empower future communications and networking. The emergence of federated learning (FL) has provided an efficient framework for distributed machine learning, which, however, still faces many…

密码学与安全 · 计算机科学 2022-02-15 Zhilin Wang , Qiao Kang , Xinyi Zhang , Qin Hu

Federated Learning (FL) has recently emerged as a revolutionary approach to collaborative training Machine Learning models. In particular, it enables decentralized model training while preserving data privacy, but its distributed nature…

密码学与安全 · 计算机科学 2025-12-30 Sameera K. M. , Serena Nicolazzo , Antonino Nocera , Vinod P. , Rafidha Rehiman K. A

The goal of federated learning (FL) is to train one global model by aggregating model parameters updated independently on edge devices without accessing users' private data. However, FL is susceptible to backdoor attacks where a small…

密码学与安全 · 计算机科学 2022-02-24 Yein Kim , Huili Chen , Farinaz Koushanfar

Due to its distributed nature, federated learning is vulnerable to poisoning attacks, in which malicious clients poison the training process via manipulating their local training data and/or local model updates sent to the cloud server,…

密码学与安全 · 计算机科学 2022-10-05 Xiaoyu Cao , Zaixi Zhang , Jinyuan Jia , Neil Zhenqiang Gong

In the evolving landscape of Federated Learning (FL), a new type of attacks concerns the research community, namely Data Poisoning Attacks, which threaten the model integrity by maliciously altering training data. This paper introduces a…

密码学与安全 · 计算机科学 2024-04-22 Nick Galanis

Current defense mechanisms against model poisoning attacks in federated learning (FL) systems have proven effective up to a certain threshold of malicious clients. In this work, we introduce FLANDERS, a novel pre-aggregation filter for FL…

机器学习 · 计算机科学 2026-03-03 Edoardo Gabrielli , Dimitri Belli , Zoe Matrullo , Vittorio Miori , Gabriele Tolomei

Without direct access to the client's data, federated learning (FL) is well-known for its unique strength in data privacy protection among existing distributed machine learning techniques. However, its distributive and iterative nature…

机器学习 · 计算机科学 2026-04-14 Hanxi Guo , Hao Wang , Tao Song , Tianhang Zheng , Yang Hua , Haibing Guan , Xiangyu Zhang

Recent interest in leveraging federated learning (FL) for radio signal classification (SC) tasks has shown promise but FL-based SC remains susceptible to model poisoning adversarial attacks. These adversarial attacks mislead the ML model…

信号处理 · 电气工程与系统科学 2025-05-12 Su Wang , Rajeev Sahay , Adam Piaseczny , Christopher G. Brinton

Federated Instruction Tuning (FIT) enables collaborative instruction tuning of large language models across multiple organizations (clients) in a cross-silo setting without requiring the sharing of private instructions. Recent findings on…

密码学与安全 · 计算机科学 2026-03-03 Haodong Zhao , Jinming Hu , Zhaomin Wu , Zongru Wu , Wei Du , Junyi Hou , Caibei Zhao , Zhuosheng Zhang , Bingsheng He , Gongshen Liu

Manipulation of local training data and local updates, i.e., the poisoning attack, is the main threat arising from the collaborative nature of the federated learning (FL) paradigm. Most existing poisoning attacks aim to manipulate local…

机器学习 · 计算机科学 2025-05-30 Huazi Pan , Yanjun Zhang , Leo Yu Zhang , Scott Adams , Abbas Kouzani , Suiyang Khoo

Federated Learning (FL) enables collaborative model training without exposing clients' private data, and has been widely adopted in privacy-sensitive scenarios. However, FL faces two critical security threats: curious servers that may…

密码学与安全 · 计算机科学 2026-02-19 Yiwen Lu