arXiv:2509. 11974v2 Announce Type: replace-cross Abstract: Federated Learning (FL) enables collaborative model training among clients without centralising data, making it a widely adopted privacy-enhancing technology (PET).
By Soumia Zohra El Mestari, Maciej Krzysztof Zuziak, Gabriele Lenzini
The paper investigates how adversarial examples transfer between client models in federated learning and explores the relationship between these examples and client data distributions. It proposes a defense strategy based on adversarial training that leverages the transferability of model robustness. Experiments on real-life datasets demonstrate that the new attack and defense methods outperform existing state‑of‑the‑art approaches.
By Zuobin Xiong, Deval Mukherjee, Homook Cho, Wei Li
FedLNS is a server‑side framework that screens federated learning updates by representing each client’s contribution through changes in trainable normalization‑layer parameters, creating lightweight signatures that can be compared against a history‑aware cross‑client reference. The method requires no extra client‑to‑server communication, raw data, or labeled attack examples, and after screening, the remaining full‑model updates are aggregated with standard federated learning rules. Experiments on GPT‑style, BERT‑style, and LLaMA‑style models with 200 clients demonstrate that FedLNS achieves lower test perplexity than six baselines even when 40% of the population performs target manipulation under both IID and non‑IID data partitions.
By Kai Li, Jong-Ik Park, Carlee Joe-Wong, Wei Ni, Falko Dressler
The paper investigates the effects of label‑flipping poisoning attacks in a three‑client federated intrusion detection system (IDS) trained on CICIDS2017 with non‑IID attack subtype distributions. Flipping 60% of training labels from a single Byzantine client reduces the attacker’s own detection accuracy from 99.96% to 84.33%, while the federated global ensemble remains stable across all tested poison rates. The study shows that the self‑compromise signal can be detected as an anomaly, enabling Byzantine client identification without target data exfiltration, and notes that the current aggregation uses a Federated Forest rather than FedAvg, with future work planned to extend to parametric classifiers.
By Asmah Muallem, Firdous Kausar, Sajid Hussain, Lei Qian
The development of federated learning (FL) techniques has helped improve the privacy preservation of users' data and extended the applications of machine learning models. However, the involvement of a...
arXiv:2608. 07274v1 Announce Type: cross Abstract: Split Federated Learning (SFL) facilitates privacy-preserving collaborative training with reduced client-side overhead.
By Yuhan Xie, Jingrong Huang, Chen Lyu