arXiv Machine Learning By Yuchao Hou (Shanxi Normal University, Taiyuan, China), Zixuan Zhang (Shanxi Normal University, Taiyuan, China), Jie Wang (Shanxi Normal University, Taiyuan, China), Wenke Huang (Nanyang Technological University, Singapore, Singapore), Lianhui Liang (Guangxi University, Nanning, China), Di Wu (La Trobe University, Melbourne, Australia), Zhiquan Liu (Jinan University, Guangzhou, China), Youliang Tian (Guizhou University, Guiyang, China), Jianming Zhu (Central University of Finance and Economics, Beijing, China), Jisheng Dang (Lanzhou University, Lanzhou, China), Junhao Dong (Nanyang Technological University, Singapore, Singapore), Zhongliang Guo (University of St Andrews, St Andrews, United Kingdom)

Noise-Aware and Dynamically Adaptive Federated Defense Framework for SAR Image Target Recognition

Read the original on arXiv Machine Learning →

The Flow has not summarised this story yet — read it at arXiv Machine Learning.

arXiv Machine Learning
Sep 7

Federated Attack Campaign Detection via Contrastive Encoding of Threat Indicators in Gradient Updates

The paper introduces FedIoC, a federated learning framework that embeds structured threat indicators into gradient updates using a supervised contrastive loss. By aligning gradients from clients that share indicators for the same attack campaign, the server can cluster updates via cosine similarity to recover global campaign patterns without transmitting sensitive indicators. Experiments on two public threat‑detection benchmarks show that the server successfully identifies cross‑organizational campaign cohorts from fragmented local data.

By Manuel R\"oder, Bibin Babu, Frank-Michael Schleif
arXiv Machine Learning
Sep 23

FedNIA: Noise-Induced Activation Analysis for Mitigating Data Poisoning in Federated Learning

FedNIA is a defense framework for federated learning that identifies and excludes malicious clients without needing a central test dataset. It works by injecting random noise inputs and analyzing layerwise activation patterns with an autoencoder to detect abnormal behaviors caused by data poisoning. The method can counter various attack types—including sample poisoning, label flipping, and backdoors—even when multiple attackers collaborate, and shows strong performance on non‑iid federated datasets.

By Ehsan Hallaji, Roozbeh Razavi-Far, Mehrdad Saif