arXiv AI
5d ago

FedGraph: Defending Federated Large Language Model Fine-Tuning Against Backdoor Attacks via Graph-Based Aggregation

FedGraph is a graph-based aggregation framework designed to defend federated large language model fine-tuning against backdoor attacks. It exploits the observation that malicious clients produce consistently similar updates, while benign clients generate diverse ones, by modeling client updates as nodes in a dynamically constructed graph and extracting structural features. The resulting compact client representations enable effective identification and suppression of malicious contributions, achieving high detection accuracy and low false positives in extensive experiments.

By Xi Chen, Chunyi Zhou, Rui Zeng, Xiaogang Xu, Zhe Liu, Shouling Ji
arXiv AI
Sep 2

FedReview: Review and Dispose Poisoned Updates without Validation Datasets or Historic Knowledge

FedReview is a review-based mechanism for federated learning that identifies and removes poisoned model updates without needing a server-side validation dataset or historic client knowledge. In each training round, the server randomly selects reviewers who evaluate incoming updates on their own training data, rank them, and estimate how many low-quality updates are likely poisoned. The server then aggregates these rankings via majority voting to filter out suspicious updates during model aggregation, enabling robust global model training even in adversarial settings.

By Tianhang Zheng, Yanlu Li, Bohan Deng, Baochun Li
arXiv AI
Jul 24

SafeHarbor: Defining Precise Decision Boundaries via Hierarchical Memory-Augmented Guardrail for LLM Agent Safety

arXiv:2605. 05704v3 Announce Type: replace-cross Abstract: Recent advances in foundation models have transformed LLMs from passive conversational systems into autonomous agents capable of reasoning and tool execution.

By Zhe Liu, Zonghao Ying, Wenxin Zhang, Quanchen Zou, Deyue Zhang, Dongdong Yang, Xiangzheng Zhang, Hao Peng