arXiv Machine Learning
3d ago

Physics-Attested Federated Learning: Securing Collaborative Anomaly Detection in Critical Water Infrastructure

The paper proposes a physics‑attested federated learning framework that uses process invariants—such as conservation of mass—to verify the integrity of model updates in collaborative anomaly detection for water infrastructure. By automatically mining these invariants from clean operational data, the authors create an admission gate that rejects fabricated telemetry while allowing honest contributions, and demonstrate its effectiveness across two physical testbeds (SWaT, WADI) and a benchmark (BATADAL). The approach also incorporates zero‑knowledge proofs to preserve data privacy while proving invariant compliance.

By Jeff Nijsse, Shu Su, Benjamin Oholeguy, Sreenivas Sremath Tirumala
arXiv Machine Learning
Aug 24

RouteScan: A Non-Intrusive Approach to Auditing MoE LLMs Safety via Expert Routing Telemetry

RouteScan is a non‑intrusive auditing framework that detects harmful behavior in Mixture‑of‑Experts (MoE) large language models by analyzing expert‑routing telemetry captured from GPU execution. It uses the number of active GPU threads during the prefilling phase as a micro‑architectural fingerprint to isolate cross‑domain risk indicators and precisely identify malicious prompts. Evaluations on four open‑source MoE LLMs show strong generalization with AUROC > 0.91 on unseen harmful domains, while privacy tests indicate that full prompts cannot be reliably recovered from aggregated telemetry.

By Bo Lv, Zhiheng Xu, KeDong Xiu, Ruyi Ding, Tianhang Zheng, Zhibo Wang, Kui Ren