{"data":{"id":"0bcb2c61-b7f8-46a3-9a45-ff1e765f6538","title":"Fed-CBE: Client-Side Backdoor Elimination in Federated Learning via Persistent Parameter Disruption","summary":"Federated learning (a way to train AI models where data stays on users' devices instead of being sent to a central server) is vulnerable to backdoor attacks (hidden malicious behaviors inserted into models by attackers), which existing defenses cannot fully stop, especially when attackers poison the model over multiple rounds. Researchers propose Fed-CBE, a defense method that uses three techniques: periodically resetting certain model layers, making the model forget incorrect categories using entropy maximization (spreading predictions evenly across wrong answers), and recovering original task performance through knowledge distillation (copying learned knowledge from older model versions), achieving near-zero attack success rates without hurting normal performance.","solution":"The source proposes Fed-CBE as a defense mechanism employing three specific techniques: '1) periodic alternating layer resetting disrupts deep parameters to dismantle cross-round backdoor accumulation; 2) indiscriminate forgetting employs entropy maximization on non-ground-truth classes to decouple backdoor associations without prior trigger knowledge; and 3) knowledge distillation with historical local models restores primary task performance.' The paper reports that this approach achieves 'near-zero levels' attack success rates in most settings while maintaining primary task performance.","labels":["security","research"],"sourceUrl":"http://ieeexplore.ieee.org/document/11653475","publishedAt":"2026-08-12T13:16:39.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["model_poisoning"],"issueType":"research","affectedPackages":null,"affectedVendors":[],"affectedVendorsRaw":[],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-08-12T13:16:39.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity"],"aiComponentTargeted":"model","llmSpecific":false,"classifierConfidence":0.92,"researchCategory":"peer_reviewed","atlasIds":null}}