A Byzantine-Robust Secure Federated Learning Scheme in Heterogeneous Data
Summary
Secure Federated Learning (a system where multiple parties train an AI model together while keeping their data private) protects user privacy by encrypting gradients (the numerical adjustments used to improve AI models), but this encryption also hides malicious changes from detection. The paper proposes SFLBR, a framework that uses gradient median analysis and cosine similarity metrics (mathematical measurements of how similar gradients are) to identify and filter out manipulated gradients while still keeping data encrypted.
Solution / Mitigation
The paper proposes SFLBR framework with several explicit components: (1) adopting 'the gradient median as a robust benchmark' to identify anomalies, (2) introducing 'a layer-wise cosine similarity metric to differentiate malicious gradients', (3) designing 'a proactive defense strategy that constrains the divergence among honest gradients', (4) implementing 'a trust score function to improve robustness against potential misjudgments', and (5) constructing 'secure communication protocols based on a lightweight dual-masking encryption mechanism, which enable efficient robust aggregation directly within the ciphertext space'.
Classification
Related Issues
Original source: http://ieeexplore.ieee.org/document/11612843
First tracked: August 13, 2026 at 08:05 PM
Classified by LLM (prompt v3) · confidence: 85%