Skip to content
InfoResearchPeer-reviewed

HEFLGuard: Backdoor Detection in Homomorphic Encryption-Based Federated Learning

Published
Record updated
View JSON

Summary

HEFLGuard is a backdoor detection framework for homomorphic encryption-based federated learning, where defenses that assume plaintext updates do not apply. The server builds overlapping validation models from encrypted client groups, and clients compare global and validation model logits on benign samples to expose backdoor behavior. Across seven vision and text benchmarks, three backdoor types and IID and non-IID settings, it reduces ASR from near 100% to near the no-backdoor level with clean accuracy dropping by no more than 2.5%.