Frequency-Domain Signatures for Proactive Defense Against Model Poisoning Attacks in Federated Learning
Summary
Federated learning (a method where multiple computers train an AI model together without sharing their raw data) is vulnerable to poisoning attacks, where malicious participants sabotage the shared model. This paper proposes SpecShield, a defense that proactively tests each participant's model using carefully crafted perturbations (small, intentional changes) and analyzes their responses using frequency-domain analysis (a mathematical technique that examines patterns at different scales) to distinguish malicious clients from honest ones.
Solution / Mitigation
The paper proposes SpecShield, which works by: (1) using the Fast Gradient Sign Method on the server side to actively probe client models through calibrated adversarial perturbations, (2) analyzing the resulting responses in the frequency domain using Discrete Wavelet Transform to uncover distinctive patterns between benign and malicious clients, and (3) deriving theoretical upper bounds on perturbation magnitudes to guarantee detection accuracy while preserving benign client performance.
Classification
Related Issues
Original source: http://ieeexplore.ieee.org/document/11503678
First tracked: May 12, 2026 at 02:01 AM
Classified by LLM (prompt v3) · confidence: 92%