AMBER: Robust Federated Learning Based on Client Verification
Summary
Federated learning (FL, a technique where AI models are trained across multiple computers without sending raw data to a central server) is vulnerable to attacks where dishonest participants send corrupted model updates that poison the final model without being detected. This paper introduces AMBER, a framework that adds three layers of verification to check whether clients are trustworthy: confirming data hasn't been tampered with, detecting when clients provide misleading inputs, and verifying that model computations are correct using a trusted execution environment (TEE, a secure area of a computer processor that protects sensitive operations).
Solution / Mitigation
AMBER implements a three-layer verification mechanism: the first layer uses vector commitments to verify dataset integrity and distribution; the second layer employs local consistency-based verification to detect selective input attacks; the third layer enforces computational integrity by verifying the correlation between model inputs and outputs using secure primitives in a Trusted Execution Environment (TEE).
Classification
Related Issues
CVE-2024-37052: Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling
CVE-2025-45150: Insecure permissions in LangChain-ChatGLM-Webui commit ef829 allows attackers to arbitrarily view and download sensitive
Original source: http://ieeexplore.ieee.org/document/11580359
First tracked: July 30, 2026 at 08:04 PM
Classified by LLM (prompt v3) · confidence: 85%