Fortress: Multi-Level Secure and Efficient Distributed Learning
Summary
Distributed learning (training AI models across multiple computers while keeping data in different locations) faces three types of security threats: attackers reconstructing data from gradients (mathematical updates), inferring information from the final model, and manipulating the training process. Fortress is a framework that combines three defensive techniques—secure aggregation (encrypted combination of data), differential privacy (adding noise to protect individual data), and malicious resilience (verification to catch cheating)—while reducing communication overhead by 6.2× to 32.3× compared to existing approaches.
Solution / Mitigation
Fortress implements secure aggregation via dual-server Boolean secret sharing, incorporates differential privacy through direct noise addition on secret shares using polynomial approximation to avoid expensive nonlinear computations, and ensures malicious resilience with lightweight transcript-based verification.
Classification
Related Issues
CVE-2024-37052: Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling
CVE-2025-45150: Insecure permissions in LangChain-ChatGLM-Webui commit ef829 allows attackers to arbitrarily view and download sensitive
Original source: http://ieeexplore.ieee.org/document/11616690
First tracked: September 3, 2026 at 08:02 PM
Classified by LLM (prompt v3) · confidence: 85%