Endre søk
RefereraExporteraLink to record
Permanent link

Direct link
Referera
Referensformat
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Annet format
Fler format
Språk
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Annet språk
Fler språk
Utmatningsformat
  • html
  • text
  • asciidoc
  • rtf
Reducing Defense Vulnerabilities in Federated Learning: A Neuron-Centric Approach
Department of Computer Engineering, Karadeniz Technical University, Trabzon, 61080, Turkey.
School of Electrical, Electronic and Mechanical Engineering, University of Bristol, Bristol, DS81UB, United Kingdom.
Department of Computer Engineering, Karadeniz Technical University, Trabzon, 61080, Turkey.
Department of Computer Engineering, Karadeniz Technical University, Trabzon, 61080, Turkey.
Vise andre og tillknytning
2025 (engelsk)Inngår i: Applied Sciences, E-ISSN 2076-3417, Vol. 15, nr 11, artikkel-id 6007Artikkel i tidsskrift (Fagfellevurdert) Published
Abstract [en]

Federated learning is a distributed machine learning approach where end users train local models with their own data and combine model updates on a reliable server to create a global model. Despite its advantages, this distributed structure is vulnerable to attacks as end users keep their data and training process private. Current defense mechanisms often fail when facing different attack types or high percentages of malicious participants. This paper proposes a new defense algorithm called Neuron-Centric Federated Learning Defense (NC-FLD), a novel approach that dynamically identifies and analyzes the most significant neurons across model layers rather than examining entire gradient spaces. Unlike existing methods that analyze all parameters equally, NC-FLD creates feature vectors from specifically selected neurons that show the highest training impact, then applies dimensionality reduction to enhance their discriminative features. We conduct experiments with various attack scenarios and different malicious participant rates across multiple datasets (CIFAR-10, F-MNIST, and MNIST). Additionally, we perform simulations on the GTSR dataset as a real-world application. Experimental results demonstrate that NC-FLD successfully defends against diverse attack scenarios in both IID and non-IID dataset distributions, maintaining accuracy above 70% with 40% malicious participation, a 5–15% improvement over the state-of-the-art method, showing enhanced robustness across diverse data distributions while effectively mitigating the impacts of both data and model poisoning attacks.

sted, utgiver, år, opplag, sider
Multidisciplinary Digital Publishing Institute (MDPI) , 2025. Vol. 15, nr 11, artikkel-id 6007
Emneord [en]
data poisoning, deep learning security, federated learning, model poisoning, poisoning attacks, Deep learning, Dimensionality reduction, Attacks scenarios, Distributed machine learning, End-users, Local model, Machine learning approaches, Malicious participant
HSV kategori
Identifikatorer
URN: urn:nbn:se:ri:diva-79449DOI: 10.3390/app15116007Scopus ID: 2-s2.0-105007777327OAI: oai:DiVA.org:ri-79449DiVA, id: diva2:2017815
Merknad

Article; Granskad

Tilgjengelig fra: 2025-12-01 Laget: 2025-12-01 Sist oppdatert: 2025-12-01bibliografisk kontrollert

Open Access i DiVA

Fulltekst mangler i DiVA

Andre lenker

Forlagets fulltekstScopus

Person

Symeonidis, Iraklis

Søk i DiVA

Av forfatter/redaktør
Symeonidis, Iraklis
Av organisasjonen
I samme tidsskrift
Applied Sciences

Søk utenfor DiVA

GoogleGoogle Scholar

doi
urn-nbn

Altmetric

doi
urn-nbn
Totalt: 34 treff
RefereraExporteraLink to record
Permanent link

Direct link
Referera
Referensformat
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Annet format
Fler format
Språk
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Annet språk
Fler språk
Utmatningsformat
  • html
  • text
  • asciidoc
  • rtf
v. 2.49.0