FIDELIS: Blockchain-Enabled Protection Against Poisoning Attacks in Federated Learning
Fuente:
arXiv
Saved in:
| Main Authors: | , , , |
|---|---|
| Format: | Preprint |
| Published: |
2025
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866916898050932736 |
|---|---|
| author | Carney, Jane Upreti, Kushal Dagher, Gaby G. Andersen, Tim |
| author_facet | Carney, Jane Upreti, Kushal Dagher, Gaby G. Andersen, Tim |
| contents | Federated learning enhances traditional deep learning by enabling the joint training of a model with the use of IoT device's private data. It ensures privacy for clients, but is susceptible to data poisoning attacks during training that degrade model performance and integrity. Current poisoning detection methods in federated learning lack a standardized detection method or take significant liberties with trust. In this paper, we present \Sys, a novel blockchain-enabled poison detection framework in federated learning. The framework decentralizes the role of the global server across participating clients. We introduce a judge model used to detect data poisoning in model updates. The judge model is produced by each client and verified to reach consensus on a single judge model. We implement our solution to show \Sys is robust against data poisoning attacks and the creation of our judge model is scalable. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2508_10042 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | FIDELIS: Blockchain-Enabled Protection Against Poisoning Attacks in Federated Learning Carney, Jane Upreti, Kushal Dagher, Gaby G. Andersen, Tim Cryptography and Security Artificial Intelligence Federated learning enhances traditional deep learning by enabling the joint training of a model with the use of IoT device's private data. It ensures privacy for clients, but is susceptible to data poisoning attacks during training that degrade model performance and integrity. Current poisoning detection methods in federated learning lack a standardized detection method or take significant liberties with trust. In this paper, we present \Sys, a novel blockchain-enabled poison detection framework in federated learning. The framework decentralizes the role of the global server across participating clients. We introduce a judge model used to detect data poisoning in model updates. The judge model is produced by each client and verified to reach consensus on a single judge model. We implement our solution to show \Sys is robust against data poisoning attacks and the creation of our judge model is scalable. |
| title | FIDELIS: Blockchain-Enabled Protection Against Poisoning Attacks in Federated Learning |
| topic | Cryptography and Security Artificial Intelligence |
| url | https://arxiv.org/abs/2508.10042 |