FLGuard: Robust Federated Learning Using Dual Attention and Gradient Reconstruction
We propose FLGuard, a robust aggregation method for federated learning that enhances resilience to Byzantine attacks. FLGuard integrates cosine sim-ilarity and gradient reconstruction errors computed using a Variational Autoencoder (VAE) within a dual attention mechanism, leveraging a trusted root dataset at the server. By assigning adaptive trust scores to client updates based on these metrics, FLGuard im-proves robustness against advanced attack strategies. Experiments on the MNIST dataset show that FLGuard outperforms existing methods, including FLTrust, across various attack scenarios, achieving faster convergence and higher accuracy while effectively mitigating the impact of malicious clients.
Authors
- Hamid Azadegan (ORCID: https://orcid.org/0000-0003-3481-9391)
- Hamed Kebriaei (ORCID: https://orcid.org/0000-0002-3781-2163)
- Fatemeh Ghassemi (ORCID: https://orcid.org/0000-0002-9677-3854)
- Mohammad Karami (ORCID: https://orcid.org/0009-0003-8154-8296)
Institutions
- University of Tehran (IR)
Publication Details
- Published
- 2025-02-03
- DOI
- https://doi.org/10.1109/ai2e64943.2025.10983777
- Citations
- 1
- Primary Topic
- Privacy-Preserving Technologies in Data
- Type
- article
- Field-Weighted Citation Impact
- 2.48