Research on the Recovery Strategy of Federated Learning Model Based on Zero-Knowledge Proof

With the continuous advancement of intelligent algorithms, people have put forward new demands for data privacy protection, and the traditional privacy protection technology can not meet the needs of reality. To address this issue, a model safety verification method is proposed by combining European distance and cosine similarity constraint. The results showed that in the MNIST dataset and FMNIST dataset, the impact of three different attacks on the proposed research scheme showed a low value below 2%. In the face of malicious customers with different proportions, the impact of the MNIST and the FMNIST dataset are stable at a low range, and the maximum did not exceed 5%. The findings denote that the raised method has excellent performance in the defense model poisoning attack, and can effectively improve the robustness and privacy security in the federated learning system.

Authors

Institutions

Publication Details

Published
2025-03-21
DOI
https://doi.org/10.1109/aaicv66571.2025.00042
Primary Topic
Medical Research and Treatments
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Research on the Recovery Strategy of Federated Learning Model Based on Zero-Knowledge Proof

Xintian Wang
3 links
Medical Research and Treatments
article

Research on the Recovery Strategy of Federated Learning Model Based on Zero-Knowledge Proof

Xintian Wang
article en

Abstract

With the continuous advancement of intelligent algorithms, people have put forward new demands for data privacy protection, and the traditional privacy protection technology can not meet the needs of reality. To address this issue, a model safety verification method is proposed by combining European distance and cosine similarity constraint. The results showed that in the MNIST dataset and FMNIST dataset, the impact of three different attacks on the proposed research scheme showed a low value below 2%. In the face of malicious customers with different proportions, the impact of the MNIST and the FMNIST dataset are stable at a low range, and the maximum did not exceed 5%. The findings denote that the raised method has excellent performance in the defense model poisoning attack, and can effectively improve the robustness and privacy security in the federated learning system.

Minzu University of China (CN)
Partnerships for the goals
Openalex Percentile: Top 72%
Medical Research and Treatments
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.