mlsanityData to 14 Oct 2026

CoSIFL: Collaborative Secure and Incentivized Federated Learning with Differential Privacy

arXiv 2509.23190 ↗First posted 27 Sep 2025cs.LGcited by 0

Not on the map. Why?

Abstract (arXiv)

Federated learning (FL) has emerged as a promising paradigm for collaborative model training while preserving data locality. However, it still faces challenges from malicious or compromised clients, as well as difficulties in incentivizing participants to contribute high-quality data under strict privacy requirements. Motivated by these considerations, we propose CoSIFL, a novel framework that integrates proactive alarming for robust security and local differential privacy (LDP) for inference attacks, together with a Stackelberg-based incentive scheme to encourage client participation and data sharing. Specifically, CoSIFL uses an active alarming mechanism and robust aggregation to defend against Byzantine and inference attacks, while a Tullock contest-inspired incentive module rewards honest clients for both data contributions and reliable alarm triggers. We formulate the interplay between the server and clients as a two-stage game: in the first stage, the server determines total rewards, selects participants, and fixes global iteration settings, whereas in the second stage, each client decides its mini-batch size, privacy noise scale, and alerting strategy. We prove that the server-client game admits a unique equilibrium, and analyze how clients' multi-dimensional attributes - such as non-IID degrees and privacy budgets - jointly affect system efficiency. Experimental results on standard benchmarks demonstrate that CoSIFL outperforms state-of-the-art solutions in improving model robustness and reducing total server costs, highlighting the effectiveness of our integrated design.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 22 of its 41 references that are in the map. First posted on arXiv 27 Sep 2025.

Builds on

22 of 41 references.

References · 22

  1. 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,669
  2. 2016Federated Learning: Strategies for Improving Communication Efficiencycited by 1,475
  3. 2018How To Backdoor Federated Learningcited by 765
  4. 2020Inverting Gradients -- How easy is it to break privacy in federated learning?cited by 712
  5. 2018Byzantine-Robust Distributed Learning: Towards Optimal Statistical Ratescited by 711
  6. 2018Exploiting Unintended Feature Leakage in Collaborative Learningcited by 520
  7. 2019Local Model Poisoning Attacks to Byzantine-Robust Federated Learningcited by 493
  8. 2018Adaptive Federated Learning in Resource Constrained Edge Computing Systemscited by 409
  9. 2020iDLG: Improved Deep Leakage from Gradientscited by 382
  10. 2018Analyzing Federated Learning through an Adversarial Lenscited by 351
  11. 2020FLTrust: Byzantine-robust Federated Learning via Trust Bootstrappingcited by 346
  12. 2020Data Poisoning Attacks Against Federated Learning Systemscited by 275
10 more
  1. 2018RSA: Byzantine-Robust Stochastic Aggregation Methods for Distributed Learning from Heterogeneous Datasetscited by 149
  2. 2018Generalized Byzantine-tolerant SGDcited by 95
  3. 2019Motivating Workers in Federated Learning: A Stackelberg Game Perspectivecited by 45
  4. 2018Defending Against Saddle Point Attack in Byzantine-Robust Distributed Learningcited by 32
  5. 2022One Parameter Defense -- Defending against Data Inference Attacks via Differential Privacycited by 27
  6. 2020Trading Data For Learning: Incentive Mechanism For On-Device Federated Learningcited by 21
  7. 2023FLShield: A Validation Based Federated Learning Framework to Defend Against Poisoning Attackscited by 15
  8. 2023Pool Inference Attacks on Local Differential Privacy: Quantifying the Privacy Guarantees of Apple's Count Mean Sketch in Practicecited by 4
  9. 2024Poisoning Prevention in Federated Learning and Differential Privacy via Stateful Proofs of Executioncited by 1
  10. 2025Local Differential Privacy is Not Enough: A Sample Reconstruction Attack against Federated Learning with Local Differential Privacycited by 1

Built on by

Not cited yet.