mlsanityData to 14 Oct 2026

Beyond Passive Aggregation: Active Auditing and Topology-Aware Defense in Decentralized Federated Learning

arXiv 2603.18538 ↗First posted 19 Mar 2026cs.LG stat.MEcited by 0

On the map: LLM safety and security → Federated unlearning and poisoning

Abstract (arXiv)

Decentralized Federated Learning (DFL) remains highly vulnerable to adaptive backdoor attacks designed to bypass traditional passive defense metrics. To address this limitation, we shift the defensive paradigm toward a novel active, interventional auditing framework. First, we establish a dynamical model to characterize the spatiotemporal diffusion of adversarial updates across complex graph topologies. Second, we introduce a suite of proactive auditing metrics, stochastic entropy anomaly, randomized smoothing Kullback-Leibler divergence, and activation kurtosis. These metrics utilize private probes to stress-test local models, effectively exposing latent backdoors that remain invisible to conventional static detection. Furthermore, we implement a topology-aware defense placement strategy to maximize global aggregation resilience. We provide theoretical property for the system's convergence under co-evolving attack and defense dynamics. Numeric empirical evaluations across diverse architectures demonstrate that our active framework is highly competitive with state-of-the-art defenses in mitigating stealthy, adaptive backdoors while preserving primary task utility.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Federated unlearning and poisoning, one of 12 directions in LLM safety and security. Builds on 15 of its 28 references that are in the map. First posted on arXiv 19 Mar 2026.

Builds on

15 of 28 references.

References · 15

  1. 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,669
  2. 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,340
  3. 2018How To Backdoor Federated Learningcited by 765
  4. 2018Byzantine-Robust Distributed Learning: Towards Optimal Statistical Ratescited by 711
  5. 2019Deep Double Descent: Where Bigger Models and More Data Hurtcited by 672
  6. 2017Can Decentralized Algorithms Outperform Centralized Algorithms? A Case Study for Decentralized Parallel Stochastic Gradient Descentcited by 502
  7. 2019STRIP: A Defence Against Trojan Attacks on Deep Neural Networkscited by 459
  8. 2018Analyzing Federated Learning through an Adversarial Lenscited by 351
  9. 2020Attack of the Tails: Yes, You Really Can Backdoor Federated Learningcited by 309
  10. 2018RSA: Byzantine-Robust Stochastic Aggregation Methods for Distributed Learning from Heterogeneous Datasetscited by 149
  11. 2022BackdoorBench: A Comprehensive Benchmark of Backdoor Learningcited by 128
  12. 2017PubMed 200k RCT: a Dataset for Sequential Sentence Classification in Medical Abstractscited by 124
3 more
  1. 2022Neurotoxin: Durable Backdoors in Federated Learningcited by 98
  2. 2020An Efficiency-boosting Client Selection Scheme for Federated Learning with Fairness Guaranteecited by 62
  3. 2020Multi-Armed Bandit Based Client Scheduling for Federated Learningcited by 57

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026BackDFL: A Unified Benchmark For Backdoor Attacks and Defenses In Decentralized Federated Learning
  2. 2024Distributed Backdoor Attacks on Federated Graph Learning and Certified Defenses
  3. 2026Backdoors Leave Structural Traces: FedMAST for Backdoor Detection and Containment in Federated Learning
  4. 2022Invariant Aggregator for Defending against Federated Backdoor Attacks
  5. 2025TrojanDam: Detection-Free Backdoor Defense in Federated Learning through Proactive Model Robustification utilizing OOD Data
  6. 2026Your Neighbors Know: Leveraging Local Neighborhoods for Backdoor Detection in Decentralized Learning
  7. 2025DBA-DFL: Towards Distributed Backdoor Attacks with Network Detection in Decentralized Federated Learning
  8. 2026Secure-CHG: A Comprehensive Framework for Robust and Fair Federated Learning via Hybrid Defense and Contribution-Aware Trust