# ARMOR: Adaptive Resilience Against Model Poisoning Attacks in Continual Federated Learning for Mobile Indoor Localization

arXiv: https://arxiv.org/abs/2603.19594 · HTML: https://mlsanity.com/paper/2603.19594/

## Key facts

- No citing papers in the map yet (data through 14 Oct 2026).
- Builds on 20 of its 58 references that are in the map.
- First posted on arXiv 20 Mar 2026.

## Builds on (most cited first, 20 of 20)

- [Communication-Efficient Learning of Deep Networks from Decentralized Data](https://mlsanity.com/paper/1602.05629/) (2016)
- [Federated Learning: Strategies for Improving Communication Efficiency](https://mlsanity.com/paper/1610.05492/) (2016)
- [A Comprehensive Survey of Continual Learning: Theory, Method and Application](https://mlsanity.com/paper/2302.00487/) (2023)
- [Federated Learning on Non-IID Data: A Survey](https://mlsanity.com/paper/2106.06843/) (2021)
- [The Hidden Vulnerability of Distributed Learning in Byzantium](https://mlsanity.com/paper/1802.07927/) (2018)
- [Robust Aggregation for Federated Learning](https://mlsanity.com/paper/1912.13445/) (2019)
- [Federated Learning for Internet of Things: A Comprehensive Survey](https://mlsanity.com/paper/2104.07914/) (2021)
- [MPAF: Model Poisoning Attacks to Federated Learning based on Fake Clients](https://mlsanity.com/paper/2203.08669/) (2022)
- [Continual Learning for Real-World Autonomous Systems: Algorithms, Challenges and Frameworks](https://mlsanity.com/paper/2105.12374/) (2021)
- [Model Poisoning Attacks to Federated Learning via Multi-Round Consistency](https://mlsanity.com/paper/2404.15611/) (2024)
- [Multi-Head Attention Neural Network for Smartphone Invariant Indoor Localization](https://mlsanity.com/paper/2205.08069/) (2022)
- [FedHIL: Heterogeneity Resilient Federated Learning for Robust Indoor Localization with Mobile Devices](https://mlsanity.com/paper/2307.01780/) (2023)
- [Siamese Neural Encoders for Long-Term Indoor Localization with Mobile Devices](https://mlsanity.com/paper/2112.00654/) (2021)
- [VITAL: Vision Transformer Neural Networks for Accurate Smartphone Heterogeneity Resilient Indoor Localization](https://mlsanity.com/paper/2302.09443/) (2023)
- [STELLAR: Siamese Multi-Headed Attention Neural Networks for Overcoming Temporal Variations and Device Heterogeneity with Indoor Localization](https://mlsanity.com/paper/2312.10312/) (2023)
- [SANGRIA: Stacked Autoencoder Neural Networks with Gradient Boosting for Indoor Localization](https://mlsanity.com/paper/2403.01348/) (2024)
- [Federated Distillation based Indoor Localization for IoT Networks](https://mlsanity.com/paper/2205.11440/) (2022)
- [CALLOC: Curriculum Adversarial Learning for Secure and Robust Indoor Localization](https://mlsanity.com/paper/2311.06361/) (2023)
- [SENTINEL: Securing Indoor Localization against Adversarial Attacks with Capsule Neural Networks](https://mlsanity.com/paper/2407.11091/) (2024)
- [Holistic Evaluation Metrics: Use Case Sensitive Evaluation Metrics for Federated Learning](https://mlsanity.com/paper/2405.02360/) (2024)

## Abstract (arXiv)

Indoor localization has become increasingly essential for applications ranging from asset tracking to delivering personalized services. Federated learning (FL) offers a privacy-preserving approach by training a centralized global model (GM) using distributed data from mobile devices without sharing raw data. However, real-world deployments require a continual federated learning (CFL) setting, where the GM receives continual updates under device heterogeneity and evolving indoor environments. In such dynamic conditions, erroneous or biased updates can cause the GM to deviate from its expected learning trajectory, gradually degrading internal GM representations and GM localization performance. This vulnerability is further exacerbated by adversarial model poisoning attacks. To address this challenge, we propose ARMOR, a novel CFL-based framework that monitors and safeguards the GM during continual updates. ARMOR introduces a novel state-space model (SSM) that learns the historical evolution of GM weight tensors and predicts the expected next state of weight tensors of the GM. By comparing incoming local updates with this SSM projection, ARMOR detects deviations and selectively mitigates corrupted updates before local updates are aggregated with the GM. This mechanism enables robust adaptation to temporal environmental dynamics and mitigate the effects of model poisoning attacks while preventing GM corruption. Experimental evaluations in real-world conditions indicate that ARMOR achieves notable improvements, with up to 8.0x reduction in mean error and 4.97x reduction in worst-case error compared to state-of-the-art indoor localization frameworks, demonstrating strong resilience against model corruption tested using real-world data and mobile devices.