mlsanityData to 14 Oct 2026

Secure-CHG: A Comprehensive Framework for Robust and Fair Federated Learning via Hybrid Defense and Contribution-Aware Trust

arXiv 2606.31066 ↗First posted 30 Jun 2026cs.CRcited by 0

On the map: LLM safety and security → Federated unlearning and poisoning

Abstract (arXiv)

Federated Learning (FL) is highly susceptible to stealthy backdoor attacks, which aim to force a model into predicting an attacker-chosen target class for inputs containing a specific trigger. However, existing statistical defenses primarily focus on the early stages of model convergence. In this paper, we identify a fundamental vulnerability termed ``Late-stage Failure.'' We demonstrate that as the global model converges, decaying gradient norms render malicious and benign updates morphologically indistinguishable. This vanishing statistical variance effectively blinds traditional defenses, enabling adaptive adversaries to remain dormant and subsequently hijack the training process. To overcome these constraints, we propose Secure-CHG, a hybrid framework that pivots the defense paradigm from superficial morphological detection toward intrinsic semantic contribution verification. Secure-CHG employs an adaptive defense pipeline: a cascaded statistical filter stabilizes optimization during the early oscillatory phase, while a novel CHG-Shapley mechanism takes over during late-stage convergence. By leveraging sample hardness (i.e., local training loss) to project updates into a composite Hardness-Gradient space, it effectively amplifies adversarial semantic traces, enabling the isolation of stealthy attackers even as gradient norms vanish. Furthermore, we derive a closed-form solution for CHG-Shapley, facilitating low-complexity, retraining-free node valuation and trust-modulated aggregation. Extensive evaluations on CIFAR-10, MedMNIST, and NEU-SDDB demonstrate that Secure-CHG effectively mitigates Late-stage Failure. Specifically, it significantly suppresses advanced backdoor attacks, reducing their attack success rate by 2.3× and 2.0× relative to the mainstream Krum and Trimmed Mean baselines, respectively.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Federated unlearning and poisoning, one of 12 directions in LLM safety and security. Builds on 18 of its 40 references that are in the map. First posted on arXiv 30 Jun 2026.

Builds on

18 of 40 references.

References · 18

  1. 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,669
  2. 2018How To Backdoor Federated Learningcited by 765
  3. 2018Byzantine-Robust Distributed Learning: Towards Optimal Statistical Ratescited by 711
  4. 2019Data Shapley: Equitable Valuation of Data for Machine Learningcited by 629
  5. 2020FLTrust: Byzantine-robust Federated Learning via Trust Bootstrappingcited by 346
  6. 2021Federated Learning on Non-IID Data: A Surveycited by 346
  7. 2019Robust Aggregation for Federated Learningcited by 317
  8. 2020Data Poisoning Attacks Against Federated Learning Systemscited by 275
  9. 2019Measure Contribution of Participants in Federated Learningcited by 79
  10. 2021GTG-Shapley: Efficient and Accurate Participant Contribution Evaluation in Federated Learningcited by 74
  11. 2021Understanding Clipping for Federated Learning: Convergence and Client-Level Differential Privacycited by 69
  12. 2024Redefining Contributions: Shapley-Driven Federated Learningcited by 17
6 more
  1. 2022FL-Defender: Combating Targeted Attacks in Federated Learningcited by 15
  2. 2021Efficient Client Contribution Evaluation for Horizontal Federated Learningcited by 13
  3. 2024Meta Stackelberg Game: Robust Federated Learning against Adaptive and Mixed Poisoning Attackscited by 9
  4. 2024Clients Collaborate: Flexible Differentially Private Federated Learning with Guaranteed Improvement of Utility-Privacy Trade-offcited by 7
  5. 2024CHG Shapley: Efficient Data Valuation and Selection towards Trustworthy Machine Learningcited by 4
  6. 2022FedCos: A Scene-adaptive Federated Optimization Enhancement for Performance Improvementcited by 2

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026FedSurrogate: Backdoor Defense in Federated Learning via Layer Criticality and Surrogate Replacement
  2. 2022FLIP: A Provable Defense Framework for Backdoor Mitigation in Federated Learning
  3. 2025FedGuard: A Diverse-Byzantine-Robust Mechanism for Federated Learning with Major Malicious Clients ↗
  4. 2025FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning
  5. 2023FedGrad: Mitigating Backdoor Attacks in Federated Learning Through Local Ultimate Gradients Inspection
  6. 2026Dynamic Meta-Layer Aggregation for Byzantine-Robust Federated Learning
  7. 2025FLARE: Adaptive Multi-Dimensional Reputation for Robust Client Reliability in Federated Learning
  8. 2025TrojanDam: Detection-Free Backdoor Defense in Federated Learning through Proactive Model Robustification utilizing OOD Data