Upholding Robustness in Federated Learning: Trends, Emerging Strategies, and Research Opportunities
Not on the map. Why?
Abstract (arXiv)
While Federated Learning (FL) has been widely adopted for protecting user privacy in machine learning, it remains vulnerable to various robustness challenges, including performance-impairment risks, information-stealing threats, and aggregation vulnerabilities. This work offers a holistic synthesis of FL robustness along three tightly coupled angles: (i) a threat-centric view of robustness that categorizes the multifaceted attack surfaces, (ii) a structured taxonomy of robust aggregation strategies distinguishing outcome-centric approaches from security-centric strategies, and (iii) a layered taxonomy of defensive strategies. We rigorously examine current evaluation practices for FL robustness and identify major applications and open research challenges to guide future research.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 84 of its 167 references that are in the map. First posted on arXiv 23 Sep 2026.
Builds on
84 of 167 references.
References · 84
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,669
- 2018Federated Learning with Non-IID Datacited by 1,108
- 2016Adversarial Machine Learning at Scalecited by 936
- 2018How To Backdoor Federated Learningcited by 765
- 2020Inverting Gradients -- How easy is it to break privacy in federated learning?cited by 712
- 2017ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Modelscited by 666
- 2021Exploiting Shared Representations for Personalized Federated Learningcited by 541
- 2019Local Model Poisoning Attacks to Byzantine-Robust Federated Learningcited by 493
- 2019Likelihood Ratios for Out-of-Distribution Detectioncited by 453
- 2019Federated Learning in Mobile Edge Networks: A Comprehensive Surveycited by 408
- 2021FedProto: Federated Prototype Learning across Heterogeneous Clientscited by 352
- 2018Analyzing Federated Learning through an Adversarial Lenscited by 351
38 more
- 2020FLTrust: Byzantine-robust Federated Learning via Trust Bootstrappingcited by 346
- 2020Attack of the Tails: Yes, You Really Can Backdoor Federated Learningcited by 309
- 2020Data Poisoning Attacks Against Federated Learning Systemscited by 275
- 2019Improving Federated Learning Personalization via Model Agnostic Meta Learningcited by 269
- 2019Can You Really Backdoor Federated Learning?cited by 255
- 2018Communication-Efficient On-Device Machine Learning: Federated Distillation and Augmentation under Non-IID Private Datacited by 243
- 2020Federated learning with hierarchical clustering of local updates to improve training on non-IID datacited by 223
- 2019Differentially Private Learning with Adaptive Clippingcited by 220
- 2020Contrastive Training for Improved Out-of-Distribution Detectioncited by 186
- 2020Threats to Federated Learning: A Surveycited by 178
- 2018RSA: Byzantine-Robust Stochastic Aggregation Methods for Distributed Learning from Heterogeneous Datasetscited by 149
- 2019Fall of Empires: Breaking Byzantine-tolerant SGD by Inner Product Manipulationcited by 141
- 2021Back to the Drawing Board: A Critical Evaluation of Poisoning Attacks on Production Federated Learningcited by 118
- 2023Federated Learning for Generalization, Robustness, Fairness: A Survey and Benchmarkcited by 99
- 2022MPAF: Model Poisoning Attacks to Federated Learning based on Fake Clientscited by 68
- 2020Data Poisoning Attacks on Federated Machine Learningcited by 62
- 2020FastSecAgg: Scalable Secure Aggregation for Privacy-Preserving Federated Learningcited by 61
- 2020Free-rider Attacks on Model Aggregation in Federated Learningcited by 57
- 2020BaFFLe: Backdoor detection via Feedback-based Federated Learningcited by 53
- 2021Quantum Federated Learning with Quantum Datacited by 53
- 2021Semi-Decentralized Federated Learning with Cooperative D2D Local Model Aggregationscited by 51
- 2021Privacy-preserving Federated Learning based on Multi-key Homomorphic Encryptioncited by 48
- 2021Cluster-driven Graph Federated Learning over Multiple Domainscited by 44
- 2020Dynamic Fusion based Federated Learning for COVID-19 Detectioncited by 36
- 2021FL-WBC: Enhancing Robustness against Model Poisoning Attacks in Federated Learning from a Client Perspectivecited by 36
- 2021Source Inference Attacks in Federated Learningcited by 34
- 2020When Federated Learning Meets Blockchain: A New Distributed Learning Paradigmcited by 31
- 2024Membership Inference Attacks and Defenses in Federated Learning: A Surveycited by 31
- 2020Backdoor attacks and defenses in feature-partitioned collaborative learningcited by 30
- 2022FLCert: Provably Secure Federated Learning against Poisoning Attackscited by 30
- 2022Energy-Latency Attacks via Sponge Poisoningcited by 29
- 2022Privacy-Preserving Aggregation in Federated Learning: A Surveycited by 27
- 2021Time-Correlated Sparsification for Communication-Efficient Federated Learningcited by 26
- 2023Privacy and Fairness in Federated Learning: on the Perspective of Trade-offcited by 26
- 2023A Survey of Trustworthy Federated Learning with Perspectives on Security, Robustness, and Privacycited by 24
- 2022Federated Learning with Quantum Secure Aggregationcited by 21
- 2022FedRecAttack: Model Poisoning Attack to Federated Recommendationcited by 20
- 2019Man-in-the-Middle Attacks against Machine Learning Classifiers via Malicious Generative Modelscited by 19
50 most cited of 84 All 84 (JSON)
Built on by
Not cited yet.