{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/dual-defense-enhancing-privacy-and-mitigating","title":"Dual Defense: Enhancing Privacy and Mitigating Poisoning Attacks in Federated Learning","arxiv_id":"2502.05547","date":"2025-02-08","proceeding":null,"authors":["Runhua Xu","Shiqi Gao","Chao Li","James Joshi","JianXin Li"],"abstract":"Federated learning (FL) is inherently susceptible to privacy breaches and poisoning attacks. To tackle these challenges, researchers have separately devised secure aggregation mechanisms to protect data privacy and robust aggregation methods that withstand poisoning attacks. However, simultaneously addressing both concerns is challenging; secure aggregation facilitates poisoning attacks as most anomaly detection techniques require access to unencrypted local model updates, which are obscured by secure aggregation. Few recent efforts to simultaneously tackle both challenges offen depend on impractical assumption of non-colluding two-server setups that disrupt FL's topology, or three-party computation which introduces scalability issues, complicating deployment and application. To overcome this dilemma, this paper introduce a Dual Defense Federated learning (DDFed) framework. DDFed simultaneously boosts privacy protection and mitigates poisoning attacks, without introducing new participant roles or disrupting the existing FL topology. DDFed initially leverages cutting-edge fully homomorphic encryption (FHE) to securely aggregate model updates, without the impractical requirement for non-colluding two-server setups and ensures strong privacy protection. Additionally, we proposes a unique two-phase anomaly detection mechanism for encrypted model updates, featuring secure similarity computation and feedback-driven collaborative selection, with additional measures to prevent potential privacy breaches from Byzantine clients incorporated into the detection process. We conducted extensive experiments on various model poisoning attacks and FL scenarios, including both cross-device and cross-silo FL. Experiments on publicly available datasets demonstrate that DDFed successfully protects model privacy and effectively defends against model poisoning threats.","url_abs":"https://arxiv.org/abs/2502.05547v1","url_pdf":"https://arxiv.org/pdf/2502.05547v1.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"dual-defense-enhancing-privacy-and-mitigating","repo_url":"https://github.com/irxyzzz/DualDefense","is_official":1,"mentioned_in_paper":0,"mentioned_in_github":0,"framework":"pytorch","reach":{"status":"ok","spdx":"MIT"}}],"tasks":[{"task_slug":"anomaly-detection","task_name":"Anomaly Detection"},{"task_slug":"federated-learning","task_name":"Federated Learning"},{"task_slug":"model-poisoning","task_name":"Model Poisoning"}],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"atlas_url":"https://app.syntology.ai/?focus=2502.05547","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2502.05547"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-24T18:15:14+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/irxyzzz/DualDefense","reach":{"status":"ok","spdx":"MIT"}}],"summary":{"unverified":9},"by_repo_kind":{"official":{"samples":9,"ran":0,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":0,"samples":[{"code_sha256_prefix":"7e054ba2f82b8c5e","entry":"extract_parameters","repo":"irxyzzz/DualDefense","repo_kind":"official","path":"utils/util_model.py","file_url":"https://github.com/irxyzzz/DualDefense/blob/HEAD/utils/util_model.py","link_basis":"harvester_set","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"7e054ba2f82b8c5e"}},{"code_sha256_prefix":"c02c5decb7a4f99c","entry":"fusion_avg","repo":"irxyzzz/DualDefense","repo_kind":"official","path":"utils/util_fusion.py","file_url":"https://github.com/irxyzzz/DualDefense/blob/HEAD/utils/util_fusion.py","link_basis":"harvester_set","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"c02c5decb7a4f99c"}},{"code_sha256_prefix":"8d50dec066eb9dd3","entry":"fusion_fedavg","repo":"irxyzzz/DualDefense","repo_kind":"official","path":"utils/util_fusion.py","file_url":"https://github.com/irxyzzz/DualDefense/blob/HEAD/utils/util_fusion.py","link_basis":"harvester_set","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"8d50dec066eb9dd3"}},{"code_sha256_prefix":"6eb3b4ceccbccaf5","entry":"load_data_cifar10","repo":"irxyzzz/DualDefense","repo_kind":"official","path":"utils/util_data.py","file_url":"https://github.com/irxyzzz/DualDefense/blob/HEAD/utils/util_data.py","link_basis":"harvester_set","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"6eb3b4ceccbccaf5"}},{"code_sha256_prefix":"40e0cc1e226945c3","entry":"load_data_fmnist","repo":"irxyzzz/DualDefense","repo_kind":"official","path":"utils/util_data.py","file_url":"https://github.com/irxyzzz/DualDefense/blob/HEAD/utils/util_data.py","link_basis":"harvester_set","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"40e0cc1e226945c3"}},{"code_sha256_prefix":"0c3c337f6e91e0f6","entry":"load_data_mnist","repo":"irxyzzz/DualDefense","repo_kind":"official","path":"utils/util_data.py","file_url":"https://github.com/irxyzzz/DualDefense/blob/HEAD/utils/util_data.py","link_basis":"harvester_set","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"0c3c337f6e91e0f6"}},{"code_sha256_prefix":"5836b7492db7b072","entry":"setup_tensorboard","repo":"irxyzzz/DualDefense","repo_kind":"official","path":"utils/util_logger.py","file_url":"https://github.com/irxyzzz/DualDefense/blob/HEAD/utils/util_logger.py","link_basis":"harvester_set","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"5836b7492db7b072"}},{"code_sha256_prefix":"a331d1f5c22aa095","entry":"wrap_torch_median","repo":"irxyzzz/DualDefense","repo_kind":"official","path":"utils/util_sys.py","file_url":"https://github.com/irxyzzz/DualDefense/blob/HEAD/utils/util_sys.py","link_basis":"harvester_set","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"a331d1f5c22aa095"}},{"code_sha256_prefix":"7beefb2be121f71b","entry":"wrap_torch_sort","repo":"irxyzzz/DualDefense","repo_kind":"official","path":"utils/util_sys.py","file_url":"https://github.com/irxyzzz/DualDefense/blob/HEAD/utils/util_sys.py","link_basis":"harvester_set","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"7beefb2be121f71b"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}