RFLDefense: robust federated learning defense against targeted attacks

Key points

Federated learning can be poisoned through malicious model updates even when raw training data remain local. This work studies defenses against targeted backdoor attacks under heterogeneous client data distributions.
The method combines hybrid similarity analysis with layer-wise sign-consistency checks. Inspecting individual layers aims to identify localized anomalies without discarding all benign contributions from a client.
Isolation Forest anomaly scores guide adaptive weighting and robust layer-wise aggregation. The authors report that benchmark experiments suppress several backdoor attacks while retaining performance on clean inputs.
The threat model assumes an honest, uncompromised server and no more than half of the participating nodes being malicious. The method adds server-side computation; additional implementation details and supporting experiments are available on request. We have not verified a public code implementation or reproduced deployment results.

External research summaries. These are not HDATF publications or measured product results.