Inversion, Membership, and Poisoning Attacks in Federated Learning - Challenges and Defenses

View at publisher
Authors: Shaista Ashraf Farooqi, Aedah Abd Rahman, Amna Binti Saad
Cited by: 0
References: 34

Abstract

Machine-learning systems are increasingly exposed to advanced privacy and integrity threats, including model inversion, membership inference, and poisoning attacks, which can extract sensitive attributes, reveal user participation, or manipulate global models. Despite providing a decentralized training approach that keeps data on local devices, Federated Learning (FL) remains highly appealing for privacy-sensitive sectors, it remains vulnerable to these sophisticated adversarial techniques. This paper provides a focused technical analysis and classification of the three major attack categories that threaten FL, highlighting their mechanisms and practical implications for secure deployment. Our key contribution is a concise, structured examination of how these attacks operate within FL workflows and what security weaknesses they expose. The discussion is intended for researchers, practitioners, and system designers seeking to reinforce the security and dependability of federated learning frameworks.

Fields of Study & Subjects

Privacy-Preserving Technologies in Data Adversarial Robustness in Machine Learning Security and Verification in Computing

Publication details

Journal / source
International Conference on Ubiquitous Information Management and Communication (IMCOM)
Pages
1–8
Publication date
4 January 2026