Abstract:Summary Federated learning (FL) has emerged as a promising solution to address the challenges posed by data silos and the need for global data fusion. It offers a distributed machine learning framework with privacy‐preserving features, allowing model training without the need to collect user data. However, FL also presents significant security and privacy threats that hinder its widespread adoption. The requirements of privacy and security in FL are inherently conflicting. Privacy necessitates the concealment of individual client updates, while security requires the disclosure of client updates to detect anomalies. While most existing research focused on the privacy and security aspects of FL, very few studies have addressed the compatibility of these two demands. In this work, we aim to bridge this gap by proposing a comprehensive defense scheme that ensures privacy, security, and compatibility in FL. We categorize the existing literature into two key directions: privacy defense and security defense. Privacy defense includes methods based on additive masks, differential privacy, homomorphic encryption, and trusted execution environment, whereas security defense encompasses distance‐, performance‐, clustering‐, and similarity‐based anomaly detection techniques and statistical information‐based anomaly update bypassing techniques when the server is trusted and privacy‐compatible anomaly update detection techniques when the server is not trusted. In addition, this article presents decentralized FL solutions based on blockchain. For each direction, we discuss specific technical solutions, their advantages, and disadvantages. By evaluating various defense methods, we identify the most suitable approach to address the primary challenge of "achieving a secure and robust FL system against malicious adversaries while protecting users' privacy." We then propose a theoretical reference framework for end‐to‐end protection of privacy and security in FL for the key problem, which summarizes the attack surface of FL systems from the client to the server under the security model where the client and server are malicious. Leveraging the strengths and characteristics of existing schemes, our proposed framework integrates multiple techniques to strike a balance between privacy, usability, and efficiency. This framework serves as a valuable reference and provides insights for future work in the field. Finally, we also provide recommendations for future research directions in this field.

A Multi-Shuffler Framework to Establish Mutual Confidence for Secure Federated Learning

Efficient, Private and Robust Federated Learning

Secure and Efficient Decentralized Federated Learning with Data Representation Protection

MS-FL: A Federated Learning Framework Based on Multiple Security Strategies

Split Aggregation: Lightweight Privacy-Preserving Federated Learning Resistant to Byzantine Attacks

RFLPA: A Robust Federated Learning Framework against Poisoning Attacks with Secure Aggregation

A Blockchain-based federated learning framework for secure aggregation and fair incentives

Privacy preserving and secure robust federated learning: A survey

EPFed: Achieving Optimal Balance between Privacy and Efficiency in Federated Learning

DeTrust-FL: Privacy-Preserving Federated Learning in Decentralized Trust Setting

PROFL: A Privacy-Preserving Federated Learning Method with Stringent Defense Against Poisoning Attacks

Privacy-Preserving Federated Learning Framework Based on Chained Secure Multiparty Computing

Practical Private Aggregation in Federated Learning Against Inference Attack

Robust and privacy-preserving federated learning with distributed additive encryption against poisoning attacks

FL-PTD: A Privacy Preserving Defense Strategy Against Poisoning Attacks in Federated Learning.

Secure Model Aggregation Against Poisoning Attacks for Cross-Silo Federated Learning With Robustness and Fairness

Secure Decentralized Aggregation to Prevent Membership Privacy Leakage in Edge-based Federated Learning

Unraveling the Connections between Privacy and Certified Robustness in Federated Learning Against Poisoning Attacks

FLShield: A Validation Based Federated Learning Framework to Defend Against Poisoning Attacks

Camel: Communication-Efficient and Maliciously Secure Federated Learning in the Shuffle Model of Differential Privacy