TrustFCL: Task-grained model assessment and aggregation for secure federated continual learning
Federated learning (FL) enables decentralized model training across devices, while federated continual learning (FCL) continuously adapts to evolving tasks (varying in categories, data distributions, or problem domains). Currently, FL security issues, such as model poisoning and privacy leaks, are undermining trust and reliability, prompting the development of defense methods. However, with evolving tasks, when a poisoning attack occurs, traditional FL defense methods only evaluate whether the latest model from each client is poisoned. Therefore, existing approaches face two limitations: (i) defense methods based on static tasks ensure security by restricting parameter mutations, which undermines the model’s ability to adapt to new tasks and (ii) knowledge preservation mechanisms (e.g., parameters or gradients), crucial for alleviating forgetting, also introduce new vulnerabilities. Poisoned historical knowledge could be reused to launch attacks that are persistent and difficult to trace. To enable secure and adaptive FCL, this paper proposes TrustFCL, which proposes inter-task reliability and task knowledge reliability as both optimization constraints and control feedback. These reliabilities guide both local anti-forgetting training and global decentralized secure aggregation through a dynamic review committee. Furthermore, TrustFCL stores task reliability information on blockchain to prevent tampering and utilizes the consensus mechanism for privacy-preserving model aggregation. Evaluation results show that TrustFCL reduces the accuracy degradation by 37.1% compared to existing defense methods, and achieves a 17.8% improvement over FCL baselines.
- McMahan B, Moore E, Ramage D, Hampson S, y Arcas BA. Communication-efficient learning of deep networks from decentralized data. Paper presented at: proceedings of the 20th International Conference on Artificial Intelligence and Statistics; April 20-22, 2017; Fort Lauderdale, FL, USA. Accessed March 17, 2026. https://proceedings.mlr.press/v54/mcmahan17a.html
- Usynin D, Ziller A, Makowski M, et al. Adversarial interference and its mitigations in privacy-preserving collaborative machine learning. Nat Mach Intell. 2021;3(9):749-758. https://www.doi.org/10.1038/s42256-021-00390-3
- Zhang J, Chen B, Cheng X, Binh HTT., Yu PoisonGAN: Generative poisoning attacks against federated learning in edge computing systems. IEEE Internet Things J. 2020;8(5):3310-3322. https://www.doi.org/10.1109/jiot.2020.3023126
- Fang M, Cao X, Jia J, Gong NZ. Local model poisoning attacks to Byzantine-robust federated learning. In: Proc of the 29th USENIX Security Symposium (USENIX Security 20); August 12-14, 2020; USENIX Association; 2020:1605-1622. Available from https://www.usenix.org/system/files/sec20-fang.pdf
- Ren H, Deng J, Xie X. Grnn: generative regression neural network—a data leakage attack for federated learning. ACM Trans Intell Syst Technol. 2022;13(4):1-24. https://www.doi.org/10.1145/3510032
- Robins A. Catastrophic forgetting, rehearsal and pseudorehearsal. Connect Sci. 1995;7(2):123-146. https://www.doi.org/10.1080/09540099550039318
- Wang H, Sreenivasan K, Rajput S, et al. Attack of the Tails: Yes, You Really Can Backdoor Federated Learning. arXiv. Preprint online July 9, 2020. https://www.doi.org/10.48550/ARXIV.2007.05084
- Cao X, Fang M, Liu J, Gong NZ. Fltrust: Byzantine-robust federated learning via trust bootstrapping. Paper presented at: The Network and Distributed System Security Symposium 2021; February 21-25, 2021; Virtual. Accessed March 17, 2026. https://www.ndss-symposium.org/ndss-paper/fltrust-byzantine-robust-federated-learning-via-trust-bootstrapping/
- Mao Y, Yuan X, Zhao X, Zhong S. Romoa: Robust model aggregation for the resistance of federated learning to model poisoning attacks. Proc Eur Symp Res Comput Secur. 2021;476-496. https://www.doi.org/10.1007/978-3-030-88418-5 23
- Geng G, Cai T, Yang Z. Better safe than sorry: Constructing byzantine-robust federated learning with synthesized trust. 2023;12(13):2926. https://www.doi.org/10.3390/electronics12132926
- Chen Y, Su L, Xu J. Distributed statistical machine learning in adversarial settings: Byzantine gradient descent. Proc ACM Meas Anal Comput Syst. 2017;1(2):1-25. https://www.doi.org/10.1145/3154503
- Blanchard P, El Mhamdi EM, Guerraoui R, Stainer J. Machine learning with adversaries: Byzantine tolerant gradient descent. Adv Neural Inf Process Syst. 2017;30:118-128. https://www.doi.org/10.5555/3294771.3294783
- Nikishin E, Oh J, Ostrovski G, et Deep reinforcement learning with plasticity injection. Adv Neural Inf Process Syst. 2023;36:37142-37159. https://www.doi.org/10.5555/3666122.3667736
- Dong J, Wang L, Fang Z, et al. Federated class-incremental learning. arXiv. Preprint online March 22, 2022. https://www.doi.org/10.48550/arXiv.2203.11473
- Hegedu˝s I, Danner G, Jelasity M. Gossip learning as a decentralized alternative to federated learning. Proc IFIP Int Conf Distrib Appl Interoperable Syst. 2019;74-90. https://www.doi.org/10.1007/978-3-030-22496-7 5
- Hamedi P, Razavi-Far R, Hallaji E. Federated continual learning: concepts, challenges, and solutions. 2025;651(C). https://www.doi.org/10.1016/j.neucom.2025.130844
- Birashk A, Khan L. Federated continual learning for task-incremental and class-incremental problems: A survey. Expert Syst Appl. 2025;129278. https://www.doi.org/10.1016/j.eswa.2025.129278
- Yoon J, Jeong W, Lee G, Yang E, Hwang SJ. Federated continual learning with weighted inter-client Paper presented at: proceedings of the 38th International Conference on Machine Learning; July 18-24, 2021; Virtual. Accessed March 17, 2026. https://proceedings.mlr.press/v139/yoon21b.html
- Li J, Shao Y, Wei K, et al. Blockchain assisted decentralized federated learning (BLADE-FL): Performance analysis and resource allocation. IEEE Trans. Parallel Distrib Syst. 2021;33(10):2401-2415. https://www.doi.org/10.1109/tpds.2021.3138848
- Li J, Shao Y, Wei K, et al. Blockchain Assisted Decentralized Federated Learning (BLADE-FL): Performance Analysis and Resource Allocation. IEEE Trans Parallel Distrib Syst. 2022;33(10):2401-2415. https://www.doi.org/10.1109/tpds.2021.3138848
- Singh S, Rathore S, Alfarraj O, Tolba A, Yoon B. A framework for privacy-preservation of IoT healthcare data using Federated Learning and blockchain technology. Future Gener Comput Syst. 2022;129:380-388. https://www.doi.org/10.1016/j.future.2021.11.028
- Lu Y, Huang X, Zhang K, Maharjan S, Zhang Y. Blockchain empowered asynchronous federated learning for secure data sharing in internet of vehicles. IEEE Trans Veh Technol. 2020;69(4):4298-4311. https://www.doi.org/10.1109/TVT.2020.2973651
- Ma C, Li J, Shi L, et al. When federated learning meets blockchain: A new distributed learning paradigm. IEEE Comput Intell Mag. 2022;17(3):26-33. https://www.doi.org/10.1109/mci.2022.3180932
- Qi J, Lin F, Chen Z, Tang C, Jia R, Li M. High-quality model aggregation for blockchain-based federated learning via reputation-motivated task participation. IEEE Internet Things J. 2022;9(19):18378-18391. https://www.doi.org/10.1109/jiot.2022.3160425
- Gao L, Li L, Chen Y, Xu CZ, Xu M. FGFL: a blockchain-based fair incentive governor for Federated Learning. Parallel Distrib Comput. 2022;163:283-299. https://www.doi.org/10.1016/j.jpdc.2022.01.019
- Guo S, Zhang K, Gong B, et al. Sandbox computing: A data privacy trusted sharing paradigm via blockchain and federated learning. IEEE Trans Comput. 2022;72(3):800-810. https://www.doi.org/10.1109/tc.2022.3180968
- Li Z, Yu H, Zhou T, et al. Byzantine resistant secure blockchained federated learning at the edge. IEEE Netw. 2021;35(4):295-301. https://www.doi.org/10.1109/mnet.011.2000604
- Abdel-Basset M, Moustafa N, Hawash Privacy-preserved cyberattack detection in Industrial Edge of Things (IEoT): A blockchain-orchestrated federated learning approach. IEEE Trans Ind Inform. 2022;18(11):7920-7934. https://www.doi.org/10.1109/tii.2022.3167663
- Li T, Sahu AK, Zaheer M, Sanjabi M, Talwalkar A, Smith V. Federated optimization in heterogeneous networks. Proc Mach Learn Syst. 2020;2:429-450. https://proceedings.mlsys.org/paper/2020/hash/1f5fe83998a09396ebe6477d9475ba0c-Abstract.html
- Roberts L, Smyth, E. A simplified convergence theory for Byzantine resilient stochastic gradient descent. EURO J Comput Optim. 2022;10:100038. https://www.doi.org/10.1016/j.ejco.2022.100038
- Chen B, Fan L, Zeng X, Gu M, Zhou, J. A contribution-aware federated framework for electric vehicle batteries health estimation. IEEE Internet Things J. https://www.doi.org/10.1109/jiot.2024.3524005
- Gupta A, Luo T, Ngo MV, Das SK. Long-Short History of Gradients Is All You Need: Detecting Malicious and Unreliable Clients in Federated Learning. In: Lecture Notes in Computer Science. Springer Nature Switzerland. 2022:445-46. https://www.doi.org/10.1007/978-3-031-17143-7 22
- Chen C, Li P, Sakurai K, et A multi-head federated continual learning approach for improved flexibility and robustness in edge environments. Int J Netw Comput. 2024;14(2):123-144. https://www.doi.org/10.15803/ijnc.14.2 123
- Chen L, Zhao D, Tao L, et al. A credible and fair federated learning framework based on IEEE Trans Artif Intell. 2024;6(2):301-316. https://www.doi.org/10.1109/tai.2024.3355362
- Kang J, Xiong Z, Niyato D, Xie S, ZhangJ. Incentive mechanism for reliable federated learning: A joint optimization approach to combining reputation and contract theory. IEEE Internet Things J. 2019;6(6):10700-10714. https://www.doi.org/10.1109/jiot.2019.2940820
- Zouari F, Mahmud M. Neural Network-Based Robust Adaptive Output Feedback Control for MIMO Time-Varying Delay Paper presented at: the Global Conference on Applications of Artificial Intelligence and Data Science 2024; July 22-26, 2024; Munich, Germany, and virtually. Accessed March 17, 2026. https://www.doi.org/10.1007/978-3-031-98498-3 5
- Boulkroune A, Boubellouta A, Bouzeriba A, Zouari F. Practical finite-time fuzzy synchronization of chaotic systems with non-integer orders: Two chattering-free approaches. J Syst Sci Syst Eng. 2025;34(3):334-359. https://www.doi.org/10.1007/s11518-024-5635-7
- Jiang Y, Shen J, Liu Z, Tan CW, Lam KY. Towards efficient and certified recovery from poisoning attacks in federated learning. IEEE Trans Inf Forensics Secur. https://www.doi.org/10.1109/tifs.2025.3533907
- Krizhevsky A, Hinton G. Learning multiple layers of features from tiny images. Univ Toronto; 2009. Available from https://www.cs.toronto.edu/ kriz/learning-features-2009-TR.pdf
- Vinyals O, Blundell C, Lillicrap T, et al. Matching networks for one shot learning. Adv Neural Inf Process Syst. 2016;29. https://www.doi.org/10.5555/3157382.3157504
- Le Y, Yang Tiny imagenet visual recognition challenge. Stanford Univ CS231N ; 2015. Available from https://cs231n.stanford.edu/reports/2015/pdfs/yleproject.pdf
- Ke Z, Liu B, Wang H, Shu L. Continual learning with knowledge transfer for sentiment classification. Proc Jt Eur Conf Mach Learn Knowl Discov 2020;683-698. https://www.doi.org/10.1007/978-3-030-67664-3 41
- Collins L, Hassani H, Mokhtari A, Shakkottai S. Exploiting shared representations for personalized federated Paper presented at: proceedings of the 38th International Conference on Machine Learning. 2021;18-24; Virtual. Available from https://proceedings.mlr.press/v139/collins21a.html
- Deng Y, Kamani MM, Mahdavi M. Adaptive personalized federated learning. arXiv. Preprint. Available from https://www.doi.org/10.48550/arXiv.2003.13461
- He C, Annavaram M, Avestimehr S. Group knowledge transfer: Federated learning of large cnns at the edge. Adv Neural Inf Process Syst. 2020;33:14068-14080. https://www.doi.org/10.5555/3495724.3496904
- Luopan Y, Han R, Zhang Q, Liu CH, Wang G, Chen LY. Fedknow: Federated continual learning with signature task knowledge integration at edge. Proc IEEE 39th Int Conf Data Eng. 2023;341-354. https://www.doi.org/10.1109/icde55515.2023.00033
- Zuo X, Luopan Y, Han R, et al. FedViT: federated continual learning of vision transformer at edge. Future Gener Comput Syst. 2024;154:1-15. https://www.doi.org/10.1016/j.future.2023.11.038
- Wang Q, Liu B, Li Y. Traceable federated continual learning. Proc IEEE/CVF Conf Comput Vis Pattern Recognit. 2024;12872-12881. https://www.doi.org/10.1109/cvpr52733.2024.01223
- Wuerkaixi A, Cui S, Zhang J, et al. Accurate Forgetting for Heterogeneous Federated Continual Learning. arXiv. Preprint online Feb 20, 2025. https://www.doi.org/10.48550/arXiv.2502.14205
- Sattler F, Mu¨ller KR, Samek W. Clustered federated learning: model-agnostic distributed multitask optimization under privacy constraints. IEEE Trans Neural Netw Learn 2020;32(8):3710-3722. https://www.doi.org/10.1109/tnnls.2020.3015958
- Ghosh A, Chung J, Yin D, Ramchandran K. An Efficient Framework for Clustered Federated Learning. IEEE Trans Inform Theory. 2022;68(12):8076-8091. https://www.doi.org/10.1109/tit.2022.3192506
- Tong G, Li GB, Wu J, Li J. Gradmfl: gradient memory-based federated learning for hierarchical knowledge transferring over non-iid data. Proc Int Conf Algorithms Archit Parallel Process. 2021;612-626. https://www.doi.org/10.1007/978-3-030-95384-3 38
- Sun Z, Kairouz P, Suresh AT, McMahan HB. Can you really backdoor federated learning? arXiv. Preprint online November 18, 2019. https://www.doi.org/10.48550/arXiv.1911.07963
- Sun J, Li A, DiValentin L, Hassanzadeh A, Chen Y, Li H. Fl-wbc: enhancing robustness against model poisoning attacks in federated learning from a client perspective. Adv Neural Inf Process Syst. 2021;34:12613-12624. https://www.doi.org/10.5555/3540261.3541226
- Xie C, Koyejo O, Gupta I. SLSGD: secure and efficient distributed on-device machine learning. Paper presented at: joint European Conference on Machine Learning and Knowledge Discovery in Databases 2019; September 16-20, 2019; Wu¨rzburg, Germany. Accessed March 17, 2026. https://link.springer.com/chapter/10.1007/978-3-030-46147-8 13
- Yin D, Chen Y, Kannan R, Bartlett P. Byzantine-robust distributed learning: towards optimal statistical rates. Paper presented at: Proceedings of the 35th International Conference on Machine Learning; July 10-15, 2018; Stockholmsm¨assan, Stockholm, Sweden. Accessed March 17, 2026. https://proceedings.mlr.press/v80/yin18a
- Karimireddy SP, He L, Jaggi M. Byzantine-Robust Learning on Heterogeneous Datasets via Bucketing. Paper presented at: International Conference on Learning Representations; April 25-29, 2022; Virtually. Accessed March 17, 2026. https://openreview.net/forum?id=jXKKDEi5vJt
- Han S, Buyukates B, Hu Z, et al. Fedsecurity: a benchmark for attacks and defenses in federated learning and federated llms. Paper presented at: Proceedings of the 30th ACM SIGKDD Conference on Knowledge Discovery and Data Mining; August 25-29, 2024; Barcelona, Spain. Accessed March 17, 2026. https://www.doi.org/10.1145/3637528.3671545
