Safe-FCL: Continual Risk Awareness and Fine-Grained Safety Aggregation for Federated Continual Learning of LLMs
Federated fine-tuning enables large language models (LLMs) to learn collaboratively from distributed client data, but malicious client updates can compromise global model safety.
ProofPaper ↗
Key points
- As federated tasks evolve, changing malicious update patterns challenge the ability of existing defenses to maintain reliable risk detection over time.
- To translate risk awareness into aggregation-level safety control, the Fine-Grained Safety Aggregation (FGSA) mechanism combines client-level risk assessments from CRA with module-level deviations from historical update behavior to adaptively regulate aggregation contributions, suppressing potentially malicious updates while minimizing unnecessary restrictions on benign updates.
- Extensive experiments demonstrate that Safe-FCL outperforms current SOTA methods, improving global-model Rule and MD-Judge scores in federated continual learning by 0.41% and 0.64%, respectively, while increasing average risk recognition accuracy by 2.01%.
Sources (1)
- [1]Safe-FCL: Continual Risk Awareness and Fine-Grained Safety Aggregation for Federated Continual Learning of LLMsarXiv (AI, ML, NLP, CV, robotics, multi-agent) · Oct 14, 10:50 AM
Federated fine-tuning enables large language models (LLMs) to learn collaboratively from distributed client data, but malicious client updates can compromise global model safety.
As federated tasks evolve, changing malicious update patterns challenge the ability of existing defenses to maintain reliable risk detection over time.
Extractive summary: sentences quoted from the sources.
Before this
- Oct 14, 2026Frustratingly Easy Majority Voting Using Length Conditioning
- Oct 14, 2026Beyond Corrected Actions: Training LLM Agents on Textual Critiques
- Oct 13, 2026A Global View of How LLMs Value Human Time
- Oct 13, 2026FedGraph: Defending Federated Large Language Model Fine-Tuning Against Backdoor Attacks via Graph-Based Aggregation
- Oct 13, 2026inLoRA-MINT: Internal Representations for Auditing Training Data in Domain-adapted LLMs
- Oct 13, 2026SpecCloak: Probing Harmful Code Generation through Engineering Specifications