Search papers, labs, and topics across Lattice.
The paper introduces Fed-FBD, a modular federated learning architecture that enhances privacy and isolation by decomposing a ResNet backbone into functional blocks, each independently tracked and contributor-stamped. This approach allows for guaranteed block-level isolation from adversarial clients, ensures privacy by design, and enables surgical unlearning of contributions without the need for retraining. Experimental results demonstrate that Fed-FBD achieves only a modest accuracy trade-off while effectively containing adversarial influences and maintaining robust performance across multiple datasets.
Fed-FBD achieves surgical unlearning and adversarial isolation in federated learning without sacrificing significant accuracy, redefining the standards for privacy and model integrity.
Federated learning (FL) enables collaborative model training without sharing raw patient data, but standard approaches such as FedAvg treat each client as a black box and provide no mechanism for isolating an adversarial contributor, auditing per-client influence, or honoring a departed participant's right to be forgotten. We present Fed-FBD (Federated Functional Block Diversification), a modular federated architecture that decomposes a ResNet backbone into six functional blocks (the stem, four residual groups, and the classification head) and maintains a warehouse of N color variants, each assembled from independently tracked and contributor-stamped blocks. Fed-FBD provides three capabilities absent in FedAvg: (i) architecturally guaranteed block-level isolation, so that an adversarial or mislabelled client cannot contaminate the clean colous; (ii) privacy-by-design, where membership inference advantage is already indistinguishable from chance before any privacy mechanism is applied; and (iii) surgical machine unlearning of a departed participant's contribution at sub-second cost and without retraining. Experiments on six MedMNIST-2D datasets, PathMNIST at 224x224, and CIFAR-10 show that Fed-FBD trades a modest 0.3%-3.1% IID accuracy gap on the adequately sized datasets for these guarantees, remains within 0.8%-4.0% of FedAvg at Dirichlet alpha=1.0 on three of four datasets, and confines all six adversarial attacks we study to the poisoned client's own blocks with at most +/-0.01 AUC drift on the clean colors.
