Cited by 147Privacy-Preserving Technologies in DataStochastic Gradient Optimization TechniquesDomain Adaptation and Few-Shot Learning

Challenges, Applications and Design Aspects of Federated Learning: A Survey

Open access
Rahman, K. M. Jawadur, Ahmed, Faisal, Akhter, Nazma, Hasan, Mohammad, Amin, Ruhul, Aziz, Kazi Ehsan, Islam, A. K. M. Muzahidul, Mukta, Md. Saddam Hossain +1 more·2021·IEEE Access

Abstract

Federated Learning (FL) is a new technology that has been a hot research topic. It enables training an algorithm across multiple decentralized edge devices or servers holding local data samples, without exchanging them. There are many application domains where large amounts of properly labeled and complete data are not available in a centralized location, for example, doctors’ diagnosis from medical image analysis. There are also growing concerns over data and user privacy as Artificial Intelligence is becoming ubiquitous in new application domains. As such, very recently, a lot of research has been conducted in several areas within the nascent field of FL. A variety of surveys on different subtopics exist in current literature, focusing on specific challenges, design aspects and application domains. In this paper, we review existing contemporary works in the related areas in order to understand the challenges and topics that are emphasized by each type of FL surveys. Furthermore, we categorize FL research in terms of challenges, design factors and applications, conducting a holistic review of each and outlining promising research directions.

AI snapshot

Written from the paper’s full text.

TL;DR

This survey reviews contemporary federated learning (FL) survey papers and organizes FL research into design aspects, core challenges, and application areas. It provides a holistic review of each topic and outlines open issues and future research directions.

Key findings

  • The reviewed surveys do not cover all subtopics; in particular, less than half thoroughly reviewed FL architectures and personalization techniques, motivating this paper’s broader classification.
  • Design aspects span data partitioning (horizontal, vertical, federated transfer learning), architectures (client-server and peer-to-peer), aggregation algorithms (e.g., FedAvg, Scaffold, Adaptive Federated Optimization, FedBoost, FedProx, FedMA, Secure Aggregation), and personalization techniques (e.g., user context, clustering, transfer learning, multi-task/meta-learning, knowledge distillation, base+personalization layers, mixture of global/local models).
  • Core challenges are communication cost, systems heterogeneity, statistical heterogeneity, and privacy/security; the paper summarizes mitigation strategies such as local updating, compression, decentralized training, asynchronous communication, client participation, fault tolerance, SMC, DP, and HE, and notes FL models are more vulnerable to model poisoning than data poisoning.
  • Application areas covered include NLP, healthcare, computer vision, and transportation; open issues include tradeoffs among accuracy, privacy, communication cost, and personalization, and the lack of clear metrics for personalization.

Methods

  • Survey/review design: the authors investigated and analyzed contemporary FL survey papers, then classified FL research into design aspects, core challenges, and application areas, with comparison tables for surveys, aggregation algorithms, personalization techniques, communication-cost strategies, systems-heterogeneity strategies, and threat models.
  • No primary experiments or new datasets are reported; the work synthesizes existing literature and outlines open issues and future directions.

Limitations

  • Stated in paper: tradeoffs among accuracy, privacy, communication cost, and level of personalization must be carefully considered and are often use-case dependent; no clear metrics have yet been formulated to measure personalization performance; implementation challenges for different application areas have not been thoroughly studied, with current focus primarily on training FL models.
  • Evident from text: as a survey, it provides no empirical validation or quantitative benchmarking of its own, and its coverage is limited to the reviewed contemporary surveys and selected works.

Model-written summary. Check it against the paper before relying on it.

Integrity signals

Registry

Crossref · 10.1109/access.2021.3111118

Cites

173 of 173 references verified0 citation errors · 0 not checkable

Statistics

Nothing to recompute.

Claims the paper makes

0 of 68 cited sources checked · 0 supported · 0 flagged

  • Findingcitation

    Scaffold solves the problem of client drifting using variance reduction technique in its local update.

    “Scaffold (Stochastic Controlled Averaging Federated Learning) [58] solves the problem of client drifting using variance reduction technique in its local update.”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [58]

      Not checked in the free run.

  • Findingcitation

    FedAvg has convergence issues in some settings due to factors like client drifting and lack of adaptive learning rate.

    “Although FedAvg has achieved great success, it has some convergence issues in some settings due to the factors like client drifting [58] and lack of adaptive learning rate [128].”
    Quote in the paperNot a substantial claim0 of 2 sources checked
    • cites [58]

      Not checked in the free run.

    • cites [128] source

      Not checked in the free run.

  • Findingown data

    Less than half of the reviewed survey papers thoroughly reviewed FL architectures and personalization techniques.

    “In particular, less than half of the surveys thoroughly reviewed FL architectures and personalization techniques.”
    Quote in the paperSubstantial claim
  • Findingnone given

    Peer-to-peer FL architecture requires more computation for message encryption and decryption.

    “However, it requires more computation for message encryption and decryption.”
    Quote in the paperNot a substantial claim
  • Findingown data

    The reviewed survey papers do not cover all the subtopics as highlighted in Table II.

    “The reviewed survey papers do not cover all the subtopics as highlighted in Table II.”
    Quote in the paperSubstantial claim
  • Classified as probably not a substantial claim. 41
  • May combine two claims. 8
  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Findingcitation

    Adaptive Federated Optimization introduces adaptability in server optimization.

    “Adaptive Federated Optimization [128] proposed by Google Research team introduces the adaptability in server optimization.”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [128] source

      Not checked in the free run.

  • Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based).

    Findingnone given

    FedAvg is robust to unbalanced and non-IID data distribution.

    “It is robust to unbalanced and non-IID data distribution.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Findingcitation

    FedAvg is based on an SGD optimization algorithm.

    “The Federated averaging (FedAvg) algorithm [1] proposed by Google is based on an Stochastic Gradient Descent (SGD) optimization algorithm.”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [1]

      Not checked in the free run.

  • May combine two claims.

    Findingcitation

    Scaffold helps overcome client heterogeneity and reduce communication rounds in model convergence.

    “This strategy helps to overcome the problem of client heterogeneity and reduce the communication round in model convergence.”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [58]

      Not checked in the free run.

  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Findingcitation

    Mini-batch optimization methods have proven successful in many cases.

    “As an extension of classical stochastic methods, mini-batch optimization methods have proven to be successful in many cases [136].”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [136]

      Not checked in the free run.

  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Findingcitation

    Arivazhagan et al. propose a neural network architecture where global data is used to train only the base layers, while the personalization layers are trained on local data.

    “Arivazhagan et al. [134] propose a neural network architecture, where global data is used to train only the base layers, while the personalization layers are trained on local data.”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [134] source

      Not checked in the free run.

  • May combine two claims.

    Findingcitation

    Based on similarity of clients' data, different groups can be formed and a different model can be trained for each similar cluster.

    “Moreover, based on similarity of clients' data, different groups can be formed and a different model can be trained for each similar cluster [97].”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [97] source

      Not checked in the free run.

  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Findingcitation

    Hanzely et al. propose a new gradient descent variant called LLGD that allows each device to learn a mixture of its own local model and the global model.

    “A new gradient descent variant called Loopless Gradient Descent (LLGD) by Hanzely et al. [135] allow each device to learn a mixture of its own local model and the global model.”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [135]

      Not checked in the free run.

  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Findingcitation

    Wu et al. mention three major challenges handled by FL process during personalization: device heterogeneity, data heterogeneity, and model heterogeneity.

    “Wu et al. [105] mention three major challenges handled by FL process during personalization.”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [105]

      Not checked in the free run.

  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Findingcitation

    Secure Aggregation is fault-tolerant up to 1/3rd of users.

    “It is fault-tolerant up to 1/3rd of users, i.e., it works well even if 1/3rd of the clients fails to engage in the aggregation.”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [19]

      Not checked in the free run.

  • May combine two claims.

    Findingcitation

    FedProx addresses system heterogeneity and statistical heterogeneity.

    “FedProx [4] addresses the two inherent challenges of FL.”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [4]

      Not checked in the free run.

  • May combine two claims.

    Findingcitation

    Secure Aggregation does not share any information with each other except the learnable parameters derived from aggregation, thus defending the privacy of each client's model.

    “It does not share any information with each other except the learnable parameters derived from aggregation and thus defends the privacy of each client's model.”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [19]

      Not checked in the free run.

  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Findingcitation

    Recent works like [6] have carried out decentralized training over heterogeneous data.

    “Recent works like [6] have carried out decentralized training over heterogeneous data.”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [6]

      Not checked in the free run.

  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Findingcitation

    FedProx is a re-parametrized and generalized version of FedAvg.

    “It is a re-parametrized and generalized version of FedAvg.”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [4]

      Not checked in the free run.

  • Probably not a substantial claim: may not pass S4 (based). May combine two claims.

    Findingnone given

    Wireless connectivity might not be available consistently, and as such many participating devices may drop from the FL system during training.

    “However, wireless connectivity might not be available consistently, and as such many participating devices may drop from the FL system during training.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Findingcitation

    The authors of [146] have developed tools to measure statistical heterogeneity using metrics such as local dissimilarity.

    “The authors of [146] have developed tools to measure statistical heterogeneity using metrics such as local dissimilarity.”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [146] source

      Not checked in the free run.

  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Findingnone given

    SMC is one of the privacy mechanisms used in FL.

    “Secure Multiparty Computation (SMC) is one of privacy mechanisms used in FL.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim: may not pass S3 (load-bearing). May combine two claims.

    Findingcitation

    Data poisoning attacks may occur as clean-label attacks or dirty-label attacks.

    “Data poisoning attacks may occur in two ways such as clean-label attack (adversary can poison correct class of data sample) and dirty-label attack (adversary try to misclassify the target label of training dataset) [147], [148].”
    Quote in the paperNot a substantial claim0 of 2 sources checked
    • cites [147]

      Not checked in the free run.

    • cites [148] source

      Not checked in the free run.

  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Findingcitation

    According to the survey of threat model by Lyu et al., inference attack falls into two categories: white-box attack and black-box attack.

    “According to the survey of threat model by Lyu et al. [101], the inference attack falls into two categorieswhite-box attack and black-box attack.”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [101]

      Not checked in the free run.

  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Findingcitation

    Fault Tolerance is used because learning over remote devices becomes more critical as some devices often drop out even before an iteration is completed.

    “Fault Tolerance [99] is used because learning over remote devices becomes more critical as some devices in the network often drop out even before an iteration is completed.”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [99] source

      Not checked in the free run.

  • Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based).

    Findingnone given

    There can be significant variance in terms of the amount of data per device.

    “Moreover, there can be significant variance in terms of the amount of data per device.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based).

    Findingnone given

    In cross-device FL, often only a few devices are active during an iteration.

    “In cross-device FL, often only a few devices are active during an iteration.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Findingcitation

    Bonawitz et al. designed a communication-efficient SMC protocol for high-dimensional data to protect the privacy of users' model gradients.

    “Bonawitz et al. designed a communication-efficient SMC protocol for highdimensional data to protect the privacy of users' model gradients [19]”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [19]

      Not checked in the free run.

  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Findingcitation

    According to Bhagoji et al., model poisoning is accomplished by an adversary controlling few malicious representatives with the aim to misclassify specific inputs with high confidence.

    “According to Bhagoji et al. [55], model poisoning is accomplished by an adversary controlling few malicious representatives with the aim to misclassify specific inputs with high confidence.”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [55] source

      Not checked in the free run.

  • Classified as probably not a substantial claim.

    Findingcitation

    There are several open issues and challenges in FL.

    “There are several open issues and challenges in FL [168].”
    Quote in the paperSubstantial claim0 of 1 sources checked
    • cites [168]

      Not checked in the free run.

  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Findingcitation

    Wei et al. proposed an aggregation algorithm called NbAFL where they add noise to client-side parameters before aggregation.

    “Wei et al. [156] proposed an aggregation algorithm called NbAFL where they add noise to client-side parameters before aggregation.”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [156]

      Not checked in the free run.

  • Probably not a substantial claim: may not pass S4 (based).

    Findingnone given

    There is a tradeoff between communication cost and accuracy in FL.

    “There is a tradeoff between communication cost and accuracy in FL.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim: may not pass S4 (based).

    Findingnone given

    Recent research demonstrated that FL may not always provide sufficient privacy guarantee during model update.

    “But recent research demonstrated that FL may not always provide sufficient privacy guarantee during model update.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Findingcitation

    Xu et al. proposed a double-masking protocol to guarantee the privacy of users' local gradients during FL.

    “In order to guarantee the privacy of users' local gradients during FL, Xu et al. [114] proposed a double-masking protocol.”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [114]

      Not checked in the free run.

  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Findingcitation

    Geyer et al. developed a method to obtain differential privacy at client level for FL.

    “Geyer et al. [4] developed a method to obtain differential privacy at client level for FL.”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [4]

      Not checked in the free run.

  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Findingnone given

    HE is another security mechanism in FL.

    “Homomorphic Encryption (HE) is another security mechanism in FL.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based).

    Findingnone given

    FL has mainly been applied to supervised learning problems.

    “FL has mainly been applied to supervised learning problems.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim: may not pass S4 (based).

    Findingnone given

    There has been a growing interest in FL research in both industry and academia in recent years.

    “There has been a growing interest in FL research in both industry and academia in recent years.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim: may not pass S4 (based). May combine two claims.

    Findingnone given

    The challenges faced in the implementation of FL solutions for different application areas have not yet been thoroughly studied, with the focus of current studies being primarily on the training of FL models.

    “The challenges faced in the implementation of FL solutions for different application areas have not yet been thoroughly studied, with the focus of current studies being primarily on the training of FL models.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based).

    Interpretationnone given

    The client-server architecture incurs less communication overhead.

    “The client-server architecture incurs less communication overhead.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based).

    Interpretationreasoning

    Peer-to-peer architecture is more secure since participating clients communicate directly without a third-party coordinator.

    “the peer-to-peer architecture is even more secure since the participating clients communicate directly without a third-party coordinator.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based).

    Interpretationnone given

    FedAvg is the best fit for HFL with a client-server architecture.

    “This aggregation algorithm is the best fit for HFL with a client-server architecture.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Premisecitation

    FTL gained enormous attention in various industries, especially in the healthcare sector.

    “FTL gained enormous attention in various industries, especially in healthcare sector [121].”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [121]

      Not checked in the free run.

  • Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based).

    Interpretationnone given

    Peer-to-peer architecture requires more computation for message encryption and decryption.

    “peer-to-peer architecture requires more computation for message encryption and decryption.”
    Quote in the paperNot a substantial claim
  • May combine two claims.

    Premisecitation

    Both the actual sensitive data and models are preserved locally in FTL.

    “both the actual sensitive data and models are preserved locally [122].”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [122]

      Not checked in the free run.

  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Premisecitation

    FTL was first proposed in [71].

    “FTL was first proposed in [71].”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [71] source

      Not checked in the free run.

  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Premisecitation

    FL was first introduced by researchers at Google to update language models in Google's keyboard system for word autocompletion.

    “FL was first introduced by the researchers at Google to update language models [1], [2] in Google's keyboard system for word autocompletion.”
    Quote in the paperNot a substantial claim0 of 2 sources checked
    • cites [1]

      Not checked in the free run.

    • cites [2]

      Not checked in the free run.

  • Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based).

    Interpretationnone given

    Adding contextual features to datasets in a privacy-preserving manner can lead to predictions that are more personalized.

    “Adding contextual features to datasets in a privacypreserving manner can lead to predictions that are more personalized.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based).

    Premisenone given

    Important-based updating utilizes the fact that most parameter values of a deep neural network model are sparsely distributed.

    “Important-based updating utilizes the fact that most parameter values of a deep neural network model are sparsely distributed.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim: may not pass S4 (based).

    Premisenone given

    FL offers an emerging paradigm for facilitating multiple organization data collaboration without revealing their private data to each other.

    “FL offers an emerging paradigm for facilitating multiple organization data collaboration without revealing their private data to each other.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim: may not pass S4 (based).

    Interpretationreasoning

    FL enables certain industries like healthcare to overcome challenges related to data collection and privacy.

    “FL enables certain industries like healthcare to overcome challenges related to data collection and privacy.”
    Quote in the paperNot a substantial claim
    • Rests on an assumption: FL allows participating organizations to collaboratively train prediction models without having to share their data.
46 of 46
  • The paper relies on this without support.

    Horizontal and Vertical FL can be ineffective when the data is highly heterogeneous.

    “Horizontal and Vertical FL can be ineffective when the data is highly heterogeneous.”
  • The paper relies on this without support.

    FTL is an effective approach when data is highly heterogeneous.

    “In such cases, FTL is an effective approach where it transfers knowledge learned from source domain to a target domain.”
  • The paper relies on this without support.

    Only a few selected devices may participate during a training iteration, and some devices may drop out due to connectivity or power issues.

    “Due to system and network constraints in a number of settings, only a few selected devices may participate during a training iteration, and some devices may even drop out during an iteration due to connectivity or power issues.”
  • The paper relies on this without support.

    Different devices across the network often have nonidentically distributed data.

    “The violation occurs because different devices across the network often have nonidentically distributed data.”
  • The paper relies on this without support.

    The number of data points across devices also vary.

    “The number of data points across devices also vary.”
  • The paper relies on this without support.

    Privacy/security issues are at the core of FL applications.

    “privacy/security issues are at the core of FL applications.”
  • The paper relies on this without support.

    Increased privacy/security using novel methods often comes at the cost of decreased system efficiency or model performance.

    “Increased privacy/security using novel methods often comes at the cost of decreased system efficiency or model performance.”
  • The paper relies on this without support.

    Currently, almost all implementations of FL use client-server architecture.

    “Currently, almost all implementation of FL use client-server architecture.”
  • The paper relies on this without support.

    Collaborative training in FL can result in better models compared to models trained by individual organizations or devices.

    “In addition to the privacy and security benefits, collaborative training in FL can result in better models compared to models trained by individual organizations or devices.”
  • The paper relies on this without support.

    Added security and privacy results in some accuracy loss in FL.

    “In practice, this added security and privacy results in some accuracy loss, but it is often worth it for specific application domains.”
  • The paper relies on this without support.

    FL allows participating organizations to collaboratively train prediction models without having to share their data.

    “FL allows participating organizations to collaboratively train prediction models without having to share their data.”
11 of 11

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

Each contradiction between two passages listed here was confirmed by an independent check.

  • Hybrid-FL extension is assigned to the wrong reference

    Minor

    The systems-heterogeneity discussion attributes a FedCS extension called Hybrid-FL to [20], but reference [20] concerns private distributed aggregation. The Hybrid-FL paper is listed at [34].

  • Communication table misattributes Reisizadeh et al.

    Minor

    Table V assigns [131] to Reisizadeh et al.'s periodically averaged, quantized uploads. Reference [131] is instead a meta-learning paper by Finn et al.

  • Threat-model table misattributes Shafahi et al.

    Minor

    Table VII assigns [148] to Shafahi et al.'s poisoning work, but reference [148] is a BadNets paper by Gu et al. The Shafahi paper is listed at [147].

  • FedProx has conflicting citations

    Minor

    Table III cites FedProx as [15], while the algorithm discussion cites it as [4]. Reference [15] is about coded computation over heterogeneous clusters.

  • Scaffold has conflicting citations

    Minor

    The discussion identifies Scaffold as [58], but Table III labels it [67]. Reference [67] is about association-rule mining, not Scaffold.

  • Personalization table misattributes reference [100]

    Minor

    Table IV names Mansour et al. for [100], but reference [100] is a meta-learning paper by Fallah et al. Mansour et al. appear at [97].

  • Communication table misattributes Rothchild et al.

    Minor

    Table V assigns [130] to Rothchild et al.'s compression work, but reference [130] is a personalization-evaluation paper by Wang et al. Rothchild et al.'s FetchSGD paper is listed at [141].

  • Geyer et al. are assigned the FedProx reference

    Minor

    The privacy discussion credits Geyer et al.'s client-level differential-privacy method to [4], but reference [4] is the Li et al. FedProx paper. Geyer et al.'s method is listed at [23].

  • Briggs survey is cited as an unrelated paper

    Minor

    Table I assigns [5] to the Briggs et al. IoT survey, whereas reference [5] is a communication-compression paper. The Briggs survey appears at [57].

  • Systems-heterogeneity table misattributes FedCS

    Minor

    Table VI names Nishio et al. and FedCS under [43], but reference [43] is by Feng et al. The Nishio and Yonetani client-selection paper is reference [33].

  • Threat-model table misattributes Bagdasaryan et al.

    Minor

    Table VII cites Bagdasaryan et al. as [151], whereas reference [151] is a paper by Melis et al. Bagdasaryan et al.'s backdoor paper is listed at [149].

  • Lim survey has conflicting reference numbers

    Minor

    Table I cites the Lim et al. mobile-edge-networks survey as [4], but reference [4] is a paper by Li et al. The Lim survey is listed as reference [25].

  • Personalization table misattributes reference [133]

    Minor

    Table IV names McMahan et al. for [133], but reference [133] is a FedMD paper by Li and Wang.

13 of 13

Cites

Flagged first, then by citations

Research works printed but not linked: 12

  1. kairouz, 2019, Advances and open problems in federated learning, arXiv 1912 04977
  2. shafahi, 2018, Poison frogs! Targeted clean-label poisoning attacks on neural networks, arXiv 1804 00792
  3. fang, 2019, Local model poisoning attacks to byzantine-robust federated learning, arXiv 1911 11815
  4. takabi, 2016, Privacy preserving multiparty machine learning with homomorphic encryption, Proc 29th Annu Conf Neural Inf Process Syst
  5. khodak, 2019, Adaptive gradient-based meta-learning methods, arXiv 1906 02717
  6. rothchild, 2020, FetchSGD: Communication-efficient federated learning with sketching, arXiv 2007 07682
  7. zhang, 2015, Deep learning with elastic averaging SGD, arXiv 1412 6651
  8. lin, 2018, Don’t use large mini-batches, use local SGD, arXiv 1808 07217
  9. smith, 2017, Federated multi-task learning, arXiv 1705 10467
  10. wang, 2020, Federated learning with matched averaging, arXiv 2002 06440
  11. 10.1109/TIT.2019.2904055 · DOI
  12. caldas, 2018, Federated kernelized multi-task learning, Proc SysML Conf, 1

Cited by

Sorted by citations

Authors
Rahman, K. M. J., Ahmed, F., Akhter, N., Hasan, M., Amin, R., Aziz, K. E., Islam, A. K. M. M., Mukta, M. S. H., & Islam, A. K. M. N.
Affiliations
United International University (BD)
Venue
IEEE Access
Published
2021
Volume
9
Pages
124682-124700
ISSN
2169-3536 (ISSN-L)
OpenAlex
W3196965143
Cited by
147
References
173
Citations by year
2026: 13 · 2025: 34 · 2024: 52 · 2023: 29 · 2022: 17 · 2021: 2
FWCI
8.84
Type
journal article
Language
en
Open access
Locations
  • IEEE Access (publishedVersion, cc-by)
  • DOAJ (DOAJ: Directory of Open Access Journals) (submittedVersion, cc-by-sa)
Topics
  • Physical Sciences › Computer Science › Artificial Intelligence › Privacy-Preserving Technologies in Data
  • Physical Sciences › Computer Science › Artificial Intelligence › Stochastic Gradient Optimization Techniques
  • Physical Sciences › Computer Science › Artificial Intelligence › Domain Adaptation and Few-Shot Learning
Keywords
federated learning, decentralized machine learning, edge devices, data privacy, medical image analysis, privacy-preserving machine learning, research challenges

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Claims read by deepseek-v4.1-flash under definition version 3 (extract-v3) on 2026-10-09.

Classified by jev-1.13-20260917 (gold-guideline-v0.2) on 2026-10-09.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review