You are currently viewing a new version of our website. To view the old version click .
  • This is an early access version, the complete PDF, HTML, and XML versions will be available soon.
  • Article
  • Open Access

5 December 2025

SpaceTime: A Deep Similarity Defense Against Poisoning Attacks in Federated Learning

and
Department of Computing and Software Systems, University of Washington Bothell, Bothell, WA 98011, USA
*
Author to whom correspondence should be addressed.
Big Data Cogn. Comput.2025, 9(12), 313;https://doi.org/10.3390/bdcc9120313 
(registering DOI)
This article belongs to the Special Issue Machine Learning Methodologies and Applications in Cybersecurity Data Analysis

Abstract

Federated learning has gained popularity in recent years to enhance IoT security because the model allows decentralized devices to collaboratively learn a shared model without exchanging raw data. Despite its privacy advantages, federated learning is vulnerable to poisoning attacks, where malicious devices introduce manipulated data or model updates to corrupt the global model. These attacks can degrade the model’s performance or bias its outcomes, making it difficult to ensure the integrity of the learning process across decentralized devices. In this research, our goal is to develop a defense mechanism against poisoning attacks in federated learning models. Specifically, we develop a spacetime model, that combines the three dimensions of space and the one dimension of time into a four-dimensional manifold. Poisoning attacks have complex spatial and time relationships that present identifiable patterns in that manifold. We propose SpaceTime-Deep Similarity Defense (ST-DSD), a deep learning recurrent neural network that includes space and time perceptions to provide a defense against poisoning attacks for federated learning models. The proposed mechanism is built upon a time series regression many-to-one architecture using spacetime relationships to provide an adversarial trained deep learning poisoning defense. Simulation results show that SpaceTime defense outperforms existing solutions for poisoning defenses in IoT environments.

Article Metrics

Citations

Article Access Statistics

Article metric data becomes available approximately 24 hours after publication online.