<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Publishing DTD v1.3 20210610//EN" "https://jats.nlm.nih.gov/publishing/1.3/JATS-journalpublishing1-3.dtd">
<article article-type="research-article" dtd-version="1.3" xml:lang="ru">
  <front xmlns:xlink="http://www.w3.org/1999/xlink">
    <journal-meta>
      <journal-id journal-id-type="elibrary">9004</journal-id>
      <journal-title-group>
        <journal-title>Problems of information security. Computer systems</journal-title>
        <trans-title-group xml:lang="ru">
          <trans-title>Проблемы информационной безопасности. Компьютерные системы</trans-title>
        </trans-title-group>
      </journal-title-group>
      <issn pub-type="epub">2071-8217</issn>
    </journal-meta>
    <article-meta xmlns:xlink="http://www.w3.org/1999/xlink">
      <article-id pub-id-type="publisher-id">2</article-id>
      <article-id pub-id-type="doi">10.48612/jisp/fpvk-xpna-9hx5</article-id>
      <title-group>
        <article-title>Protecting neural network models from privacy violation threats in federated learning using optimization methods</article-title>
        <trans-title-group xml:lang="ru">
          <trans-title>Защита нейросетевых моделей от угроз нарушения конфиденциальности в федеративном обучении с использованием методов оптимизации</trans-title>
        </trans-title-group>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <name>
            <surname>Bezborodov</surname>
            <given-names>Pavel</given-names>
          </name>
          <xref ref-type="aff" rid="aff1"/>
          <email>bezborodov_pd@edu.spbstu.ru</email>
        </contrib>
        <contrib contrib-type="author">
          <contrib-id contrib-id-type="orcid">0000-0003-2849-4682</contrib-id>
          <name>
            <surname>Lavrova</surname>
            <given-names>Daria</given-names>
          </name>
          <xref ref-type="aff" rid="aff1"/>
          <email>lavrova_ds@spbstu.ru</email>
        </contrib>
      </contrib-group>
      <aff id="aff1">Peter the Great St. Petersburg Polytechnic University</aff>
      <pub-date publication-format="electronic" date-type="pub" iso-8601-date="2025-03-25">
        <day>25</day>
        <month>03</month>
        <year>2025</year>
      </pub-date>
      <issue>1</issue>
      <fpage>21</fpage>
      <lpage>29</lpage>
      <self-uri xmlns:xlink="http://www.w3.org/1999/xlink" content-type="pdf" xlink:href="https://jisp.spbstu.ru/userfiles/files/2025_1-5-6.pdf"/>
      <abstract xml:lang="en">
        <p>The paper is devoted to an approach to counter threats of privacy violations in federated learning. The approach is based on optimization methods to transform the weights of local neural network models and create new weights for transmission to the joint gradient descent node, which, in turn, allows to prevent the interception of local model weights by an attacker. Experimental studies have confirmed the effectiveness of the developed approach.</p>
      </abstract>
      <kwd-group xml:lang="en">
        <kwd>Federated learning</kwd>
        <kwd>neural network models</kwd>
        <kwd>optimization methods</kwd>
        <kwd>gradient descent</kwd>
      </kwd-group>
    </article-meta>
  </front>
</article>
