<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Publishing DTD v1.3 20210610//EN" "https://jats.nlm.nih.gov/publishing/1.3/JATS-journalpublishing1-3.dtd">
<article article-type="research-article" dtd-version="1.3" xml:lang="en">
  <front xmlns:xlink="http://www.w3.org/1999/xlink">
    <journal-meta>
      <journal-id journal-id-type="elibrary">9004</journal-id>
      <journal-title-group>
        <journal-title>Problems of information security. Computer systems</journal-title>
        <trans-title-group xml:lang="ru">
          <trans-title>Проблемы информационной безопасности. Компьютерные системы</trans-title>
        </trans-title-group>
      </journal-title-group>
      <issn pub-type="epub">2071-8217</issn>
    </journal-meta>
    <article-meta xmlns:xlink="http://www.w3.org/1999/xlink">
      <article-id pub-id-type="publisher-id">6</article-id>
      <article-id pub-id-type="doi">10.48612/jisp/rp53-1tp9-n87g</article-id>
      <title-group>
        <article-title>Security issues in federated learning systems</article-title>
        <trans-title-group xml:lang="ru">
          <trans-title>Проблемы безопасности федеративных систем, использующих криптографическую защиту</trans-title>
        </trans-title-group>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <contrib-id contrib-id-type="orcid">0000-0002-7485-4848</contrib-id>
          <name>
            <surname>Aleksandrova</surname>
            <given-names>Elena</given-names>
          </name>
          <xref ref-type="aff" rid="aff1"/>
          <email>aleksandrova_eb@spbstu.ru</email>
        </contrib>
        <contrib contrib-type="author">
          <contrib-id contrib-id-type="orcid">0009-0001-6593-6446</contrib-id>
          <name>
            <surname>Gadisova</surname>
            <given-names>Vladislava</given-names>
          </name>
          <xref ref-type="aff" rid="aff1"/>
          <email>gadisova_va@spbstu.ru</email>
        </contrib>
      </contrib-group>
      <aff id="aff1">Peter the Great St. Petersburg Polytechnic University</aff>
      <pub-date publication-format="electronic" date-type="pub" iso-8601-date="2025-12-26">
        <day>26</day>
        <month>12</month>
        <year>2025</year>
      </pub-date>
      <issue>4</issue>
      <fpage>76</fpage>
      <lpage>88</lpage>
      <self-uri xmlns:xlink="http://www.w3.org/1999/xlink" content-type="pdf" xlink:href="https://jisp.spbstu.ru/userfiles/files/pib_4.pdf"/>
      <abstract xml:lang="en">
        <p>The paper discusses key security problems in federated learning systems: protecting the privacy of participants’ data from gradient inversion attacks and ensuring model resistance in the presence of poisoning attacks. A review of current approaches to defense against the above threats is presented, and limitations in attempting to apply them together are identified. Based on the analysis, we formulate our own ideas for further research aimed at developing more effective and balanced defense methods that consider both data privacy and poisoning attack resistance.</p>
      </abstract>
      <kwd-group xml:lang="en">
        <kwd>Distributed systems</kwd>
        <kwd>machine learning security</kwd>
        <kwd>federated learning</kwd>
        <kwd>gradient inversion attacks</kwd>
        <kwd>poisoning attacks</kwd>
      </kwd-group>
    </article-meta>
  </front>
</article>
