7.4NIMay 4
PERFECT: Personalized Federated Learning for CBRS Radar DetectionShafi Ullah Khan, Madan Baduwal, Vini Chaudhary et al.
The Citizens Broadband Radio Service (CBRS) band is pivotal for expanding next-generation wireless services, but its success hinges on robustly protecting incumbent users, such as naval radar systems, from interference. This task is delegated to a network of Environmental Sensing Capability (ESC) sensors, which must detect faint radar signals amidst heavy co-channel interference from commercial LTE and 5G users. Traditional centralized detection models raise significant data privacy concerns and are ill-suited for the Non-Independent and Identically Distributed (non-IID) nature of data from geographically dispersed sensors. To overcome these limitations, we propose a novel Federated Learning (FL) framework PERFECT that leverages ESC level personalization for robust and efficient radar detection. PERFECT preserves privacy by training models locally on ESC sensors. Furthermore, our framework is the first to effectively handle non-IID scenarios through model personalization where different ESCs observe distinct radar types. We demonstrate through extensive simulations that PERFECT achieves the mandated 99% recall for radar detection, matching centralized performance while significantly enhancing privacy, efficiency, and scalability for dynamic spectrum sharing.
CRMay 30, 2025
Towards Secure MLOps: Surveying Attacks, Mitigation Strategies, and Research ChallengesRaj Patel, Himanshu Tripathi, Jasper Stone et al.
The rapid adoption of machine learning (ML) technologies has driven organizations across diverse sectors to seek efficient and reliable methods to accelerate model development-to-deployment. Machine Learning Operations (MLOps) has emerged as an integrative approach addressing these requirements by unifying relevant roles and streamlining ML workflows. As the MLOps market continues to grow, securing these pipelines has become increasingly critical. However, the unified nature of MLOps ecosystem introduces vulnerabilities, making them susceptible to adversarial attacks where a single misconfiguration can lead to compromised credentials, severe financial losses, damaged public trust, and the poisoning of training data. Our paper presents a systematic application of the MITRE ATLAS (Adversarial Threat Landscape for Artificial-Intelligence Systems) framework, a comprehensive and continuously updated catalog of AI-focused attacks, to systematically assess attacks across different phases of the MLOps ecosystem. We begin by examining the preparatory phases during which adversaries acquire the essential intelligence required to initiate their attacks. We then present a structured taxonomy of attack techniques explicitly mapped to corresponding phases of the MLOps ecosystem, supported by examples drawn from red-teaming exercises and real-world incidents. This is followed by a taxonomy of mitigation strategies aligned with these attack categories, offering actionable early-stage defenses to strengthen the security of MLOps ecosystem. Given the rapid evolution and adoption of MLOps, we further highlight key research gaps that require immediate attention. Our work emphasizes the importance of implementing robust security protocols from the outset, empowering practitioners to safeguard MLOps ecosystem against evolving cyber attacks.