REU site: hands-on research in federated learning security through red team VS. Blue team exercises

The National Science Foundation Division of Computing and Communication Foundations awarded the Board of Regents of Nevada System of Higher Education, doing business as University of Nevada, Las Vegas, $460,922 on October 1, 2026, under the Computer and Information Science and Engineering program (CFDA 47.070) for a Research Experiences for Undergraduates Site focused on federated learning security.

The award supports a ten-week summer research program that engages ten undergraduate students annually in hands-on attack-and-defense research on the security of federated learning systems—which enable multiple devices or organizations to train a shared artificial intelligence model without exchanging raw data. Students and faculty mentors investigate threats and defenses across the data collection, training, and inference stages of federated learning, including representative attacks such as botnet-style disruption, poisoning, backdoor insertion, privacy leakage, membership inference, and data reconstruction, and defensive techniques including robust aggregation, anomaly detection, and differential privacy. The project uses a dedicated federated learning cybersecurity range, realistic datasets from computer vision, language, and network traffic applications, and distributed computing resources for controlled experimentation. Through iterative red team versus blue team exercises, the work produces software, tutorials, datasets, and empirical results to advance privacy-preserving artificial intelligence and expand access to advanced undergraduate research opportunities in cybersecurity and artificial intelligence.

Performance of the work occurs in Las Vegas, Nevada, with a period of performance from October 1, 2026, through September 30, 2029.

Abstract

This research experiences for undergraduates site at the university of nevada, LAS vegas supports 10 students each year in a 10-week summer research program on the security of federated learning, a way for many devices or organizations to train a shared artificial intelligence model without exchanging their raw data. This approach can help protect privacy, but IT also creates new security risks because attackers may TRY to corrupt the training process, steal information from the model, or reduce system reliability. The project?s novelties are the integration of hands-on attack-and-defense research across the full federated learning process and the use of red team versus blue team exercises to study these problems in realistic settings. The project's broader significance and importance are that IT advances safer privacy-preserving artificial intelligence, expands access to advanced undergraduate research opportunities, and helps prepare the future artificial intelligence and cybersecurity workforce. The project contributes to a stronger national capacity for building trustworthy data-driven systems. The research project focuses on threats and defenses in the data collection, training, and inference stages of federated learning. Students and mentors investigate representative attacks including botnet-style disruption, poisoning, backdoor insertion, privacy leakage, membership inference, and data reconstruction, and they evaluate defenses such as robust aggregation, anomaly detection, and differential privacy. The work uses a dedicated federated learning cybersecurity range, realistic datasets from computer vision, language, and network traffic applications, and distributed computing resources for controlled experimentation. Through iterative red team and blue team studies, the project produces software, tutorials, datasets, and empirical results that improve understanding of secure and privacy-preserving distributed learning. The anticipated outcome is stronger technical foundations for trustworthy artificial intelligence and a broader pipeline of students prepared for research and professional practice in cybersecurity and artificial intelligence. This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the foundation's intellectual merit and broader impacts review criteria.- subawards are not planned for this award.