The transition from passive foundation models to autonomous, goal-directed agentic AI systems has introduced unprecedented capabilities by coupling recursive cognitive reasoning loops, persistent memory architectures, live tool execution planes, and multi-agent collaboration topologies. However, granting probabilistic neural cores execution authority across filesystems, networks, and cloud infrastructure dissolves classical security perimeters: natural language simultaneously serves as input data, internal control code, and communication protocols, exposing a Turing-complete blast radius where untrusted data represents executable instructions. This survey delivers a comprehensive systems-security reference framework for trustworthy agentic AI, synthesizing 206 foundational studies and regulatory standards. We formalize the general agent architecture as a stateful 5-tuple and establish a 6-dimensional trustworthiness taxonomy covering security, safety, privacy, explainability, fairness, and accountability. We systematically analyze threat surfaces across intra-execution loops and interaction planes, formulate a multi-layered zero-trust defense-in-depth architecture integrating Dual-LLM isolation, Capability-Based Access Control, kernel eBPF probes, and sandboxed runtimes, review standardized evaluation benchmarks, and map technical controls to international AI governance frameworks.
Federated learning (FL) in real-world deployments is fundamentally challenged by heterogeneous environments, where clients differ in both model architectures and computational capacities (system heterogeneity), as well as in local data distributions (statistical heterogeneity due to nonindependent and nonidentically distributed (non-IID) data). Existing FL methods typically address these challenges in isolation, which limits their robustness and convergence stability under realistic conditions. To systematically tackle both forms of heterogeneity within a unified framework, we propose the enhanced dual-alignment framework (EDAF) framework. To address system heterogeneity, EDAF introduces dynamic parameter feature space alignment (DPFSA), which aligns heterogeneous client models through sparsity-aware parameter selection, adaptive layer-wise matching (ALWM), and learnable parameter expansion (LPE) for resource-constrained clients. To mitigate statistical heterogeneity, EDAF further incorporates a decentralized output space alignment (DOSA) mechanism that dynamically constructs and updates a shared output embedding space across clients without relying on external pretrained models. In addition, EDAF employs federated aggregation and splitting (FAS) to enable communication-efficient aggregation while generating personalized global models tailored to individual client characteristics. Extensive experiments on CIFAR-10, CIFAR-100, MNIST, and IoT-23 datasets demonstrate that EDAF consistently achieves faster convergence, higher accuracy, and improved precision, recall, and $F1$ -scores compared to state-of-the-art FL methods, while significantly reducing communication overhead and maintaining robustness under severe non-IID data distributions and heterogeneous client settings.
Majid Mohammadpour, Seyedakbar Mostafavi, J. Abouei et al.· IEEE Internet of Things Jour...· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.
