2026· IEEE Transactions on Network Science and Engineering· Vol 13, pp. 11081-11097· 0 citations· 110 references
Abstract
Continual learning (CL) is a key paradigm that enables intelligent agents to operate autonomously in edge networks over the long term. However, continuous model updates can lead to catastrophic forgetting and representation instability in edge deployment scenarios, which may further induce Decision Boundary Drift (DBD). We propose a DBD-based adversarial attack framework that exploits class-level drift modeling and leverages the deformation of decision boundaries caused by incremental updates. We introduce multiple statistical metrics to quantify boundary drift, based on which class-level adversarial perturbations are constructed and further optimized in the input space to generate effective adversarial examples. Extensive experiments on multiple datasets and continual learning models demonstrate that the proposed method can significantly degrade model robustness, revealing non-negligible security risks in continuously evolving learning systems. Inspired by the security and trustworthiness requirements of edge intelligent agents, we systematically study and quantify DBD and its associated security risks in continual learning. Our findings reveal a practical yet underestimated attack surface and provide a foundation for future research on secure and robust continual learning systems.
The Attention Concentration Score (ACS) is introduced, which measures how DP training shifts Transformer attention away from task-critical features toward non-functional ones, providing a mechanistic explanation of the trade-off.
Bilal Sardar, Shareeful Islam, Stefano Silvestri et al.· Journal of Reliable Intellig...· 0 citations
Edge IoT deployments must evaluate the trustworthiness of peer devices continuously, locally, and under resource constraints that static scoring models cannot accommodate—particularly when adversaries adapt their mimicry strategies in response to observed detection outcomes. This study presents the Adaptive Dynamic T...
Pavansai Ramarao Maddali, Vijay Kumar Damera, Ratna Kumar Prathipati· Frontiers in The Internet of...· 0 citations
A sensitivity-driven adversarial generation framework (AGF) that identifies and perturbs the most influential traffic features that affect the classifier’s decision boundary to generate statistically consistent adversarial samples with constrained perturbation magnitude is proposed.
Omar Abboosh Hussein Gwassi, O. N. Uçan· IEEE Access· 0 citations
The results demonstrate a strong vulnerability: an adversary can selectively impede plasticity to hinder the acquisition of new knowledge, while promoting loss of prior knowledge, inducing a catastrophic learning scenario.
This work proposes PR-based UAP, which represents the first integration of an explicit PR-driven objective into generating UAPs against DRL-based IDS and introduces PX-UAP, which leverages explainable artificial intelligence (XAI) to guide perturbation shaping under realistic domain constraints, and provides a rigorous...
Hong-Sen Zhang, Lu Zhang, Ming-Jing Xu et al.· 0 citations
Federated Learning (FL) enables collaborative model training across distributed clients while preserving data privacy; however, the personalization of client models in non-independent and identically distributed (non-IID) settings creates an unexplored attack surface where adversarial examples can selectively fool spec...