Alioune Ngom
Current Organizations / Institutes
The organizations/institutes from the scholar's latest article
Research Subjects
Alioune Ngom has a total of 53 co-authors. Here are the top co-authors by number of shared publications:
- Safiia Mohammed
University of Windsor
6 shared publications - Luis Rueda
University of Windsor
5 shared publications - Ivan Stojmenovic
University of Ottawa, Canada
3 shared publications Ahmad Khalil
Dept of Computer Science University of Windsor Windsor Canada
2 shared publications- Dima Alhadidi
University of Windsor, Canada
2 shared publications - Lili Wang
School of Computing, Queen's University, 25 Union Street, Goodwin Hall, Kingston, Ontario, K7L 3N6, Canada.
2 shared publications
Latest Publications
- Open Access
- 12 November 2026
- Published by MDPI AG in Electronics
- Vol. 15 (22) , 5269
FL-Forensics: A Forensic-Ready Framework for Tamper-Evident Accountability and Auditability in Federated Learning
Federated learning (FL) trains shared models without centralizing raw data, but provides limited post-incident accountability or evidence preservation. We present FL-Forensics, a Flower extension for malicious-client and compromised-aggregator settings. Client-signed commitments are witnessed before server acceptance and later anchored, in a simulated four-validator quorum, for independent verification. We define a Forensic Quality Index (FQI) that combines evidence quality, attribution quality, and detection . In experiments with 20 clients, Dirichlet non-IID data, and 15% malicious clients, on MNIST, Fashion-MNIST, and CIFAR-100 is 0.950, 0.873, and 0.660, with corresponding FQI values of 0.964, 0.929, and 0.815 (the MNIST and Fashion-MNIST values are means over two runs; the CIFAR-100 values are from one run). Detection weakens as the federation grows to 60 clients and against adaptive or colluding attackers, and Trimmed Mean, Krum, or FLTrust matches or exceeds it in some settings, so the contribution is the evidence layer rather than superior detection. Across six repeated tampering runs of 132 trials each, all eight manipulation types were detected and recovered; in the reported CIFAR-100 run, responsible-party attribution succeeded in 87/132 trials across five of the eight types. A counterfactual ablation on captured evidence illustrates the role of the independent witness; it is not an end-to-end ablation. Under secure aggregation, commitments remain verifiable but in-round screening is largely unavailable; post-incident content attribution requires auditor escrow, which exposes individual updates to an authorized auditor. Secure aggregation is simulated, and end-to-end overhead against a matched baseline is not reported.- 12 November 2026
- Published by MDPI AG in Electronics
- Vol. 15 (22) , 5269
Open AccessFL-Forensics: A Forensic-Ready Framework for Tamper-Evident Accountability and Auditability in Federated Learning
Federated learning (FL) trains shared models without centralizing raw data, but provides limited post-incident accountability or evidence preservation. We present FL-Forensics, a Flower extension for malicious-client and compromised-aggregator settings. Client-signed commitments are witnessed before server acceptance and later anchored, in a simulated four-validator quorum, for independent verification. We define a Forensic Quality Index (FQI) that combines evidence quality, attribution quality, and detection . In experiments with 20 clients, Dirichlet non-IID data, and 15% malicious clients, on MNIST, Fashion-MNIST, and CIFAR-100 is 0.950, 0.873, and 0.660, with corresponding FQI values of 0.964, 0.929, and 0.815 (the MNIST and Fashion-MNIST values are means over two runs; the CIFAR-100 values are from one run). Detection weakens as the federation grows to 60 clients and against adaptive or colluding attackers, and Trimmed Mean, Krum, or FLTrust matches or exceeds it in some settings, so the contribution is the evidence layer rather than superior detection. Across six repeated tampering runs of 132 trials each, all eight manipulation types were detected and recovered; in the reported CIFAR-100 run, responsible-party attribution succeeded in 87/132 trials across five of the eight types. A counterfactual ablation on captured evidence illustrates the role of the independent witness; it is not an end-to-end ablation. Under secure aggregation, commitments remain verifiable but in-round screening is largely unavailable; post-incident content attribution requires auditor escrow, which exposes individual updates to an authorized auditor. Secure aggregation is simulated, and end-to-end overhead against a matched baseline is not reported. - Open Access
- 7 October 2026
- Published by MDPI AG in Preprints.org
FL-Forensics: A Forensic-Ready Framework for Tamper-Evident Accountability and Auditability in Federated Learning
Federated learning (FL) enables collaborative model training without centralizing raw data, but existing defenses provide limited support for post-incident accountability and evidence preservation. We present FL-Forensics, a forensic-ready framework for malicious-client and compromised-aggregator settings. It combines client-signed update commitments, a hash-chained ledger, an independent evidence witness, trusted timestamping, key-lifecycle management, encrypted role-based storage, and permissioned quorum anchoring. We also introduce a Forensic Quality Index (FQI) with metrics for integrity, attribution, evidence availability, and audit efficiency. We implement FL-Forensics as an end-to-end Flower extension and evaluate it with 20 clients, Dirichlet non-IID data, and 15% malicious clients on MNIST, Fashion-MNIST, and CIFAR-100. It achieves F1 scores of 0.941, 0.800, and 0.521, with corresponding FQI values of 0.956, 0.900, and 0.714. Ablation results show that independent witnessing, digital signatures, trusted time, and external anchoring make distinct contributions to forensic recovery, attribution, and auditability under controlled evidence-tampering attacks.
- 7 October 2026
- Published by MDPI AG in Preprints.org
Open AccessFL-Forensics: A Forensic-Ready Framework for Tamper-Evident Accountability and Auditability in Federated Learning
Federated learning (FL) enables collaborative model training without centralizing raw data, but existing defenses provide limited support for post-incident accountability and evidence preservation. We present FL-Forensics, a forensic-ready framework for malicious-client and compromised-aggregator settings. It combines client-signed update commitments, a hash-chained ledger, an independent evidence witness, trusted timestamping, key-lifecycle management, encrypted role-based storage, and permissioned quorum anchoring. We also introduce a Forensic Quality Index (FQI) with metrics for integrity, attribution, evidence availability, and audit efficiency. We implement FL-Forensics as an end-to-end Flower extension and evaluate it with 20 clients, Dirichlet non-IID data, and 15% malicious clients on MNIST, Fashion-MNIST, and CIFAR-100. It achieves F1 scores of 0.941, 0.800, and 0.521, with corresponding FQI values of 0.956, 0.900, and 0.714. Ablation results show that independent witnessing, digital signatures, trusted time, and external anchoring make distinct contributions to forensic recovery, attribution, and auditability under controlled evidence-tampering attacks.
- 8 September 2026
- Published by Springer Nature
- p. 441-456
FL-Forensics: A Blockchain-Enabled Framework for Forensic Accountability and Auditability in Federated Learning
- 8 September 2026
- Published by Springer Nature
- p. 441-456
FL-Forensics: A Blockchain-Enabled Framework for Forensic Accountability and Auditability in Federated Learning
- 2 September 2026
- Published by Springer Nature
- p. 495-510
Word2Vec-Enhanced Ensemble Learning for Protein Succinylation Site Prediction Using CNN-BiLSTM
- 2 September 2026
- Published by Springer Nature
- p. 495-510
Word2Vec-Enhanced Ensemble Learning for Protein Succinylation Site Prediction Using CNN-BiLSTM
- 1 September 2026
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Transactions on Computational Biology and Bioinformatics
- Vol. 23 (5) , 2155-2166
MolPACL: Molecular Property Prediction Based on Prompt Augmentation and Contrastive Learning
- 1 September 2026
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Transactions on Computational Biology and Bioinformatics
- Vol. 23 (5) , 2155-2166
MolPACL: Molecular Property Prediction Based on Prompt Augmentation and Contrastive Learning
- Open Access
- 7 August 2026
- Published by MDPI AG in Journal of Cybersecurity and Privacy
- Vol. 6 (4) , 133
Poisoning Attacks in Federated Learning: An Accountability- Oriented Survey with Centralized Learning as a Baseline
Artificial intelligence (AI) systems are increasingly deployed in high-stakes domains, where poisoning attacks can corrupt training data, manipulate model updates, or implant covert backdoors. This survey examines poisoning attacks in federated learning (FL), using centralized learning as a baseline to explain how distributed data, client heterogeneity, privacy-preserving aggregation, and untrusted coordination expand the threat surface. It positions prior surveys and synthesizes representative primary studies through an accountability-oriented lens focused on attribution, audit evidence, traceability, and forensic readiness. The review compares major attack classes, including data poisoning, model poisoning, backdoor insertion, server-side manipulation, Sybil behavior, collusion, and multi-round poisoning. It also evaluates countermeasures such as Byzantine-robust aggregation, anomaly detection, validation-based filtering, malicious-secure aggregation, authenticated update handling, provenance mechanisms, ledger-based evidence, and verifiable aggregation protocols. The analysis shows that robustness alone is insufficient for trustworthy FL unless defenses also preserve evidence that supports independent verification, post-incident reconstruction, and governance review. Persistent gaps remain in causal forensic attribution, privacy-preserving evidence governance, malicious-server threat modeling, scalable verifiability tooling, recovery after poisoning, and deployment-ready benchmarks. The survey concludes that accountable FL should be designed as an evidence-producing system, not merely as a privacy-preserving or attack-resistant training architecture, especially for regulated, cross-silo, and high-risk real-world deployments.
- 7 August 2026
- Published by MDPI AG in Journal of Cybersecurity and Privacy
- Vol. 6 (4) , 133
Open AccessPoisoning Attacks in Federated Learning: An Accountability- Oriented Survey with Centralized Learning as a Baseline
Artificial intelligence (AI) systems are increasingly deployed in high-stakes domains, where poisoning attacks can corrupt training data, manipulate model updates, or implant covert backdoors. This survey examines poisoning attacks in federated learning (FL), using centralized learning as a baseline to explain how distributed data, client heterogeneity, privacy-preserving aggregation, and untrusted coordination expand the threat surface. It positions prior surveys and synthesizes representative primary studies through an accountability-oriented lens focused on attribution, audit evidence, traceability, and forensic readiness. The review compares major attack classes, including data poisoning, model poisoning, backdoor insertion, server-side manipulation, Sybil behavior, collusion, and multi-round poisoning. It also evaluates countermeasures such as Byzantine-robust aggregation, anomaly detection, validation-based filtering, malicious-secure aggregation, authenticated update handling, provenance mechanisms, ledger-based evidence, and verifiable aggregation protocols. The analysis shows that robustness alone is insufficient for trustworthy FL unless defenses also preserve evidence that supports independent verification, post-incident reconstruction, and governance review. Persistent gaps remain in causal forensic attribution, privacy-preserving evidence governance, malicious-server threat modeling, scalable verifiability tooling, recovery after poisoning, and deployment-ready benchmarks. The survey concludes that accountable FL should be designed as an evidence-producing system, not merely as a privacy-preserving or attack-resistant training architecture, especially for regulated, cross-silo, and high-risk real-world deployments.
- Open Access
- 25 May 2026
- Published by MDPI AG in Preprints.org
Poisoning Attacks in Federated Learning: An Accountability-Oriented Survey with Centralized Learning as Baseline
Artificial intelligence (AI) systems are increasingly deployed in critical domains such as healthcare, finance, defense, and transportation. These deployments, however, face grow- ing risks from poisoning attacks that corrupt training data, manipulate model updates, or implant covert backdoors. Such attacks undermine trust, reduce transparency, and challenge the safe and accountable use of AI in high-stakes settings. This survey examines poisoning attacks in federated learning (FL), using centralized learning as a comparative baseline to clarify how the threat landscape changes when data, updates, and control are distributed. Rather than reintroducing a generic poisoning taxonomy as a standalone contri- bution, we position the paper relative to prior surveys, identify what remains insufficiently covered, and synthesize representative primary studies through an accountability-oriented lens. Because FL introduces additional vulnerabilities, including untrusted servers, non-IID heterogeneity, and limited observability of client behavior, we analyze how these properties expand the poisoning threat surface. We review state-of-the-art countermeasures, including Byzantine-robust aggregation, anomaly detection, validation-based defenses, and cryp- tographic prevention mechanisms such as malicious-secure aggregation, authenticated update handling, and verifiable aggregation protocols. Particular emphasis is placed on accountability-enabling mechanisms such as auditability, traceability, and forensic readi- ness, which are essential to responsible AI and regulatory compliance. Our analysis identi- fies persistent research gaps, including the lack of unified privacy-robustness-accountability frameworks, insufficient defenses against server-side attacks, limited verifiability tools, and scalability challenges in real-world FL systems. The paper’s contribution is therefore not to claim that accountability-oriented FL defenses are new, but to clarify the survey scope, position prior surveys directly, and integrate aggregation-based, cryptographic, and governance-oriented strands within an Accountability-Integrated Taxonomy (AIT) and an evidence-oriented discussion of trustworthy federated learning.
- 25 May 2026
- Published by MDPI AG in Preprints.org
Open AccessPoisoning Attacks in Federated Learning: An Accountability-Oriented Survey with Centralized Learning as Baseline
Artificial intelligence (AI) systems are increasingly deployed in critical domains such as healthcare, finance, defense, and transportation. These deployments, however, face grow- ing risks from poisoning attacks that corrupt training data, manipulate model updates, or implant covert backdoors. Such attacks undermine trust, reduce transparency, and challenge the safe and accountable use of AI in high-stakes settings. This survey examines poisoning attacks in federated learning (FL), using centralized learning as a comparative baseline to clarify how the threat landscape changes when data, updates, and control are distributed. Rather than reintroducing a generic poisoning taxonomy as a standalone contri- bution, we position the paper relative to prior surveys, identify what remains insufficiently covered, and synthesize representative primary studies through an accountability-oriented lens. Because FL introduces additional vulnerabilities, including untrusted servers, non-IID heterogeneity, and limited observability of client behavior, we analyze how these properties expand the poisoning threat surface. We review state-of-the-art countermeasures, including Byzantine-robust aggregation, anomaly detection, validation-based defenses, and cryp- tographic prevention mechanisms such as malicious-secure aggregation, authenticated update handling, and verifiable aggregation protocols. Particular emphasis is placed on accountability-enabling mechanisms such as auditability, traceability, and forensic readi- ness, which are essential to responsible AI and regulatory compliance. Our analysis identi- fies persistent research gaps, including the lack of unified privacy-robustness-accountability frameworks, insufficient defenses against server-side attacks, limited verifiability tools, and scalability challenges in real-world FL systems. The paper’s contribution is therefore not to claim that accountability-oriented FL defenses are new, but to clarify the survey scope, position prior surveys directly, and integrate aggregation-based, cryptographic, and governance-oriented strands within an Accountability-Integrated Taxonomy (AIT) and an evidence-oriented discussion of trustworthy federated learning.
- Open Access
- 9 February 2026
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Robotics and Automation Letters
- Vol. 11 (3) , 3740-3747
LLM-IK: Solving Inverse Kinematics Using Large Language Models
Inverse Kinematics (IK) is an integral part of robot manipulation. IK can be challenging to solve, and many computer-aided approaches have been proposed but each has its limitations. The emergence of Large Language Models (LLMs) has seen them applied to solving complex tasks including mathematical problems. This work proposes “LLM-IK” to utilize LLMs to solve IK problems. Relevant serial manipulator information is extracted from descriptor files, prompt engineered, and then provided to the LLMs with methods and feedback to interact with and learn about the kinematic chain. Multiple methods of breaking down kinematic chains into distinct sub-problems are implemented allowing for incremental problem solving. Experiments showed LLM-IK solves up to six Degrees-of-Freedom (DOF) and outperforms IKFast, TRAC-IK, and IKPy in both accuracy and solving time, highlighting this methodology can produce highly efficient and human-readable solutions.
- 9 February 2026
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Robotics and Automation Letters
- Vol. 11 (3) , 3740-3747
Open AccessLLM-IK: Solving Inverse Kinematics Using Large Language Models
Inverse Kinematics (IK) is an integral part of robot manipulation. IK can be challenging to solve, and many computer-aided approaches have been proposed but each has its limitations. The emergence of Large Language Models (LLMs) has seen them applied to solving complex tasks including mathematical problems. This work proposes “LLM-IK” to utilize LLMs to solve IK problems. Relevant serial manipulator information is extracted from descriptor files, prompt engineered, and then provided to the LLMs with methods and feedback to interact with and learn about the kinematic chain. Multiple methods of breaking down kinematic chains into distinct sub-problems are implemented allowing for incremental problem solving. Experiments showed LLM-IK solves up to six Degrees-of-Freedom (DOF) and outperforms IKFast, TRAC-IK, and IKPy in both accuracy and solving time, highlighting this methodology can produce highly efficient and human-readable solutions.
- Open Access
Representation Learning with Adaptive Superpixel Coding
Deep learning vision models are typically tailored for specific modalities and often rely on domain-specific assumptions, such as the grid structures used by nearly all existing vision models. In this work, we propose a self-supervised model based on Transformers, which we call Adaptive Superpixel Coding (ASC). The key insight of our model is to overcome the limitations of traditional Vision Transformers, which depend on fixed-size and non-adaptive patch partitioning. Instead, ASC employs adaptive superpixel layers that dynamically adjust to the underlying image content. We analyze key properties of the approach that make it effective, and find that our method outperforms widely-used alternatives on standard image downstream task benchmarks.
Open AccessRepresentation Learning with Adaptive Superpixel Coding
Deep learning vision models are typically tailored for specific modalities and often rely on domain-specific assumptions, such as the grid structures used by nearly all existing vision models. In this work, we propose a self-supervised model based on Transformers, which we call Adaptive Superpixel Coding (ASC). The key insight of our model is to overcome the limitations of traditional Vision Transformers, which depend on fixed-size and non-adaptive patch partitioning. Instead, ASC employs adaptive superpixel layers that dynamically adjust to the underlying image content. We analyze key properties of the approach that make it effective, and find that our method outperforms widely-used alternatives on standard image downstream task benchmarks.
- 25 May 2025
- Published by Springer Nature
- p. 89-99
Toward Forensic-Friendly AI: Integrating Blockchain with Federated Learning to Enhance AI Trustworthiness
- 25 May 2025
- Published by Springer Nature
- p. 89-99
Toward Forensic-Friendly AI: Integrating Blockchain with Federated Learning to Enhance AI Trustworthiness