---
title: 'Self-Centered Federated Learning (SCFL): An Overview'
url: https://www.emergentmind.com/topics/self-centered-federated-learning-scfl
type: topic
---

# Self-Centered Federated Learning (SCFL): An Overview

Self-Centered Federated Learning (SCFL) denotes a family of federated learning formulations in which collaboration is centered on the utility, similarity structure, or collaboration scope of individual participants rather than on a single undifferentiated global model. In the recent arXiv literature, however, the acronym is not semantically unique. It is used for selfish clients that steer the shared model toward their own optimum, for attacker-centric schemes that simultaneously damage the global model and improve a private model, for server-side personalized aggregation, for decentralized proximity-based federation formation, and, in unrelated usages, for “Sample Clustered Federated Learning” and “Social-aware Clustered Federated Learning” [2407.15402][2509.00540][2304.12930][2110.09869][2407.12410][2211.10943][2410.14693][2212.13992].

## 1. Terminology and conceptual scope

The literature uses “SCFL” for several distinct mechanisms. In one line of work, self-centered behavior means that a participant attempts to center the global trajectory on its own data distribution. In another, it means that each client is the center of its own personalized aggregation or knowledge-distillation pipeline. In yet another, the acronym expands to notions that are not “Self-Centered” at all, such as “Sample Clustered Federated Learning” and “Social-aware Clustered Federated Learning” [2410.14693][2212.13992].

| Usage of SCFL | Core mechanism | Representative papers |
|---|---|---|
| Self-centered utility maximization | Clients or attackers increase their own influence or private advantage | [2407.15402], [2509.00540] |
| User-centric personalization | The server or client computes personalized collaboration rules | [2110.09869], [2304.12930], [2211.10943] |
| Proximity-based self-federation | Peer-to-peer federation formation without a central server | [2407.12410] |
| Other acronym expansions | Sample-level domain clustering or social-trust clustering | [2410.14693], [2212.13992] |

A recurrent misconception is to treat SCFL as a single canonical algorithmic family. The cited works do not support that reading. A more accurate interpretation is that SCFL is an overloaded label applied to several client-centric departures from conventional FedAvg-style global averaging. This suggests that the term should be read only together with the local expansion and threat or system model adopted by a given paper.

## 2. Self-centered utility maximization: selfish clients and adversarial self-benefit

In “Tackling Selfish Clients in Federated Learning,” selfish clients are participants who deliberately deviate from standard training to make the global model inclined toward their local model, thereby prioritizing their local data distribution. They are described as rational and non-malicious: they do not intend to poison the model or break convergence; they aim to reduce their own loss on their local data by increasing their influence on the global update [2407.15402].

The baseline federated objective is
\[
\mathbf{w}^* \;=\; \arg\min_{\mathbf{w}} \Big\{ F(\mathbf{w}) \triangleq \tfrac{1}{k} \sum_{i\in [k]} F_i(\mathbf{w}) \Big\},
\]
with server update
\[
\delta_{[k]}^t \;=\; \tfrac{1}{k}\sum_{i\in [k]}\delta_i^t,
\quad
\mathbf{w}^{t+1} \;=\; \mathbf{w}^t + \delta_{[k]}^t.
\]
For a selfish client \(s\), the manipulated update is chosen to minimize local post-aggregation loss:
\[
\hat{\delta}_s \;=\; \arg\min_{\delta} \; F_s\!\Big(\hat{\mathbf{w}}\Big),
\quad
\text{where}
\quad
\hat{\mathbf{w}} \;\triangleq\; \mathbf{w} + \frac{\delta_{[k]\setminus\{s\}} + \delta}{k}.
\]
The paper introduces a selfishness parameter \(\alpha\in[0,1]\) and biased rule
\[
\hat{\delta}_s
\;=\;
\alpha\!\left(k\,\delta_s - (k-1)\,\bar{\delta}_{[k]\setminus\{s\}}\right)
+
(1-\alpha)\,\bar{\delta}_{[k]\setminus\{s\}}
\;=\;
\alpha k\big(\delta_s - \bar{\delta}_{[k]\setminus\{s\}}\big)
+
\bar{\delta}_{[k]\setminus\{s\}}.
\]
Special cases are explicit: \(\alpha=0\) gives no selfish effect, \(\alpha=\tfrac{1}{k}\) gives the honest update, and \(\alpha=1\) gives a full replacement trend. Experiments on MNIST and CIFAR-10 show that “Just 2% of clients behaving selfishly can decrease the accuracy by up to 36%,” and that multiple selfish clients can destabilize convergence; without mitigation, there is no convergence for \(\ge 3\) selfish clients.

“FedThief: Harming Others to Benefit Oneself in Self-Centered Federated Learning” formalizes a more explicitly malicious SCFL regime. Here, adversaries degrade the global model while simultaneously improving a private model available only to themselves. The objective is quantified by the malicious advantage
\[
\Delta_{\mathrm{mal}} = \mathrm{Acc}_e - \mathrm{Acc}_g,
\]
where \(\mathrm{Acc}_g\) is the final global model accuracy and \(\mathrm{Acc}_e\) is the attacker’s private ensemble-model accuracy. FedThief uses four local models per malicious client: a private model \(\theta_p\), a malicious model \(\theta_m\), an error model \(\theta_e\), and an ensemble head \(\mathcal{E}_k\). Upload-stage manipulation is
\[
\tilde{g}_m^t = \mathcal{A}(g_m^t) = g_m^t + \beta \cdot \delta,
\]
and the private objective is
\[
\mathcal{L}_{\mathrm{total}} = \lambda \cdot \mathcal{L}_{CE} + (1-\lambda)\cdot \mathcal{L}_{KD}.
\]
The reported results show simultaneous global degradation and private improvement across datasets and defenses. For example, on CIFAR-10 with FedAvg, Min-Sum, and \(\alpha=0.4\), \(\mathrm{Acc}_g = 38.84\), \(\mathrm{Acc}_e = 55.99\), and \(\Delta_{\mathrm{mal}} = +17.15\); on MNIST with Pair Flip, Bulyan, and \(\alpha=0.4\), \(\mathrm{Acc}_g = 51.50\), \(\mathrm{Acc}_e = 98.06\), and \(\Delta_{\mathrm{mal}} = +46.56\) [2509.00540].

Taken together, these two lines separate two technically different meanings of self-centeredness. In the selfish-client formulation, the client seeks extra influence while still valuing the common task. In the FedThief formulation, the attacker preserves the degradation caused by poisoning attacks while extracting private benefit. The distinction is central: one is rational, non-malicious deviation; the other is adversarial bi-objective optimization.

## 3. Robust aggregation against selfishness

The main server-side mitigation proposed for selfish self-centered behavior is RFL-Self, a drop-in replacement for FedAvg that detects suspected selfish clients via robust statistics on update norms and then recovers an estimate of their true update before aggregation [2407.15402].

Detection uses the median of \(L_2\) norms,
\[
\mathcal{N}_{\mathrm{med}} \;=\; \operatorname{median}\big(\{\lVert\delta_i\rVert\}_{i\in[k]}\big),
\]
and flags client \(i\) as suspected selfish if \(\lVert\delta_i\rVert > \mathcal{N}_{\mathrm{med}}\). The server also computes a robust central update vector
\[
\delta_{\mathrm{med}} \;=\; \mathrm{MarginalMedian}\big(\{\delta_i\}_{i\in[k]}\big),
\]
namely the coordinate-wise median across clients. The paper proves a norm-inflation theorem: if a selfish client’s true update is similar in magnitude to the mean update of normal clients, then any effective selfish estimate \(\hat{\delta}_s\) is necessarily larger in norm than the true update \(\delta_s\). This supplies principled support for the median-of-norms test.

Rather than dropping flagged updates, RFL-Self reconstructs them:
\[
\delta_s' \;=\; \beta\,\hat{\delta}_s + (1-\beta)\,\delta_{\mathrm{med}},
\]
with \(\beta\) chosen to satisfy
\[
\big\lVert \beta\,\hat{\delta}_s + (1-\beta)\,\delta_{\mathrm{med}} \big\rVert \;=\; \mathcal{N}_{\mathrm{med}}.
\]
The final aggregation is
\[
\delta_{[k]} \;=\; \frac{1}{k}\bigg(\sum_{i\in[k]\setminus\mathcal{S}}\delta_i \;+\; \sum_{j\in\mathcal{S}}\delta_j'\bigg),
\quad
\mathbf{w} \;\leftarrow\; \mathbf{w} + \delta_{[k]}.
\]
Under the stated conditions, solving the norm equation yields \(\beta \simeq 1/(\alpha k)\), so \(\delta_s'\) is close to the true \(\delta_s\). The bounded aggregation-error theorem gives
\[
\frac{4+k}{4k}\,\mathrm{Tr}\big(\mathrm{var}(\delta)\big)
\]
as a bound on the maximum error in the recovered aggregated update, with insensitivity to the number of selfish clients as long as they do not substantially bias the median.

The empirical evaluation uses MNIST and CIFAR-10 with \(k=50\) clients, full participation, \(E=5\) local epochs, and 30 rounds. At \(\alpha=0.3\) and 10% selfish clients on CIFAR-10, normal clients’ accuracy is 60.84% for RFL-Self, 56.64% for Downscaling, and 55.47% for Median; selfish clients’ accuracy is 56.00%, 54.20%, and 56.20%, respectively. Across selfish fractions \(0\%, 5\%, 10\%, 20\%\) and \(\alpha\in\{0.2,0.3,0.4\}\), RFL-Self outperforms Median by 7–12% and Downscaling by 4–5% on MNIST for \(\alpha>0\), and it does not degrade accuracy when there are 0% selfish clients. The paper also reports stability in a few-client regime with \(k=5\).

The design choice is notable. Byzantine defenses such as Krum, Multi-Krum, Bulyan, Trimmed Mean, Median, and RSA are described as primarily excluding or heavily downweighting nonconforming updates. RFL-Self instead tries to preserve useful signal from self-centered clients by estimating the unmanipulated update. This is a materially different robustness objective from standard adversarial filtering.

## 4. Personalized server-side SCFL: user-centric aggregation

A separate SCFL lineage treats self-centeredness as personalization. In “User-Centric Federated Learning” and “User-Centric Federated Learning: Trading off Wireless Resources for Personalization,” the parameter server computes a distinct aggregation rule for each client, so that client \(i\) receives a personalized model
\[
\theta_i^{t} \leftarrow \sum_{j=1}^{m} w_{i,j}\,\theta_j^{t-1/2}.
\]
Here, the collaboration vector \(\vec{w}_i=(w_{i,1},\dots,w_{i,m})\) is client-specific and is designed to optimize performance on the target distribution \(P_i\) rather than on an average task [2110.09869][2304.12930].

The theoretical motivation is a weighted empirical-risk formulation
\[
L(f,\vec{w}_i)=\sum_{j=1}^m \frac{w_{i,j}}{n_j}\sum_{(x,y)\in \mathcal{D}_j}\ell(f(x),y),
\]
with upper bounds that decompose excess risk into an estimation term and a bias term driven by discrepancy distance or Jensen–Shannon divergence. Operationally, the server estimates similarity from gradients at a shared initialization \(\hat{\theta}\). Using
\[
\Delta_{i,j}(\hat{\theta})=\left\| g_i(\hat{\theta}) - g_j(\hat{\theta}) \right\|_2^2
\]
and client-side noise estimates \(\sigma_i^2\), it forms
\[
w_{i,j}=\frac{\displaystyle \frac{n_j}{n_i}\,\exp\!\left(-\frac{\Delta_{i,j}(\hat{\theta})}{2\,\sigma_i\,\sigma_j}\right)}{\displaystyle \sum_{j'=1}^m \frac{n_{j'}}{n_i}\,\exp\!\left(-\frac{\Delta_{i,j'}(\hat{\theta})}{2\,\sigma_i\,\sigma_{j'}}\right)}.
\]
These weights are computed in a special pre-training round in which clients upload mean gradients and variance estimates; afterward, the server runs personalized aggregation.

Because full personalization replaces one downlink broadcast with \(m\) unicasts, both papers introduce clustering of collaboration vectors to limit the number of personalized streams. K-means is run on \(\{\vec{w}_i\}\), and the number of streams \(m_t\) is selected by a silhouette-based trade-off. Cluster centroids \(\vec{c}_n\) then define cluster-personalized models
\[
\theta^{t}_{(n)} \leftarrow \sum_{j=1}^m c_{n,j}\,\theta^{t-1/2}_j.
\]

The empirical record is consistently framed in terms of heterogeneity-aware personalization. In the 2023 paper, full-personalization SCFL achieves average test accuracies of \(79.4\pm4.2\) on EMNIST label shift, \(77.9\pm2.7\) on EMNIST label+covariate shift, and \(47.7\pm2.2\) on CIFAR-10 concept shift. Clustered SCFL with \(k=4\) gives \(77.8\pm3.9\), \(79.7\pm2.5\), and \(49.1\pm1.4\), respectively, while the silhouette score peaks around \(k=4\) in the label+covariate and concept-shift settings. Worst-user performance is also improved: for EMNIST label+covariate shift with \(m=100\), Proposed \((k=4)\) reaches 76.4 versus 70.7 for Ditto and 67.5 for FedAvg; for CIFAR-10 concept shift with \(m=20\), Proposed \((k=4)\) reaches 48.8 versus 43.2 for Ditto and 19.6 for FedAvg. The 2021 paper reports the same server-side idea as a communication-aware personalization scheme and places it explicitly in relation to clustered FL and client-side personalized aggregation.

In this usage, SCFL is not a threat model but a personalization architecture. The “self-centered” qualifier refers to client-specific aggregation weights, not to strategic deviation. That distinction is essential when reading the acronym across papers.

## 5. Decentralized and representation-sharing variants

“Proximity-based Self-Federated Learning” presents a fully distributed SCFL-style regime in which there is no central server. Clients discover neighbors through a communication graph \(G=(V,E)\), where \(A_{ij}=1\) iff \(j\in N(i)\) and \(N(i)=\{j\in V: \|p_i-p_j\|\le r_c\}\). Neighbor prioritization combines geographic proximity with a symmetric loss-based dissimilarity
\[
ds(i,j) = L_{i,j} + L_{j,i},
\]
where \(L_{i,j} = L(D_i, nn_j)\). Federations emerge through a multi-leader process and a gradient field \(G(i;l_j)\) defined as the minimum path sum of dissimilarities to leader \(l_j\); client \(i\) joins federation \(f_j\) if \(G(i;l_j)\le \sigma\) and \(G(i;l_j)\) is minimal among leaders. Intra-federation aggregation uses FedAvg at the leader, followed by dissemination back to members [2407.12410].

The reported system is evaluated on EMNIST letters under synthetic label skew across spatial areas \(A\) with \(|A|\in\{3,5,9\}\). The model is an MLP with 128 hidden units, \(T=60\) global rounds, \(E=2\) local epochs per round, batch size 64, Adam learning rate 0.001, weight decay 0.0001, and \(\sigma\in\{20,40,80\}\). The paper states that PSFL outperforms centralized FedAvg in test accuracy across all tested settings, with larger gains when \(|A|=9\). Lower \(\sigma\) yields more federations, better alignment with areas, and more stable training; higher \(\sigma\) can merge dissimilar areas and introduce instability. Additional runs with a moving node show that leader changes and validation NLL spikes are transient and that the federation count returns to the target value.

“Scalable Collaborative Learning via Representation Sharing” provides another client-centric SCFL instantiation, but now with a minimal relay server rather than parameter aggregation. Each client keeps its own model \(f_i=\tau_i\circ \phi_i\), computes per-label averaged representations
\[
\mu_{i,y} = \frac{1}{|D_i^{y}|} \sum_{x \in D_i^{y}} h_i(x),
\]
uploads \(\mu_{i,y}\) and \(M_{\uparrow}\) per-class averaged observations, downloads global prototypes
\[
\mu_y^{global} = \frac{1}{|C_y|} \sum_{i \in C_y} \mu_{i,y},
\]
and optimizes
\[
\min_{\phi_i, \tau_i} \; \mathcal{L}_{CE}(i) + \lambda_{KD} \mathcal{L}_{KD}(i) + \lambda_{disc} \mathcal{L}_{disc}(i).
\]
The paper proves the mutual-information lower bound
\[
\mathcal{I}(\Phi_s, \Phi_t) \ge \log K - \mathcal{L}_{disc}(h,\phi_i),
\]
which makes the contrastive distillation objective well-posed. Communication scales with \(|Y|d'\), not with model size \(D\). For LeNet5 with \(d'=84\), \(|Y|=10\), and \(M_{\uparrow}=M_{\downarrow}=1\), the uplink and downlink are approximately 6.7 KB per client per round. Empirically, on MNIST after 100 rounds, the method achieves 94.19 for \(N=2\), 90.63 for \(N=5\), and 82.07 for \(N=10\), compared with FL at 92.64, 86.79, and 70.06, respectively [2211.10943].

These two variants share a client-centric orientation but embody different system assumptions. Proximity-based self-federation modifies topology and aggregation scope; representation sharing preserves client autonomy by exchanging compact per-label feature summaries. Both depart from the single global-model premise, but they do so through different objects of collaboration: models in one case, representations in the other.

## 6. Acronym collisions, adjacent clustered/privacy-preserving uses, and open issues

One paper explicitly states that “SCFL stands for Sample Clustered Federated Learning, not Self-Centered Federated Learning.” In that work, SCFL is a semantic-segmentation framework built on Deep Domain Isolation (DDI), which clusters samples rather than clients. DDI computes per-sample, per-class gradients
\[
g_{i,c} = \nabla_{\theta} L_c(x_i, y_i; \theta),
\quad
\hat{g}_{i,c} = \frac{g_{i,c}}{\|g_{i,c}\|_2},
\]
fits per-class federated Gaussian mixture models, forms sample similarities via the Bhattacharyya coefficient, performs spectral clustering on the server, and then trains one federated model per discovered domain. At inference, a domain classifier routes each sample to the appropriate model. On TMNIST-Inv, the reported test mIoU values are 0.933 for FedAvg in IID and Full splits, 0.970 for CFL in Full, and 0.970 for SCFL in Full; on Cityscapes+GTA5, SCFL reaches 0.775 in Full and 0.780 in Dirichlet. The Rand Index is reported as approximately 0.99–0.996 after sufficient warm-up, and the domain classifier reaches average F1 \(=1.0\) on TMNIST-Inv and approximately 0.997–0.998 on Cityscapes+GTA5 [2410.14693].

A different acronym expansion appears in “Social-Aware Clustered Federated Learning with Customized Privacy Preservation.” Here, SCFL is a trust-aware clustered FL system in which mutually trusted users form social clusters, aggregate raw updates within the cluster, and upload only mixed results to the cloud. For low-trust relations, the privacy budget is customized through
\[
\epsilon_{n,j} = \theta_1 \cdot \alpha_{n,j} / (\alpha_{n,j} + \theta_2),
\]
with Gaussian local-DP noise scale
\[
\sigma_{n,j} \ge \sqrt{2 \log(1.25/\delta)} / \epsilon_{n,j}.
\]
Cluster formation is cast as a federation game with a distributed two-sided matching algorithm and Nash-stable convergence. The experiments use a Facebook ego network with 4039 nodes and approximately 88K edges, MNIST with a 4-layer CNN over 30 global rounds, CIFAR-10 with a 5-layer CNN over 100 global rounds, Dirichlet non-IIDness, \(\alpha_{th}=0.7\), \(\theta_1=100\), \(\theta_2=1\), and \(\delta=10^{-6}\). The paper reports convergence of the cluster-formation game in approximately 7 iterations for \(N=100\), communication cost per iteration below 5 KB, and partitions evolving from approximately 40 clusters to approximately 25 clusters with approximately 4 users per cluster [2212.13992].

These acronym collisions are not merely terminological curiosities. They partition the literature into technically distinct questions: strategic self-benefit, personalized aggregation, decentralized federation formation, sample-level domain specialization, and privacy-aware social clustering. A plausible implication is that any citation to “SCFL” without local definition is underspecified.

Across the genuinely self-centered line, several open issues recur. The selfish-client defense literature identifies adaptive selfishness, collusion among selfish clients, fairness implications, and extension to more complex model families and datasets as future work [2407.15402]. FedThief raises the need for defenses against utility-driven, stealth-aligned adversaries that preserve private benefit under robust aggregation [2509.00540]. The personalization and decentralization papers expose other trade-offs: downlink overhead for per-user models, sensitivity of similarity estimation to noisy gradients, dynamic task drift when weights are computed once, spectral-clustering scalability for sample-level methods, and privacy leakage from shared gradients, responsibilities, or model parameters [2304.12930][2407.12410][2410.14693]. As a result, SCFL is best understood not as a single algorithm but as a research area organized around one recurring principle: federated collaboration is reoriented away from a single universal model and toward client-, attacker-, sample-, or trust-specific structure.

Source: https://www.emergentmind.com/topics/self-centered-federated-learning-scfl