Skip to content
Enrique Tomás Martínez Beltrán
HomeResearchPublicationsTeachingBlog
ENES
Contact
HomeResearchPublicationsTeachingBlog
ENES
Contact

Enrique Tomás Martínez Beltrán

Federated learning, trustworthy AI and cyberdefense research, focused on systems that are robust, privacy-preserving and useful in security operations.

  • Privacy Policy
  • Terms of Service
  • Accessibility Statement
  • GitHubopens in a new tab
  • LinkedInopens in a new tab
  • Google Scholaropens in a new tab
  • RGopens in a new tab
  • ORCIDopens in a new tab
  • Scopusopens in a new tab
  • DBLPopens in a new tab
  • Web of Scienceopens in a new tab

Enrique Tomás Martínez Beltrán. All rights reserved.

Back to top

This site loads optional analytics from Google and external analytics providers only if you accept. You can decline and continue using the site normally.

  1. Home
  2. Research Notes on Federated Learning, Cybersecurity and Cyberdefense
  3. Drones, Edge Intelligence and DFL for Cyberdefense Operations
Decentralized Federated LearningCyberdefenseEdge AISituational Awareness

Drones, Edge Intelligence and DFL for Cyberdefense Operations

Federated learning patterns for drone fleets operating under bandwidth, privacy and adversarial constraints

Enrique Tomás Martínez Beltrán

Ph.D. Researcher in Federated Learning and Cybersecurity

May 28, 20267 min read
  • LinkedInopens in a new tab
  • Xopens in a new tab
Drones, Edge Intelligence and DFL for Cyberdefense Operations

Drone fleets are a natural setting for decentralized federated learning. They operate at the edge, generate sensitive mission telemetry, face bandwidth constraints and may be exposed to adversarial conditions.

The design goal is not to make every drone upload everything. The goal is to let the fleet learn together while preserving operational boundaries.

What drones can learn locally

Each drone can train or adapt models using its own observations:

  • radio anomalies,
  • navigation inconsistencies,
  • visual or thermal patterns,
  • spoofing indicators,
  • jamming symptoms,
  • route deviations,
  • local environmental context.

Those observations may be sensitive. They can reveal location, mission profile, infrastructure details or operational tactics.

DFL pattern for a fleet

In a DFL setup, drones or edge gateways exchange model updates instead of raw data. Aggregation can happen through the fleet topology, a nearby edge node or a semi-decentralized coordination layer.

The model can improve across the fleet while limiting exposure of mission telemetry.

Cyberdefense implications

The main security questions are practical:

  • What happens if one drone is compromised?
  • How are poisoned updates detected?
  • How does the fleet handle intermittent connectivity?
  • Which alerts require local action and which require operator review?
  • How are explanations generated for human decision-makers?

DFL is useful only if it is paired with robust aggregation, trust scoring, secure communication and clear operational playbooks.

Key takeaway

For drone fleets, DFL is most credible when it is scoped to collaboration under constraints: learning from local observations, keeping mission telemetry local and making compromised or unreliable peers visible to the rest of the system.

Open research question

How should a fleet balance local autonomy with shared model updates when connectivity is intermittent and some nodes may be adversarial?

Related Research

Situational Awareness for Cyberdefense with Decentralized Federated Learning

May 29, 2026

Situational Awareness for Cyberdefense with Decentralized Federated Learning

A research note on using DFL to turn distributed telemetry, anomalies and trust signals into cyberdefense situational awareness.

From Monitoring to Mitigation: A DFL Cyberdefense Lifecycle with LLM Explanations

May 30, 2026

From Monitoring to Mitigation: A DFL Cyberdefense Lifecycle with LLM Explanations

A practical note on how distributed monitoring, DFL models, alert evidence and LLM-based support can fit into a cyberdefense workflow.