Popular chained Byzantine Fault Tolerant (BFT) consensus protocols adopt a pipelined paradigm to achieve efficiency. However, these protocols remain vulnerable to critical attacks, such as forking and partitioning. While the two-phase commit rule can prevent forking, it often requires complex or expensive view-change mechanisms. Moreover, our study confirms that partitioning attacks are feasible in many existing chained BFT protocols. This paper devised NunChuck, a fully two-phase chained BFT protocol that ensures linear authenticator complexity, optimistic responsiveness, and resilience to partitioning attacks. NunChuck employs a lightweight certificate-based view-change mechanism to maintain efficiency, and introduces a unified message structure that enables leaders to make progress even under partitioned network conditions. We formally prove its safety and liveness properties. Furthermore, we develop a prototype implementation in Golang and conduct extensive evaluations. The results demonstrate that NunChuck consistently outperforms HotStuff and FastHotStuff, particularly in adversarial environments, with simulated delay analysis further corroborating our experimental findings.

As cross-domain access constitutes a significant portion of network communication, multi-domain networks present both enhanced capabilities and increased cybersecurity risks. Traditional defense strategies often overlook the complexities of cross-domain collaboration, particularly the strategic interactions among domains that prioritize their own interests. In this paper, we introduce Macd, a multi-domain collaborative defense framework, which models the defense interactions as a multi-agent stochastic game. This enables Macd to consider long-term security performance across domains, mitigating multi-step attack threats. To promote effective collaboration, we propose a Shapley-value based reputation mechanism to ensure fair incentives for non-attacked domains that contributing Security Service Functions (SSFs). Additionally, we implement a MAPPO-based Macd-solver to dynamically compute optimal defense strategies. Simulations in a DDoS attack-defense scenario demonstrate that Macd significantly enhances cross-domain collaboration and improves the overall security of multi-domain networks.

Secure aggregation becomes a major solution to providing privacy for federated learning. Secure aggregation for mobile devices typically relies on Shamir secret sharing (SSS) to achieve dropout robustness, but limits the system’s corruption and dropout tolerance. Although Prio+, a state-of-the-art method utilizing two non-colluding servers, avoids such limitations, its effectiveness is only against honest-but-curious servers. Thus, this paper presents a novel secure aggregation protocol in the malicious model. The proposed protocol uses a non-colluding server and initiator to achieve almost full (up ton-2) corruption and dropout tolerance, and exploits our discrete-logarithm (DL) extractable and equivocable commitment scheme to achieve malicious security. The proposed protocol’s security is proven in two models: malicious users colluding with the server and malicious users colluding with the initiator. Finally, a prototype of the developed protocol is implemented, with the experimental results demonstrating that our protocol is efficient and suitable for both cross-device and cross-silo federated learning scenarios. Compared with the sum protocol of Prio+, the proposed protocol achieves malicious security with affordable additional overhead, i.e., 4.8 to 6.1 times more computation cost and 2.8 to 2.9 times more communication cost for a single user.