Daily Arxiv

This is a page that curates AI-related papers published worldwide.
All content here is summarized using Google Gemini and operated on a non-profit basis.
Copyright for each paper belongs to the authors and their institutions; please make sure to credit the source when sharing.

Robust Federated Learning under Adversarial Attacks via Loss-Based Client Clustering

Created by
  • Haebom

Author

Emmanuil Kritharakis, Dusan Jacobetic, Antonios Makris, Konstantinos Tserpes

Outline

This paper addresses a client environment susceptible to Byzantine attacks in Federated Learning (FL). We assume a trusted server possesses a separate, trusted dataset. This could imply the presence of data held by the server prior to federated learning, or the existence of a trusted client temporarily acting as a server. The proposed method operates effectively with just one honest client and the server, without requiring prior knowledge of the number of malicious clients. Theoretical analysis demonstrates that the proposed algorithm exhibits bounded optimality gaps even under strong Byzantine attacks. Experimental results demonstrate that the proposed algorithm significantly outperforms existing robust FL baseline algorithms, such as Mean, Trimmed Mean, Median, Krum, and Multi-Krum, under various attack strategies (label flipping, sign flipping, and Gaussian noise addition) on the MNIST, FMNIST, and CIFAR-10 benchmarks. The proposed algorithm uses the Flower framework.

Takeaways, Limitations

Takeaways:
We demonstrate that federated learning is robust against Byzantine attacks with only a trusted server and a single honest client.
It shows better performance than existing robust federated learning algorithms.
It presents the possibility of effective defense against various Byzantine attack strategies.
Limitations:
The server requires a separate dataset that it can trust.
Further research is needed to determine the practical applicability of the proposed algorithm.
Possible vulnerability to specific attack strategies.
High dependence on server reliability.
👍