中文
相关论文

相关论文: Can You Really Backdoor Federated Learning?

200 篇论文

Malicious clients can attack federated learning systems using malicious data, including backdoor samples, during the training phase. The compromised global model will perform well on the validation dataset designed for the task, but a small…

密码学与安全 · 计算机科学 2021-01-18 Chen Wu , Xian Yang , Sencun Zhu , Prasenjit Mitra

Federated Learning (FL) allows multiple clients to collaboratively train a Neural Network (NN) model on their private data without revealing the data. Recently, several targeted poisoning attacks against FL have been introduced. These…

密码学与安全 · 计算机科学 2022-01-04 Phillip Rieger , Thien Duc Nguyen , Markus Miettinen , Ahmad-Reza Sadeghi

The advent of federated learning has facilitated large-scale data exchange amongst machine learning models while maintaining privacy. Despite its brief history, federated learning is rapidly evolving to make wider use more practical. One of…

机器学习 · 计算机科学 2022-10-04 Ehsan Hallaji , Roozbeh Razavi-Far , Mehrdad Saif

The delicate equilibrium between user privacy and the ability to unleash the potential of distributed data is an important concern. Federated learning, which enables the training of collaborative models without sharing of data, has emerged…

机器学习 · 计算机科学 2025-07-01 Taejin Kim , Jiarui Li , Shubhranshu Singh , Nikhil Madaan , Carlee Joe-Wong

Backdoor attacks are dangerous and difficult to prevent in federated learning (FL), where training data is sourced from untrusted clients over long periods of time. These difficulties arise because: (a) defenders in FL do not have access to…

机器学习 · 计算机科学 2023-02-01 Shuaiqi Wang , Jonathan Hayase , Giulia Fanti , Sewoong Oh

Federated learning (FL) is one of the most important paradigms addressing privacy and data governance issues in machine learning (ML). Adversarial training has emerged, so far, as the most promising approach against evasion threats on ML…

机器学习 · 计算机科学 2020-12-04 Giulio Zizzo , Ambrish Rawat , Mathieu Sinn , Beat Buesser

Current backdoor attacks against federated learning (FL) strongly rely on universal triggers or semantic patterns, which can be easily detected and filtered by certain defense mechanisms such as norm clipping, comparing parameter…

机器学习 · 计算机科学 2023-10-02 Yanqi Qiao , Dazhuang Liu , Congwen Chen , Rui Wang , Kaitai Liang

Reinforcement learning algorithms, just like any other Machine learning algorithm pose a serious threat from adversaries. The adversaries can manipulate the learning algorithm resulting in non-optimal policies. In this paper, we analyze the…

机器学习 · 计算机科学 2021-03-12 Aqeel Anwar , Arijit Raychowdhury

In this work, we carry out the first, in-depth, privacy analysis of Decentralized Learning -- a collaborative machine learning framework aimed at addressing the main limitations of federated learning. We introduce a suite of novel attacks…

密码学与安全 · 计算机科学 2023-11-13 Dario Pasquini , Mathilde Raynal , Carmela Troncoso

In emerging networked systems, mobile edge devices such as ground vehicles and unmanned aerial system (UAS) swarms collectively aggregate vast amounts of data to make machine learning decisions such as threat detection in remote, dynamic,…

网络与互联网体系结构 · 计算机科学 2025-10-20 Utku Demir , Tugba Erpek , Yalin E. Sagduyu , Sastry Kompella , Mengran Xue

Federated Transfer Learning (FTL) is the most general variation of Federated Learning. According to this distributed paradigm, a feature learning pre-step is commonly carried out by only one party, typically the server, on publicly shared…

机器学习 · 计算机科学 2024-05-01 Marco Arazzi , Stefanos Koffas , Antonino Nocera , Stjepan Picek

Federated Learning (FL) offers collaborative model training without data sharing but is vulnerable to backdoor attacks, where poisoned model weights lead to compromised system integrity. Existing countermeasures, primarily based on anomaly…

密码学与安全 · 计算机科学 2023-12-11 Hao Yu , Chuan Ma , Meng Liu , Tianyu Du , Ming Ding , Tao Xiang , Shouling Ji , Xinwang Liu

In this study, we investigate the protection offered by federated learning algorithms against eavesdropping adversaries. In our model, the adversary is capable of intercepting model updates transmitted from clients to the server, enabling…

密码学与安全 · 计算机科学 2025-04-04 Dipankar Maity , Kushal Chakrabarti

Recent advances in federated learning have demonstrated its promising capability to learn on decentralized datasets. However, a considerable amount of work has raised concerns due to the potential risks of adversaries participating in the…

机器学习 · 计算机科学 2022-10-25 KiYoon Yoo , Nojun Kwak

Federated Learning (FL) is a collaborative machine learning technique where multiple clients work together with a central server to train a global model without sharing their private data. However, the distribution shift across non-IID…

机器学习 · 计算机科学 2024-06-11 Xiaoting Lyu , Yufei Han , Wei Wang , Jingkai Liu , Yongsheng Zhu , Guangquan Xu , Jiqiang Liu , Xiangliang Zhang

Federated learning allows clients to collaboratively train a global model without uploading raw data for privacy preservation. This feature, i.e., the inability to review participants' datasets, has recently been found responsible for…

机器学习 · 计算机科学 2023-12-19 Yihang Lin , Pengyuan Zhou , Zhiqian Wu , Yong Liao

Federated Learning (FL) enables collaborative deep learning training across multiple participants without exposing sensitive personal data. However, the distributed nature of FL and the unvetted participants' data makes it vulnerable to…

机器学习 · 计算机科学 2023-04-24 Manaar Alam , Hithem Lamri , Michail Maniatakos

Federated Learning (FL) enables collaborative model training across multiple clients without sharing private data. We consider FL scenarios wherein FL clients are subject to adversarial (Byzantine) attacks, while the FL server is trusted…

机器学习 · 计算机科学 2026-04-30 Emmanouil Kritharakis , Dusan Jakovetic , Antonios Makris , Konstantinos Tserpes

Federated Learning (FL) is a promising approach enabling multiple clients to train Deep Neural Networks (DNNs) collaboratively without sharing their local training data. However, FL is susceptible to backdoor (or targeted poisoning)…

密码学与安全 · 计算机科学 2023-08-23 Phillip Rieger , Torsten Krauß , Markus Miettinen , Alexandra Dmitrienko , Ahmad-Reza Sadeghi

Federated learning distributes model training among a multitude of agents, who, guided by privacy concerns, perform training using their local data but share only model parameter updates, for iterative aggregation at the server. In this…

机器学习 · 计算机科学 2019-11-26 Arjun Nitin Bhagoji , Supriyo Chakraborty , Prateek Mittal , Seraphin Calo