中文
相关论文

相关论文: Backdoor Attacks on Federated Meta-Learning

200 篇论文

Backdoor data poisoning, inserted within instruction examples used to fine-tune a foundation Large Language Model (LLM) for downstream tasks (\textit{e.g.,} sentiment prediction), is a serious security concern due to the evasive nature of…

密码学与安全 · 计算机科学 2024-08-23 Jayaram Raghuram , George Kesidis , David J. Miller

Federated learning allows multiple clients to collaboratively train a global model with the assistance of a server. However, its distributed nature makes it susceptible to poisoning attacks, where malicious clients can compromise the global…

密码学与安全 · 计算机科学 2025-01-30 Wenbin Wang , Qiwen Ma , Zifan Zhang , Yuchen Liu , Zhuqing Liu , Minghong Fang

Federated Learning (FL) as a distributed learning paradigm that aggregates information from diverse clients to train a shared global model, has demonstrated great success. However, malicious clients can perform poisoning attacks and model…

机器学习 · 计算机科学 2021-06-16 Chulin Xie , Minghao Chen , Pin-Yu Chen , Bo Li

Backdoor attacks inject poisoning samples during training, with the goal of forcing a machine learning model to output an attacker-chosen class when presented a specific trigger at test time. Although backdoor attacks have been demonstrated…

Model poisoning attacks on federated learning (FL) intrude in the entire system via compromising an edge model, resulting in malfunctioning of machine learning models. Such compromised models are tampered with to perform adversary-desired…

机器学习 · 计算机科学 2022-05-11 Yuwei Sun , Hideya Ochiai , Jun Sakuma

Federated learning is a distributed framework designed to address privacy concerns. However, it introduces new attack surfaces, which are especially prone when data is non-Independently and Identically Distributed. Existing approaches fail…

密码学与安全 · 计算机科学 2025-05-27 Hyejun Jeong , Hamin Son , Seohu Lee , Jayun Hyun , Tai-Myoung Chung

Prompt-based tuning has emerged as a lightweight alternative to full fine-tuning in large vision-language models, enabling efficient adaptation via learned contextual prompts. This paradigm has recently been extended to federated learning…

机器学习 · 计算机科学 2025-09-09 Maozhen Zhang , Mengnan Zhao , Wei Wang , Bo Wang

Recently, self-supervised learning (SSL) was shown to be vulnerable to patch-based data poisoning backdoor attacks. It was shown that an adversary can poison a small part of the unlabeled data so that when a victim trains an SSL model on…

计算机视觉与模式识别 · 计算机科学 2023-04-05 Ajinkya Tejankar , Maziar Sanjabi , Qifan Wang , Sinong Wang , Hamed Firooz , Hamed Pirsiavash , Liang Tan

Federated Learning (FL) facilitates decentralized machine learning model training, preserving data privacy, lowering communication costs, and boosting model performance through diversified data sources. Yet, FL faces vulnerabilities such as…

机器学习 · 计算机科学 2023-09-11 Torsten Krauß , Alexandra Dmitrienko

Federated learning (FL) attempts to train a global model by aggregating local models from distributed devices under the coordination of a central server. However, the existence of a large number of heterogeneous devices makes FL vulnerable…

密码学与安全 · 计算机科学 2023-05-03 Wenqiang Sun , Sen Li , Yuchang Sun , Jun Zhang

Quantum Federated Learning (QFL) inherits the core vulnerability of federated optimization to malicious clients, while also introducing an attack surface from variational circuit training and measurement-driven gradients. This work proposes…

量子物理 · 物理学 2026-05-28 Aakar Mathur , Mohammed Ruknuddin , Ashish Gupta

Federated learning (FL) allows participants to jointly train a machine learning model without sharing their private data with others. However, FL is vulnerable to poisoning attacks such as backdoor attacks. Consequently, a variety of…

机器学习 · 计算机科学 2023-01-24 Kavita Kumari , Phillip Rieger , Hossein Fereidooni , Murtuza Jadliwala , Ahmad-Reza Sadeghi

Advances in distributed machine learning can empower future communications and networking. The emergence of federated learning (FL) has provided an efficient framework for distributed machine learning, which, however, still faces many…

密码学与安全 · 计算机科学 2022-02-15 Zhilin Wang , Qiao Kang , Xinyi Zhang , Qin Hu

Federated learning (FL) allows a server to learn a machine learning (ML) model across multiple decentralized clients that privately store their own training data. In contrast with centralized ML approaches, FL saves computation to the…

Federated Learning (FL) offers collaborative model training without data sharing but is vulnerable to backdoor attacks, where poisoned model weights lead to compromised system integrity. Existing countermeasures, primarily based on anomaly…

密码学与安全 · 计算机科学 2023-12-11 Hao Yu , Chuan Ma , Meng Liu , Tianyu Du , Ming Ding , Tao Xiang , Shouling Ji , Xinwang Liu

Federated Learning is a machine learning setting that reduces direct data exposure, improving the privacy guarantees of machine learning models. Yet, the exchange of model updates between the participants and the aggregator can still leak…

机器学习 · 计算机科学 2025-12-18 Pablo Montaña-Fernández , Ines Ortega-Fernandez

In federated learning, multiple client devices jointly learn a machine learning model: each client device maintains a local model for its local training dataset, while a master device maintains a global model via aggregating the local…

密码学与安全 · 计算机科学 2021-11-23 Minghong Fang , Xiaoyu Cao , Jinyuan Jia , Neil Zhenqiang Gong

Manipulation of local training data and local updates, i.e., the poisoning attack, is the main threat arising from the collaborative nature of the federated learning (FL) paradigm. Most existing poisoning attacks aim to manipulate local…

机器学习 · 计算机科学 2025-05-30 Huazi Pan , Yanjun Zhang , Leo Yu Zhang , Scott Adams , Abbas Kouzani , Suiyang Khoo

With the increased attention and legislation for data-privacy, collaborative machine learning (ML) algorithms are being developed to ensure the protection of private data used for processing. Federated learning (FL) is the most popular of…

密码学与安全 · 计算机科学 2020-04-10 David Enthoven , Zaid Al-Ars

In a backdoor attack, an adversary inserts maliciously constructed backdoor examples into a training set to make the resulting model vulnerable to manipulation. Defending against such attacks typically involves viewing these inserted…

密码学与安全 · 计算机科学 2023-07-20 Alaa Khaddaj , Guillaume Leclerc , Aleksandar Makelov , Kristian Georgiev , Hadi Salman , Andrew Ilyas , Aleksander Madry