中文
相关论文

相关论文: AGRAMPLIFIER: Defending Federated Learning Against…

200 篇论文

Federated Learning (FL) offers collaborative model training without data sharing but is vulnerable to backdoor attacks, where poisoned model weights lead to compromised system integrity. Existing countermeasures, primarily based on anomaly…

密码学与安全 · 计算机科学 2023-12-11 Hao Yu , Chuan Ma , Meng Liu , Tianyu Du , Ming Ding , Tao Xiang , Shouling Ji , Xinwang Liu

Asynchronous federated learning (FL) with heterogeneous clients faces two key issues: curvature-induced loss barriers encountered by standard linear parameter interpolation techniques (e.g. FedAvg) and interference from stale updates…

机器学习 · 计算机科学 2025-10-13 Archie Licudi , Anshul Thakur , Soheila Molaei , Danielle Belgrave , David Clifton

Federated learning combines local updates from clients to produce a global model, which is susceptible to poisoning attacks. Most previous defense strategies relied on vectors derived from projections of local updates on a Euclidean space;…

机器学习 · 计算机科学 2024-04-19 Sungwon Han , Hyeonho Song , Sungwon Park , Meeyoung Cha

Training modern neural networks or models typically requires averaging over a sample of high-dimensional vectors. Poisoning attacks can skew or bias the average vectors used to train the model, forcing the model to learn specific patterns…

密码学与安全 · 计算机科学 2024-12-17 Sarthak Choudhary , Aashish Kolluri , Prateek Saxena

Without direct access to the client's data, federated learning (FL) is well-known for its unique strength in data privacy protection among existing distributed machine learning techniques. However, its distributive and iterative nature…

机器学习 · 计算机科学 2026-04-14 Hanxi Guo , Hao Wang , Tao Song , Tianhang Zheng , Yang Hua , Haibing Guan , Xiangyu Zhang

As a distributed learning, Federated Learning (FL) faces two challenges: the unbalanced distribution of training data among participants, and the model attack by Byzantine nodes. In this paper, we consider the long-tailed distribution with…

机器学习 · 计算机科学 2023-07-18 Yanna Jiang , Baihe Ma , Xu Wang , Guangsheng Yu , Caijun Sun , Wei Ni , Ren Ping Liu

Decentralized Federated Learning (DFL) remains highly vulnerable to adaptive backdoor attacks designed to bypass traditional passive defense metrics. To address this limitation, we shift the defensive paradigm toward a novel active,…

机器学习 · 计算机科学 2026-03-20 Sheng Pan , Niansheng Tang

In distributed learning systems, robustness issues may arise from two sources. On one hand, due to distributional shifts between training data and test data, the trained model could exhibit poor out-of-sample performance. On the other hand,…

机器学习 · 计算机科学 2022-11-01 Guanqiang Zhou , Ping Xu , Yue Wang , Zhi Tian

We propose PRISM-FCP (Partial shaRing and robust calIbration with Statistical Margins for Federated Conformal Prediction), a Byzantine-resilient federated conformal prediction framework that utilizes partial model sharing to improve…

机器学习 · 计算机科学 2026-02-23 Ehsan Lari , Reza Arablouei , Stefan Werner

Decentralized stochastic gradient algorithms efficiently solve large-scale finite-sum optimization problems when all agents in the network are reliable. However, most of these algorithms are not resilient to adverse conditions, such as…

最优化与控制 · 数学 2025-06-24 Jinhui Hu , Guo Chen , Huaqing Li , Xiaoyu Guo , Liang Ran , Tingwen Huang

Federated learning is vulnerable to poisoning and backdoor attacks under partial observability. We formulate defence as a partially observable sequential decision problem and introduce a trust-aware Deep Q-Network that integrates…

机器学习 · 计算机科学 2025-10-03 Vedant Palit

Federated learning (FL) is inherently susceptible to privacy breaches and poisoning attacks. To tackle these challenges, researchers have separately devised secure aggregation mechanisms to protect data privacy and robust aggregation…

密码学与安全 · 计算机科学 2025-02-11 Runhua Xu , Shiqi Gao , Chao Li , James Joshi , Jianxin Li

Federated Learning (FL) allows multiple participating clients to train machine learning models collaboratively while keeping their datasets local and only exchanging the gradient or model updates with a coordinating server. Existing FL…

密码学与安全 · 计算机科学 2024-12-17 Xiaolan Gu , Ming Li , Li Xiong

Decentralized Federated Learning (DFL) emerges as an innovative paradigm to train collaborative models, addressing the single point of failure limitation. However, the security and trustworthiness of FL and DFL are compromised by poisoning…

Federated learning (FL) is a machine learning paradigm that enables multiple data holders to collaboratively train a machine learning model without sharing their training data with external parties. In this paradigm, workers locally update…

机器学习 · 计算机科学 2025-09-08 Johan Erbani , Sonia Ben Mokhtar , Pierre-Edouard Portier , Elod Egyed-Zsigmond , Diana Nurbakova

Federated learning (FL) is vulnerable to poisoning attacks, where adversaries corrupt the global aggregation results and cause denial-of-service (DoS). Unlike recent model poisoning attacks that optimize the amplitude of malicious…

机器学习 · 计算机科学 2024-09-27 Hangtao Zhang , Zeming Yao , Leo Yu Zhang , Shengshan Hu , Chao Chen , Alan Liew , Zhetao Li

The federated learning (FL) framework trains a machine learning model using decentralized data stored at edge client devices by periodically aggregating locally trained models. Popular optimization algorithms of FL use vanilla (stochastic)…

机器学习 · 计算机科学 2021-06-07 Jianyu Wang , Zheng Xu , Zachary Garrett , Zachary Charles , Luyang Liu , Gauri Joshi

Federated learning (FL) is a privacy-preserving machine learning technique that facilitates collaboration among participants across demographics. FL enables model sharing, while restricting the movement of data. Since FL provides…

机器学习 · 计算机科学 2025-10-15 Harsh Kasyap , Minghong Fang , Zhuqing Liu , Carsten Maple , Somanath Tripathy

Due to its distributed nature, federated learning is vulnerable to poisoning attacks, in which malicious clients poison the training process via manipulating their local training data and/or local model updates sent to the cloud server,…

密码学与安全 · 计算机科学 2022-10-05 Xiaoyu Cao , Zaixi Zhang , Jinyuan Jia , Neil Zhenqiang Gong

Many defenses against adversarial attacks (\eg robust classifiers, randomization, or image purification) use countermeasures put to work only after the attack has been crafted. We adopt a different perspective to introduce $A^5$…

机器学习 · 计算机科学 2023-05-24 Iuri Frosio , Jan Kautz