A sensitivity-curve maximization attack, when aligned across training rounds, degrades robust aggregators like IOS and Huber M-estimation and can force accuracy down to chance level.
A Huber Loss Minimization Approach to Byzantine Robust Federated Learning
1 Pith paper cite this work. Polarity classification is still indexing.
abstract
Federated learning systems are susceptible to adversarial attacks. To combat this, we introduce a novel aggregator based on Huber loss minimization, and provide a comprehensive theoretical analysis. Under independent and identically distributed (i.i.d) assumption, our approach has several advantages compared to existing methods. Firstly, it has optimal dependence on $\epsilon$, which stands for the ratio of attacked clients. Secondly, our approach does not need precise knowledge of $\epsilon$. Thirdly, it allows different clients to have unequal data sizes. We then broaden our analysis to include non-i.i.d data, such that clients have slightly different distributions.
citation-role summary
citation-polarity summary
fields
cs.LG 1years
2024 1verdicts
CONDITIONAL 1roles
background 1polarities
unclear 1representative citing papers
citing papers explorer
-
Sensitivity Curve Maximization: Attacking Robust Aggregators in Distributed Learning
A sensitivity-curve maximization attack, when aligned across training rounds, degrades robust aggregators like IOS and Huber M-estimation and can force accuracy down to chance level.