References & Citations
Computer Science > Cryptography and Security
Title: FLGUARD: Secure and Private Federated Learning
(Submitted on 6 Jan 2021 (v1), revised 21 Jan 2021 (this version, v2), latest version 5 Aug 2023 (v5))
Abstract: Recently, a number of backdoor attacks against Federated Learning (FL) have been proposed. In such attacks, an adversary injects poisoned model updates into the federated model aggregation process with the goal of manipulating the aggregated model to provide false predictions on specific adversary-chosen inputs. A number of defenses have been proposed; but none of them can effectively protect the FL process also against so-called multi-backdoor attacks in which multiple different backdoors are injected by the adversary simultaneously without severely impacting the benign performance of the aggregated model. To overcome this challenge, we introduce FLGUARD, a poisoning defense framework that is able to defend FL against state-of-the-art backdoor attacks while simultaneously maintaining the benign performance of the aggregated model. Moreover, FL is also vulnerable to inference attacks, in which a malicious aggregator can infer information about clients' training data from their model updates. To thwart such attacks, we augment FLGUARD with state-of-the-art secure computation techniques that securely evaluate the FLGUARD algorithm. We provide formal argumentation for the effectiveness of our FLGUARD and extensively evaluate it against known backdoor attacks on several datasets and applications (including image classification, word prediction, and IoT intrusion detection), demonstrating that FLGUARD can entirely remove backdoors with a negligible effect on accuracy. We also show that private FLGUARD achieves practical runtimes.
Submission history
From: Duc Thien Nguyen [view email][v1] Wed, 6 Jan 2021 21:49:27 GMT (3224kb,D)
[v2] Thu, 21 Jan 2021 15:30:17 GMT (3228kb,D)
[v3] Sun, 9 Jan 2022 19:41:06 GMT (7910kb,D)
[v4] Sat, 31 Dec 2022 07:00:55 GMT (7911kb,D)
[v5] Sat, 5 Aug 2023 21:56:24 GMT (7910kb,D)
Link back to: arXiv, form interface, contact.