Enhancing poisoning attack mitigation in federated learning through perturbation-defense complementarity on history gradients

Cong WANG; Zhilong MI; Ziqiao YIN; Binghui GUO

doi:10.1007/s11704-025-40924-1

Front. Comput. Sci. ›› 2025, Vol. 19 ›› Issue (12) : 1912371 DOI: 10.1007/s11704-025-40924-1

Artificial Intelligence

LETTER

Enhancing poisoning attack mitigation in federated learning through perturbation-defense complementarity on history gradients

Cong WANG ¹^,²^,³
, Zhilong MI ¹^,²^,⁴^,^†
, Ziqiao YIN ¹^,²^,³^,⁴
, Binghui GUO ¹^,²^,³^,⁴^,^†

Author information +

History +

PDF (845KB)

Graphical abstract

Cite this article

Download citation ▾

Cong WANG, Zhilong MI, Ziqiao YIN, Binghui GUO. Enhancing poisoning attack mitigation in federated learning through perturbation-defense complementarity on history gradients. Front. Comput. Sci., 2025, 19(12): 1912371 DOI:10.1007/s11704-025-40924-1

登录浏览全文

4963

注册一个新账户忘记密码

References

Publishing order | Descend order by publishing year | Descend order by cited within

[1]	McMahan B, Moore E, Ramage D, Hampson S, Arcas B A Y. Communication-efficient learning of deep networks from decentralized data. In: Proceedings of the 20th International Conference on Artificial Intelligence and Statistics. 2017, 1273–1282

[2]	Xenofontos C, Zografopoulos I, Konstantinou C, Jolfaei A, Khan M K, Choo K K R . Consumer, commercial, and industrial IoT (in) security: attack taxonomy and case studies. IEEE Internet of Things Journal, 2022, 9( 1): 199–221

[3]	Blanchard P, El Mhamdi E M, Guerraoui R, Stainer J. Machine learning with adversaries: byzantine tolerant gradient descent. In: Proceedings of the 31st International Conference on Neural Information Processing Systems. 2017, 118–128

[4]	Xia Q, Tao Z, Hao Z, Li Q. FABA: an algorithm for fast aggregation against byzantine attacks in distributed neural networks. In: Proceedings of the 28th International Joint Conference on Artificial Intelligence. 2019, 4824–4830

[5]	Xie C, Koyejo S, Gupta I. Zeno: Distributed stochastic gradient descent with suspicion-based fault-tolerance. In: Proceedings of the 36th International Conference on Machine Learning. 2019, 6893–6901

[6]	Baruch G, Baruch M, Goldberg Y. A little is enough: circumventing defenses for distributed learning. In: Proceedings of the 33rd International Conference on Neural Information Processing Systems. 2019, 775

[7]	Yin D, Chen Y, Kannan R, Bartlett P. Byzantine-robust distributed learning: towards optimal statistical rates. In: Proceedings of the 35th International Conference on Machine Learning. 2018, 5650–5659

[8]	Liu Y, Chen C, Lyu L, Wu F, Wu S, Chen G. Byzantine-robust learning on heterogeneous data via gradient splitting. In: Proceedings of the 40th International Conference on Machine Learning. 2023, 21404–21425

[9]	Zhang Z, Cao X, Jia J, Gong N Z. FLDetector: defending federated learning against model poisoning attacks via detecting malicious clients. In: Proceedings of the 28th ACM SIGKDD Conference on Knowledge Discovery and Data Mining. 2022, 2545–2555