arXiv:2601.01833cs.LG2026-01

FAROS动态调整防御强度,有效抵御联邦学习中的后门攻击。

FAROS: Robust Federated Learning with Adaptive Scaling against Backdoor Attacks

  • 根据客户端梯度分散度自适应调节防御敏感度
  • 在多种攻击场景下将攻击成功率降至10%以下,主任务准确率超90%
  • 适合对抗策略多变的恶意客户端,提升系统鲁棒性

联邦学习(FL)允许多个客户端在不共享本地数据的情况下协同训练共享模型。然而,后门攻击对FL构成重大威胁:攻击者在全局模型中植入隐蔽触发器,使模型在含特定触发器的输入上产生错误输出,而在正常数据上表现正常。尽管预聚合检测是主要防御方向,现有先进防御方法通常依赖固定防御参数,易受单点故障影响,对复杂攻击无效。为此,我们提出FAROS框架,结合自适应差分缩放(ADS)与鲁棒核心集计算(RCC)。ADS机制根据每轮客户端上传梯度的分散度动态调整防御敏感度,可应对攻击者在隐蔽性与有效性之间策略切换的情况。RCC通过计算高置信度客户端组成的核心集的质心,降低单点故障风险。我们在多个数据集、模型和攻击场景下进行了广泛实验,结果表明,该方法在攻击成功率和主任务准确率方面均优于现有防御方案。

原文摘要 · Abstract (English)

Federated Learning (FL) enables multiple clients to collaboratively train a shared model without exposing local data. However, backdoor attacks pose a significant threat to FL. These attacks aim to implant a stealthy trigger into the global model, causing it to mislead on inputs that possess a specific trigger while functioning normally on benign data. Although pre-aggregation detection is a main defense direction, existing state-of-the-art defenses often rely on fixed defense parameters. This reliance makes them vulnerable to single-point-of-failure risks, rendering them less effective against sophisticated attackers. To address these limitations, we propose FAROS, an enhanced FL framework that incorporates Adaptive Differential Scaling (ADS) and Robust Core-set Computing (RCC). The ADS mechanism adjusts the defense's sensitivity dynamically, based on the dispersion of uploaded gradients by clients in each round. This allows it to counter attackers who strategically shift between stealthiness and effectiveness. Furthermore, the RCC effectively mitigates the risk of single-point failure by computing the centroid of a core set comprising clients with the highest confidence. We conducted extensive experiments across various datasets, models, and attack scenarios. The results demonstrate that our method outperforms current defenses in both attack success rate and main task accuracy.

联邦学习后门攻击自适应防御安全建模

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。