arXiv Machine Learning
Fine-grained Distributed Backdoor Attacks in Federated Learning
Read the original on arXiv Machine Learning →The Flow has not summarised this story yet — read it at arXiv Machine Learning.
Related stories
arXiv AI
Sep 10
Unveiling Hidden Threats: Using Fractal Triggers to Boost Stealthiness of Distributed Backdoor Attacks in Federated Learning
The paper introduces Fractal-Triggered Distributed Backdoor Attack (FTDBA), a new method that uses fractal self‑similarity to strengthen sub‑triggers in federated learning backdoor attacks. By employing a dynamic angular perturbation mechanism, FTDBA reduces the amount of poisoned data needed while maintaining a 92.3% attack success rate. Experiments show a 22.8% lower detection rate and a 41.2% reduction in KL divergence compared to traditional distributed backdoor attacks.
arXiv Computer Vision
Aug 28
Checkerboard: Closed-Form and Data-Independent Trigger Design for Clean-Label Backdoor Attacks
The paper introduces Checkerboard, a clean‑label backdoor attack that uses a closed‑form, data‑independent trigger design based on an input‑space Fisher‑separability objective and a ridge four‑neighbor local‑smoothness prior. This approach yields a pixel‑wise checkerboard trigger without requiring data access, surrogate model training, or iterative optimization, and it outperforms existing norm‑bounded clean‑label attacks across four benchmark datasets. On CIFAR‑10, poisoning 20 samples with a 10/255 perturbation achieves a 95.72% attack success rate, while on IN‑100 a 0.4% global poisoning rate yields over 83% ASR without harming clean accuracy, and the attack remains robust against state‑of‑the‑art defenses.
arXiv AI
Aug 10
TOFD: Target-Oriented Feature Decoupling against Poisoning Attacks in Split Federated Learning
arXiv:2608. 07274v1 Announce Type: cross Abstract: Split Federated Learning (SFL) facilitates privacy-preserving collaborative training with reduced client-side overhead.
arXiv Machine Learning
Jun 25
Color Matters: Trigger Color Affects Success in Federated Backdoor Attacks
arXiv:2606. 25858v1 Announce Type: cross Abstract: Federated learning is vulnerable to backdoor attacks in which malicious clients inject poisoned updates while preserving benign-task performance.
Hugging Face Trending Papers
Aug 10
Diversity Matters: Distributional Feature Coverage Sample Selection for Data-Efficient Backdoor Attacks
Backdoor attacks compromise training data so that a model retains clean accuracy but predicts an attacker-chosen target on triggered inputs. At very low poisoning rates, only a few samples convey the trigger--target association, making poison-sample selection critical.
arXiv AI
Aug 26
STAIN-FL: Stealthy Targeted Attack Injection with Contextual Triggers in Federated Learning
The paper introduces STAIN-FL, a stealthy backdoor attack framework for federated video anomaly detection that uses natural surveillance conditions—such as low light, indoor settings, and crowd density—as contextual triggers. STAIN-FL manipulates anomaly labels and masks gradients to keep clean accuracy low while inducing trigger‑conditioned misclassification. Experiments on UCF‑Crime with I3D features show that sparse attacks remain undetectable, drop clean accuracy by less than 2%, yet achieve over 50% backdoor accuracy for hundreds of rounds under FedAvg and FedProx.