← Back to all news
arXiv AI By Manoj Twarakavi, Venkata Sriram Siddhardh Nadendla

StratFL: Countering Covert Model Poisoning Attacks with Strategic Federated Learning

Read the original on arXiv AI →

The paper introduces StratFL, a strategy for federated learning that counters covert model poisoning attacks by modeling the interaction between the server and attacker as an imperfect repeated game. It proposes new belief‑update algorithms for both parties and an adversarial search method to detect and mitigate intermittent poisoned updates. Experiments on MNIST and CIFAR‑10 show that StratFL improves accuracy by about 10% over existing defenses while demonstrating convergence of the belief updates across various security scenarios.

Machine-generated by The Flow from the publisher's headline and feed description — not written or checked by a human. The full article lives at arXiv AI.

Related stories

arXiv AI
Sep 24

When Clients Are Orchestrated: Strategic Gradient Manipulation to Defeat Federated Learning Servers with Efficient Defense

The paper introduces Fed-ADR, a coordinated attack framework where a malicious orchestrator server directs heterogeneous adversarial clients to adapt their gradient updates in real time, thereby evading existing federated learning defenses and drastically reducing global model accuracy. It also presents a lightweight detection mechanism that estimates true client gradients from historical data to spot coordinated attacks, and an in-situ recovery method that restores model performance without restarting training. Experiments on MNIST, Fashion‑MNIST, and CIFAR‑10 show the attack can drop accuracy from over 90% to below 10%, while the defense can recover accuracy to above 90% within a few rounds at a computational cost at least 20× lower than retraining from scratch.

By Mohamed Shaaban, Ahmed Abdelnaby, Mohamed Elmahallawy
roboticsbenchmarkssafety
More like this →
arXiv Machine Learning
Aug 27

Rethinking the Transferable Adversarial Attacks and Robust Defense in Federated Learning

The paper investigates how adversarial examples transfer between client models in federated learning and explores the relationship between these examples and client data distributions. It proposes a defense strategy based on adversarial training that leverages the transferability of model robustness. Experiments on real-life datasets demonstrate that the new attack and defense methods outperform existing state‑of‑the‑art approaches.

By Zuobin Xiong, Deval Mukherjee, Homook Cho, Wei Li
benchmarkssafety
More like this →