Abstract:Federated Learning (FL) offers a promising solution to the privacy concerns associated with centralized Machine Learning (ML) by enabling decentralized, collaborative learning. However, FL is vulnerable to various security threats, including poisoning attacks, where adversarial clients manipulate the training data or model updates to degrade overall model performance. Recognizing this threat, researchers have focused on developing defense mechanisms to counteract poisoning attacks in FL systems. However, existing robust FL methods predominantly focus on computer vision tasks, leaving a gap in addressing the unique challenges of FL with time series data. In this paper, we present FLORAL, a defense mechanism designed to mitigate poisoning attacks in federated learning for time-series tasks, even in scenarios with heterogeneous client data and a large number of adversarial participants. Unlike traditional model-centric defenses, FLORAL leverages logical reasoning to evaluate client trustworthiness by aligning their predictions with global time-series patterns, rather than relying solely on the similarity of client updates. Our approach extracts logical reasoning properties from clients, then hierarchically infers global properties, and uses these to verify client updates. Through formal logic verification, we assess the robustness of each client contribution, identifying deviations indicative of adversarial behavior. Experimental results on two datasets demonstrate the superior performance of our approach compared to existing baseline methods, highlighting its potential to enhance the robustness of FL to time series applications. Notably, FLORAL reduced the prediction error by 93.27\% in the best-case scenario compared to the second-best baseline. Our code is available at \url{<a class="link-external link-https" href="https://anonymous.4open.science/r/FLORAL-Robust-FTS" rel="external noopener nofollow">this https URL</a>}.

Secure Model Aggregation Against Poisoning Attacks for Cross-Silo Federated Learning With Robustness and Fairness

Romoa: Robust Model Aggregation for the Resistance of Federated Learning to Model Poisoning Attacks

Oblivion: Poisoning Federated Learning by Inducing Catastrophic Forgetting.

RFLPA: A Robust Federated Learning Framework against Poisoning Attacks with Secure Aggregation

Robust Federated Learning against both Data Heterogeneity and Poisoning Attack via Aggregation Optimization

Formal Logic-guided Robust Federated Learning against Poisoning Attacks

Fair and Robust Federated Learning via Decentralized and Adaptive Aggregation based on Blockchain

Defending Against Sophisticated Poisoning Attacks with RL-based Aggregation in Federated Learning

A Learning-Based Attack Framework to Break SOTA Poisoning Defenses in Federated Learning

Byzantine-Robust Decentralized Federated Learning

Split Aggregation: Lightweight Privacy-Preserving Federated Learning Resistant to Byzantine Attacks

Denial-of-Service or Fine-Grained Control: Towards Flexible Model Poisoning Attacks on Federated Learning

RoseAgg: Robust Defense Against Targeted Collusion Attacks in Federated Learning

PriRoAgg: Achieving Robust Model Aggregation with Minimum Privacy Leakage for Federated Learning

Contribution-wise Byzantine-robust aggregation for Class-Balanced Federated Learning

DPFLA: Defending Private Federated Learning Against Poisoning Attacks

TDFL: Truth Discovery Based Byzantine Robust Federated Learning

FedCom: A Byzantine-Robust Local Model Aggregation Rule Using Data Commitment for Federated Learning

EAB-FL: Exacerbating Algorithmic Bias through Model Poisoning Attacks in Federated Learning

MODEL: A Model Poisoning Defense Framework for Federated Learning via Truth Discovery