Abstract:Federated Learning (FL) offers a promising solution to the privacy concerns associated with centralized Machine Learning (ML) by enabling decentralized, collaborative learning. However, FL is vulnerable to various security threats, including poisoning attacks, where adversarial clients manipulate the training data or model updates to degrade overall model performance. Recognizing this threat, researchers have focused on developing defense mechanisms to counteract poisoning attacks in FL systems. However, existing robust FL methods predominantly focus on computer vision tasks, leaving a gap in addressing the unique challenges of FL with time series data. In this paper, we present FLORAL, a defense mechanism designed to mitigate poisoning attacks in federated learning for time-series tasks, even in scenarios with heterogeneous client data and a large number of adversarial participants. Unlike traditional model-centric defenses, FLORAL leverages logical reasoning to evaluate client trustworthiness by aligning their predictions with global time-series patterns, rather than relying solely on the similarity of client updates. Our approach extracts logical reasoning properties from clients, then hierarchically infers global properties, and uses these to verify client updates. Through formal logic verification, we assess the robustness of each client contribution, identifying deviations indicative of adversarial behavior. Experimental results on two datasets demonstrate the superior performance of our approach compared to existing baseline methods, highlighting its potential to enhance the robustness of FL to time series applications. Notably, FLORAL reduced the prediction error by 93.27\% in the best-case scenario compared to the second-best baseline. Our code is available at \url{<a class="link-external link-https" href="https://anonymous.4open.science/r/FLORAL-Robust-FTS" rel="external noopener nofollow">this https URL</a>}.

Voyager: MTD-Based Aggregation Protocol for Mitigating Poisoning Attacks on DFL

Leveraging MTD to Mitigate Poisoning Attacks in Decentralized FL with Non-IID Data

DART: A Solution for Decentralized Federated Learning Model Robustness Analysis

TDFL: Truth Discovery Based Byzantine Robust Federated Learning

Mitigating Communications Threats in Decentralized Federated Learning through Moving Target Defense

Protecting Federated Learning from Extreme Model Poisoning Attacks via Multidimensional Time Series Anomaly Detection

MODEL: A Model Poisoning Defense Framework for Federated Learning via Truth Discovery

FDSFL: Filtering Defense Strategies Toward Targeted Poisoning Attacks in IIoT-Based Federated Learning Networking System.

DPFLA: Defending Private Federated Learning Against Poisoning Attacks

FL-PTD: A Privacy Preserving Defense Strategy Against Poisoning Attacks in Federated Learning.

FLDetector: Defending Federated Learning Against Model Poisoning Attacks via Detecting Malicious Clients

Sentinel: An Aggregation Function to Secure Decentralized Federated Learning

Covert Model Poisoning Against Federated Learning: Algorithm Design and Optimization

Formal Logic-guided Robust Federated Learning against Poisoning Attacks

FLARE: Defending Federated Learning against Model Poisoning Attacks via Latent Space Representations

Mitigating Malicious Attacks in Federated Learning via Confidence-aware Defense

Data Poisoning Attacks Against Federated Learning Systems

Advancing Hybrid Defense for Byzantine Attacks in Federated Learning

Depriving the Survival Space of Adversaries Against Poisoned Gradients in Federated Learning

Denial-of-Service or Fine-Grained Control: Towards Flexible Model Poisoning Attacks on Federated Learning