Abstract:Federated learning allows participants to share models (gradients) rather than raw data to collaboratively train a global model, enhancing participants' privacy protection but making the global model more vulnerable to poisoning attacks. Poisoning attacks not only lead to the degradation of model performance but also cause a security risk. A mainstream defense strategy against poisoning attacks is that the server identifies malicious models by analyzing the models uploaded by participants. However, the attackers can use the models uploaded by the participants to recover their privacy data, leading to a privacy disclosure. Therefore, participants need to encrypt or perturb the models before uploading them so that all individuals, including the server, cannot access the model, which poses a great challenge for the defense against poisoning attacks. Moreover, many existing defense strategies against poisoning attacks only work well when the data distribution is non-independently and identically distributed. To address these issues, we propose a novel defense strategy for poisoning attacks of federated learning called FL-PTD, which can judge whether the global model is subjected to poisoning attacks without accessing the participant's local model. Besides, Our method incorporates a trust evaluation mechanism, which computes reputation scores based on the historical behavior of participants to identify malicious participants. Finally, we verify our proposed method on several real world datasets. The experimental results show that our method can effectively defend against poisoning attacks and accurately identify attackers without compromising the model's performance.

Cross the Chasm - Scalable Privacy-Preserving Federated Learning Against Poisoning Attack.

FL-PTD: A Privacy Preserving Defense Strategy Against Poisoning Attacks in Federated Learning.

DPFLA: Defending Private Federated Learning Against Poisoning Attacks

PROFL: A Privacy-Preserving Federated Learning Method with Stringent Defense Against Poisoning Attacks

SPFL: A Self-purified Federated Learning Method Against Poisoning Attacks

Robust and privacy-preserving federated learning with distributed additive encryption against poisoning attacks

Efficiently Achieving Privacy Preservation and Poisoning Attack Resistance in Federated Learning

Unraveling the Connections between Privacy and Certified Robustness in Federated Learning Against Poisoning Attacks

BPFL: Blockchain-Based Privacy-Preserving Federated Learning against Poisoning Attack

DP-Poison: Poisoning Federated Learning under the Cover of Differential Privacy

Poisoning Attacks in Federated Learning: A Survey

RFLPA: A Robust Federated Learning Framework against Poisoning Attacks with Secure Aggregation

Low Dimensional Secure Federated Learning Framework Against Poisoning Attacks

Defending Against Data Poisoning Attack in Federated Learning With Non-IID Data

Defending against Data Poisoning Attacks in Federated Learning via User Elimination

Pocket Diagnosis: Secure Federated Learning against Poisoning Attack in the Cloud

RFed: Robustness-Enhanced Privacy-Preserving Federated Learning Against Poisoning Attack

Comments on "Privacy-Enhanced Federated Learning Against Poisoning Adversaries"

ADFL: A Poisoning Attack Defense Framework for Horizontal Federated Learning

A Learning-Based Attack Framework to Break SOTA Poisoning Defenses in Federated Learning