Abstract:Federated Learning (FL) offers a promising solution to the privacy concerns associated with centralized Machine Learning (ML) by enabling decentralized, collaborative learning. However, FL is vulnerable to various security threats, including poisoning attacks, where adversarial clients manipulate the training data or model updates to degrade overall model performance. Recognizing this threat, researchers have focused on developing defense mechanisms to counteract poisoning attacks in FL systems. However, existing robust FL methods predominantly focus on computer vision tasks, leaving a gap in addressing the unique challenges of FL with time series data. In this paper, we present FLORAL, a defense mechanism designed to mitigate poisoning attacks in federated learning for time-series tasks, even in scenarios with heterogeneous client data and a large number of adversarial participants. Unlike traditional model-centric defenses, FLORAL leverages logical reasoning to evaluate client trustworthiness by aligning their predictions with global time-series patterns, rather than relying solely on the similarity of client updates. Our approach extracts logical reasoning properties from clients, then hierarchically infers global properties, and uses these to verify client updates. Through formal logic verification, we assess the robustness of each client contribution, identifying deviations indicative of adversarial behavior. Experimental results on two datasets demonstrate the superior performance of our approach compared to existing baseline methods, highlighting its potential to enhance the robustness of FL to time series applications. Notably, FLORAL reduced the prediction error by 93.27\% in the best-case scenario compared to the second-best baseline. Our code is available at \url{<a class="link-external link-https" href="https://anonymous.4open.science/r/FLORAL-Robust-FTS" rel="external noopener nofollow">this https URL</a>}.

Romoa: Robust Model Aggregation for the Resistance of Federated Learning to Model Poisoning Attacks

Secure Model Aggregation Against Poisoning Attacks for Cross-Silo Federated Learning With Robustness and Fairness

Oblivion: Poisoning Federated Learning by Inducing Catastrophic Forgetting.

Poisoning Deep Learning Based Recommender Model in Federated Learning Scenarios.

FedRecAttack: Model Poisoning Attack to Federated Recommendation

Defending Against Sophisticated Poisoning Attacks with RL-based Aggregation in Federated Learning

RFLPA: A Robust Federated Learning Framework against Poisoning Attacks with Secure Aggregation

RoseAgg: Robust Defense Against Targeted Collusion Attacks in Federated Learning

Robust Federated Recommendation System

RFed: Robustness-Enhanced Privacy-Preserving Federated Learning Against Poisoning Attack

A Robust and Efficient Federated Learning Algorithm Against Adaptive Model Poisoning Attacks

RECESS Vaccine for Federated Learning: Proactive Defense Against Model Poisoning Attacks

Denial-of-Service or Fine-Grained Control: Towards Flexible Model Poisoning Attacks on Federated Learning

Defending Poisoning Attacks in Federated Learning via Adversarial Training Method

Formal Logic-guided Robust Federated Learning against Poisoning Attacks

Model Poisoning Attacks to Federated Learning via Multi-Round Consistency

TDFL: Truth Discovery Based Byzantine Robust Federated Learning

Detecting and mitigating poisoning attacks in federated learning using generative adversarial networks

FedCom: A Byzantine-Robust Local Model Aggregation Rule Using Data Commitment for Federated Learning

FedCC: Robust Federated Learning against Model Poisoning Attacks