Abstract:As privacy concerns and regulatory constraints on data protection continue to grow, the distribution of collected data has become more dispersed, resembling a "data silo" style. To harness these data effectively without exchanging raw data, federated learning has emerged as a prominent solution. However, distributions of user-generated data often exhibit imbalances between devices and labels, which adversely affect model performance, especially in the presence of adversarial attacks, making models more susceptible. To address the challenge of balancing natural accuracy and robustness in federated training, especially under skewed label distribution scenarios, we propose a novel approach based on Generative Adversarial Networks for Federated Adversarial Training (GANFAT). GANFAT leverages GAN to enhance the authenticity and effectiveness of adversarial samples and addresses label distribution skew issues by incorporating class probability distribution information. Through a balanced interplay of natural accuracy loss and adversarial loss, GANFAT demonstrates significantly superior performance across multiple datasets under various settings compared to other frameworks. Particularly on the SVHN dataset, GANFAT achieves a remarkable 9.30% enhancement in robustness against FGSM attacks compared to the best baseline method (FedRBN). On the CIFAR-100 dataset, GANFAT showcases a noteworthy 6.68% improvement in natural accuracy compared to the best baseline method (CalFAT). GANFAT provides a powerful solution for confronting diverse attacks, yielding models comparable to those produced by centralized training. Experimental results underscore GANFAT's outstanding performance, offering a robust solution for scenarios characterized by uneven data distribution and adversarial attacks.

GAN-Based Fusion Adversarial Training

A GAN-Based Defense Framework Against Model Inversion Attacks.

GanDef: A GAN based Adversarial Training Defense for Neural Network Classifier

Evaluation of GAN-Based Model for Adversarial Training

Adversarial symmetric GANs: bridging adversarial samples and adversarial networks

Generative Adversarial Trainer: Defense to Adversarial Perturbations with GAN

Improving Global Adversarial Robustness Generalization With Adversarially Trained GAN

Direct Adversarial Training for GANs

Cycle-Consistent Adversarial GAN: the integration of adversarial attack and defense

GANFAT:Robust federated adversarial learning with lable distribution skew

Incremental Learning Of Gan For Detecting Multiple Adversarial Attacks

HAD-GAN: A Human-perception Auxiliary Defense GAN to Defend Adversarial Examples

Defending against GAN-based Deepfake Attacks via Transformation-aware Adversarial Faces

GAN Generate Adversarial Examples to Fool Deep Networks.

Generating Adversarial Examples with Adversarial Networks

GAN-based Classifier Protection Against Adversarial Attacks

APE-GAN: Adversarial Perturbation Elimination with GAN.

Rob-GAN: Generator, Discriminator, and Adversarial Attacker

Adaptive Feature Alignment for Adversarial Training

Learning More Robust Features with Adversarial Training

A Novel Infrared and Visible Image Fusion Approach Based on Adversarial Neural Network