Abstract:Deep Learning-based image synthesis techniques have been applied in healthcare research for generating medical images to support open research and augment medical datasets. Training generative adversarial neural networks (GANs) usually require large amounts of training data. Federated learning (FL) provides a way of training a central model using distributed data while keeping raw data locally. However, given that the FL server cannot access the raw data, it is vulnerable to backdoor attacks, an adversarial by poisoning training data. Most backdoor attack strategies focus on classification models and centralized domains. It is still an open question if the existing backdoor attacks can affect GAN training and, if so, how to defend against the attack in the FL setting. In this work, we investigate the overlooked issue of backdoor attacks in federated GANs (FedGANs). The success of this attack is subsequently determined to be the result of some local discriminators overfitting the poisoned data and corrupting the local GAN equilibrium, which then further contaminates other clients when averaging the generator's parameters and yields high generator loss. Therefore, we proposed FedDetect, an efficient and effective way of defending against the backdoor attack in the FL setting, which allows the server to detect the client's adversarial behavior based on their losses and block the malicious clients. Our extensive experiments on two medical datasets with different modalities demonstrate the backdoor attack on FedGANs can result in synthetic images with low fidelity. After detecting and suppressing the detected malicious clients using the proposed defense strategy, we show that FedGANs can synthesize high-quality medical datasets (with labels) for data augmentation to improve classification models' performance.

Content Style-triggered Backdoor Attack in Non-IID Federated Learning Via Generative AI

Backdoor Attacks and Defenses in Federated Learning: State-of-the-Art, Taxonomy, and Future Directions

BadSFL: Backdoor Attack against Scaffold Federated Learning

Protect Federated Learning Against Backdoor Attacks via Data-Free Trigger Generation

Backdoor Attack is a Devil in Federated GAN-based Medical Image Synthesis

How To Backdoor Federated Learning

FTA: Stealthy and Adaptive Backdoor Attack with Flexible Triggers on Federated Learning

SAB:A Stealing and Robust Backdoor Attack based on Steganographic Algorithm against Federated Learning

Privacy Inference-Empowered Stealthy Backdoor Attack on Federated Learning under Non-IID Scenarios

Backdoor attack and defense in federated generative adversarial network-based medical image synthesis

A GAN-Based Data Poisoning Attack Against Federated Learning Systems and Its Countermeasure

Sample-Independent Federated Learning Backdoor Attack

Dual Model Replacement:invisible Multi-target Backdoor Attack based on Federal Learning

A Highly Efficient, Confidential, and Continuous Federated Learning Backdoor Attack Strategy

Enhanced Coalescence Backdoor Attack Against DNN Based on Pixel Gradient

Act in Collusion: A Persistent Distributed Multi-Target Backdoor in Federated Learning

Exploiting Defenses against GAN-Based Feature Inference Attacks in Federated Learning

Towards Practical Backdoor Attacks on Federated Learning Systems

Thinking Two Moves Ahead: Anticipating Other Users Improves Backdoor Attacks in Federated Learning

On the Vulnerability of Backdoor Defenses for Federated Learning

Concealing Backdoor Model Updates in Federated Learning by Trigger-Optimized Data Poisoning