Abstract:Internet of Things (IoT) devices generate massive amounts of data from local devices, making federated learning (FL) a viable distributed machine learning paradigm to learn a global model while keeping private data locally in various IoT systems. However, recent studies show that FL’s decentralized nature makes it susceptible to backdoor attacks. Existing defenses like robust aggregation defenses have reduced attack success rates (ASRs) by identifying significant statistical differences between normal and backdoored models individually. However, these defenses fail to consider the potential collusion among attackers to bypass statistical measures utilized in defenses. In this article, we propose a novel attack approach, called collusive backdoor attacks (CBAs), which bypasses robust aggregation defense by considering both local backdoor training and post-training model manipulations among collusive attackers. Particularly, we introduce a nontrivial perturbation estimation scheme to add manipulations over model update vectors after local backdoor training and use the Gram-Schmidt process to speed up the estimation process. This makes the magnitude of the perturbed poisoned model to the same level as normal models, evading robust aggregation-based defense while maintaining attack efficacy. After that, we provide a pilot study to verify the feasibility of our perturbation estimation scheme, followed by its convergence analysis. By evaluating the attack performance on four representative data sets, our CBA approach maintains high ASRs under benchmark robust aggregation defenses in both independent and identically distributed (IID) and non-IID local data settings. Particularly, it increases the ASR by 126% on average compared to individual backdoor attacks.

Collusive Backdoor Attacks in Federated Learning Frameworks for IoT Systems

Backdoor Attacks and Defenses in Federated Learning: State-of-the-Art, Taxonomy, and Future Directions

MITDBA: Mitigating Dynamic Backdoor Attacks in Federated Learning for IoT Applications

CoBA: Collusive Backdoor Attacks with Optimized Trigger to Federated Learning

Towards Practical Backdoor Attacks on Federated Learning Systems

A Stability-Enhanced Dynamic Backdoor Defense in Federated Learning for IIoT

Securing Federated Learning Against Novel and Classic Backdoor Threats During Foundation Model Integration

Clean-label Poisoning Attacks on Federated Learning for IoT

On the Vulnerability of Backdoor Defenses for Federated Learning

Privacy-Enhancing and Robust Backdoor Defense for Federated Learning on Heterogeneous Data

Act in Collusion: A Persistent Distributed Multi-Target Backdoor in Federated Learning

RFLBAT: A Robust Federated Learning Algorithm against Backdoor Attack

Non-Cooperative Backdoor Attacks in Federated Learning: A New Threat Landscape

Edge-Cloud Collaborative Defense against Backdoor Attacks in Federated Learning

Defending against Backdoors in Federated Learning with Robust Learning Rate

SBPA: Sybil-Based Backdoor Poisoning Attacks for Distributed Big Data in AIoT-Based Federated Learning System

BADFL: Backdoor Attack Defense in Federated Learning from Local Model Perspective

Backdoor Defense in Federated Learning Using Differential Testing and Outlier Detection

Defending Against Data and Model Backdoor Attacks in Federated Learning

FDSFL: Filtering Defense Strategies Toward Targeted Poisoning Attacks in IIoT-Based Federated Learning Networking System.

Shadow Backdoor Attack: Multi-intensity Backdoor Attack Against Federated Learning