Abstract:Internet of Things (IoT) devices generate massive amounts of data from local devices, making federated learning (FL) a viable distributed machine learning paradigm to learn a global model while keeping private data locally in various IoT systems. However, recent studies show that FL’s decentralized nature makes it susceptible to backdoor attacks. Existing defenses like robust aggregation defenses have reduced attack success rates (ASRs) by identifying significant statistical differences between normal and backdoored models individually. However, these defenses fail to consider the potential collusion among attackers to bypass statistical measures utilized in defenses. In this article, we propose a novel attack approach, called collusive backdoor attacks (CBAs), which bypasses robust aggregation defense by considering both local backdoor training and post-training model manipulations among collusive attackers. Particularly, we introduce a nontrivial perturbation estimation scheme to add manipulations over model update vectors after local backdoor training and use the Gram-Schmidt process to speed up the estimation process. This makes the magnitude of the perturbed poisoned model to the same level as normal models, evading robust aggregation-based defense while maintaining attack efficacy. After that, we provide a pilot study to verify the feasibility of our perturbation estimation scheme, followed by its convergence analysis. By evaluating the attack performance on four representative data sets, our CBA approach maintains high ASRs under benchmark robust aggregation defenses in both independent and identically distributed (IID) and non-IID local data settings. Particularly, it increases the ASR by 126% on average compared to individual backdoor attacks.

BADFL: Backdoor Attack Defense in Federated Learning from Local Model Perspective

Backdoor Attacks and Defenses in Federated Learning: State-of-the-Art, Taxonomy, and Future Directions

On the Vulnerability of Backdoor Defenses for Federated Learning

Mitigating Backdoors in Federated Learning with FLD

Backdoor Defense in Federated Learning Using Differential Testing and Outlier Detection

Defending Against Data and Model Backdoor Attacks in Federated Learning

FLMAAcBD: Defending against backdoors in Federated Learning via Model Anomalous Activation Behavior Detection

BadCleaner: Defending Backdoor Attacks in Federated Learning Via Attention-Based Multi-Teacher Distillation

Towards Practical Backdoor Attacks on Federated Learning Systems

Defending against Backdoors in Federated Learning with Robust Learning Rate

BadSFL: Backdoor Attack against Scaffold Federated Learning

FedCL: Detecting Backdoor Attacks in Federated Learning with Confidence Levels

Never Too Late: Tracing and Mitigating Backdoor Attacks in Federated Learning

Securing Federated Learning Against Novel and Classic Backdoor Threats During Foundation Model Integration

Mitigating Backdoor Attacks in Federated Learning via Flipping Weight Updates of Low-Activation Input Neurons

Federated learning backdoor attack detection with persistence diagram

Identifying Backdoor Attacks in Federated Learning via Anomaly Detection

Shadow Backdoor Attack: Multi-intensity Backdoor Attack Against Federated Learning

Backdoor Threats from Compromised Foundation Models to Federated Learning

Collusive Backdoor Attacks in Federated Learning Frameworks for IoT Systems

Multi-metrics Adaptively Identifies Backdoors in Federated Learning