Abstract:Internet of Things (IoT) devices generate massive amounts of data from local devices, making federated learning (FL) a viable distributed machine learning paradigm to learn a global model while keeping private data locally in various IoT systems. However, recent studies show that FL’s decentralized nature makes it susceptible to backdoor attacks. Existing defenses like robust aggregation defenses have reduced attack success rates (ASRs) by identifying significant statistical differences between normal and backdoored models individually. However, these defenses fail to consider the potential collusion among attackers to bypass statistical measures utilized in defenses. In this article, we propose a novel attack approach, called collusive backdoor attacks (CBAs), which bypasses robust aggregation defense by considering both local backdoor training and post-training model manipulations among collusive attackers. Particularly, we introduce a nontrivial perturbation estimation scheme to add manipulations over model update vectors after local backdoor training and use the Gram-Schmidt process to speed up the estimation process. This makes the magnitude of the perturbed poisoned model to the same level as normal models, evading robust aggregation-based defense while maintaining attack efficacy. After that, we provide a pilot study to verify the feasibility of our perturbation estimation scheme, followed by its convergence analysis. By evaluating the attack performance on four representative data sets, our CBA approach maintains high ASRs under benchmark robust aggregation defenses in both independent and identically distributed (IID) and non-IID local data settings. Particularly, it increases the ASR by 126% on average compared to individual backdoor attacks.

Dual-Layered Model Protection Scheme Against Backdoor Attacks in Fog Computing-Based Federated Learning

Backdoor Attacks and Defenses in Federated Learning: State-of-the-Art, Taxonomy, and Future Directions

Edge-Cloud Collaborative Defense against Backdoor Attacks in Federated Learning

Mitigating Backdoors in Federated Learning with FLD

FedGrad: Mitigating Backdoor Attacks in Federated Learning Through Local Ultimate Gradients Inspection

On the Vulnerability of Backdoor Defenses for Federated Learning

Act in Collusion: A Persistent Distributed Multi-Target Backdoor in Federated Learning

Multi-metrics Adaptively Identifies Backdoors in Federated Learning

FedPD: Defending federated prototype learning against backdoor attacks

Securing Federated Learning Against Novel and Classic Backdoor Threats During Foundation Model Integration

Backdoor Defense in Federated Learning Using Differential Testing and Outlier Detection

How To Backdoor Federated Learning

Identifying Backdoor Attacks in Federated Learning via Anomaly Detection

Towards Practical Backdoor Attacks on Federated Learning Systems

Gradient-based Defense Methods for Data Leakage in Vertical Federated Learning

CrowdGuard: Federated Backdoor Detection in Federated Learning

Gradient Leakage Defense with Key-Lock Module for Federated Learning

Dual Model Replacement:invisible Multi-target Backdoor Attack based on Federal Learning

A Blockchain-Based Federated-Learning Framework for Defense against Backdoor Attacks

One-Shot Backdoor Removal for Federated Learning

Collusive Backdoor Attacks in Federated Learning Frameworks for IoT Systems