Abstract:Federated learning is usually utilized as a fraud detection framework in the domain of financial risk management, which promotes the model accuracy without training data exchange. One of the challenges in federated learning is the GAN-based poisoning attack. The GAN-based poisoning attack is a type of intractable poisoning attack that causes global model accuracy degradation and privacy leak. Most of the existing defenses for GAN-based poisoning attack have the three problems: 1) dependence on validation datasets; 2) incompetence of dealing with incremental poisoning attack; and 3) privacy leak. To address the above problems, we present a privacy-aware and incremental defense (PID) method to detect malicious participants and protect privacy. In PID, we design a method to accumulate the offset of model parameters from participants in all current epochs to represent the moving tendency for model parameters. Thus, we can distinguish the adversaries from normal participants based on the accumulations in this incremental poisoning attack. We also use multiple trust domains to reduce the rate of misjudging benign participants as adversaries. Moreover, a differentiated differential privacy is utilized before the global model sending to protect the privacy of participants’ training datasets in PID. The experiments conducted on two real-world datasets under financial fraud detection scenario demonstrate that the PID reduces the fallout of adversaries detection (the rate of misjudging benign participants as adversaries) by at least 51.1% and improve the speed of detecting all malicious participants by at least 33.4% compared with two popular defense methods. Besides, the privacy preserving of PID is also effective.

Detecting and mitigating poisoning attacks in federated learning using generative adversarial networks

Backdoor Attacks and Defenses in Federated Learning: State-of-the-Art, Taxonomy, and Future Directions

Poisoning Deep Learning Based Recommender Model in Federated Learning Scenarios.

Oblivion: Poisoning Federated Learning by Inducing Catastrophic Forgetting.

Defending Poisoning Attacks in Federated Learning via Adversarial Training Method

A Privacy-Aware and Incremental Defense Method Against GAN-Based Poisoning Attack

A GAN-Based Data Poisoning Attack Against Federated Learning Systems and Its Countermeasure

ADFL: A Poisoning Attack Defense Framework for Horizontal Federated Learning

Model Poisoning Attack In Federated Learning Via Adversarial Examples

Poisoning Attacks in Federated Learning: A Survey

Data Poisoning Attacks on Federated Machine Learning

Challenges and Countermeasures of Federated Learning Data Poisoning Attack Situation Prediction

FL-PTD: A Privacy Preserving Defense Strategy Against Poisoning Attacks in Federated Learning.

De-Pois: An Attack-Agnostic Defense against Data Poisoning Attacks

A GAN-based data poisoning framework against anomaly detection in vertical federated learning

Optimized Client-side Detection of Model Poisoning Attacks in Federated learning

Analyzing Federated Learning through an Adversarial Lens

Defending Against Data Poisoning Attack in Federated Learning With Non-IID Data

A Survey on Federated Learning Poisoning Attacks and Defenses

Using Anomaly Detection to Detect Poisoning Attacks in Federated Learning Applications

A Data-Driven Defense against Edge-case Model Poisoning Attacks on Federated Learning