Abstract:Federated Learning (FL) offers a promising solution to the privacy concerns associated with centralized Machine Learning (ML) by enabling decentralized, collaborative learning. However, FL is vulnerable to various security threats, including poisoning attacks, where adversarial clients manipulate the training data or model updates to degrade overall model performance. Recognizing this threat, researchers have focused on developing defense mechanisms to counteract poisoning attacks in FL systems. However, existing robust FL methods predominantly focus on computer vision tasks, leaving a gap in addressing the unique challenges of FL with time series data. In this paper, we present FLORAL, a defense mechanism designed to mitigate poisoning attacks in federated learning for time-series tasks, even in scenarios with heterogeneous client data and a large number of adversarial participants. Unlike traditional model-centric defenses, FLORAL leverages logical reasoning to evaluate client trustworthiness by aligning their predictions with global time-series patterns, rather than relying solely on the similarity of client updates. Our approach extracts logical reasoning properties from clients, then hierarchically infers global properties, and uses these to verify client updates. Through formal logic verification, we assess the robustness of each client contribution, identifying deviations indicative of adversarial behavior. Experimental results on two datasets demonstrate the superior performance of our approach compared to existing baseline methods, highlighting its potential to enhance the robustness of FL to time series applications. Notably, FLORAL reduced the prediction error by 93.27\% in the best-case scenario compared to the second-best baseline. Our code is available at \url{<a class="link-external link-https" href="https://anonymous.4open.science/r/FLORAL-Robust-FTS" rel="external noopener nofollow">this https URL</a>}.

Robust federated learning with voting and scaling

Oblivion: Poisoning Federated Learning by Inducing Catastrophic Forgetting.

Learning to Detect Malicious Clients for Robust Federated Learning

RFed: Robustness-Enhanced Privacy-Preserving Federated Learning Against Poisoning Attack

Robust Federated Recommendation System

A Robust and Efficient Federated Learning Algorithm Against Adaptive Model Poisoning Attacks

TDFL: Truth Discovery Based Byzantine Robust Federated Learning

Robust Quantity-Aware Aggregation for Federated Learning

Robust Federated Learning against both Data Heterogeneity and Poisoning Attack via Aggregation Optimization

Provably Secure Federated Learning against Malicious Clients

FedDMC: Efficient and Robust Federated Learning via Detecting Malicious Clients

Contribution-wise Byzantine-robust aggregation for Class-Balanced Federated Learning

Secure Model Aggregation Against Poisoning Attacks for Cross-Silo Federated Learning With Robustness and Fairness

ADFL: A Poisoning Attack Defense Framework for Horizontal Federated Learning

RoseAgg: Robust Defense Against Targeted Collusion Attacks in Federated Learning

FLDetector: Defending Federated Learning Against Model Poisoning Attacks via Detecting Malicious Clients

Byzantine-Robust Decentralized Federated Learning

Formal Logic-guided Robust Federated Learning against Poisoning Attacks

FedCC: Robust Federated Learning against Model Poisoning Attacks

FL-WBC: Enhancing Robustness against Model Poisoning Attacks in Federated Learning from a Client Perspective

Federated Learning Robust to Byzantine Attacks: Achieving Zero Optimality Gap