Abstract:Federated Learning (FL) offers a promising solution to the privacy concerns associated with centralized Machine Learning (ML) by enabling decentralized, collaborative learning. However, FL is vulnerable to various security threats, including poisoning attacks, where adversarial clients manipulate the training data or model updates to degrade overall model performance. Recognizing this threat, researchers have focused on developing defense mechanisms to counteract poisoning attacks in FL systems. However, existing robust FL methods predominantly focus on computer vision tasks, leaving a gap in addressing the unique challenges of FL with time series data. In this paper, we present FLORAL, a defense mechanism designed to mitigate poisoning attacks in federated learning for time-series tasks, even in scenarios with heterogeneous client data and a large number of adversarial participants. Unlike traditional model-centric defenses, FLORAL leverages logical reasoning to evaluate client trustworthiness by aligning their predictions with global time-series patterns, rather than relying solely on the similarity of client updates. Our approach extracts logical reasoning properties from clients, then hierarchically infers global properties, and uses these to verify client updates. Through formal logic verification, we assess the robustness of each client contribution, identifying deviations indicative of adversarial behavior. Experimental results on two datasets demonstrate the superior performance of our approach compared to existing baseline methods, highlighting its potential to enhance the robustness of FL to time series applications. Notably, FLORAL reduced the prediction error by 93.27\% in the best-case scenario compared to the second-best baseline. Our code is available at \url{<a class="link-external link-https" href="https://anonymous.4open.science/r/FLORAL-Robust-FTS" rel="external noopener nofollow">this https URL</a>}.

Low Dimensional Secure Federated Learning Framework Against Poisoning Attacks

FLShield: A Validation Based Federated Learning Framework to Defend Against Poisoning Attacks

DPFLA: Defending Private Federated Learning Against Poisoning Attacks

Data Poisoning Attacks Against Federated Learning Systems

Federated Learning Under Attack: Exposing Vulnerabilities through Data Poisoning Attacks in Computer Networks

Federated Learning in Adversarial Environments: Testbed Design and Poisoning Resilience in Cybersecurity

Formal Logic-guided Robust Federated Learning against Poisoning Attacks

Defending Against Data Poisoning Attack in Federated Learning With Non-IID Data

ADFL: A Poisoning Attack Defense Framework for Horizontal Federated Learning

FL-PTD: A Privacy Preserving Defense Strategy Against Poisoning Attacks in Federated Learning.

SPFL: A Self-purified Federated Learning Method Against Poisoning Attacks

Secure and Efficient Decentralized Federated Learning with Data Representation Protection

FedCC: Robust Federated Learning against Model Poisoning Attacks

FLDetector: Defending Federated Learning Against Model Poisoning Attacks via Detecting Malicious Clients

Pocket Diagnosis: Secure Federated Learning against Poisoning Attack in the Cloud

Robust Federated Learning against both Data Heterogeneity and Poisoning Attack via Aggregation Optimization

Fed-LSAE: Thwarting Poisoning Attacks against Federated Cyber Threat Detection System via Autoencoder-based Latent Space Inspection

Using Anomaly Detection to Detect Poisoning Attacks in Federated Learning Applications

A federated learning attack method based on edge collaboration via cloud

Defending against Data Poisoning Attacks in Federated Learning via User Elimination

A Robust and Efficient Federated Learning Algorithm Against Adaptive Model Poisoning Attacks