Distributed minimax optimization plays a crucial role in modern machine learning. However, this framework is highly susceptible to adversarial attacks, especially model poisoning attacks, where malicious participants inject harmful updates to compromise the learning process. Existing defense mechanisms primarily focus on traditional distributed learning in minimization problems. To address this challenge, we propose Robust-LSGDA, a novel distributed minimax learning algorithm designed to defend against model poisoning attacks. Our algorithm achieves an asymptotically optimal convergence rate of \(\mathcal {O} \left( \frac{1}{\sqrt{KT} } \right) \) , where K is the number of clients and T is the global maximum number of iterations. Furthermore, we establish a robustness guarantee for Robust-LSGDA by analyzing its certified radius, providing theoretical assurance of its defense capabilities.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

A Robust Distributed Minimax Learning Method Against Model Poisoning Attacks

  • Tingting Zhang,
  • Yuan Yuan,
  • Xiao Zhang,
  • Yifei Zou,
  • Zhipeng Cai,
  • Dongxiao Yu

摘要

Distributed minimax optimization plays a crucial role in modern machine learning. However, this framework is highly susceptible to adversarial attacks, especially model poisoning attacks, where malicious participants inject harmful updates to compromise the learning process. Existing defense mechanisms primarily focus on traditional distributed learning in minimization problems. To address this challenge, we propose Robust-LSGDA, a novel distributed minimax learning algorithm designed to defend against model poisoning attacks. Our algorithm achieves an asymptotically optimal convergence rate of \(\mathcal {O} \left( \frac{1}{\sqrt{KT} } \right) \) , where K is the number of clients and T is the global maximum number of iterations. Furthermore, we establish a robustness guarantee for Robust-LSGDA by analyzing its certified radius, providing theoretical assurance of its defense capabilities.