Federated Learning (FL) is a distributed machine learning technique that enables clients to train Deep Neural Networks (DNNs) collaboratively without centralized data storage. However, this distributed nature introduces security challenges, making FL vulnerable to backdoor attacks. In these attacks, an attacker injects triggers into local models and tampers with updates during aggregation, causing incorrect predictions for specific inputs. As backdoor attacks evolve to become more covert, detecting these stealthy backdoors has become a critical issue. In this paper, we design the Lightweight Focus Layer (F2L), an adjustable layer inserted into server aggregation rounds. F2L detects subtle variations in backdoor attack parameters and fine-tunes them to minimize their impact. Our approach can be combined with existing defenses, significantly enhancing the robustness of FL models. Testing on three public datasets showed that F2L maintained the main task’s accuracy while significantly reducing backdoor attack effectiveness.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

F2L: A Lightweight Focus Layer Against Backdoor Attack in Federated Learning

  • Peiyao Niu,
  • Lumin Zhou,
  • Yan Lv,
  • Peilin Li,
  • Yue Wang,
  • Tao Li

摘要

Federated Learning (FL) is a distributed machine learning technique that enables clients to train Deep Neural Networks (DNNs) collaboratively without centralized data storage. However, this distributed nature introduces security challenges, making FL vulnerable to backdoor attacks. In these attacks, an attacker injects triggers into local models and tampers with updates during aggregation, causing incorrect predictions for specific inputs. As backdoor attacks evolve to become more covert, detecting these stealthy backdoors has become a critical issue. In this paper, we design the Lightweight Focus Layer (F2L), an adjustable layer inserted into server aggregation rounds. F2L detects subtle variations in backdoor attack parameters and fine-tunes them to minimize their impact. Our approach can be combined with existing defenses, significantly enhancing the robustness of FL models. Testing on three public datasets showed that F2L maintained the main task’s accuracy while significantly reducing backdoor attack effectiveness.