Bad-PFL: Exploring Backdoor Attacks against Personalized Federated Learning

2025-01-22 · Mingyuan Fan, Zhanyi Hu, Fuyi Wang, Cen Chen

Data heterogeneity and backdoor attacks rank among the most significant challenges facing federated learning (FL). For data heterogeneity, personalized federated learning (PFL) enables each client to maintain a private personalized model to cater to client-specific knowledge. Meanwhile, vanilla FL has proven vulnerable to backdoor attacks. However, recent advancements in PFL community have demonstrated a potential immunity against such attacks. This paper explores this intersection further, revealing that existing federated backdoor attacks fail in PFL because backdoors about manually designed triggers struggle to survive in personalized models. To tackle this, we design Bad-PFL, which employs features from natural data as our trigger. As long as the model is trained on natural data, it inevitably embeds the backdoor associated with our trigger, ensuring its longevity in personalized models. Moreover, our trigger undergoes mutual reinforcement training with the model, further solidifying the backdoor's durability and enhancing attack effectiveness. The large-scale experiments across three benchmark datasets demonstrate the superior performance of our attack against various PFL methods, even when equipped with state-of-the-art defense mechanisms.

📄 PDF Abstract BibTeX arXiv:2501.12736

Code (0)

등록된 구현이 없습니다.

Tasks

Federated Learning Personalized Federated Learning

Revisiting Personalized Federated Learning: Robustness Against Backdoor Attacks

2023-02-03 · Zeyu Qin, Liuyi Yao, Daoyuan Chen, Yaliang Li 외

In this work, besides improving prediction accuracy, we study whether personalization could bring robustness benefits to backdoor attacks. We conduct the first study of backdoor attacks in the pFL framework, testing 4 wi…

Backdoor Attack Federated Learning Personalized Federated Learning

Lurking in the shadows: Unveiling Stealthy Backdoor Attacks against Personalized Federated Learning

2024-06-10 · Xiaoting Lyu, Yufei Han, Wei Wang, Jingkai Liu 외

Federated Learning (FL) is a collaborative machine learning technique where multiple clients work together with a central server to train a global model without sharing their private data. However, the distribution shift…

Backdoor Attack Federated Learning Personalized Federated Learning

SAB:A Stealing and Robust Backdoor Attack based on Steganographic Algorithm against Federated Learning

2024-08-25 · Weida Xu, Yang Xu, Sicong Zhang

Federated learning, an innovative network architecture designed to safeguard user privacy, is gaining widespread adoption in the realm of technology. However, given the existence of backdoor attacks in federated learning…

Backdoor Attack backdoor defense Federated Learning

How to Backdoor HyperNetwork in Personalized Federated Learning?

2022-01-18 · Phung Lai, NhatHai Phan, Issa Khalil, Abdallah Khreishah 외

This paper explores previously unknown backdoor risks in HyperNet-based personalized federated learning (HyperNetFL) through poisoning attacks. Based upon that, we propose a novel model transferring attack (called HNTroj…

Data Poisoning Federated Learning Personalized Federated Learning

You Can Backdoor Personalized Federated Learning

2023-07-29 · Tiandi Ye, Cen Chen, Yinggui Wang, Xiang Li 외

Existing research primarily focuses on backdoor attacks and defenses within the generic federated learning scenario, where all clients collaborate to train a single global model. A recent study conducted by Qin et al. (2…

Backdoor Attack Federated Learning Meta-Learning Personalized Federated Learning