BaFFLe: Backdoor detection via Feedback-based Federated Learning

2020-11-04 · Sebastien Andreina, Giorgia Azzurra Marson, Helen Möllering, Ghassan Karame

Recent studies have shown that federated learning (FL) is vulnerable to poisoning attacks that inject a backdoor into the global model. These attacks are effective even when performed by a single client, and undetectable by most existing defensive techniques. In this paper, we propose Backdoor detection via Feedback-based Federated Learning (BAFFLE), a novel defense to secure FL against backdoor attacks. The core idea behind BAFFLE is to leverage data of multiple clients not only for training but also for uncovering model poisoning. We exploit the availability of diverse datasets at the various clients by incorporating a feedback loop into the FL process, to integrate the views of those clients when deciding whether a given model update is genuine or not. We show that this powerful construct can achieve very high detection rates against state-of-the-art backdoor attacks, even when relying on straightforward methods to validate the model. Through empirical evaluation using the CIFAR-10 and FEMNIST datasets, we show that by combining the feedback loop with a method that suspects poisoning attempts by assessing the per-class classification performance of the updated model, BAFFLE reliably detects state-of-the-art backdoor attacks with a detection accuracy of 100% and a false-positive rate below 5%. Moreover, we show that our solution can detect adaptive attacks aimed at bypassing the defense.

📄 PDF Abstract BibTeX arXiv:2011.02167

Code (0)

등록된 구현이 없습니다.

Tasks

Federated LearningModel Poisoning

BAFFLE: TOWARDS RESOLVING FEDERATED LEARNING’S DILEMMA - THWARTING BACKDOOR AND INFERENCE ATTACKS

2021-01-01 · Thien Duc Nguyen, Phillip Rieger, Hossein Yalame, Helen Möllering 외

Recently, federated learning (FL) has been subject to both security and privacy attacks posing a dilemmatic challenge on the underlying algorithmic designs: On the one hand, FL is shown to be vulnerable to backdoor attac…

Federated Learning image-classification Image Classification

BAFFLE: A Baseline of Backpropagation-Free Federated Learning

2023-01-28 · Haozhe Feng, Tianyu Pang, Chao Du, Wei Chen 외

Federated learning (FL) is a general principle for decentralized clients to train a server model collectively without sharing local data. FL is a promising framework with practical applications, but its standard training…

Federated Learning Quantization

BAFFLE : Blockchain Based Aggregator Free Federated Learning

2019-09-16 · Paritosh Ramanan, Kiyoshi Nakayama

A key aspect of Federated Learning (FL) is the requirement of a centralized aggregator to maintain and update the global model. However, in many cases orchestrating a centralized aggregator might be infeasible due to num…

Computational Efficiency Federated Learning

BAFFLE: Hiding Backdoors in Offline Reinforcement Learning Datasets

2022-10-07 · Chen Gong, Zhou Yang, Yunpeng Bai, Junda He 외

Reinforcement learning (RL) makes an agent learn from trial-and-error experiences gathered during the interaction with the environment. Recently, offline RL has become a popular RL paradigm because it saves the interacti…

Autonomous Driving Backdoor Attack Offline RL reinforcement-learning+2

Coward: Collision-based OOD Watermarking for Practical Proactive Federated Backdoor Detection

2025-08-04 · Wenjie Li, Siying Gu, Yiming Li, Shuxin Li 외 arxiv

Backdoor detection is currently the mainstream defense against backdoor attacks in federated learning (FL), where a small number of malicious clients can upload poisoned updates to compromise the federated global model. …

Federated Learning