Beyond Traditional Threats: A Persistent Backdoor Attack on Federated Learning
Backdoors on federated learning will be diluted by subsequent benign updates. This is reflected in the significant reduction of attack success rate as iterations increase, ultimately failing. We use a new metric to quantify the degree of this weakened backdoor effect, called attack persistence. Given that research to improve this performance has not been widely noted,we propose a Full Combination Backdoor Attack (FCBA) method. It aggregates more combined trigger information for a more complete backdoor pattern in the global model. Trained backdoored global model is more resilient to benign updates, leading to a higher attack success rate on the test set. We test on three datasets and evaluate with two models across various settings. FCBA's persistence outperforms SOTA federated learning backdoor attacks. On GTSRB, postattack 120 rounds, our attack success rate rose over 50% from baseline. The core code of our method is available at https://github.com/PhD-TaoLiu/FCBA.
Code (1)
Tasks
Backdoor AttackFederated LearningSimilar Papers 제목 키워드 기반
On the Vulnerability of Backdoor Defenses for Federated Learning
Federated Learning (FL) is a popular distributed machine learning paradigm that enables jointly training a global model without sharing clients' data. However, its repetitive server-client communication gives room for ba…
Backdoor AttackFederated LearningTask-Agnostic Detector for Insertion-Based Backdoor Attacks
Textual backdoor attacks pose significant security threats. Current detection approaches, typically relying on intermediate feature representation or reconstructing potential triggers, are task-specific and less effectiv…
named-entity-recognitionNamed Entity RecognitionQuestion AnsweringSentence+1Act in Collusion: A Persistent Distributed Multi-Target Backdoor in Federated Learning
Federated learning, a novel paradigm designed to protect data privacy, is vulnerable to backdoor attacks due to its distributed nature. Current research often designs attacks based on a single attacker with a single back…
Backdoor AttackFederated LearningWatch Out for Your Agents! Investigating Backdoor Threats to LLM-Based Agents
Driven by the rapid development of Large Language Models (LLMs), LLM-based agents have been developed to handle various real-world applications, including finance, healthcare, and shopping, etc. It is crucial to ensure t…
Backdoor Attackbackdoor defenseData PoisoningA Robust Attack: Displacement Backdoor Attack
As artificial intelligence becomes more prevalent in our lives, people are enjoying the convenience it brings, but they are also facing hidden threats, such as data poisoning and ad- versarial attacks. These threats can …
Autonomous DrivingBackdoor AttackData AugmentationData Poisoning