Search papers, labs, and topics across Lattice.
The paper introduces Layer Smoothing Attack (LSA), a novel backdoor attack in federated learning that exploits layer-specific vulnerabilities in neural networks. LSA employs Layer Substitution Analysis to identify backdoor-critical layers and then strategically manipulates these layers to inject backdoors. Experiments on various models and datasets show LSA achieves a high backdoor success rate (up to 97%) while maintaining accuracy and bypassing existing defenses, highlighting vulnerabilities in FL security.
By targeting specific layers, a new backdoor attack achieves near-perfect success in federated learning while evading existing defenses, revealing critical vulnerabilities in current security frameworks.
Federated learning (FL) enables distributed model training across edge devices while preserving data locality. This decentralized approach has emerged as a promising solution for collaborative learning on sensitive user data, effectively addressing the longstanding privacy concerns inherent in centralized systems. However, the decentralized nature of FL exposes new security vulnerabilities, especially backdoor attacks that threaten model integrity. To investigate this critical concern, this paper presents the Layer Smoothing Attack (LSA), a novel backdoor attack that exploits layer-specific vulnerabilities in neural networks. First, a Layer Substitution Analysis methodology systematically identifies backdoor-critical (BC) layers that contribute most significantly to backdoor success. Subsequently, LSA strategically manipulates these BC layers to inject persistent backdoors while remaining undetected by state-of-the-art defense mechanisms. Extensive experiments across diverse model architectures and datasets demonstrate that LSA achieves a remarkably backdoor success rate of up to 97% while maintaining high model accuracy on the primary task, consistently bypassing modern FL defenses. These findings uncover fundamental vulnerabilities in current FL security frameworks, demonstrating that future defenses must incorporate layer-aware detection and mitigation strategies.
