Search papers, labs, and topics across Lattice.
This paper introduces FedDAB, a novel two-phase defense mechanism against backdoor attacks in Federated Learning (FL) that addresses the challenges posed by statistical heterogeneity and the stealthy nature of such attacks. The first phase enhances the consistency of benign local updates through a model-contrastive term, while the second phase implements alignment checking to filter out abnormal updates based on their alignment with historical data. Theoretical analysis confirms FedDAB's robustness with a convergence rate of $\mathcal{O}(1/T)$, and experimental results demonstrate its superior performance compared to existing defense strategies.
FedDAB outperforms traditional defenses by effectively filtering out malicious updates in Federated Learning, ensuring robust model integrity against backdoor attacks.
Federated Learning (FL) is vulnerable to backdoor attacks because of its distributed nature in edge computing scenarios. Existing defense methods show limited efficacy as they overlook the deviations among benign local updates caused by statistical heterogeneity and the stealthiness of backdoor attacks. To tackle these issues, we propose FedDAB, a two-phase method that combines local contrastive regularization with alignment checking, to defend against backdoor attacks. In the first phase, FedDAB introduces a novel model-contrastive term into the local objective to enhance direction and magnitude consistency among benign updates. In the second phase, FedDAB employs an alignment checking strategy to evaluate each local update in terms of overall-direction alignment and parameter-level alignment with historical information, excluding updates that exhibit abnormal alignment patterns from global aggregation. We theoretically prove FedDAB's robustness with a convergence rate of $\mathcal{O}(1/T)$. Extensive experiments show that FedDAB outperforms existing defense methods against backdoor attacks.
