Search papers, labs, and topics across Lattice.
This paper investigates targeted label-flipping and oversampling attacks on federated conditional GANs, focusing on how malicious clients can manipulate label information to skew the learned generation distribution. Through theoretical analysis and empirical evaluation on datasets like FEMNIST, MNIST, and CIFAR10, the authors quantify the effectiveness of these attacks by measuring the Kullback-Leibler divergence between clean and poisoned distributions. The findings reveal that while the semantic damage from these attacks increases linearly with poisoning strength, the deviation from the true target distribution escalates quadratically, complicating detection efforts.
Label-flipping attacks on federated GANs can skew generation distributions significantly while remaining undetectable by traditional label-agnostic metrics.
In a federated learning setup for GANs, several adversarial attacks are possible. One such attack is label flipping, in which malicious clients deliberately alter label information during local training in order to manipulate the global generator. The objective of this attack is to skew the learned generation distribution so that samples conditioned on a target label are instead mapped to a source class. In this work, we investigate the effectiveness of label flipping attacks in federated GANs through both theoretical analysis and empirical evaluation. We further consider an oversampling based variant, in which malicious clients upweight poisoned samples during local training to amplify their influence on the aggregated global model. We quantify the resulting distributional shift by computing the Kullback Leibler divergence between the clean and poisoned class conditional distributions, and show both analytically and on FEMNIST, MNIST, and CIFAR10 that the semantic damage of the attack grows linearly in the effective poisoning strength while deviation from the true target distribution grows only quadratically, making the attack effective yet difficult to detect from label agnostic metrics.
