Search papers, labs, and topics across Lattice.
This paper introduces FedAOT, a meta-learning-based defense mechanism against Byzantine attacks in federated learning that dynamically weights client updates based on reliability. FedAOT addresses the limitations of existing defenses by effectively countering multi-label flipping and untargeted poisoning attacks without relying on predefined thresholds or restrictive attack assumptions. Experiments show FedAOT substantially improves model accuracy and resilience across diverse datasets and attack types while maintaining computational efficiency.
Forget hand-tuned defenses: a meta-learned aggregation strategy dynamically shields federated learning from a wide range of Byzantine attacks, even ones it's never seen before.
Federated Learning (FL) is increasingly applied in sectors like healthcare, finance, and IoT, enabling collaborative model training while safeguarding user privacy. However, FL systems are susceptible to Byzantine adversaries that inject malicious updates, which can severely compromise global model performance. Existing defenses tend to focus on specific attack types and fail against untargeted strategies, such as multi-label flipping or combinations of noise and backdoor patterns. To overcome these limitations, we propose FedAOT-a novel defense mechanism that counters multi-label flipping and untargeted poisoning attacks using a metalearning-inspired adaptive aggregation framework. FedAOT dynamically weights client updates based on their reliability, suppressing adversarial influence without relying on predefined thresholds or restrictive attack assumptions. Notably, FedAOT generalizes effectively across diverse datasets and a wide range of attack types, maintaining robust performance even in previously unseen scenarios. Experimental results demonstrate that FedAOT substantially improves model accuracy and resilience while maintaining computational efficiency, offering a scalable and practical solution for secure federated learning.
