Deep Model Poisoning Attack on Federated Learning

Xingchen Zhou, Ming Xu, Yiming Wu and Ning Zheng
Additional contact information
Xingchen Zhou: School of Cyberspace, Hangzhou Dianzi University, Hangzhou 310018, China
Ming Xu: School of Cyberspace, Hangzhou Dianzi University, Hangzhou 310018, China
Yiming Wu: School of Cyberspace, Hangzhou Dianzi University, Hangzhou 310018, China
Ning Zheng: School of Cyberspace, Hangzhou Dianzi University, Hangzhou 310018, China

Future Internet, 2021, vol. 13, issue 3, 1-14

Abstract: Federated learning is a novel distributed learning framework, which enables thousands of participants to collaboratively construct a deep learning model. In order to protect confidentiality of the training data, the shared information between server and participants are only limited to model parameters. However, this setting is vulnerable to model poisoning attack, since the participants have permission to modify the model parameters. In this paper, we perform systematic investigation for such threats in federated learning and propose a novel optimization-based model poisoning attack. Different from existing methods, we primarily focus on the effectiveness, persistence and stealth of attacks. Numerical experiments demonstrate that the proposed method can not only achieve high attack success rate, but it is also stealthy enough to bypass two existing defense methods.

Keywords: federated learning; model poisoning attack; decentralized approach (search for similar items in EconPapers)
JEL-codes: O3 (search for similar items in EconPapers)
Date: 2021
References: View complete reference list from CitEc
Citations:

Downloads: (external link)
https://www.mdpi.com/1999-5903/13/3/73/pdf (application/pdf)
https://www.mdpi.com/1999-5903/13/3/73/ (text/html)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:gam:jftint:v:13:y:2021:i:3:p:73-:d:516861

Access Statistics for this article

Future Internet is currently edited by Ms. Grace You

More articles in Future Internet from MDPI
Bibliographic data for series maintained by MDPI Indexing Manager ().