Act in Collusion: Distributed Multi-Target Backdoor Attacks in Federated Learning
Fuente:
arXiv
Enregistré dans:
| Auteurs principaux: | , , , , , , , , |
|---|---|
| Format: | Preprint |
| Publié: |
2024
|
| Sujets: | |
| Accès en ligne: | |
| Tags: |
Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
|
| _version_ | 1866910185933504512 |
|---|---|
| author | Liu, Tao Man, Dapeng Lv, Jiguang Xu, Chen Xi, Weiye Wang, Huanran Zhang, Yuhang Zhao, Tianming Yang, Wu |
| author_facet | Liu, Tao Man, Dapeng Lv, Jiguang Xu, Chen Xi, Weiye Wang, Huanran Zhang, Yuhang Zhao, Tianming Yang, Wu |
| contents | Federated learning (FL) is widely used in Internet-of-Things (IoT) systems, but its distributed training process also exposes it to backdoor attacks. Existing studies mainly consider single-target or centralized multi-target settings, while coordinated distributed multi-target attacks remain underexplored. In practical IoT scenarios, one adversarial entity may control multiple distributed malicious clients and assign each client distinct triggers and target labels. Under this setting, existing distributed backdoor methods often fail to preserve the effectiveness of all backdoors because malicious updates conflict during aggregation. To address this issue, we propose a Distributed Multi-Target Backdoor Attack (DMBA) for FL. DMBA introduces a Backdoor Replay (BR) mechanism to reduce discrepancies among malicious gradients and a Channel-Frequency Composite Trigger (CFCT) strategy to improve trigger distinguishability and alleviate local interference. Experiments on multiple datasets show that DMBA ensures attack success rates above 80% for all implanted backdoors, whereas some baseline backdoors fall below 50% and may even approach 0. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2411_03926 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | Act in Collusion: Distributed Multi-Target Backdoor Attacks in Federated Learning Liu, Tao Man, Dapeng Lv, Jiguang Xu, Chen Xi, Weiye Wang, Huanran Zhang, Yuhang Zhao, Tianming Yang, Wu Computer Vision and Pattern Recognition Federated learning (FL) is widely used in Internet-of-Things (IoT) systems, but its distributed training process also exposes it to backdoor attacks. Existing studies mainly consider single-target or centralized multi-target settings, while coordinated distributed multi-target attacks remain underexplored. In practical IoT scenarios, one adversarial entity may control multiple distributed malicious clients and assign each client distinct triggers and target labels. Under this setting, existing distributed backdoor methods often fail to preserve the effectiveness of all backdoors because malicious updates conflict during aggregation. To address this issue, we propose a Distributed Multi-Target Backdoor Attack (DMBA) for FL. DMBA introduces a Backdoor Replay (BR) mechanism to reduce discrepancies among malicious gradients and a Channel-Frequency Composite Trigger (CFCT) strategy to improve trigger distinguishability and alleviate local interference. Experiments on multiple datasets show that DMBA ensures attack success rates above 80% for all implanted backdoors, whereas some baseline backdoors fall below 50% and may even approach 0. |
| title | Act in Collusion: Distributed Multi-Target Backdoor Attacks in Federated Learning |
| topic | Computer Vision and Pattern Recognition |
| url | https://arxiv.org/abs/2411.03926 |