Byzantine-Robust Distributed Learning: Towards Optimal Statistical Rates
Not on the map. Why?
Cited by 40 in LLM safety and security, but placed by its own abstract, which didn’t fit.
Abstract (arXiv)
In large-scale distributed learning, security issues have become increasingly important. Particularly in a decentralized environment, some computing units may behave abnormally, or even exhibit Byzantine failures -- arbitrary and potentially adversarial behavior. In this paper, we develop distributed learning algorithms that are provably robust against such failures, with a focus on achieving optimal statistical performance. A main result of this work is a sharp analysis of two robust distributed gradient descent algorithms based on median and trimmed mean operations, respectively. We prove statistical error rates for three kinds of population loss functions: strongly convex, non-strongly convex, and smooth non-convex. In particular, these algorithms are shown to achieve order-optimal statistical error rates for strongly convex losses. To achieve better communication efficiency, we further propose a median-based distributed algorithm that is provably robust, and uses only one communication round. For strongly convex quadratic loss, we show that this algorithm achieves the same optimal error rate as the robust distributed gradient descent algorithms.
Key facts. Cited by 698 papers in the map (data through 7 Oct 2026). First posted on arXiv 5 Mar 2018.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 68; 2022: 99; 2023: 113; 2024: 139; 2025: 153; 2026: 126.
698 papers.
Sort:
By area:
- 2021A Field Guide to Federated Optimizationcited by 312
- 2022FLDetector: Defending Federated Learning Against Model Poisoning Attacks via Detecting Malicious Clientscited by 119
- 2021Back to the Drawing Board: A Critical Evaluation of Poisoning Attacks on Production Federated Learningcited by 116
- 2022Neurotoxin: Durable Backdoors in Federated Learningcited by 97
- 2021Edge Artificial Intelligence for 6G: Vision, Enabling Technologies, and Applicationscited by 96
- 2021CRFL: Certifiably Robust Federated Learning against Backdoor Attackscited by 91
- 2023Multimodal Federated Learning via Contrastive Representation Ensemblecited by 85
- 2022Survey on Federated Learning Threats: concepts, taxonomy on attacks and defences, experimental study and challengescited by 81
- 2022DeepSight: Mitigating Backdoor Attacks in Federated Learning Through Deep Model Inspectioncited by 78
- 2022MPAF: Model Poisoning Attacks to Federated Learning based on Fake Clientscited by 65
- 2023Fixing by Mixing: A Recipe for Optimal Byzantine ML under Heterogeneitycited by 64
- 2022Byzantine Machine Learning Made Easy by Resilient Averaging of Momentumscited by 63
38 more
- 2022FedCorr: Multi-Stage Federated Learning for Label Noise Correctioncited by 61
- 2021Provably Secure Federated Learning against Malicious Clientscited by 60
- 2022FedRecover: Recovering from Poisoning Attacks in Federated Learning using Historical Informationcited by 53
- 2021Fault-Tolerant Federated Reinforcement Learning with Theoretical Guaranteecited by 52
- 2021Federated Learning: A Signal Processing Perspectivecited by 49
- 2024Byzantine-Robust Decentralized Federated Learningcited by 47
- 2021SparseFed: Mitigating Model Poisoning Attacks in Federated Learning with Sparsificationcited by 46
- 2021Challenges and Approaches for Mitigating Byzantine Attacks in Federated Learningcited by 46
- 2022VeriFi: Towards Verifiable Federated Unlearningcited by 41
- 2023Recent Advances on Federated Learning: A Systematic Surveycited by 40
- 2021PipAttack: Poisoning Federated Recommender Systems forManipulating Item Promotioncited by 37
- 2022FLIP: A Provable Defense Framework for Backdoor Mitigation in Federated Learningcited by 37
- 2021Federated Learning for Malware Detection in IoT Devicescited by 36
- 2021FL-WBC: Enhancing Robustness against Model Poisoning Attacks in Federated Learning from a Client Perspectivecited by 35
- 2021FedIPR: Ownership Verification for Federated Deep Neural Network Modelscited by 33
- 2023Backdoor Attacks and Defenses in Federated Learning: Survey, Challenges and Future Research Directionscited by 33
- 2024Advances and Open Challenges in Federated Foundation Modelscited by 33
- 2023An Experimental Study of Byzantine-Robust Aggregation Schemes in Federated Learningcited by 32
- 2022Byzantine-Robust Federated Learning with Optimal Statistical Rates and Privacy Guaranteescited by 30
- 2022LoMar: A Local Defense Against Poisoning Attack on Federated Learningcited by 29
- 2022Byzantine-Robust Decentralized Learning via ClippedGossipcited by 29
- 2022FLCert: Provably Secure Federated Learning against Poisoning Attackscited by 29
- 2022AFLGuard: Byzantine-robust Asynchronous Federated Learningcited by 29
- 2021Byzantine-robust Federated Learning through Collaborative Malicious Gradient Filteringcited by 28
- 2023Integration of Large Language Models and Federated Learningcited by 28
- 2023On the Vulnerability of Backdoor Defenses for Federated Learningcited by 27
- 2023A Survey on Decentralized Federated Learningcited by 27
- 2022CrowdGuard: Federated Backdoor Detection in Federated Learningcited by 26
- 2022A Survey on Federated Recommendation Systemscited by 25
- 2023Robust Distributed Learning: Tight Error Bounds and Breakdown Point under Data Heterogeneitycited by 25
- 2023FreqFed: A Frequency Analysis-Based Approach for Mitigating Poisoning Attacks in Federated Learningcited by 25
- 2023On the Privacy-Robustness-Utility Trilemma in Distributed Learningcited by 24
- 2023A Survey of Trustworthy Federated Learning with Perspectives on Security, Robustness, and Privacycited by 24
- 2021RoFL: Robustness of Secure Federated Learningcited by 23
- 2022On the (In)security of Peer-to-Peer Decentralized Machine Learningcited by 23
- 2023BayBFed: Bayesian Backdoor Defense for Federated Learningcited by 23
- 2023Multi-metrics adaptively identifies backdoors in Federated learningcited by 23
- 2022DYNAFED: Tackling Client Data Heterogeneity with Global Dynamicscited by 22
50 most cited of 698 All 698 (JSON)
- 2026Federated Agent Optimization1 Oct 2026
- 2026Compression Footprints as Security Signals for Model-Poisoning Defense in Federated Learning30 Sep 2026
- 2026Robustifying Asynchronous SGD via Soft Throttling30 Sep 2026
- 2026DecoyTrace: Toxic Decoys for Active Defense in Decentralized Federated Learning28 Sep 2026
- 2026Physics-Attested Federated Learning: Securing Collaborative Anomaly Detection in Critical Water Infrastructure28 Sep 2026
- 2026How does Adversarial Influence Scale in Multi-Agent Systems?24 Sep 2026
- 2026BRFID: Toward Byzantine-Robust Federated Intrusion Detection23 Sep 2026
- 2026Median Temporal Ensembling: Training-Free Robust Aggregation for Action-Chunked Visuomotor Policies22 Sep 2026
- 2026When Clients Are Orchestrated: Strategic Gradient Manipulation to Defeat Federated Learning Servers with Efficient Defense22 Sep 2026
- 2026FairMean: Promoting Fairness in Distributed Learning under Label Poisoning Attacks22 Sep 2026
- 2026On the Gradient Heterogeneity Dynamics of Adversarially Robust Federated Regression22 Sep 2026
- 2026Structural Negative Transfer in Federated Graph Neural Networks: Diagnosis, Causal Investigation, and the Limits of Divergence-Aware Mitigation15 Sep 2026
38 more
- 2026SWB-DM: A Calibrated Sliced-Wasserstein-Barycenter Aggregator with Delayed-Momentum Caching for Byzantine-Robust Federated Learning under Partial Participation14 Sep 2026
- 2026End-to-End Verifiable and Robust Federated Learning14 Sep 2026
- 2026Trustworthy, Explainable, and Sustainable Decentralized Intelligence for 6G Networks12 Sep 2026
- 2026Quantile-based Loss Filtering for Outlier-Robust Stochastic Gradient Descent11 Sep 2026
- 2026ZK-Trace: Certified Collusion Tracing with Zero-Knowledge Credentials for Federated GNSS Interference Monitoring8 Sep 2026
- 2026Fine-grained Distributed Backdoor Attacks in Federated Learning7 Sep 2026
- 2026Backdoors Leave Structural Traces: FedMAST for Backdoor Detection and Containment in Federated Learning4 Sep 2026
- 2026Privacy, Robustness, and Fairness Trade-offs in Federated Intrusion Detection: Geometric Indistinguishability at the Aggregation Interface3 Sep 2026
- 2026Differentially private federated learning with Byzantine-robust aggregation: A cross-domain framework for secure model training in banking and healthcare systems2 Sep 2026
- 2026CACTUS: Mask-Guided Semantic Clean-Label Backdoors in Decentralized Federated Learning2 Sep 2026
- 2026Optimizing Byzantine Node Placement in Decentralized Federated Learning1 Sep 2026
- 2026FractalNet-Based Heterogeneous Federated Learning for Orbital Edge Intelligence in Satellite Mega-Constellations: A Wildfire Case Study1 Sep 2026
- 2026Cross-lingual Representation Learning via Centroid Intervention Fusion26 Aug 2026
- 2026Rethinking the Transferable Adversarial Attacks and Robust Defense in Federated Learning25 Aug 2026
- 2026Robust Federated Q-Learning with Almost No Communication24 Aug 2026
- 2026Model-Consistent Byzantine-Resilient Decentralized Federated Learning for Collaborative Missions23 Aug 2026
- 2026Thermo-FL: Thermal-Aware Robust Federated Fine-Tuning of Large Language Models for Edge AI21 Aug 2026
- 2026BackDFL: A Unified Benchmark For Backdoor Attacks and Defenses In Decentralized Federated Learning21 Aug 2026
- 2026FedLNS: Leverage LayerNorm Signature Modeling to Mitigate Adversarial Manipulation in Federated LLMs19 Aug 2026
- 2026STAR-FL: Secure Federated Learning with Spatial-Temporal Analysis and Robust Aggregation14 Aug 2026
- 2026Beyond Parameter Space: NTK-Guided Personalized Aggregation for Robust Federated Learning12 Aug 2026
- 2026Analysis of Federated Aggregation under Model Poisoning and Backdoor Attacks: A Reconstructed Cross-Dataset and Cross-Architecture Benchmark11 Aug 2026
- 2026Targeted Label-Flipping and Oversampling Attacks on Federated Conditional GANs10 Aug 2026
- 2026TOFD: Target-Oriented Feature Decoupling against Poisoning Attacks in Split Federated Learning7 Aug 2026
- 2026FedVAR: Prototype-Aligned Federated Framework for Video Anomaly Recognition7 Aug 2026
- 2026Bypassing Krum: Selection-Aware Backdoor Attacks in Federated Learning6 Aug 2026
- 2026Federated Ensemble Forecasting Under Supply-Chain Market Volatility5 Aug 2026
- 2026Robust and Personalized Federated Learning for Aircraft-Engine Prognostics under Benign and Adversarial Client Heterogeneity4 Aug 2026
- 2026FL-OA: A Byzantine-Robust Federated Learning Framework with Outsourced Auditing for Intelligent Devices2 Aug 2026
- 2026Similarity Weighted Aggregation with Global Differential Privacy for Federated Brain Lesion Segmentation1 Aug 2026
- 2026HOMER: Huber-of-Means for Efficient and Robust Estimation in Hilbert Spaces29 Jul 2026
- 2026TriShieldRAG: 3 Rings, One Blind Spot in Layered Defenses for Retrieval-Augmented Generation26 Jul 2026
- 2026Information-Theoretically Secure Aggregation for Lightweight Federated Learning: Resilient to Dropouts and Adversaries23 Jul 2026
- 2026Robust Asynchronous Q-Learning under Reward and State Corruption via Batching23 Jul 2026
- 2026Integrity of peer-to-peer distributed LLM inference under malicious nodes21 Jul 2026
- 2026Enhanced Byzantine-Robust Federated Learning Via Truncated-Quadratic Loss for Heterogeneous Data13 Jul 2026
- 2026Byzantine Accountability Without Consensus: Strong Eventual Consistency for Non-Associative, Stochastic, Robust Aggregation11 Jul 2026
- 2026Secure Decentralized Federated Learning via Gossip and Virtual Voting9 Jul 2026
50 newest of 698 All 698 (JSON)
- 2022VeriFi: Towards Verifiable Federated Unlearningcited by 41
- 2021FedIPR: Ownership Verification for Federated Deep Neural Network Modelscited by 33
- 2025Ten Challenging Problems in Federated Foundation Modelscited by 20
- 2021Robust Federated Learning with Attack-Adaptive Aggregationcited by 17
- 2022An Equivalence Between Data Poisoning and Byzantine Gradient Attackscited by 16
- 2021Meta Federated Learningcited by 8
- 2022Dim-Krum: Backdoor-Resistant Federated Learning for NLP with Dimension-wise Krum-Based Aggregationcited by 8
- 2023Turning Privacy-preserving Mechanisms against Federated Learningcited by 8
- 2022Thinking Two Moves Ahead: Anticipating Other Users Improves Backdoor Attacks in Federated Learningcited by 7
- 2024Federated Unlearning: a Perspective of Stability and Fairnesscited by 7
- 2024PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuningcited by 5
- 2025Data Poisoning Vulnerabilities Across Healthcare AI Architectures: A Security Threat Analysiscited by 3
12 most cited of 39 All 39 (JSON)
- 2026STAR-FL: Secure Federated Learning with Spatial-Temporal Analysis and Robust Aggregation14 Aug 2026
- 2026Robust and Personalized Federated Learning for Aircraft-Engine Prognostics under Benign and Adversarial Client Heterogeneity4 Aug 2026
- 2026Fed-FBD: Federated Functional Block Diversification for Isolation, Privacy, and Surgical Unlearning10 Jun 2026
- 2026Jellyfish: Zero-Shot Federated Unlearning Scheme with Knowledge Disentanglement5 Apr 2026
- 2026Beyond Passive Aggregation: Active Auditing and Topology-Aware Defense in Decentralized Federated Learning19 Mar 2026
- 2025Noise-Aware and Dynamically Adaptive Federated Defense Framework for SAR Image Target Recognition31 Dec 2025
- 2025Data Poisoning Vulnerabilities Across Healthcare AI Architectures: A Security Threat Analysis14 Nov 2025
- 2025Hybrid Reputation Aggregation: A Robust Defense Mechanism for Adversarial Federated Learning in 5G and Edge Network Environments22 Sep 2025
- 2025A Vision-Language Pre-training Model-Guided Approach for Mitigating Backdoor Attacks in Federated Learning14 Aug 2025
- 2025FedLAD: A Linear Algebra Based Data Poisoning Defence for Federated Learning4 Aug 2025
- 2025Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning1 Jul 2025
- 2025SABRE-FL: Selective and Accurate Backdoor Rejection for Federated Prompt Learning25 Jun 2025
12 newest of 39 All 39 (JSON)
- 2022Robust Imitation Learning from Corrupted Demonstrationscited by 10
- 2022Robust Imitation Learning from Corrupted Demonstrations29 Jan 2022
- 2021A Field Guide to Federated Optimizationcited by 312
- 2022FLDetector: Defending Federated Learning Against Model Poisoning Attacks via Detecting Malicious Clientscited by 119
- 2021Back to the Drawing Board: A Critical Evaluation of Poisoning Attacks on Production Federated Learningcited by 116
- 2022Neurotoxin: Durable Backdoors in Federated Learningcited by 97
- 2021Edge Artificial Intelligence for 6G: Vision, Enabling Technologies, and Applicationscited by 96
- 2021CRFL: Certifiably Robust Federated Learning against Backdoor Attackscited by 91
- 2023Multimodal Federated Learning via Contrastive Representation Ensemblecited by 85
- 2022Survey on Federated Learning Threats: concepts, taxonomy on attacks and defences, experimental study and challengescited by 81
- 2022DeepSight: Mitigating Backdoor Attacks in Federated Learning Through Deep Model Inspectioncited by 78
- 2022MPAF: Model Poisoning Attacks to Federated Learning based on Fake Clientscited by 65
- 2023Fixing by Mixing: A Recipe for Optimal Byzantine ML under Heterogeneitycited by 64
- 2022Byzantine Machine Learning Made Easy by Resilient Averaging of Momentumscited by 63
12 most cited of 649 All 649 (JSON)
- 2026Compression Footprints as Security Signals for Model-Poisoning Defense in Federated Learning30 Sep 2026
- 2026Robustifying Asynchronous SGD via Soft Throttling30 Sep 2026
- 2026DecoyTrace: Toxic Decoys for Active Defense in Decentralized Federated Learning28 Sep 2026
- 2026Physics-Attested Federated Learning: Securing Collaborative Anomaly Detection in Critical Water Infrastructure28 Sep 2026
- 2026How does Adversarial Influence Scale in Multi-Agent Systems?24 Sep 2026
- 2026BRFID: Toward Byzantine-Robust Federated Intrusion Detection23 Sep 2026
- 2026Median Temporal Ensembling: Training-Free Robust Aggregation for Action-Chunked Visuomotor Policies22 Sep 2026
- 2026When Clients Are Orchestrated: Strategic Gradient Manipulation to Defeat Federated Learning Servers with Efficient Defense22 Sep 2026
- 2026FairMean: Promoting Fairness in Distributed Learning under Label Poisoning Attacks22 Sep 2026
- 2026On the Gradient Heterogeneity Dynamics of Adversarially Robust Federated Regression22 Sep 2026
- 2026Structural Negative Transfer in Federated Graph Neural Networks: Diagnosis, Causal Investigation, and the Limits of Divergence-Aware Mitigation15 Sep 2026
- 2026SWB-DM: A Calibrated Sliced-Wasserstein-Barycenter Aggregator with Delayed-Momentum Caching for Byzantine-Robust Federated Learning under Partial Participation14 Sep 2026
12 newest of 649 All 649 (JSON)