mlsanityData to 7 Oct 2026

DETOX: A Redundancy-based Framework for Faster and More Robust Gradient Aggregation

arXiv 1907.12205 ↗First posted 29 Jul 2019cs.LG cs.DC stat.MLcited by 44

Not on the map. Why?

Abstract (arXiv)

To improve the resilience of distributed training to worst-case, or Byzantine node failures, several recent approaches have replaced gradient averaging with robust aggregation methods. Such techniques can have high computational costs, often quadratic in the number of compute nodes, and only have limited robustness guarantees. Other methods have instead used redundancy to guarantee robustness, but can only tolerate limited number of Byzantine failures. In this work, we present DETOX, a Byzantine-resilient distributed training framework that combines algorithmic redundancy with robust aggregation. DETOX operates in two steps, a filtering step that uses limited redundancy to significantly reduce the effect of Byzantine nodes, and a hierarchical aggregation step that can be used in tandem with any state-of-the-art robust aggregation method. We show theoretically that this leads to a substantial increase in robustness, and has a per iteration runtime that can be nearly linear in the number of compute nodes. We provide extensive experiments over real distributed setups across a variety of large-scale machine learning tasks, showing that DETOX leads to orders of magnitude accuracy and speedup improvements over many state-of-the-art Byzantine-resilient approaches.

Key facts. Cited by 44 papers in the map (data through 7 Oct 2026). First posted on arXiv 29 Jul 2019.

Builds on

No reference list yet.

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2021: 12; 2022: 11; 2023: 7; 2024: 6; 2025: 5; 2026: 3.

44 papers.

Sort:

By area:

  1. 2021A Field Guide to Federated Optimizationcited by 312
  2. 2022MPAF: Model Poisoning Attacks to Federated Learning based on Fake Clientscited by 65
  3. 2022Byzantine Machine Learning Made Easy by Resilient Averaging of Momentumscited by 63
  4. 2021Provably Secure Federated Learning against Malicious Clientscited by 60
  5. 2023An Experimental Study of Byzantine-Robust Aggregation Schemes in Federated Learningcited by 32
  6. 2022Byzantine-Robust Decentralized Learning via ClippedGossipcited by 29
  7. 2021Byzantine-robust Federated Learning through Collaborative Malicious Gradient Filteringcited by 28
  8. 2021RoFL: Robustness of Secure Federated Learningcited by 23
  9. 2021Robust Federated Learning with Attack-Adaptive Aggregationcited by 17
  10. 2023Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Surveycited by 17
  11. 2024Threats and Defenses in Federated Learning Life Cycle: A Comprehensive Survey and Challengescited by 14
  12. 2023Communication Compression for Byzantine Robust Learning: New Efficient Algorithms and Improved Ratescited by 12
32 more
  1. 2021Secure Distributed Training at Scalecited by 11
  2. 2025Provably Robust Federated Reinforcement Learningcited by 8
  3. 2024Byzantine-Robust Aggregation for Securing Decentralized Federated Learningcited by 7
  4. 2021Robust Federated Learning via Over-The-Air Computationcited by 5
  5. 2022MixTailor: Mixed Gradient Aggregation for Robust Learning Against Tailored Attackscited by 5
  6. 2021LEGATO: A LayerwisE Gradient AggregaTiOn Algorithm for Mitigating Byzantine Attacks in Federated Learningcited by 4
  7. 2021Adaptive Verifiable Coded Computing: Towards Fast, Secure and Private Distributed Machine Learningcited by 4
  8. 2022Over-The-Air Federated Learning under Byzantine Attackscited by 4
  9. 2022Hierarchical Federated Learning with Privacycited by 4
  10. 2025Toward Malicious Clients Detection in Federated Learningcited by 4
  11. 2025Cellular Traffic Prediction via Byzantine-robust Asynchronous Federated Learningcited by 4
  12. 2022FedComm: Federated Learning as a Medium for Covert Communicationcited by 3
  13. 2023FedREP: A Byzantine-Robust, Communication-Efficient and Privacy-Preserving Framework for Federated Learningcited by 3
  14. 2024FedQV: Leveraging Quadratic Voting in Federated Learningcited by 3
  15. 2025Delayed Momentum Aggregation: Communication-efficient Byzantine-robust Federated Learning with Partial Participationcited by 3
  16. 2024FLGuard: Byzantine-Robust Federated Learning via Ensemble of Contrastive Modelscited by 2
  17. 2021Aspis: Robust Detection for Distributed Learningcited by 1
  18. 2021ARFED: Attack-Resistant Federated averaging based on outlier eliminationcited by 1
  19. 2022FedCut: A Spectral Analysis Framework for Reliable Detection of Byzantine Colluderscited by 1
  20. 2025Fluid Democracy in Federated Data Aggregationcited by 1
  21. 2021Solon: Communication-efficient Byzantine-resilient Distributed Training via Redundant Gradientscited by 0
  22. 2022Variance Reduction is an Antidote to Byzantines: Better Rates, Weaker Assumptions and Communication Compression as a Cherry on the Topcited by 0
  23. 2022Detection and Mitigation of Byzantine Attacks in Distributed Trainingcited by 0
  24. 2022Robust Distributed Learning Against Both Distributional Shifts and Byzantine Attackscited by 0
  25. 2023Flag Aggregator: Scalable Distributed Training under Failures and Augmented Losses using Convex Optimizationcited by 0
  26. 2023On the Optimal Batch Size for Byzantine-Robust Distributed Learningcited by 0
  27. 2023Byzantine-Resilient Federated PCA and Low Rank Column-wise Sensingcited by 0
  28. 2024Defending Against Sophisticated Poisoning Attacks with RL-based Aggregation in Federated Learningcited by 0
  29. 2024FedSECA: Sign Election and Coordinate-wise Aggregation of Gradients for Byzantine Tolerant Federated Learningcited by 0
  30. 2026XFED: Non-Collusive Model Poisoning Attack Against Byzantine-Robust Federated Classifierscited by 0
  31. 2026mathsfVISTA: Decentralized Machine Learning in Adversary Dominated Environmentscited by 0
  32. 2026Enhanced Byzantine-Robust Federated Learning Via Truncated-Quadratic Loss for Heterogeneous Datacited by 0