DETOX: A Redundancy-based Framework for Faster and More Robust Gradient Aggregation
Not on the map. Why?
Abstract (arXiv)
To improve the resilience of distributed training to worst-case, or Byzantine node failures, several recent approaches have replaced gradient averaging with robust aggregation methods. Such techniques can have high computational costs, often quadratic in the number of compute nodes, and only have limited robustness guarantees. Other methods have instead used redundancy to guarantee robustness, but can only tolerate limited number of Byzantine failures. In this work, we present DETOX, a Byzantine-resilient distributed training framework that combines algorithmic redundancy with robust aggregation. DETOX operates in two steps, a filtering step that uses limited redundancy to significantly reduce the effect of Byzantine nodes, and a hierarchical aggregation step that can be used in tandem with any state-of-the-art robust aggregation method. We show theoretically that this leads to a substantial increase in robustness, and has a per iteration runtime that can be nearly linear in the number of compute nodes. We provide extensive experiments over real distributed setups across a variety of large-scale machine learning tasks, showing that DETOX leads to orders of magnitude accuracy and speedup improvements over many state-of-the-art Byzantine-resilient approaches.
Key facts. Cited by 44 papers in the map (data through 7 Oct 2026). First posted on arXiv 29 Jul 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 12; 2022: 11; 2023: 7; 2024: 6; 2025: 5; 2026: 3.
44 papers.
Sort:
By area:
- 2021A Field Guide to Federated Optimizationcited by 312
- 2022MPAF: Model Poisoning Attacks to Federated Learning based on Fake Clientscited by 65
- 2022Byzantine Machine Learning Made Easy by Resilient Averaging of Momentumscited by 63
- 2021Provably Secure Federated Learning against Malicious Clientscited by 60
- 2023An Experimental Study of Byzantine-Robust Aggregation Schemes in Federated Learningcited by 32
- 2022Byzantine-Robust Decentralized Learning via ClippedGossipcited by 29
- 2021Byzantine-robust Federated Learning through Collaborative Malicious Gradient Filteringcited by 28
- 2021RoFL: Robustness of Secure Federated Learningcited by 23
- 2021Robust Federated Learning with Attack-Adaptive Aggregationcited by 17
- 2023Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Surveycited by 17
- 2024Threats and Defenses in Federated Learning Life Cycle: A Comprehensive Survey and Challengescited by 14
- 2023Communication Compression for Byzantine Robust Learning: New Efficient Algorithms and Improved Ratescited by 12
32 more
- 2021Secure Distributed Training at Scalecited by 11
- 2025Provably Robust Federated Reinforcement Learningcited by 8
- 2024Byzantine-Robust Aggregation for Securing Decentralized Federated Learningcited by 7
- 2021Robust Federated Learning via Over-The-Air Computationcited by 5
- 2022MixTailor: Mixed Gradient Aggregation for Robust Learning Against Tailored Attackscited by 5
- 2021LEGATO: A LayerwisE Gradient AggregaTiOn Algorithm for Mitigating Byzantine Attacks in Federated Learningcited by 4
- 2021Adaptive Verifiable Coded Computing: Towards Fast, Secure and Private Distributed Machine Learningcited by 4
- 2022Over-The-Air Federated Learning under Byzantine Attackscited by 4
- 2022Hierarchical Federated Learning with Privacycited by 4
- 2025Toward Malicious Clients Detection in Federated Learningcited by 4
- 2025Cellular Traffic Prediction via Byzantine-robust Asynchronous Federated Learningcited by 4
- 2022FedComm: Federated Learning as a Medium for Covert Communicationcited by 3
- 2023FedREP: A Byzantine-Robust, Communication-Efficient and Privacy-Preserving Framework for Federated Learningcited by 3
- 2024FedQV: Leveraging Quadratic Voting in Federated Learningcited by 3
- 2025Delayed Momentum Aggregation: Communication-efficient Byzantine-robust Federated Learning with Partial Participationcited by 3
- 2024FLGuard: Byzantine-Robust Federated Learning via Ensemble of Contrastive Modelscited by 2
- 2021Aspis: Robust Detection for Distributed Learningcited by 1
- 2021ARFED: Attack-Resistant Federated averaging based on outlier eliminationcited by 1
- 2022FedCut: A Spectral Analysis Framework for Reliable Detection of Byzantine Colluderscited by 1
- 2025Fluid Democracy in Federated Data Aggregationcited by 1
- 2021Solon: Communication-efficient Byzantine-resilient Distributed Training via Redundant Gradientscited by 0
- 2022Variance Reduction is an Antidote to Byzantines: Better Rates, Weaker Assumptions and Communication Compression as a Cherry on the Topcited by 0
- 2022Detection and Mitigation of Byzantine Attacks in Distributed Trainingcited by 0
- 2022Robust Distributed Learning Against Both Distributional Shifts and Byzantine Attackscited by 0
- 2023Flag Aggregator: Scalable Distributed Training under Failures and Augmented Losses using Convex Optimizationcited by 0
- 2023On the Optimal Batch Size for Byzantine-Robust Distributed Learningcited by 0
- 2023Byzantine-Resilient Federated PCA and Low Rank Column-wise Sensingcited by 0
- 2024Defending Against Sophisticated Poisoning Attacks with RL-based Aggregation in Federated Learningcited by 0
- 2024FedSECA: Sign Election and Coordinate-wise Aggregation of Gradients for Byzantine Tolerant Federated Learningcited by 0
- 2026XFED: Non-Collusive Model Poisoning Attack Against Byzantine-Robust Federated Classifierscited by 0
- 2026mathsfVISTA: Decentralized Machine Learning in Adversary Dominated Environmentscited by 0
- 2026Enhanced Byzantine-Robust Federated Learning Via Truncated-Quadratic Loss for Heterogeneous Datacited by 0
- 2026Enhanced Byzantine-Robust Federated Learning Via Truncated-Quadratic Loss for Heterogeneous Data13 Jul 2026
- 2026mathsfVISTA: Decentralized Machine Learning in Adversary Dominated Environments8 May 2026
- 2026XFED: Non-Collusive Model Poisoning Attack Against Byzantine-Robust Federated Classifiers10 Apr 2026
- 2025Delayed Momentum Aggregation: Communication-efficient Byzantine-robust Federated Learning with Partial Participation3 Sep 2025
- 2025Fluid Democracy in Federated Data Aggregation3 Jul 2025
- 2025Cellular Traffic Prediction via Byzantine-robust Asynchronous Federated Learning25 May 2025
- 2025Toward Malicious Clients Detection in Federated Learning14 May 2025
- 2025Provably Robust Federated Reinforcement Learning12 Feb 2025
- 2024FedSECA: Sign Election and Coordinate-wise Aggregation of Gradients for Byzantine Tolerant Federated Learning6 Nov 2024
- 2024Byzantine-Robust Aggregation for Securing Decentralized Federated Learning26 Sep 2024
- 2024Threats and Defenses in Federated Learning Life Cycle: A Comprehensive Survey and Challenges9 Jul 2024
- 2024Defending Against Sophisticated Poisoning Attacks with RL-based Aggregation in Federated Learning20 Jun 2024
32 more
- 2024FLGuard: Byzantine-Robust Federated Learning via Ensemble of Contrastive Models5 Mar 2024
- 2024FedQV: Leveraging Quadratic Voting in Federated Learning2 Jan 2024
- 2023Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Survey14 Dec 2023
- 2023Communication Compression for Byzantine Robust Learning: New Efficient Algorithms and Improved Rates15 Oct 2023
- 2023Byzantine-Resilient Federated PCA and Low Rank Column-wise Sensing25 Sep 2023
- 2023On the Optimal Batch Size for Byzantine-Robust Distributed Learning23 May 2023
- 2023FedREP: A Byzantine-Robust, Communication-Efficient and Privacy-Preserving Framework for Federated Learning9 Mar 2023
- 2023An Experimental Study of Byzantine-Robust Aggregation Schemes in Federated Learning14 Feb 2023
- 2023Flag Aggregator: Scalable Distributed Training under Failures and Augmented Losses using Convex Optimization12 Feb 2023
- 2022FedCut: A Spectral Analysis Framework for Reliable Detection of Byzantine Colluders24 Nov 2022
- 2022Robust Distributed Learning Against Both Distributional Shifts and Byzantine Attacks29 Oct 2022
- 2022Detection and Mitigation of Byzantine Attacks in Distributed Training17 Aug 2022
- 2022MixTailor: Mixed Gradient Aggregation for Robust Learning Against Tailored Attacks16 Jul 2022
- 2022Hierarchical Federated Learning with Privacy10 Jun 2022
- 2022Variance Reduction is an Antidote to Byzantines: Better Rates, Weaker Assumptions and Communication Compression as a Cherry on the Top1 Jun 2022
- 2022Byzantine Machine Learning Made Easy by Resilient Averaging of Momentums24 May 2022
- 2022Over-The-Air Federated Learning under Byzantine Attacks5 May 2022
- 2022MPAF: Model Poisoning Attacks to Federated Learning based on Fake Clients16 Mar 2022
- 2022Byzantine-Robust Decentralized Learning via ClippedGossip3 Feb 2022
- 2022FedComm: Federated Learning as a Medium for Covert Communication21 Jan 2022
- 2021ARFED: Attack-Resistant Federated averaging based on outlier elimination8 Nov 2021
- 2021Robust Federated Learning via Over-The-Air Computation1 Nov 2021
- 2021Solon: Communication-efficient Byzantine-resilient Distributed Training via Redundant Gradients4 Oct 2021
- 2021Byzantine-robust Federated Learning through Collaborative Malicious Gradient Filtering13 Sep 2021
- 2021Aspis: Robust Detection for Distributed Learning5 Aug 2021
- 2021Adaptive Verifiable Coded Computing: Towards Fast, Secure and Private Distributed Machine Learning27 Jul 2021
- 2021LEGATO: A LayerwisE Gradient AggregaTiOn Algorithm for Mitigating Byzantine Attacks in Federated Learning26 Jul 2021
- 2021A Field Guide to Federated Optimization14 Jul 2021
- 2021RoFL: Robustness of Secure Federated Learning7 Jul 2021
- 2021Secure Distributed Training at Scale21 Jun 2021
- 2021Robust Federated Learning with Attack-Adaptive Aggregation10 Feb 2021
- 2021Provably Secure Federated Learning against Malicious Clients3 Feb 2021
- 2021Robust Federated Learning with Attack-Adaptive Aggregationcited by 17
- 2021Robust Federated Learning with Attack-Adaptive Aggregation10 Feb 2021
- 2021A Field Guide to Federated Optimizationcited by 312
- 2022MPAF: Model Poisoning Attacks to Federated Learning based on Fake Clientscited by 65
- 2022Byzantine Machine Learning Made Easy by Resilient Averaging of Momentumscited by 63
- 2021Provably Secure Federated Learning against Malicious Clientscited by 60
- 2023An Experimental Study of Byzantine-Robust Aggregation Schemes in Federated Learningcited by 32
- 2022Byzantine-Robust Decentralized Learning via ClippedGossipcited by 29
- 2021Byzantine-robust Federated Learning through Collaborative Malicious Gradient Filteringcited by 28
- 2021RoFL: Robustness of Secure Federated Learningcited by 23
- 2023Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Surveycited by 17
- 2024Threats and Defenses in Federated Learning Life Cycle: A Comprehensive Survey and Challengescited by 14
- 2023Communication Compression for Byzantine Robust Learning: New Efficient Algorithms and Improved Ratescited by 12
- 2021Secure Distributed Training at Scalecited by 11
12 most cited of 43 All 43 (JSON)
- 2026Enhanced Byzantine-Robust Federated Learning Via Truncated-Quadratic Loss for Heterogeneous Data13 Jul 2026
- 2026mathsfVISTA: Decentralized Machine Learning in Adversary Dominated Environments8 May 2026
- 2026XFED: Non-Collusive Model Poisoning Attack Against Byzantine-Robust Federated Classifiers10 Apr 2026
- 2025Delayed Momentum Aggregation: Communication-efficient Byzantine-robust Federated Learning with Partial Participation3 Sep 2025
- 2025Fluid Democracy in Federated Data Aggregation3 Jul 2025
- 2025Cellular Traffic Prediction via Byzantine-robust Asynchronous Federated Learning25 May 2025
- 2025Toward Malicious Clients Detection in Federated Learning14 May 2025
- 2025Provably Robust Federated Reinforcement Learning12 Feb 2025
- 2024FedSECA: Sign Election and Coordinate-wise Aggregation of Gradients for Byzantine Tolerant Federated Learning6 Nov 2024
- 2024Byzantine-Robust Aggregation for Securing Decentralized Federated Learning26 Sep 2024
- 2024Threats and Defenses in Federated Learning Life Cycle: A Comprehensive Survey and Challenges9 Jul 2024
- 2024Defending Against Sophisticated Poisoning Attacks with RL-based Aggregation in Federated Learning20 Jun 2024
12 newest of 43 All 43 (JSON)