Election Coding for Distributed Learning: Protecting SignSGD against Byzantine Attacks
Not on the map. Why?
Abstract (arXiv)
Recent advances in large-scale distributed learning algorithms have enabled communication-efficient training via SignSGD. Unfortunately, a major issue continues to plague distributed learning: namely, Byzantine failures may incur serious degradation in learning accuracy. This paper proposes Election Coding, a coding-theoretic framework to guarantee Byzantine-robustness for SignSGD with Majority Vote, which uses minimum worker-master communication in both directions. The suggested framework explores new information-theoretic limits of finding the majority opinion when some workers could be malicious, and paves the road to implement robust and efficient distributed learning algorithms. Under this framework, we construct two types of explicit codes, random Bernoulli codes and deterministic algebraic codes, that can tolerate Byzantine attacks with a controlled amount of computational redundancy. For the Bernoulli codes, we provide upper bounds on the error probability in estimating the majority opinion, which give useful insights into code design for tolerating Byzantine attacks. As for deterministic codes, we construct an explicit code which perfectly tolerates Byzantines, and provide tight upper/lower bounds on the minimum required computational redundancy. Finally, the Byzantine-tolerance of the suggested coding schemes is confirmed by deep learning experiments on Amazon EC2 using Python with MPI4py package.
Key facts. Cited by 20 papers in the map (data through 14 Oct 2026). First posted on arXiv 14 Oct 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 6; 2022: 5; 2023: 4; 2024: 4; 2025: 1.
20 papers.
Sort:
- 2021What Do We Mean by Generalization in Federated Learning?cited by 62
- 2023An Experimental Study of Byzantine-Robust Aggregation Schemes in Federated Learningcited by 32
- 2022Byzantine-Robust Decentralized Learning via ClippedGossipcited by 31
- 2021Byzantine-robust Federated Learning through Collaborative Malicious Gradient Filteringcited by 30
- 2022Maximizing Communication Efficiency for Large-scale Training via 0/1 Adamcited by 15
- 2021Byzantine Fault-Tolerance in Federated Local SGD under 2f-Redundancycited by 7
- 2021Adversarial for Good? How the Adversarial ML Community's Values Impede Socially Beneficial Uses of Attackscited by 5
- 2021ApproxIFER: A Model-Agnostic Approach to Resilient and Robust Prediction Serving Systemscited by 5
- 2022MixTailor: Mixed Gradient Aggregation for Robust Learning Against Tailored Attackscited by 5
- 2023FedREP: A Byzantine-Robust, Communication-Efficient and Privacy-Preserving Framework for Federated Learningcited by 4
- 2023Rethinking SIGN Training: Provable Nonconvex Acceleration without First- and Second-Order Gradient Lipschitzcited by 4
- 2021Tolerating Adversarial Attacks and Byzantine Faults in Distributed Machine Learningcited by 3
8 more
- 2024FedQV: Leveraging Quadratic Voting in Federated Learningcited by 3
- 2024The poison of dimensionalitycited by 3
- 2022SignSGD: Fault-Tolerance to Blind and Byzantine Adversariescited by 1
- 2022FedCut: A Spectral Analysis Framework for Reliable Detection of Byzantine Colluderscited by 1
- 2024SignSGD with Federated Defense: Harnessing Adversarial Attacks through Gradient Sign Decodingcited by 1
- 2025Fluid Democracy in Federated Data Aggregationcited by 1
- 2023On the Optimal Batch Size for Byzantine-Robust Distributed Learningcited by 0
- 2024FedSECA: Sign Election and Coordinate-wise Aggregation of Gradients for Byzantine Tolerant Federated Learningcited by 0
- 2025Fluid Democracy in Federated Data Aggregation3 Jul 2025
- 2024FedSECA: Sign Election and Coordinate-wise Aggregation of Gradients for Byzantine Tolerant Federated Learning6 Nov 2024
- 2024The poison of dimensionality25 Sep 2024
- 2024SignSGD with Federated Defense: Harnessing Adversarial Attacks through Gradient Sign Decoding2 Feb 2024
- 2024FedQV: Leveraging Quadratic Voting in Federated Learning2 Jan 2024
- 2023Rethinking SIGN Training: Provable Nonconvex Acceleration without First- and Second-Order Gradient Lipschitz23 Oct 2023
- 2023On the Optimal Batch Size for Byzantine-Robust Distributed Learning23 May 2023
- 2023FedREP: A Byzantine-Robust, Communication-Efficient and Privacy-Preserving Framework for Federated Learning9 Mar 2023
- 2023An Experimental Study of Byzantine-Robust Aggregation Schemes in Federated Learning14 Feb 2023
- 2022FedCut: A Spectral Analysis Framework for Reliable Detection of Byzantine Colluders24 Nov 2022
- 2022MixTailor: Mixed Gradient Aggregation for Robust Learning Against Tailored Attacks16 Jul 2022
- 2022Maximizing Communication Efficiency for Large-scale Training via 0/1 Adam12 Feb 2022
8 more
- 2022SignSGD: Fault-Tolerance to Blind and Byzantine Adversaries4 Feb 2022
- 2022Byzantine-Robust Decentralized Learning via ClippedGossip3 Feb 2022
- 2021What Do We Mean by Generalization in Federated Learning?27 Oct 2021
- 2021ApproxIFER: A Model-Agnostic Approach to Resilient and Robust Prediction Serving Systems20 Sep 2021
- 2021Byzantine-robust Federated Learning through Collaborative Malicious Gradient Filtering13 Sep 2021
- 2021Tolerating Adversarial Attacks and Byzantine Faults in Distributed Machine Learning5 Sep 2021
- 2021Byzantine Fault-Tolerance in Federated Local SGD under 2f-Redundancy26 Aug 2021
- 2021Adversarial for Good? How the Adversarial ML Community's Values Impede Socially Beneficial Uses of Attacks11 Jul 2021
- 2021What Do We Mean by Generalization in Federated Learning?cited by 62
- 2023An Experimental Study of Byzantine-Robust Aggregation Schemes in Federated Learningcited by 32
- 2022Byzantine-Robust Decentralized Learning via ClippedGossipcited by 31
- 2021Byzantine-robust Federated Learning through Collaborative Malicious Gradient Filteringcited by 30
- 2022Maximizing Communication Efficiency for Large-scale Training via 0/1 Adamcited by 15
- 2021Byzantine Fault-Tolerance in Federated Local SGD under 2f-Redundancycited by 7
- 2021Adversarial for Good? How the Adversarial ML Community's Values Impede Socially Beneficial Uses of Attackscited by 5
- 2021ApproxIFER: A Model-Agnostic Approach to Resilient and Robust Prediction Serving Systemscited by 5
- 2022MixTailor: Mixed Gradient Aggregation for Robust Learning Against Tailored Attackscited by 5
- 2023FedREP: A Byzantine-Robust, Communication-Efficient and Privacy-Preserving Framework for Federated Learningcited by 4
- 2023Rethinking SIGN Training: Provable Nonconvex Acceleration without First- and Second-Order Gradient Lipschitzcited by 4
- 2021Tolerating Adversarial Attacks and Byzantine Faults in Distributed Machine Learningcited by 3
12 most cited of 20 All 20 (JSON)
- 2025Fluid Democracy in Federated Data Aggregation3 Jul 2025
- 2024FedSECA: Sign Election and Coordinate-wise Aggregation of Gradients for Byzantine Tolerant Federated Learning6 Nov 2024
- 2024The poison of dimensionality25 Sep 2024
- 2024SignSGD with Federated Defense: Harnessing Adversarial Attacks through Gradient Sign Decoding2 Feb 2024
- 2024FedQV: Leveraging Quadratic Voting in Federated Learning2 Jan 2024
- 2023Rethinking SIGN Training: Provable Nonconvex Acceleration without First- and Second-Order Gradient Lipschitz23 Oct 2023
- 2023On the Optimal Batch Size for Byzantine-Robust Distributed Learning23 May 2023
- 2023FedREP: A Byzantine-Robust, Communication-Efficient and Privacy-Preserving Framework for Federated Learning9 Mar 2023
- 2023An Experimental Study of Byzantine-Robust Aggregation Schemes in Federated Learning14 Feb 2023
- 2022FedCut: A Spectral Analysis Framework for Reliable Detection of Byzantine Colluders24 Nov 2022
- 2022MixTailor: Mixed Gradient Aggregation for Robust Learning Against Tailored Attacks16 Jul 2022
- 2022Maximizing Communication Efficiency for Large-scale Training via 0/1 Adam12 Feb 2022
12 newest of 20 All 20 (JSON)