Byzantine-Resilient SGD in High Dimensions on Heterogeneous Data
Not on the map. Why?
Abstract (arXiv)
We study distributed stochastic gradient descent (SGD) in the master-worker architecture under Byzantine attacks. We consider the heterogeneous data model, where different workers may have different local datasets, and we do not make any probabilistic assumptions on data generation. At the core of our algorithm, we use the polynomial-time outlier-filtering procedure for robust mean estimation proposed by Steinhardt et al. (ITCS 2018) to filter-out corrupt gradients. In order to be able to apply their filtering procedure in our em heterogeneous data setting where workers compute em stochastic gradients, we derive a new matrix concentration result, which may be of independent interest. We provide convergence analyses for smooth strongly-convex and non-convex objectives. We derive our results under the bounded variance assumption on local stochastic gradients and a em deterministic condition on datasets, namely, gradient dissimilarity; and for both these quantities, we provide concrete bounds in the statistical heterogeneous data model. We give a trade-off between the mini-batch size for stochastic gradients and the approximation error. Our algorithm can tolerate up to frac14 fraction Byzantine workers. It can find approximate optimal parameters in the strongly-convex setting exponentially fast and reach to an approximate stationary point in the non-convex setting with a linear speed, thus, matching the convergence rates of vanilla SGD in the Byzantine-free setting. We also propose and analyze a Byzantine-resilient SGD algorithm with gradient compression, where workers send k random coordinates of their gradients. Under mild conditions, we show a fracdk-factor saving in communication bits as well as decoding complexity over our compression-free algorithm without affecting its convergence rate (order-wise) and the approximation error.
Key facts. Cited by 17 papers in the map (data through 7 Oct 2026). First posted on arXiv 16 May 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 3; 2022: 6; 2023: 3; 2024: 0; 2025: 3; 2026: 2.
17 papers.
Sort:
- 2021A Field Guide to Federated Optimizationcited by 312
- 2021Back to the Drawing Board: A Critical Evaluation of Poisoning Attacks on Production Federated Learningcited by 116
- 2022Byzantine-Robust Decentralized Learning via ClippedGossipcited by 29
- 2022On the Impossible Safety of Large AI Modelscited by 27
- 2021Robust Training in High Dimensions via Block Coordinate Geometric Median Descentcited by 20
- 2022Robust Collaborative Learning with Linear Gradient Overheadcited by 12
- 2022Over-the-Air Federated Edge Learning with Hierarchical Clusteringcited by 10
- 2023Byzantine-Resilient Federated Learning at Edgecited by 6
- 2023Temporal Gradient Inversion Attacks with Robust Optimizationcited by 4
- 2022A simplified convergence theory for Byzantine resilient stochastic gradient descentcited by 3
- 2025Delayed Momentum Aggregation: Communication-efficient Byzantine-robust Federated Learning with Partial Participationcited by 3
- 2022Communication-efficient distributed eigenspace estimation with arbitrary node failurescited by 1
5 more
- 2023Byzantine-Resilient Federated PCA and Low Rank Column-wise Sensingcited by 0
- 2025Beyond Trade-offs: A Unified Framework for Privacy, Robustness, and Communication Efficiency in Federated Learningcited by 0
- 2025Robust and Efficient Collaborative Learningcited by 0
- 2026Tight Convergence Rates for Online Distributed Linear Estimation with Adversarial Measurementscited by 0
- 2026Adversary-Robust Learning from Fully Asynchronous Directional Derivative Estimatescited by 0
- 2026Adversary-Robust Learning from Fully Asynchronous Directional Derivative Estimates10 May 2026
- 2026Tight Convergence Rates for Online Distributed Linear Estimation with Adversarial Measurements7 Apr 2026
- 2025Robust and Efficient Collaborative Learning9 Oct 2025
- 2025Delayed Momentum Aggregation: Communication-efficient Byzantine-robust Federated Learning with Partial Participation3 Sep 2025
- 2025Beyond Trade-offs: A Unified Framework for Privacy, Robustness, and Communication Efficiency in Federated Learning18 Aug 2025
- 2023Byzantine-Resilient Federated PCA and Low Rank Column-wise Sensing25 Sep 2023
- 2023Temporal Gradient Inversion Attacks with Robust Optimization13 Jun 2023
- 2023Byzantine-Resilient Federated Learning at Edge18 Mar 2023
- 2022On the Impossible Safety of Large AI Models30 Sep 2022
- 2022Robust Collaborative Learning with Linear Gradient Overhead22 Sep 2022
- 2022A simplified convergence theory for Byzantine resilient stochastic gradient descent25 Aug 2022
- 2022Over-the-Air Federated Edge Learning with Hierarchical Clustering19 Jul 2022
5 more
- 2022Communication-efficient distributed eigenspace estimation with arbitrary node failures31 May 2022
- 2022Byzantine-Robust Decentralized Learning via ClippedGossip3 Feb 2022
- 2021Back to the Drawing Board: A Critical Evaluation of Poisoning Attacks on Production Federated Learning23 Aug 2021
- 2021A Field Guide to Federated Optimization14 Jul 2021
- 2021Robust Training in High Dimensions via Block Coordinate Geometric Median Descent16 Jun 2021
- 2021A Field Guide to Federated Optimizationcited by 312
- 2021Back to the Drawing Board: A Critical Evaluation of Poisoning Attacks on Production Federated Learningcited by 116
- 2022Byzantine-Robust Decentralized Learning via ClippedGossipcited by 29
- 2022On the Impossible Safety of Large AI Modelscited by 27
- 2021Robust Training in High Dimensions via Block Coordinate Geometric Median Descentcited by 20
- 2022Robust Collaborative Learning with Linear Gradient Overheadcited by 12
- 2022Over-the-Air Federated Edge Learning with Hierarchical Clusteringcited by 10
- 2023Byzantine-Resilient Federated Learning at Edgecited by 6
- 2023Temporal Gradient Inversion Attacks with Robust Optimizationcited by 4
- 2022A simplified convergence theory for Byzantine resilient stochastic gradient descentcited by 3
- 2025Delayed Momentum Aggregation: Communication-efficient Byzantine-robust Federated Learning with Partial Participationcited by 3
- 2022Communication-efficient distributed eigenspace estimation with arbitrary node failurescited by 1
12 most cited of 17 All 17 (JSON)
- 2026Adversary-Robust Learning from Fully Asynchronous Directional Derivative Estimates10 May 2026
- 2026Tight Convergence Rates for Online Distributed Linear Estimation with Adversarial Measurements7 Apr 2026
- 2025Robust and Efficient Collaborative Learning9 Oct 2025
- 2025Delayed Momentum Aggregation: Communication-efficient Byzantine-robust Federated Learning with Partial Participation3 Sep 2025
- 2025Beyond Trade-offs: A Unified Framework for Privacy, Robustness, and Communication Efficiency in Federated Learning18 Aug 2025
- 2023Byzantine-Resilient Federated PCA and Low Rank Column-wise Sensing25 Sep 2023
- 2023Temporal Gradient Inversion Attacks with Robust Optimization13 Jun 2023
- 2023Byzantine-Resilient Federated Learning at Edge18 Mar 2023
- 2022On the Impossible Safety of Large AI Models30 Sep 2022
- 2022Robust Collaborative Learning with Linear Gradient Overhead22 Sep 2022
- 2022A simplified convergence theory for Byzantine resilient stochastic gradient descent25 Aug 2022
- 2022Over-the-Air Federated Edge Learning with Hierarchical Clustering19 Jul 2022
12 newest of 17 All 17 (JSON)