Performance Weighting for Robust Federated Learning Against Corrupted Sources
Not on the map. Why?
Abstract (arXiv)
Federated Learning has emerged as a dominant computational paradigm for distributed machine learning. Its unique data privacy properties allow us to collaboratively train models while offering participating clients certain privacy-preserving guarantees. However, in real-world applications, a federated environment may consist of a mixture of benevolent and malicious clients, with the latter aiming to corrupt and degrade federated model's performance. Different corruption schemes may be applied such as model poisoning and data corruption. Here, we focus on the latter, the susceptibility of federated learning to various data corruption attacks. We show that the standard global aggregation scheme of local weights is inefficient in the presence of corrupted clients. To mitigate this problem, we propose a class of task-oriented performance-based methods computed over a distributed validation dataset with the goal to detect and mitigate corrupted clients. Specifically, we construct a robust weight aggregation scheme based on geometric mean and demonstrate its effectiveness under random label shuffling and targeted label flipping attacks.
Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Builds on 18 of its 28 references that are in the map. First posted on arXiv 2 May 2022.
Builds on
18 of 28 references.
References · 18
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,592
- 2019Advances and Open Problems in Federated Learningcited by 3,021
- 2018How To Backdoor Federated Learningcited by 745
- 2019Local Model Poisoning Attacks to Byzantine-Robust Federated Learningcited by 479
- 2019Federated Machine Learning: Concept and Applicationscited by 409
- 2018Analyzing Federated Learning through an Adversarial Lenscited by 346
- 2019Robust Aggregation for Federated Learningcited by 314
- 2020Attack of the Tails: Yes, You Really Can Backdoor Federated Learningcited by 307
- 2017Certified Defenses for Data Poisoning Attackscited by 288
- 2020Data Poisoning Attacks Against Federated Learning Systemscited by 266
- 2019Can You Really Backdoor Federated Learning?cited by 250
- 2017Deep Learning is Robust to Massive Label Noisecited by 164
6 more
- 2018Mitigating Sybils in Federated Learning Poisoningcited by 158
- 2019Measure Contribution of Participants in Federated Learningcited by 78
- 2019Shielding Collaborative Learning: Mitigating Poisoning Attacks through Client-Side Detectioncited by 25
- 2021Auto-weighted Robust Federated Learning with Corrupted Data Sourcescited by 12
- 2020Accelerating Federated Learning in Heterogeneous Data and Computational Environmentscited by 6
- 2021Covert Model Poisoning Against Federated Learning: Algorithm Design and Optimizationcited by 6
Built on by
Citing papers per year: 2022: 1; 2023: 1; 2024: 0; 2025: 3.
5 papers.
- 2025Robust Asymmetric Heterogeneous Federated Learning with Corrupted Clientscited by 5
- 2023FLEDGE: Ledger-based Federated Learning Resilient to Inference and Backdoor Attackscited by 4
- 2025Rate-My-LoRA: Efficient and Adaptive Federated Model Tuning for Cardiac MRI Segmentationcited by 2
- 2022Secure & Private Federated Neuroimagingcited by 0
- 2025DART: A Server-side Plug-in for Resource-efficient Robust Federated Learningcited by 0
- 2025DART: A Server-side Plug-in for Resource-efficient Robust Federated Learning24 Aug 2025
- 2025Robust Asymmetric Heterogeneous Federated Learning with Corrupted Clients12 Mar 2025
- 2025Rate-My-LoRA: Efficient and Adaptive Federated Model Tuning for Cardiac MRI Segmentation6 Jan 2025
- 2023FLEDGE: Ledger-based Federated Learning Resilient to Inference and Backdoor Attacks3 Oct 2023
- 2022Secure & Private Federated Neuroimaging11 May 2022