Byzantine Machine Learning Made Easy by Resilient Averaging of Momentums
Not on the map. Why?
Abstract (arXiv)
Byzantine resilience emerged as a prominent topic within the distributed machine learning community. Essentially, the goal is to enhance distributed optimization algorithms, such as distributed SGD, in a way that guarantees convergence despite the presence of some misbehaving (a.k.a., em Byzantine) workers. Although a myriad of techniques addressing the problem have been proposed, the field arguably rests on fragile foundations. These techniques are hard to prove correct and rely on assumptions that are (a) quite unrealistic, i.e., often violated in practice, and (b) heterogeneous, i.e., making it difficult to compare approaches. We present RESAM (RESilient Averaging of Momentums), a unified framework that makes it simple to establish optimal Byzantine resilience, relying only on standard machine learning assumptions. Our framework is mainly composed of two operators: resilient averaging at the server and distributed momentum at the workers. We prove a general theorem stating the convergence of distributed SGD under RESAM. Interestingly, demonstrating and comparing the convergence of many existing techniques become direct corollaries of our theorem, without resorting to stringent assumptions. We also present an empirical evaluation of the practical relevance of RESAM.
Key facts. Cited by 63 papers in the map (data through 7 Oct 2026). Builds on 41 of its 66 references that are in the map. First posted on arXiv 24 May 2022.
Builds on
41 of 66 references.
References · 41
- 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,283
- 2019Advances and Open Problems in Federated Learningcited by 3,021
- 2021Convex optimizationcited by 2,479
- 2016Optimization Methods for Large-Scale Machine Learningcited by 1,140
- 2013Stochastic First- and Zeroth-order Methods for Nonconvex Stochastic Programmingcited by 716
- 2018Byzantine-Robust Distributed Learning: Towards Optimal Statistical Ratescited by 698
- 2018The Hidden Vulnerability of Distributed Learning in Byzantiumcited by 324
- 2019Robust Aggregation for Federated Learningcited by 314
- 2019Momentum-Based Variance Reduction in Non-Convex SGDcited by 302
- 2019A Little Is Enough: Circumventing Defenses For Distributed Learningcited by 285
- 2016Robust Estimators in High Dimensions without the Computational Intractabilitycited by 209
- 2018RSA: Byzantine-Robust Stochastic Aggregation Methods for Distributed Learning from Heterogeneous Datasetscited by 148
29 more
- 2020Learning from History for Byzantine Robust Optimizationcited by 137
- 2019Fall of Empires: Breaking Byzantine-tolerant SGD by Inner Product Manipulationcited by 136
- 2016Agnostic Estimation of Mean and Covariancecited by 131
- 2020Byzantine-Robust Learning on Heterogeneous Datasets via Bucketingcited by 125
- 2018Sever: A Robust Meta-Algorithm for Stochastic Optimizationcited by 123
- 2015Asynchronous Parallel Stochastic Gradient for Nonconvex Optimizationcited by 115
- 2016Statistical Query Lower Bounds for Robust Estimation of High-dimensional Gaussians and Gaussian Mixturescited by 114
- 2018Generalized Byzantine-tolerant SGDcited by 94
- 2016Learning from Untrusted Datacited by 90
- 2018Byzantine Stochastic Gradient Descentcited by 81
- 2018Robust Estimation via Robust Gradient Estimationcited by 76
- 2018DRACO: Byzantine-resilient Distributed Training via Redundant Gradientscited by 74
- 2017Distributed Statistical Machine Learning in Adversarial Settings: Byzantine Gradient Descentcited by 59
- 2020Byzantine-Resilient Non-Convex Stochastic Gradient Descentcited by 56
- 2020Collaborative Learning in the Jungle (Decentralized, Byzantine, Heterogeneous, Asynchronous and Nonconvex Learning)cited by 54
- 2019Zeno++: Robust Fully Asynchronous SGDcited by 53
- 2019Stochastic Gradient Descent for Nonconvex Learning without Bounded Gradient Assumptionscited by 48
- 2019DETOX: A Redundancy-based Framework for Faster and More Robust Gradient Aggregationcited by 44
- 2017Resilience: A Criterion for Learning in the Presence of Arbitrary Outlierscited by 43
- 2016Geometric Median in Nearly Linear Timecited by 38
- 2018Defending Against Saddle Point Attack in Byzantine-Robust Distributed Learningcited by 32
- 2020Byzantine-Resilient High-Dimensional Federated Learningcited by 27
- 2021Approximate Byzantine Fault-Tolerance in Distributed Optimizationcited by 27
- 2019Federated Learning with Unbiased Gradient Aggregation and Controllable Meta Updatingcited by 22
- 2019Data Encoding for Byzantine-Resilient Distributed Optimizationcited by 10
- 2021On the Strategyproofness of the Geometric Mediancited by 9
- 2018Finite-time Guarantees for Byzantine-Resilient Distributed State Estimation with Noisy Measurementscited by 4
- 2017Outlier Robust Online Learningcited by 2
- 2019Randomized Reactive Redundancy for Byzantine Fault-Tolerance in Parallelized Learningcited by 1
Built on by
Citing papers per year: 2022: 3; 2023: 16; 2024: 20; 2025: 17; 2026: 7.
63 papers.
Sort:
By area:
- 2023Fixing by Mixing: A Recipe for Optimal Byzantine ML under Heterogeneitycited by 64
- 2022On the Impossible Safety of Large AI Modelscited by 27
- 2023Robust Distributed Learning: Tight Error Bounds and Breakdown Point under Data Heterogeneitycited by 25
- 2023On the Privacy-Robustness-Utility Trilemma in Distributed Learningcited by 24
- 2023Byzantine-Robust Learning on Heterogeneous Data via Gradient Splittingcited by 13
- 2024Byzantine-Robust Federated Learning: Impact of Client Subsampling and Local Updatescited by 13
- 2024Achieving Byzantine-Resilient Federated Learning via Layer-Adaptive Sparsified Model Aggregationcited by 13
- 2025Detecting Backdoor Attacks in Federated Learning via Direction Alignment Inspectioncited by 13
- 2024MedBN: Robust Test-Time Adaptation against Malicious Test Samplescited by 10
- 2024Adaptive Gradient Clipping for Robust Federated Learningcited by 10
- 2022Byzantines can also Learn from History: Fall of Centered Clipping in Federated Learningcited by 8
- 2023Byzantine-Robust Distributed Online Learning: Taming Adversarial Participants in An Adversarial Environmentcited by 8
38 more
- 2023On the Tradeoff between Privacy Preservation and Byzantine-Robustness in Decentralized Learningcited by 8
- 2024Unified Breakdown Analysis for Byzantine Robust Gossipcited by 8
- 2025Towards Trustworthy Federated Learning with Untrusted Participantscited by 8
- 2023Byzantine-Resilient Federated Learning at Edgecited by 6
- 2024Global Convergence Guarantees for Federated Policy Gradient Methods with Adversariescited by 6
- 2023Federated Learning in the Presence of Adversarial Client Unavailabilitycited by 5
- 2024Dynamic Byzantine-Robust Learning: Adapting to Switching Byzantine Workerscited by 5
- 2023Near-Optimal Resilient Aggregation Rules for Distributed Learning Using 1-Center and 1-Mean Clustering with Outlierscited by 4
- 2024A survey on secure decentralized optimization and learningcited by 4
- 2024Overcoming the Challenges of Batch Normalization in Federated Learningcited by 3
- 2024Fault Tolerant ML: Efficient Meta-Aggregation and Synchronous Trainingcited by 3
- 2024Private Geometric Mediancited by 3
- 2024Review of Mathematical Optimization in Federated Learningcited by 3
- 2025ByzFL: Research Framework for Robust Federated Learningcited by 3
- 2025Delayed Momentum Aggregation: Communication-efficient Byzantine-robust Federated Learning with Partial Participationcited by 3
- 2023Survey of Federated Learning Models for Spatial-Temporal Mobility Applicationscited by 2
- 2024Decentralized Federated Policy Gradient with Byzantine Fault-Tolerance and Provably Fast Convergencecited by 2
- 2024TernaryVote: Differentially Private, Communication Efficient, and Byzantine Resilient Distributed Optimization on Heterogeneous Datacited by 2
- 2024On the Relevance of Byzantine Robust Optimization Against Data Poisoningcited by 2
- 2025Weight for Robustness: A Comprehensive Approach towards Optimal Fault-Tolerant Asynchronous MLcited by 2
- 2025Tight Stability Bounds for Robust Distributed Learning: Byzantine Failures Hurt Generalization More than Data Poisoningcited by 2
- 2025Robust Federated Inferencecited by 2
- 2022FedCut: A Spectral Analysis Framework for Reliable Detection of Byzantine Colluderscited by 1
- 2023Exploring the Robustness of Decentralized Training for Large Language Modelscited by 1
- 2023Balancing Privacy, Robustness, and Efficiency in Machine Learningcited by 1
- 2024Byzantine-Robust Gossip: Insights from a Dual Approachcited by 1
- 2024Understanding Byzantine Robustness in Federated Learning with A Black-box Servercited by 1
- 2024Byzantine-Robust and Communication-Efficient Distributed Learning via Compressed Momentum Filteringcited by 1
- 2025Reconciling Communication Compression and Byzantine-Robustness in Distributed Learningcited by 1
- 2025A Nesterov-Accelerated Byzantine-Robust Federated Learningcited by 1
- 2025FLARE: Adaptive Multi-Dimensional Reputation for Robust Client Reliability in Federated Learningcited by 1
- 2023Flag Aggregator: Scalable Distributed Training under Failures and Augmented Losses using Convex Optimizationcited by 0
- 2023On the Optimal Batch Size for Byzantine-Robust Distributed Learningcited by 0
- 2023SABLE: Secure And Byzantine robust LEarningcited by 0
- 2023Identifying the Truth of Global Model: A Generic Solution to Defend Against Byzantine and Backdoor Attacks in Federated Learning (full version)cited by 0
- 2024Aggressive or Imperceptible, or Both: Network Pruning Assisted Hybrid Byzantines in Federated Learningcited by 0
- 2024LiD-FL: Towards List-Decodable Federated Learningcited by 0
- 2025FedTilt: Towards Multi-Level Fairness-Preserving and Robust Federated Learningcited by 0
50 most cited of 63 All 63 (JSON)
- 2026Robustifying Asynchronous SGD via Soft Throttling30 Sep 2026
- 2026On the Gradient Heterogeneity Dynamics of Adversarially Robust Federated Regression22 Sep 2026
- 2026Pushing Forward Multi-Secret-Key Homomorphic Encryption for Private Average Aggregation1 Sep 2026
- 2026Enhanced Byzantine-Robust Federated Learning Via Truncated-Quadratic Loss for Heterogeneous Data13 Jul 2026
- 2026mathsfVISTA: Decentralized Machine Learning in Adversary Dominated Environments8 May 2026
- 2026Byzantine-Robust Distributed SGD: A Unified Analysis and Tight Error Bounds11 Apr 2026
- 2026From Inexact Gradients to Byzantine Robustness: Acceleration and Optimization under Similarity3 Feb 2026
- 2025FairGFL: Privacy-Preserving Fairness-Aware Federated Learning with Overlapping Subgraphs29 Dec 2025
- 2025FLARE: Adaptive Multi-Dimensional Reputation for Robust Client Reliability in Federated Learning18 Nov 2025
- 2025Adversarially Robust Multitask Adaptive Control7 Nov 2025
- 2025A Nesterov-Accelerated Byzantine-Robust Federated Learning4 Nov 2025
- 2025Trade-off in Estimating the Number of Byzantine Clients in Federated Learning6 Oct 2025
38 more
- 2025Robust Federated Inference30 Sep 2025
- 2025Delayed Momentum Aggregation: Communication-efficient Byzantine-robust Federated Learning with Partial Participation3 Sep 2025
- 2025Reconciling Communication Compression and Byzantine-Robustness in Distributed Learning23 Aug 2025
- 2025Beyond Trade-offs: A Unified Framework for Privacy, Robustness, and Communication Efficiency in Federated Learning18 Aug 2025
- 2025Byzantine-resilient federated online learning for Gaussian process regression18 Jul 2025
- 2025Tight Stability Bounds for Robust Distributed Learning: Byzantine Failures Hurt Generalization More than Data Poisoning22 Jun 2025
- 2025Centroid Approximation for Byzantine-Tolerant Federated Learning18 Jun 2025
- 2025ByzFL: Research Framework for Robust Federated Learning30 May 2025
- 2025Towards Trustworthy Federated Learning with Untrusted Participants3 May 2025
- 2025FedTilt: Towards Multi-Level Fairness-Preserving and Robust Federated Learning15 Mar 2025
- 2025Detecting Backdoor Attacks in Federated Learning via Direction Alignment Inspection11 Mar 2025
- 2025Weight for Robustness: A Comprehensive Approach towards Optimal Fault-Tolerant Asynchronous ML16 Jan 2025
- 2024Review of Mathematical Optimization in Federated Learning2 Dec 2024
- 2024Unified Breakdown Analysis for Byzantine Robust Gossip14 Oct 2024
- 2024Byzantine-Robust and Communication-Efficient Distributed Learning via Compressed Momentum Filtering13 Sep 2024
- 2024Achieving Byzantine-Resilient Federated Learning via Layer-Adaptive Sparsified Model Aggregation2 Sep 2024
- 2024A survey on secure decentralized optimization and learning16 Aug 2024
- 2024Understanding Byzantine Robustness in Federated Learning with A Black-box Server12 Aug 2024
- 2024LiD-FL: Towards List-Decodable Federated Learning9 Aug 2024
- 2024Private Geometric Median11 Jun 2024
- 2024Fault Tolerant ML: Efficient Meta-Aggregation and Synchronous Training23 May 2024
- 2024Overcoming the Challenges of Batch Normalization in Federated Learning23 May 2024
- 2024Adaptive Gradient Clipping for Robust Federated Learning23 May 2024
- 2024Byzantine-Robust Gossip: Insights from a Dual Approach6 May 2024
- 2024On the Relevance of Byzantine Robust Optimization Against Data Poisoning1 May 2024
- 2024Aggressive or Imperceptible, or Both: Network Pruning Assisted Hybrid Byzantines in Federated Learning9 Apr 2024
- 2024MedBN: Robust Test-Time Adaptation against Malicious Test Samples28 Mar 2024
- 2024Global Convergence Guarantees for Federated Policy Gradient Methods with Adversaries15 Mar 2024
- 2024Byzantine-Robust Federated Learning: Impact of Client Subsampling and Local Updates20 Feb 2024
- 2024TernaryVote: Differentially Private, Communication Efficient, and Byzantine Resilient Distributed Optimization on Heterogeneous Data16 Feb 2024
- 2024Dynamic Byzantine-Robust Learning: Adapting to Switching Byzantine Workers5 Feb 2024
- 2024Decentralized Federated Policy Gradient with Byzantine Fault-Tolerance and Provably Fast Convergence7 Jan 2024
- 2023Balancing Privacy, Robustness, and Efficiency in Machine Learning22 Dec 2023
- 2023Near-Optimal Resilient Aggregation Rules for Distributed Learning Using 1-Center and 1-Mean Clustering with Outliers20 Dec 2023
- 2023Exploring the Robustness of Decentralized Training for Large Language Models1 Dec 2023
- 2023Identifying the Truth of Global Model: A Generic Solution to Defend Against Byzantine and Backdoor Attacks in Federated Learning (full version)17 Nov 2023
- 2023Robust Distributed Learning: Tight Error Bounds and Breakdown Point under Data Heterogeneity24 Sep 2023
- 2023SABLE: Secure And Byzantine robust LEarning11 Sep 2023
50 newest of 63 All 63 (JSON)
- 2023Fixing by Mixing: A Recipe for Optimal Byzantine ML under Heterogeneitycited by 64
- 2022On the Impossible Safety of Large AI Modelscited by 27
- 2023Robust Distributed Learning: Tight Error Bounds and Breakdown Point under Data Heterogeneitycited by 25
- 2023On the Privacy-Robustness-Utility Trilemma in Distributed Learningcited by 24
- 2023Byzantine-Robust Learning on Heterogeneous Data via Gradient Splittingcited by 13
- 2024Byzantine-Robust Federated Learning: Impact of Client Subsampling and Local Updatescited by 13
- 2024Achieving Byzantine-Resilient Federated Learning via Layer-Adaptive Sparsified Model Aggregationcited by 13
- 2025Detecting Backdoor Attacks in Federated Learning via Direction Alignment Inspectioncited by 13
- 2024MedBN: Robust Test-Time Adaptation against Malicious Test Samplescited by 10
- 2024Adaptive Gradient Clipping for Robust Federated Learningcited by 10
- 2022Byzantines can also Learn from History: Fall of Centered Clipping in Federated Learningcited by 8
- 2023Byzantine-Robust Distributed Online Learning: Taming Adversarial Participants in An Adversarial Environmentcited by 8
12 most cited of 61 All 61 (JSON)
- 2026Robustifying Asynchronous SGD via Soft Throttling30 Sep 2026
- 2026On the Gradient Heterogeneity Dynamics of Adversarially Robust Federated Regression22 Sep 2026
- 2026Pushing Forward Multi-Secret-Key Homomorphic Encryption for Private Average Aggregation1 Sep 2026
- 2026Enhanced Byzantine-Robust Federated Learning Via Truncated-Quadratic Loss for Heterogeneous Data13 Jul 2026
- 2026mathsfVISTA: Decentralized Machine Learning in Adversary Dominated Environments8 May 2026
- 2026Byzantine-Robust Distributed SGD: A Unified Analysis and Tight Error Bounds11 Apr 2026
- 2026From Inexact Gradients to Byzantine Robustness: Acceleration and Optimization under Similarity3 Feb 2026
- 2025FairGFL: Privacy-Preserving Fairness-Aware Federated Learning with Overlapping Subgraphs29 Dec 2025
- 2025FLARE: Adaptive Multi-Dimensional Reputation for Robust Client Reliability in Federated Learning18 Nov 2025
- 2025Adversarially Robust Multitask Adaptive Control7 Nov 2025
- 2025A Nesterov-Accelerated Byzantine-Robust Federated Learning4 Nov 2025
- 2025Trade-off in Estimating the Number of Byzantine Clients in Federated Learning6 Oct 2025
12 newest of 61 All 61 (JSON)