Fixing by Mixing: A Recipe for Optimal Byzantine ML under Heterogeneity
Not on the map. Why?
Abstract (arXiv)
Byzantine machine learning (ML) aims to ensure the resilience of distributed learning algorithms to misbehaving (or Byzantine) machines. Although this problem received significant attention, prior works often assume the data held by the machines to be homogeneous, which is seldom true in practical settings. Data heterogeneity makes Byzantine ML considerably more challenging, since a Byzantine machine can hardly be distinguished from a non-Byzantine outlier. A few solutions have been proposed to tackle this issue, but these provide suboptimal probabilistic guarantees and fare poorly in practice. This paper closes the theoretical gap, achieving optimality and inducing good empirical results. In fact, we show how to automatically adapt existing solutions for (homogeneous) Byzantine ML to the heterogeneous setting through a powerful mechanism, we call nearest neighbor mixing (NNM), which boosts any standard robust distributed gradient descent variant to yield optimal Byzantine resilience under heterogeneity. We obtain similar guarantees (in expectation) by plugging NNM in the distributed stochastic heavy ball method, a practical substitute to distributed gradient descent. We obtain empirical results that significantly outperform state-of-the-art Byzantine ML solutions.
Key facts. Cited by 64 papers in the map (data through 7 Oct 2026). Builds on 28 of its 47 references that are in the map. First posted on arXiv 3 Feb 2023.
Builds on
28 of 47 references.
References · 28
- 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,283
- 2019Advances and Open Problems in Federated Learningcited by 3,021
- 2021Convex optimizationcited by 2,479
- 2016Federated Learning: Strategies for Improving Communication Efficiencycited by 1,461
- 2016Optimization Methods for Large-Scale Machine Learningcited by 1,140
- 2019Measuring the Effects of Non-Identical Data Distribution for Federated Visual Classificationcited by 836
- 2018Byzantine-Robust Distributed Learning: Towards Optimal Statistical Ratescited by 698
- 2016TensorFlow: Large-Scale Machine Learning on Heterogeneous Distributed Systemscited by 660
- 2018The Hidden Vulnerability of Distributed Learning in Byzantiumcited by 324
- 2019Robust Aggregation for Federated Learningcited by 314
- 2019A Little Is Enough: Circumventing Defenses For Distributed Learningcited by 285
- 2018RSA: Byzantine-Robust Stochastic Aggregation Methods for Distributed Learning from Heterogeneous Datasetscited by 148
16 more
- 2020Learning from History for Byzantine Robust Optimizationcited by 137
- 2019Fall of Empires: Breaking Byzantine-tolerant SGD by Inner Product Manipulationcited by 136
- 2020Byzantine-Robust Learning on Heterogeneous Datasets via Bucketingcited by 125
- 2018Generalized Byzantine-tolerant SGDcited by 94
- 2016Learning from Untrusted Datacited by 90
- 2013Accelerated Gradient Methods for Nonconvex Nonlinear and Stochastic Programmingcited by 74
- 2017Gradient Descent Can Take Exponential Time to Escape Saddle Pointscited by 74
- 2022Byzantine Machine Learning Made Easy by Resilient Averaging of Momentumscited by 63
- 2017Distributed Statistical Machine Learning in Adversarial Settings: Byzantine Gradient Descentcited by 59
- 2020Byzantine-Resilient Non-Convex Stochastic Gradient Descentcited by 56
- 2020Collaborative Learning in the Jungle (Decentralized, Byzantine, Heterogeneous, Asynchronous and Nonconvex Learning)cited by 54
- 2016Stochastic Heavy Ballcited by 40
- 2022On Almost Sure Convergence Rates of Stochastic Gradient Methodscited by 32
- 2021Approximate Byzantine Fault-Tolerance in Distributed Optimizationcited by 27
- 2021Robust Training in High Dimensions via Block Coordinate Geometric Median Descentcited by 20
- 2021Variance Reduced Median-of-Means Estimator for Byzantine-Robust Distributed Inferencecited by 11
Built on by
Citing papers per year: 2023: 9; 2024: 19; 2025: 22; 2026: 14.
64 papers.
Sort:
By area:
- 2023Robust Distributed Learning: Tight Error Bounds and Breakdown Point under Data Heterogeneitycited by 25
- 2023On the Privacy-Robustness-Utility Trilemma in Distributed Learningcited by 24
- 2024The Utility and Complexity of in- and out-of-Distribution Machine Unlearningcited by 20
- 2024Byzantine-Robust Federated Learning: Impact of Client Subsampling and Local Updatescited by 13
- 2024Achieving Byzantine-Resilient Federated Learning via Layer-Adaptive Sparsified Model Aggregationcited by 13
- 2025Detecting Backdoor Attacks in Federated Learning via Direction Alignment Inspectioncited by 13
- 2023Communication Compression for Byzantine Robust Learning: New Efficient Algorithms and Improved Ratescited by 12
- 2024Adaptive Gradient Clipping for Robust Federated Learningcited by 10
- 2024Efficient Federated Learning against Heterogeneous and Non-stationary Client Unavailabilitycited by 9
- 2024Unified Breakdown Analysis for Byzantine Robust Gossipcited by 8
- 2025Towards Trustworthy Federated Learning with Untrusted Participantscited by 8
- 2024SoK: Blockchain-Based Decentralized AI (DeAI)cited by 6
38 more
- 2023Federated Learning in the Presence of Adversarial Client Unavailabilitycited by 5
- 2024Dynamic Byzantine-Robust Learning: Adapting to Switching Byzantine Workerscited by 5
- 2024On the Byzantine-Resilience of Distillation-Based Federated Learningcited by 5
- 2024Fine-Tuning Personalization in Federated Learning to Mitigate Adversarial Clientscited by 5
- 2023Near-Optimal Resilient Aggregation Rules for Distributed Learning Using 1-Center and 1-Mean Clustering with Outlierscited by 4
- 2024A survey on secure decentralized optimization and learningcited by 4
- 2024Overcoming the Challenges of Batch Normalization in Federated Learningcited by 3
- 2024Fault Tolerant ML: Efficient Meta-Aggregation and Synchronous Trainingcited by 3
- 2025Bant: Byzantine Antidote via Trial Function and Trust Scorescited by 3
- 2025ByzFL: Research Framework for Robust Federated Learningcited by 3
- 2025Delayed Momentum Aggregation: Communication-efficient Byzantine-robust Federated Learning with Partial Participationcited by 3
- 2024On the Relevance of Byzantine Robust Optimization Against Data Poisoningcited by 2
- 2025Weight for Robustness: A Comprehensive Approach towards Optimal Fault-Tolerant Asynchronous MLcited by 2
- 2025Tight Stability Bounds for Robust Distributed Learning: Byzantine Failures Hurt Generalization More than Data Poisoningcited by 2
- 2025Robust Federated Inferencecited by 2
- 2023Exploring the Robustness of Decentralized Training for Large Language Modelscited by 1
- 2023Balancing Privacy, Robustness, and Efficiency in Machine Learningcited by 1
- 2024On the Conflict of Robustness and Learning in Collaborative Machine Learningcited by 1
- 2024Byzantine-Robust Gossip: Insights from a Dual Approachcited by 1
- 2024Byzantine-Robust and Communication-Efficient Distributed Learning via Compressed Momentum Filteringcited by 1
- 2025Optimal Client Sampling in Federated Learning with Client-Level Heterogeneous Differential Privacycited by 1
- 2025Reconciling Communication Compression and Byzantine-Robustness in Distributed Learningcited by 1
- 2025A Nesterov-Accelerated Byzantine-Robust Federated Learningcited by 1
- 2026Byzantine Machine Learning: MultiKrum and an optimal notion of robustnesscited by 1
- 2023Flag Aggregator: Scalable Distributed Training under Failures and Augmented Losses using Convex Optimizationcited by 0
- 2023SABLE: Secure And Byzantine robust LEarningcited by 0
- 2024LOGSAFE: Logic-Guided Verification for Trustworthy Federated Time-Series Learningcited by 0
- 2024FedSECA: Sign Election and Coordinate-wise Aggregation of Gradients for Byzantine Tolerant Federated Learningcited by 0
- 2025Byzantine-Robust Federated Learning Using Generative Adversarial Networkscited by 0
- 2025GRANITE : a Byzantine-Resilient Dynamic Gossip Learning Frameworkcited by 0
- 2025Bayesian Robust Aggregation for Federated Learningcited by 0
- 2025Private Aggregation for Byzantine-Resilient Heterogeneous Federated Learningcited by 0
- 2025Byzantine-resilient federated online learning for Gaussian process regressioncited by 0
- 2025Beyond Trade-offs: A Unified Framework for Privacy, Robustness, and Communication Efficiency in Federated Learningcited by 0
- 2025On the Normalization of Confusion Matrices: Methods and Geometric Interpretationscited by 0
- 2025ProDiGy: Proximity- and Dissimilarity-Based Byzantine-Robust Federated Learningcited by 0
- 2025Trade-off in Estimating the Number of Byzantine Clients in Federated Learningcited by 0
- 2025Robust and Efficient Collaborative Learningcited by 0
50 most cited of 64 All 64 (JSON)
- 2026Robustifying Asynchronous SGD via Soft Throttling30 Sep 2026
- 2026On the Gradient Heterogeneity Dynamics of Adversarially Robust Federated Regression22 Sep 2026
- 2026Robust Reputation-Driven Crowdsourced Federated Learning9 Aug 2026
- 2026Defending Against Backdoor Attacks via Alignment Checking in Model-Contrastive Federated Learning29 Jul 2026
- 2026Enhanced Byzantine-Robust Federated Learning Via Truncated-Quadratic Loss for Heterogeneous Data13 Jul 2026
- 2026Unveiling the Non-Monotonic Effect of Privacy on Generalization under Byzantine Robustness1 Jul 2026
- 2026Dangerous Liaisons of Convex Learning and Non-Affine Aggregation26 Jun 2026
- 2026Giskard : Byzantine Robust and Confidential Aggregation for Large-Scale Decentralized Learning17 Jun 2026
- 2026Practical Validity Conditions for Byzantine-Tolerant Federated Learning15 May 2026
- 2026Byzantine-Robust Distributed SGD: A Unified Analysis and Tight Error Bounds11 Apr 2026
- 2026Byzantine-Robust and Communication-Efficient Distributed Training: Compressive and Cyclic Gradient Coding17 Mar 2026
- 2026Byzantine-Robust Optimization under (L0, L1)-Smoothness12 Mar 2026
38 more
- 2026Byzantine Machine Learning: MultiKrum and an optimal notion of robustness3 Feb 2026
- 2026From Inexact Gradients to Byzantine Robustness: Acceleration and Optimization under Similarity3 Feb 2026
- 2025Adversarially Robust Multitask Adaptive Control7 Nov 2025
- 2025A Nesterov-Accelerated Byzantine-Robust Federated Learning4 Nov 2025
- 2025Robust and Efficient Collaborative Learning9 Oct 2025
- 2025Trade-off in Estimating the Number of Byzantine Clients in Federated Learning6 Oct 2025
- 2025Robust Federated Inference30 Sep 2025
- 2025ProDiGy: Proximity- and Dissimilarity-Based Byzantine-Robust Federated Learning11 Sep 2025
- 2025On the Normalization of Confusion Matrices: Methods and Geometric Interpretations5 Sep 2025
- 2025Delayed Momentum Aggregation: Communication-efficient Byzantine-robust Federated Learning with Partial Participation3 Sep 2025
- 2025Reconciling Communication Compression and Byzantine-Robustness in Distributed Learning23 Aug 2025
- 2025Beyond Trade-offs: A Unified Framework for Privacy, Robustness, and Communication Efficiency in Federated Learning18 Aug 2025
- 2025Byzantine-resilient federated online learning for Gaussian process regression18 Jul 2025
- 2025Tight Stability Bounds for Robust Distributed Learning: Byzantine Failures Hurt Generalization More than Data Poisoning22 Jun 2025
- 2025Private Aggregation for Byzantine-Resilient Heterogeneous Federated Learning11 Jun 2025
- 2025ByzFL: Research Framework for Robust Federated Learning30 May 2025
- 2025Optimal Client Sampling in Federated Learning with Client-Level Heterogeneous Differential Privacy19 May 2025
- 2025Bant: Byzantine Antidote via Trial Function and Trust Scores12 May 2025
- 2025Bayesian Robust Aggregation for Federated Learning5 May 2025
- 2025Towards Trustworthy Federated Learning with Untrusted Participants3 May 2025
- 2025GRANITE : a Byzantine-Resilient Dynamic Gossip Learning Framework24 Apr 2025
- 2025Byzantine-Robust Federated Learning Using Generative Adversarial Networks26 Mar 2025
- 2025Detecting Backdoor Attacks in Federated Learning via Direction Alignment Inspection11 Mar 2025
- 2025Weight for Robustness: A Comprehensive Approach towards Optimal Fault-Tolerant Asynchronous ML16 Jan 2025
- 2024The Utility and Complexity of in- and out-of-Distribution Machine Unlearning12 Dec 2024
- 2024SoK: Blockchain-Based Decentralized AI (DeAI)26 Nov 2024
- 2024FedSECA: Sign Election and Coordinate-wise Aggregation of Gradients for Byzantine Tolerant Federated Learning6 Nov 2024
- 2024LOGSAFE: Logic-Guided Verification for Trustworthy Federated Time-Series Learning5 Nov 2024
- 2024Unified Breakdown Analysis for Byzantine Robust Gossip14 Oct 2024
- 2024Fine-Tuning Personalization in Federated Learning to Mitigate Adversarial Clients30 Sep 2024
- 2024Efficient Federated Learning against Heterogeneous and Non-stationary Client Unavailability26 Sep 2024
- 2024Byzantine-Robust and Communication-Efficient Distributed Learning via Compressed Momentum Filtering13 Sep 2024
- 2024Achieving Byzantine-Resilient Federated Learning via Layer-Adaptive Sparsified Model Aggregation2 Sep 2024
- 2024A survey on secure decentralized optimization and learning16 Aug 2024
- 2024Fault Tolerant ML: Efficient Meta-Aggregation and Synchronous Training23 May 2024
- 2024Overcoming the Challenges of Batch Normalization in Federated Learning23 May 2024
- 2024Adaptive Gradient Clipping for Robust Federated Learning23 May 2024
- 2024Byzantine-Robust Gossip: Insights from a Dual Approach6 May 2024
50 newest of 64 All 64 (JSON)
- 2024The Utility and Complexity of in- and out-of-Distribution Machine Unlearningcited by 20
- 2024On the Relevance of Byzantine Robust Optimization Against Data Poisoningcited by 2
- 2025Tight Stability Bounds for Robust Distributed Learning: Byzantine Failures Hurt Generalization More than Data Poisoningcited by 2
- 2025Tight Stability Bounds for Robust Distributed Learning: Byzantine Failures Hurt Generalization More than Data Poisoning22 Jun 2025
- 2024The Utility and Complexity of in- and out-of-Distribution Machine Unlearning12 Dec 2024
- 2024On the Relevance of Byzantine Robust Optimization Against Data Poisoning1 May 2024
- 2023Robust Distributed Learning: Tight Error Bounds and Breakdown Point under Data Heterogeneitycited by 25
- 2023On the Privacy-Robustness-Utility Trilemma in Distributed Learningcited by 24
- 2024Byzantine-Robust Federated Learning: Impact of Client Subsampling and Local Updatescited by 13
- 2024Achieving Byzantine-Resilient Federated Learning via Layer-Adaptive Sparsified Model Aggregationcited by 13
- 2025Detecting Backdoor Attacks in Federated Learning via Direction Alignment Inspectioncited by 13
- 2023Communication Compression for Byzantine Robust Learning: New Efficient Algorithms and Improved Ratescited by 12
- 2024Adaptive Gradient Clipping for Robust Federated Learningcited by 10
- 2024Efficient Federated Learning against Heterogeneous and Non-stationary Client Unavailabilitycited by 9
- 2024Unified Breakdown Analysis for Byzantine Robust Gossipcited by 8
- 2025Towards Trustworthy Federated Learning with Untrusted Participantscited by 8
- 2024SoK: Blockchain-Based Decentralized AI (DeAI)cited by 6
- 2023Federated Learning in the Presence of Adversarial Client Unavailabilitycited by 5
12 most cited of 61 All 61 (JSON)
- 2026Robustifying Asynchronous SGD via Soft Throttling30 Sep 2026
- 2026On the Gradient Heterogeneity Dynamics of Adversarially Robust Federated Regression22 Sep 2026
- 2026Robust Reputation-Driven Crowdsourced Federated Learning9 Aug 2026
- 2026Defending Against Backdoor Attacks via Alignment Checking in Model-Contrastive Federated Learning29 Jul 2026
- 2026Enhanced Byzantine-Robust Federated Learning Via Truncated-Quadratic Loss for Heterogeneous Data13 Jul 2026
- 2026Unveiling the Non-Monotonic Effect of Privacy on Generalization under Byzantine Robustness1 Jul 2026
- 2026Dangerous Liaisons of Convex Learning and Non-Affine Aggregation26 Jun 2026
- 2026Giskard : Byzantine Robust and Confidential Aggregation for Large-Scale Decentralized Learning17 Jun 2026
- 2026Practical Validity Conditions for Byzantine-Tolerant Federated Learning15 May 2026
- 2026Byzantine-Robust Distributed SGD: A Unified Analysis and Tight Error Bounds11 Apr 2026
- 2026Byzantine-Robust and Communication-Efficient Distributed Training: Compressive and Cyclic Gradient Coding17 Mar 2026
- 2026Byzantine-Robust Optimization under (L0, L1)-Smoothness12 Mar 2026
12 newest of 61 All 61 (JSON)