Covert Communication Based on the Poisoning Attack in Federated Learning
Not on the map. Why?
Abstract (arXiv)
Covert communication has become an important area of research in computer security. It involves hiding specific information on a carrier for message transmission and is often used to transmit private data, military secrets, and even malware. In deep learning, many methods have been developed for hiding information in models to achieve covert communication. However, these methods are not applicable to federated learning, where model aggregation invalidates the exact information embedded in the model by the client. To address this problem, we propose a novel method for covert communication in federated learning based on the poisoning attack. Our approach achieves 100% accuracy in covert message transmission between two clients and is shown to be both stealthy and robust through extensive experiments. However, existing defense methods are limited in their effectiveness against our attack scheme, highlighting the urgent need for new protection methods to be developed. Our study emphasizes the necessity of research in covert communication and serves as a foundation for future research in federated learning attacks and defenses.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 32 of its 53 references that are in the map. First posted on arXiv 2 Jun 2023.
Builds on
32 of 53 references.
References · 32
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,592
- 2019Advances and Open Problems in Federated Learningcited by 3,021
- 2018How To Backdoor Federated Learningcited by 745
- 2018Byzantine-Robust Distributed Learning: Towards Optimal Statistical Ratescited by 698
- 2019Federated Learning with Differential Privacy: Algorithms and Performance Analysiscited by 528
- 2019Local Model Poisoning Attacks to Byzantine-Robust Federated Learningcited by 479
- 2018Spectral Signatures in Backdoor Attackscited by 457
- 2017Differentially Private Federated Learning: A Client Level Perspectivecited by 451
- 2020FLTrust: Byzantine-robust Federated Learning via Trust Bootstrappingcited by 330
- 2018The Hidden Vulnerability of Distributed Learning in Byzantiumcited by 324
- 2019Robust Aggregation for Federated Learningcited by 314
20 more
- 2020Attack of the Tails: Yes, You Really Can Backdoor Federated Learningcited by 307
- 2020Data Poisoning Attacks Against Federated Learning Systemscited by 266
- 2019Can You Really Backdoor Federated Learning?cited by 250
- 2021Federated Learning for Internet of Things: A Comprehensive Surveycited by 247
- 2020Blind Backdoors in Deep Learning Modelscited by 174
- 2018Mitigating Sybils in Federated Learning Poisoningcited by 158
- 2021Federated Learning for Open Bankingcited by 138
- 2022FLDetector: Defending Federated Learning Against Model Poisoning Attacks via Detecting Malicious Clientscited by 119
- 2021Back to the Drawing Board: A Critical Evaluation of Poisoning Attacks on Production Federated Learningcited by 116
- 2019Robust Anomaly Detection and Backdoor Attack Detection Via Differential Privacycited by 93
- 2021CRFL: Certifiably Robust Federated Learning against Backdoor Attackscited by 91
- 2020Learning to Detect Malicious Clients for Robust Federated Learningcited by 86
- 2020Defending against Backdoors in Federated Learning with Robust Learning Ratecited by 82
- 2020BaFFLe: Backdoor detection via Feedback-based Federated Learningcited by 52
- 2018Federated Learning in Distributed Medical Databases: Meta-Analysis of Large-Scale Subcortical Brain Datacited by 46
- 2021Physical Adversarial Attacks on an Aerial Imagery Object Detectorcited by 35
- 2018Universal Multi-Party Poisoning Attackscited by 17
- 2019The Best Defense Is a Good Offense: Adversarial Attacks to Avoid Modulation Detectioncited by 17
- 2021EvilModel: Hiding Malware Inside of Neural Network Modelscited by 15
- 2021Untargeted Poisoning Attack Detection in Federated Learning via Behavior Attestationcited by 12
Built on by
Not cited yet.