Venomancer: Towards Imperceptible and Target-on-Demand Backdoor Attacks in Federated Learning
Not on the map. Why?
Abstract (arXiv)
Federated Learning (FL) is a distributed machine learning approach that maintains data privacy by training on decentralized data sources. Similar to centralized machine learning, FL is also susceptible to backdoor attacks, where an attacker can compromise some clients by injecting a backdoor trigger into local models of those clients, leading to the global model's behavior being manipulated as desired by the attacker. Most backdoor attacks in FL assume a predefined target class and require control over a large number of clients or knowledge of benign clients' information. Furthermore, they are not imperceptible and are easily detected by human inspection due to clear artifacts left on the poison data. To overcome these challenges, we propose Venomancer, an effective backdoor attack that is imperceptible and allows target-on-demand. Specifically, imperceptibility is achieved by using a visual loss function to make the poison data visually indistinguishable from the original data. Target-on-demand property allows the attacker to choose arbitrary target classes via conditional adversarial training. Additionally, experiments showed that the method is robust against state-of-the-art defenses such as Norm Clipping, Weak DP, Krum, Multi-Krum, RLR, FedRAD, Deepsight, and RFLBAT. The source code is available at https://github.com/nguyenhongson1902/Venomancer.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Builds on 33 of its 49 references that are in the map. First posted on arXiv 3 Jul 2024.
Builds on
33 of 49 references.
References · 33
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2014Adam: A Method for Stochastic Optimizationcited by 36,960
- 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,592
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,690
- 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,283
- 2016Deep Learning with Differential Privacycited by 2,682
- 2014Conditional Generative Adversarial Netscited by 2,152
- 2016Federated Learning: Strategies for Improving Communication Efficiencycited by 1,461
- 2016An overview of gradient descent optimization algorithmscited by 1,021
21 more
- 2017Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoningcited by 1,012
- 2018How To Backdoor Federated Learningcited by 745
- 2018Federated Learning for Mobile Keyboard Predictioncited by 565
- 2019Federated Learning with Differential Privacy: Algorithms and Performance Analysiscited by 528
- 2020Attack of the Tails: Yes, You Really Can Backdoor Federated Learningcited by 307
- 2020Agent57: Outperforming the Atari Human Benchmarkcited by 300
- 2019Can You Really Backdoor Federated Learning?cited by 250
- 2021RAP: Robustness-Aware Perturbations for Defending against Backdoor Attacks on NLP Modelscited by 97
- 2022Neurotoxin: Durable Backdoors in Federated Learningcited by 97
- 2018Federated Learning for Keyword Spottingcited by 95
- 2020Practical Detection of Trojan Neural Networks: Data-Limited and Data-Free Casescited by 93
- 2020Defending against Backdoors in Federated Learning with Robust Learning Ratecited by 82
- 2022DeepSight: Mitigating Backdoor Attacks in Federated Learning Through Deep Model Inspectioncited by 78
- 2019Data Poisoning against Differentially-Private Learners: Attacks and Defensescited by 75
- 2018The History Began from AlexNet: A Comprehensive Survey on Deep Learning Approachescited by 74
- 2018Towards Imperceptible and Robust Adversarial Example Attacks against Neural Networkscited by 38
- 2022Marksman Backdoor: Backdoor Attacks with Arbitrary Target Classcited by 32
- 2023On the Vulnerability of Backdoor Defenses for Federated Learningcited by 27
- 2021Batch Label Inference and Replacement Attacks in Black-Boxed Vertical Federated Learningcited by 16
- 2021FedRAD: Federated Robust Adaptive Distillationcited by 11
- 2022RFLBAT: A Robust Federated Learning Algorithm against Backdoor Attackcited by 9
Built on by
Citing papers per year: 2025: 1.
1 paper.