EAB-FL: Exacerbating Algorithmic Bias through Model Poisoning Attacks in Federated Learning
Not on the map. Why?
Abstract (arXiv)
Federated Learning (FL) is a technique that allows multiple parties to train a shared model collaboratively without disclosing their private data. It has become increasingly popular due to its distinct privacy advantages. However, FL models can suffer from biases against certain demographic groups (e.g., racial and gender groups) due to the heterogeneity of data and party selection. Researchers have proposed various strategies for characterizing the group fairness of FL algorithms to address this issue. However, the effectiveness of these strategies in the face of deliberate adversarial attacks has not been fully explored. Although existing studies have revealed various threats (e.g., model poisoning attacks) against FL systems caused by malicious participants, their primary aim is to decrease model accuracy, while the potential of leveraging poisonous model updates to exacerbate model unfairness remains unexplored. In this paper, we propose a new type of model poisoning attack, EAB-FL, with a focus on exacerbating group unfairness while maintaining a good level of model utility. Extensive experiments on three datasets demonstrate the effectiveness and efficiency of our attack, even with state-of-the-art fairness optimization algorithms and secure aggregation rules employed.
Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Builds on 36 of its 55 references that are in the map. First posted on arXiv 2 Oct 2024.
Builds on
36 of 55 references.
References · 36
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,592
- 2018MobileNetV2: Inverted Residuals and Linear Bottleneckscited by 4,773
- 2018Neural Tangent Kernel: Convergence and Generalization in Neural Networkscited by 2,597
- 2016Equality of Opportunity in Supervised Learningcited by 2,000
- 2016Federated Learning: Strategies for Improving Communication Efficiencycited by 1,461
- 2017Neural Collaborative Filteringcited by 1,108
- 2018How To Backdoor Federated Learningcited by 745
- 2018Byzantine-Robust Distributed Learning: Towards Optimal Statistical Ratescited by 698
- 2020Ditto: Fair and Robust Federated Learning Through Personalizationcited by 665
- 2017Age Progression/Regression by Conditional Adversarial Autoencodercited by 426
- 2019Fair Resource Allocation in Federated Learningcited by 389
24 more
- 2018Analyzing Federated Learning through an Adversarial Lenscited by 346
- 2019Robust Aggregation for Federated Learningcited by 314
- 2019Learn to Grow: A Continual Structure Learning Framework for Overcoming Catastrophic Forgettingcited by 302
- 2018RSA: Byzantine-Robust Stochastic Aggregation Methods for Distributed Learning from Heterogeneous Datasetscited by 148
- 2022FLDetector: Defending Federated Learning Against Model Poisoning Attacks via Detecting Malicious Clientscited by 119
- 2021Back to the Drawing Board: A Critical Evaluation of Poisoning Attacks on Production Federated Learningcited by 116
- 2021FairFed: Enabling Group Fairness in Federated Learningcited by 114
- 2020Collaborative Fairness in Federated Learningcited by 95
- 2020Fairness-aware Agnostic Federated Learningcited by 87
- 2022MPAF: Model Poisoning Attacks to Federated Learning based on Fake Clientscited by 65
- 2020Poisoning Attacks on Algorithmic Fairnesscited by 58
- 2020Mitigating Bias in Federated Learningcited by 56
- 2020Exacerbating Algorithmic Bias through Fairness Attackscited by 47
- 2021SparseFed: Mitigating Model Poisoning Attacks in Federated Learning with Sparsificationcited by 46
- 2021Improving Fairness via Federated Learningcited by 39
- 2021Enforcing fairness in private federated learning via the modified method of differential multiplierscited by 38
- 2022Federated Learning for Medical Applications: A Taxonomy, Current Trends, Challenges, and Future Research Directionscited by 34
- 2022LoMar: A Local Defense Against Poisoning Attack on Federated Learningcited by 29
- 2022Understanding Instance-Level Impact of Fairness Constraintscited by 27
- 2021Training Fair Models in Federated Learning without Data Privacy Infringementcited by 26
- 2021GIFAIR-FL: A Framework for Group and Individual Fairness in Federated Learningcited by 21
- 2023Efficient and Secure Federated Learning for Financial Applicationscited by 17
- 2022Robust Fair Clustering: A Novel Fairness Attack and Defense Frameworkcited by 13
- 2021DeSMP: Differential Privacy-exploited Stealthy Model Poisoning Attacks in Federated Learningcited by 11
Built on by
Citing papers per year: 2025: 2; 2026: 2.
4 papers.
- 2025Fairness in Federated Learning: Trends, Challenges, and Opportunitiescited by 3
- 2025Fairness-Constrained Optimization Attack in Federated Learningcited by 1
- 2026Federated Learning at the Forefront of Fairness: A Multifaceted Perspectivecited by 0
- 2026Fairis: Fairness-Aware Aggregation with Provable Influence Containment against Fairness Poisoning Attacks in Collaborative Machine Learningcited by 0
- 2026Fairis: Fairness-Aware Aggregation with Provable Influence Containment against Fairness Poisoning Attacks in Collaborative Machine Learning6 Aug 2026
- 2026Federated Learning at the Forefront of Fairness: A Multifaceted Perspective31 Jan 2026
- 2025Fairness-Constrained Optimization Attack in Federated Learning14 Oct 2025
- 2025Fairness in Federated Learning: Trends, Challenges, and Opportunities31 Aug 2025