How To Backdoor Federated Learning
Date: 2018-07
Affected: Federated learning systems (CIFAR, word prediction)
Attack vector: backdoor
Category: research
Severity: High

Bagdasaryan et al. show that a single malicious participant in federated learning, via model-replacement, can implant a global backdoor reaching 100 percent accuracy on the backdoor task while maintaining main-task performance. AISTATS 2020.


Mitigations:

Architectural layers (MAESTRO):