Backdoor Federated Learning by Poisoning Backdoor-Critical Layers
Date: 2023-08
Affected: Federated learning systems (CIFAR, FEMNIST, EMNIST)
Attack vector: backdoor
Category: research
Severity: High

Identification of backdoor-critical layers in federated networks and a corresponding layer-targeted poisoning attack that survives state-of-the-art FL defenses with low attacker fractions.


Mitigations:

Architectural layers (MAESTRO):