Federated learning (FL) allows training machine learning models on
distributed data without compromising privacy. However, FL is vulnerable to
model-poisoning attacks where malicious clients tamper with their local models
to manipulate the global model. In this work, we investigate the resilience of
the partial-sharing online FL (PSO-Fed) algorithm against such attacks. PSO-Fed
reduces communication overhead by allowing clients to share only a fraction of
their model updates with the server. We demonstrate that this partial sharing
mechanism has the added advantage of enhancing PSO-Fed's robustness to
model-poisoning attacks. Through theoretical analysis, we show that PSO-Fed
maintains convergence even under Byzantine attacks, where malicious clients
inject noise into their updates. Furthermore, we derive a formula for PSO-Fed's
mean square error, considering factors like stepsize, attack probability, and
the number of malicious clients. Interestingly, we find a non-trivial optimal
stepsize that maximizes PSO-Fed's resistance to these attacks. Extensive
numerical experiments confirm our theoretical findings and showcase PSO-Fed's
superior performance against model-poisoning attacks compared to other leading
FL algorithms.
外部データセット
test dataset consisting of Nt = 50 instances {X˘ , y˘}