@inproceedings{
kim2024adversarial,
title={Adversarial Robustness Unhardening via Backdoor Attacks in Federated Learning},
author={Taejin Kim and Jiarui Li and Nikhil Madaan and Shubhranshu Singh and Carlee Joe-Wong},
booktitle={NeurIPS 2023 Workshop on Backdoors in Deep Learning - The Good, the Bad, and the Ugly},
year={2024},
url={https://openreview.net/forum?id=l642rGiKGr}
}
In today's data-driven landscape, the delicate equilibrium between safeguarding user privacy and unleashing data's potential stands as a paramount concern. Federated learning, which enables collaborative model training without necessitating data sharing, has emerged as a privacy-centric solution. This distributed approach brings forth security challenges, notably poisoning and backdoor attacks where malicious entities inject corrupted data. Our research, initially spurred by test-time evasion attacks, investigates the intersection of adversarial training and backdoor attacks within federated learning, introducing Adversarial Robustness Unhardening (ARU). ARU is employed by a subset of adversaries to intentionally undermine model robustness during federated training, rendering models susceptible to a broader range of evasion attacks. We present extensive empirical experiments evaluating ARU's impact on adversarial training and existing robust aggregation defenses against poisoning and backdoor attacks. Our findings inform strategies for enhancing ARU to counter current defensive measures and highlight the limitations of existing defenses, offering insights into bolstering defenses against ARU.
Adversarial Robustness Unhardening via Backdoor Attacks in Federated Learning
Taejin Kim Jiarui Li Nikhil Madaan Shubhranshu Singh Carlee Joe-Wong