2308/2308.04466.md

Title: Backdoor Federated Learning by Poisoning Backdoor-Critical Layers

URL Source: https://arxiv.org/html/2308.04466

Published Time: Wed, 01 May 2024 17:19:48 GMT

Markdown Content: Model (Dataset)VGG19 (CIFAR-10)ResNet18 (CIFAR-10)CNN (Fashion-MNIST) Attack Baseline LP Attack (LF Attack)DBA Baseline LP Attack (LF Attack)DBA Baseline LP Attack (LF Attack)DBA Best BSR 79.27 94.89±0.33 plus-or-minus 0.33\pm 0.33± 0.33 52.9 76.76 95.94±0.32 plus-or-minus 0.32\pm 0.32± 0.32 22.54 100 87.21±3.53 plus-or-minus 3.53\pm 3.53± 3.53 99.99 Avg BSR 73.13 93.76±0.35 plus-or-minus 0.35\pm 0.35± 0.35 40.67 70.2 95.35±0.32 plus-or-minus 0.32\pm 0.32± 0.32 16.93 99.97 80.81±5.79 plus-or-minus 5.79\pm 5.79± 5.79 99.92 FedAvg(IID)Acc 83.86 84.16±0.09 plus-or-minus 0.09\pm 0.09± 0.09 83.82 80.38 80.27±0.64 plus-or-minus 0.64\pm 0.64± 0.64 80.37 89.05 89.73±0.12 plus-or-minus 0.12\pm 0.12± 0.12 89.22 Best BSR 93.45 96.01±1.35 plus-or-minus 1.35\pm 1.35± 1.35 75.28 95.97 95.66±1.09 plus-or-minus 1.09\pm 1.09± 1.09 66.52 99.14 95.84±0.2 plus-or-minus 0.2\pm 0.2± 0.2 100.0 Avg BSR 85.93 85.99±5.99 plus-or-minus 5.99\pm 5.99± 5.99 45.93 67.1 56.93±16.07 plus-or-minus 16.07\pm 16.07± 16.07 23.39 98.47 91.35±1.4 plus-or-minus 1.4\pm 1.4± 1.4 100.0 FLTrust(IID)Acc 83.26 82.46±0.47 plus-or-minus 0.47\pm 0.47± 0.47 82.94 74.97 70.77±5.4 plus-or-minus 5.4\pm 5.4± 5.4 77.72 90.0 90.68±0.17 plus-or-minus 0.17\pm 0.17± 0.17 90.22 Best BSR 5.26 91.85±1.08 plus-or-minus 1.08\pm 1.08± 1.08 5.09 4.79 92.41±0.26 plus-or-minus 0.26\pm 0.26± 0.26 6.08 0.8 92.37±1.32 plus-or-minus 1.32\pm 1.32± 1.32 0.22 Avg BSR 2.58 82.93±1.91 plus-or-minus 1.91\pm 1.91± 1.91 2.16 3.33 89.41±1.22 plus-or-minus 1.22\pm 1.22± 1.22 3.68 0.53 90.72±1.03 plus-or-minus 1.03\pm 1.03± 1.03 0.16 FLAME(IID)Acc 79.86 75.42±0.44 plus-or-minus 0.44\pm 0.44± 0.44 79.69 78.77 75.85±0.44 plus-or-minus 0.44\pm 0.44± 0.44 78.46 88.76 88.85±0.42 plus-or-minus 0.42\pm 0.42± 0.42 88.9 Best BSR 84.59 94.87±0.15 plus-or-minus 0.15\pm 0.15± 0.15( 1.12±0.18 plus-or-minus 0.18\pm 0.18± 0.18)44.22 84.62 90.16±3.39 plus-or-minus 3.39\pm 3.39± 3.39(2.08±0.57 plus-or-minus 0.57\pm 0.57± 0.57)23.41 8.44 0.0(44.5±2.75 plus-or-minus 2.75\pm 2.75± 2.75)4.99 Avg BSR 77.46 89.43±3.28 plus-or-minus 3.28\pm 3.28± 3.28(0.65±0.12 plus-or-minus 0.12\pm 0.12± 0.12)34.84 66.32 72.29±6.07 plus-or-minus 6.07\pm 6.07± 6.07( 0.96±0.26 plus-or-minus 0.26\pm 0.26± 0.26)9.51 5.38 0.0(40.85±4.74 plus-or-minus 4.74\pm 4.74± 4.74)2.4 RLR(IID)Acc 80.7 79.07±0.27 plus-or-minus 0.27\pm 0.27± 0.27(80.78±0.16 plus-or-minus 0.16\pm 0.16± 0.16)80.55 77.57 76.88±0.73 plus-or-minus 0.73\pm 0.73± 0.73(0.96±0.17 plus-or-minus 0.17\pm 0.17± 0.17)77.19 86.86 87.36(87.69±0.08 plus-or-minus 0.08\pm 0.08± 0.08)87.04 Best BSR 6.9 96.23±1.09 plus-or-minus 1.09\pm 1.09± 1.09 4.93 6.34 96.18±0.35 plus-or-minus 0.35\pm 0.35± 0.35 5.16 0.18 88.22±9.83 plus-or-minus 9.83\pm 9.83± 9.83 2.81 Avg BSR 2.54 94.41±0.28 plus-or-minus 0.28\pm 0.28± 0.28 2.42 3.19 95.24±0.3 plus-or-minus 0.3\pm 0.3± 0.3 2.94 0.08 82.5±7.27 plus-or-minus 7.27\pm 7.27± 7.27 1.57 MultiKrum(IID)Acc 81.12 80.33±0.23 plus-or-minus 0.23\pm 0.23± 0.23 81.43 79.89 78.19±0.69 plus-or-minus 0.69\pm 0.69± 0.69 78.4 88.64 88.56±0.04 plus-or-minus 0.04\pm 0.04± 0.04 88.46 Best BSR 5.46 94.46±1.51 plus-or-minus 1.51\pm 1.51± 1.51 6.56 4.89 97.68±0.4 plus-or-minus 0.4\pm 0.4± 0.4 7.2 0.03 98.38±0.47 plus-or-minus 0.47\pm 0.47± 0.47 100.0 Avg BSR 5.43 92.65±1.01 plus-or-minus 1.01\pm 1.01± 1.01 6.51 4.43 97.65±0.42 plus-or-minus 0.42\pm 0.42± 0.42 4.07 0.03 98.24±0.53 plus-or-minus 0.53\pm 0.53± 0.53 100.0 FLDetector(IID)Acc 62.86 52.17±3.34 plus-or-minus 3.34\pm 3.34± 3.34 63.3 68.54 65.02±1.35 plus-or-minus 1.35\pm 1.35± 1.35 69.02 80.56 80.56 ±0.12 plus-or-minus 0.12\pm 0.12± 0.12 80.06 Best BSR 4.33 83.12±5.5 plus-or-minus 5.5\pm 5.5± 5.5 4.57 6.18 92.37±1.07 plus-or-minus 1.07\pm 1.07± 1.07 5.21 0.09 90.32±1.88 plus-or-minus 1.88\pm 1.88± 1.88 100.0 Avg BSR 2.33 68.78±9.3 plus-or-minus 9.3\pm 9.3± 9.3 2.94 3.76 88.19±1.84 plus-or-minus 1.84\pm 1.84± 1.84 3.29 0.05 87.97±0.83 plus-or-minus 0.83\pm 0.83± 0.83 100.0 FLARE(IID)Acc 83.75 82.32±1.01 plus-or-minus 1.01\pm 1.01± 1.01 83.55 77.4 76.56±0.56 plus-or-minus 0.56\pm 0.56± 0.56 75.94 89.19 89.04±0.13 plus-or-minus 0.13\pm 0.13± 0.13 88.98