The Impact of Adversarial Attacks on Federated Learning: A Survey

被引:35
作者
Kumar, Kummari Naveen [1 ]
Mohan, Chalavadi Krishna [1 ]
Cenkeramaddi, Linga Reddy [2 ]
机构
[1] Indian Inst Technol Hyderabad, Dept Comp Sci & Engn, Hyderabad 502284, India
[2] Univ Agder, Dept Informat & Commun Technol, N-4630 Grimstad, Norway
关键词
Adversarial attacks; and security challenges; attack status; attacks & defenses; budget; federated learning; generalizability; impact; online & offline attacks; real-world application domains; visibility; INTRUSION DETECTION; POISONING ATTACKS; PRIVACY; TAXONOMY; DEFENSE; THREATS; IIOT; IOT;
D O I
10.1109/TPAMI.2023.3322785
中图分类号
TP18 [人工智能理论];
学科分类号
081104 ; 0812 ; 0835 ; 1405 ;
摘要
Federated learning (FL) has emerged as a powerful machine learning technique that enables the development of models from decentralized data sources. However, the decentralized nature of FL makes it vulnerable to adversarial attacks. In this survey, we provide a comprehensive overview of the impact of malicious attacks on FL by covering various aspects such as attack budget, visibility, and generalizability, among others. Previous surveys have primarily focused on the multiple types of attacks and defenses but failed to consider the impact of these attacks in terms of their budget, visibility, and generalizability. This survey aims to fill this gap by providing a comprehensive understanding of the attacks' effect by identifying FL attacks with low budgets, low visibility, and high impact. Additionally, we address the recent advancements in the field of adversarial defenses in FL and highlight the challenges in securing FL. The contribution of this survey is threefold: first, it provides a comprehensive and up-to-date overview of the current state of FL attacks and defenses. Second, it highlights the critical importance of considering the impact, budget, and visibility of FL attacks. Finally, we provide ten case studies and potential future directions towards improving the security and privacy of FL systems.
引用
收藏
页码:2672 / 2691
页数:20
相关论文
共 181 条
[1]   TON_IoT Telemetry Dataset: A New Generation Dataset of IoT and IIoT for Data-Driven Intrusion Detection Systems [J].
Alsaedi, Abdullah ;
Moustafa, Nour ;
Tari, Zahir ;
Mahmood, Abdun ;
Anwar, Adnan .
IEEE ACCESS, 2020, 8 :165130-165150
[2]   BaFFLe: Backdoor Detection via Feedback -based Federated Learning [J].
Andreina, Sebastien ;
Marson, Giorgia Azzurra ;
Moellering, Helen ;
Karame, Ghassan .
2021 IEEE 41ST INTERNATIONAL CONFERENCE ON DISTRIBUTED COMPUTING SYSTEMS (ICDCS 2021), 2021, :852-863
[3]  
[Anonymous], 2003, Technical report
[4]  
Bagdasaryan E, 2020, PR MACH LEARN RES, V108, P2938
[5]  
Balakrishnan R., 2022, PROC INT C LEARN REP
[6]   From Detection of Individual Metastases to Classification of Lymph Node Status at the Patient Level: The CAMELYON17 Challenge [J].
Bandi, Peter ;
Geessink, Oscar ;
Manson, Quirine ;
van Dijk, Marcory ;
Balkenhol, Maschenka ;
Hermsen, Meyke ;
Bejnordi, Babak Ehteshami ;
Lee, Byungjae ;
Paeng, Kyunghyun ;
Zhong, Aoxiao ;
Li, Quanzheng ;
Zanjani, Farhad Ghazvinian ;
Zinger, Svitlana ;
Fukuta, Keisuke ;
Komura, Daisuke ;
Ovtcharov, Vlado ;
Cheng, Shenghua ;
Zeng, Shaoqun ;
Thagaard, Jeppe ;
Dahl, Anders B. ;
Lin, Huangjing ;
Chen, Hao ;
Jacobsson, Ludwig ;
Hedlund, Martin ;
Cetin, Melih ;
Halici, Eren ;
Jackson, Hunter ;
Chen, Richard ;
Both, Fabian ;
Franke, Joerg ;
Kusters-Vandevelde, Heidi ;
Vreuls, Willem ;
Bult, Peter ;
van Ginneken, Bram ;
van der Laak, Jeroen ;
Litjens, Geert .
IEEE TRANSACTIONS ON MEDICAL IMAGING, 2019, 38 (02) :550-560
[7]  
Baruch M, 2019, ADV NEUR IN, V32
[8]  
Benmalek Mourad, 2022, Revue d'Intelligence Artificielle, V36, P49, DOI 10.18280/ria.360106
[9]  
Bhagoji AN, 2019, PR MACH LEARN RES, V97
[10]  
Blanchard P, 2017, ADV NEUR IN, V30