Compression Footprints as Security Signals for Model-Poisoning Defense in Federated Learning
What it is
This paper proposes using the statistical properties of lossy compression (reconstruction, directional, sparsity, and payload statistics) as a security signal to distinguish honest from malicious updates in Federated Learning. It introduces the CRAFT aggregation method, which leverages these 'compression footprints' to robustly aggregate model updates without requiring client-side metadata or prior knowledge of the number of attackers.
The problem it solves
Conventional poisoning defenses in Federated Learning rely on inspecting update geometry, which can be evaded; lossy compression is typically treated only as a source of error rather than a potential security signal.
What you could use it for
- Defending Federated Learning systems against model-poisoning attacks
- Robust aggregation of compressed model updates in distributed training
- Detecting malicious clients based on compression behavior rather than update geometry
Read the source ↗Back to the library →
Summary written by an AI model from the source; check the source before you rely on it.