A byzantine-resilient aggregation scheme for federated learning via matrix autoregression on client updates

Tolomei G., Gabrielli E., Belli D., Miori V.

Machine Learning  Federated Learaning  Robust Aggregation  Byzantine Model Poisoning 

In this work, we propose FLANDERS, a novel federated learning (FL) aggregation scheme robust to Byzantine attacks. FLANDERS considers the local model updates sent by clients at each FL round as a matrix-valued time series. Then, it identifies malicious clients as outliers of this time series by comparing actual observations with those estimated by a matrix autoregressive forecasting model. Experiments conducted on several datasets under different FL settings demonstrate that FLANDERS matches the robustness of the most powerful baselines against Byzantine clients. Furthermore, FLANDERS remains highly effective even under extremely severe attack scenarios, as opposed to existing defense strategies.