AI Paper Atlas

Research map / Federated learning and privacy / Privacy attacks and secure learning

Provably Secure Federated Learning against Malicious Clients

AAAI 2021 · Federated learning and privacy › Privacy attacks and secure learning · approach: Defending federated learning against poisoning · 135 citations (OpenAlex)

Read the paperCheck your idea against 108,967 papers

AI-extracted summary. Written by AI from the paper's title only (no summary yet). Numbers and claims can be wrong or missing context, so check the paper before you cite or build on it.

Measured effects reported in the paper

What was changedWhereMeasuredEffect
Replace one global model with a majority vote over client-subsample modelsFedAvg · MNIST and HARcertified accuracy at m>0: 0 certified accuracy for single-model FedAvg at one malicious client; ensemble FedAvg reaches 0 at 61 clients on MNIST aHelped
Use a larger client subsample size k (ablation)Ensemble FedAvg · MNIST and HARcertified accuracyMixed
Increase the number of trained subsample models N (ablation)Ensemble FedAvg · MNIST and HARcertified accuracy: 100 to 500; 1,000Helped
Increase alpha (ablation)Ensemble FedAvg certification algorithm · MNIST and HARcertified accuracyHelped
Increase the degree of non-IID client data q from 0.5 to 0.9 (ablation)Ensemble FedAvg · MNISTcertified accuracy: 0.5 to 0.9Hurt
Use ensemble FedAvg with q=0.9 client data (ablation)Ensemble FedAvg · MNIST at 10 malicious clientscertified accuracy: 83\%Helped

Closest papers by meaning

Writing a paper in this area? scime draft is a free LaTeX editor with AI included, real-time co-authors and a check of your references and venue rules before you submit. It also imports OpenAI Prism projects.

Open scime draft

Get the next scime Dispatch and a monthly field update

Free. We send a confirmation link first; every email has a one-click unsubscribe. Privacy