Secure Federated Learning against Model Poisoning Attacks via Client Filtering

Duygu Nur Yaldiz, Tuo Zhang, Salman Avestimehr

Given the distributed nature, detecting and defending against the backdoor attack under federated learning (FL) systems is challenging. In this paper, we observe that the cosine si…