1 paper
Asmah Muallem, Firdous Kausar, Sajid Hussain +1
Flipping 60\% of training labels from a single Byzantine client using label-flipping model poisoning self-degrades an attacker's own federated detection accuracy, 99.96% (at no…