FedSV: Byzantine-Robust Federated Learning via Shapley Value

• Published in: ICC 2024 - IEEE International Conference on Communications pp. 4620 - 4625
• Main Authors: Otmani, Khaoula, El-Azouzi, Rachid, Labatut, Vincent
• Format: Conference Proceeding
• Language: English
• Published: IEEE 09-06-2024
• Subjects: Accuracy; Backdoor attacks; Clustering; Computational modeling; Data models; Federated learning; Predictive models; Security; Servers; Shapley Value; Training
• ISSN: 1938-1883
• DOI: 10.1109/ICC51166.2024.10622175

In Federated Learning (FL), several clients jointly learn a machine learning model: each client maintains a local model for its local learning dataset, while a master server maintains a global model by aggregating the local models of the client devices. However, the repetitive communication between server and clients leaves room for attacks aimed at compromising the integrity of the global model, causing errors in its targeted predictions. In response to such threats on FL, various defense measures have been proposed in the literature [1]. In this paper, we present a powerful defense against malicious clients in FL, called FedSV, using the Shapley Value (SV), which has been proposed recently to measure user conribution in FL by computing the marginal increase of average accuracy of the model due to the addition of local data of a user. Our approach makes the identification of malicious clients more robust, since during the learning phase, it estimates the conribution of each client according to the different groups to which the target client belongs. FedSV's effectiveness is demonstrated by extensive experiments on MNIST datasets in a cross-silo context under various attacks.