Srinivasan Subramanian

Bypassing Krum: Selection-Aware Backdoor Attacks in Federated Learning

The Krum-Proxy attack is introduced, a selection-aware backdoor injection strategy that consistently bypasses Byzantine-robust aggregation and constructs adversarial updates that are not only similar to benign updates but are also optimized to lie in regions of the update space that are favored during aggregation.