Multi-step and Iterative Backdoor Injection in Federated Machine Unlearning
This paper investigates multistep and iterative back-door injection in federated learning, revealing how gradual and distributed attacks enhance the persistence and stealth of backdoors. These attacks evade detection by standard defenses, complicating the process of machine unlearning. Experimental evaluations show that traditional unlearning methods are only partially effective, while our proposed iterative unlearning strategy significantly reduces backdoor success without degrading model accuracy. The findings emphasize the need for adaptive and robust unlearning techniques designed for the unique challenges of federated learning, offering new directions for defending against sophisticated adversarial attacks.
Authors
- Zijie Pan (ORCID: https://orcid.org/0000-0002-7644-1334)
- Z.-X. Ling (ORCID: https://orcid.org/0009-0000-8103-8884)
- Chao Zhang (ORCID: https://orcid.org/0000-0001-6248-9962)
Institutions
- Guangzhou University (CN)
- City University of Macau (MO)
Publication Details
- Published
- 2024-11-04
- DOI
- https://doi.org/10.1109/csrswtc64338.2024.10811514
- Citations
- 1
- Primary Topic
- Brain Tumor Detection and Classification
- Type
- article
- Field-Weighted Citation Impact
- 0.25