NAISS
SUPR
NAISS Projects
SUPR
Attacks on Decentralized Machine Learning
Dnr:

NAISS 2026/4-12

Type:

NAISS Small

Principal Investigator:

Ashkan Panahi

Affiliation:

Chalmers tekniska högskola

Start Date:

2026-01-08

End Date:

2027-01-01

Primary Classification:

10210: Artificial Intelligence

Webpage:

Allocation

Abstract

Federated Learning (FL) is a machine learning paradigm that enables multiple clients to collaboratively train a global model without sharing their private data. However, this distributed nature also exposes FL to various security threats, including poisoning attacks. In this project, we explore the vulnerabilities of FL against poisoning attacks, where adversarial clients manipulate local updates to degrade global model performance or introduce hidden backdoors. We categorize poisoning attacks into two main types: data poisoning, where adversaries manipulate training data, and model poisoning, where malicious updates are directly injected into the training process. We analyze the impact of these attacks under different aggregation strategies and adversary models, highlighting their effectiveness in compromising model integrity. Finally, we discuss potential defenses and mitigation strategies to enhance the robustness of FL systems. Our findings underscore the urgent need for designing secure and resilient federated learning frameworks to mitigate poisoning threats.