Survey on Federated Learning Threats: concepts, taxonomy on attacks and defences, experimental study and challenges

Abstract

Federated learning is a machine learning paradigm that emerges as a solution to the privacy-preservation demands in artificial intelligence. As machine learning, federated learning is threatened by adversarial attacks against the integrity of the learning model and the privacy of data via a distributed approach to tackle local and global learning. This weak point is exacerbated by the inaccessibility of data in federated learning, which makes harder the protection against adversarial attacks and evidences the need to furtherance the research on defence methods to make federated learning a real solution for safeguarding data privacy. In this paper, we present an extensive review of the threats of federated learning, as well as as their corresponding countermeasures, attacks versus defences. This survey provides a taxonomy of adversarial attacks and a taxonomy of defence methods that depict a general picture of this vulnerability of federated learning and how to overcome it. Likewise, we expound guidelines for selecting the most adequate defence method according to the category of the adversarial attack. Besides, we carry out an extensive experimental study from which we draw further conclusions about the behaviour of attacks and defences and the guidelines for selecting the most adequate defence method according to the category of the adversarial attack. This study is finished leading to meditated learned lessons and challenges.

Toward Privacy Preservation Using Clustering Based Anonymization: Recent Advances and Future Research Outlook

“…In recent years, FL has been thoroughly investigated from applications as well as threats point of view. We refer interested readers to learn more about the FL ecosystem from recently published previous surveys [310]- [312].…”

A Survey on Federated Learning PoisoningAttacks and Defenses

“…(11) Nuria Rodríguez-Barroso et al [30] focused on the robustness, privacy attacks, and defenses of federated learning.…”

“…Major contents [20] early work that concludes data poisoning, model poisoning, and defense [21] problems of communication, poisoning attacks, inference attacks and privacy leakage [22] the concept of semi-supervised federated learning and applications [23] defenses against model poisoning and privacy inference attacks [24] block chain-based privacy protection for federated learning [25] privacy protection classification of federated learning and the defenses [26] federated learning privacy protection, communication overhead, and malicious participant defenses [27] defense methods for model poisoning [28] federated learning privacy protection convergence programme [29] survey and evaluation of federated learning privacy attacks and defenses programs [30] federated learning robustness, privacy attacks, and defenses…”

Bingo: A Semi-Centralized Password Storage System

“…The following aims to explain the most commonly used techniques by attackers in order to steal and crack users' passwords [22]. The goal of this section is to enumerate the aspects of Bingo which makes it largely resistant to such attacks.…”