Zhu Feng

Beyond Traditional Threats: A Persistent Backdoor Attack on Federated Learning

Backdoors on federated learning will be diluted by subsequent benign updates. This is reflected in the significant reduction of attack success rate as iterations increase, ultimately failing. We use a new metric to quantify the degree of this weakened backdoor effect, called attack persistence. Give…