Federated Variance-Reduced Stochastic Gradient Descent With Robustness to Byzantine Attacks
By Zhaoxian Wu, Qing Ling, Tianyi Chen, Georgios B. Giannakis. 2019
237 citations recorded by the source corpus.
This paper deals with distributed finite-sum optimization for learning over multiple workers in the presence of malicious Byzantine attacks. Most resilient approaches so far combine stochastic gradient descent (SGD) with different robust aggregation rules. However, the sizeable SGD-induced stochastic gradient noise challenges discerning malicious messages sent by the Byzantine attackers from noisy stochastic gradients sent by the ‘honest’ workers. This motivates reducing the variance of stochastic gradients as a means of robustifying SGD. To this end, a novel Byzantine attack resilient distributed (Byrd-) SAGA approach is introduced for federated learning tasks involving multiple workers. Rather than the mean employed by distributed SAGA, the novel Byrd-SAGA relies on the geometric median to aggregate the corrected stochastic gradients sent by the workers. When less than half of the workers are Byzantine attackers, Byrd-SAGA attains provably linear convergence to a neighborhood of the optimal solution, with the asymptotic learning error determined by the number of Byzantine workers. Numerical tests corroborate the robustness to various Byzantine attacks, as well as the merits of Byrd-SAGA over Byzantine attack resilient distributed SGD.
Subfields: Artificial Intelligence
How researchers see this paper
The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.
In Artificial Intelligence
- Filip Hanzely
- Peter Richtárik
- Yuanming Shi
- Khaled Ben Letaief
- Jianhua Lu
- Jianmin Lu
- Nicolas Loizou
- María Victoria Luzón
Citations in the corpus
- Federated Learning of a Mixture of Global and Local Models (2020, background): “Other variance reduced local SGD algorithms (Liang et al., 2019; Karimireddy et al., 2019; Wu et al., 2019) are not capable of achieving linear convergence.”
- Edge Artificial Intelligence for 6G: Vision, Enabling Technologies, and Applications (2021, background): “, geometric median [168], trimmed mean [169], and Krum [170]) were proposed to tolerate the Byzantine corrupted edge devices.”
- Survey on Federated Learning Threats: concepts, taxonomy on attacks and defences, experimental study and challenges (2022, background): “• Geometric-mean [88, 89]: It represents the central tendency or the typical value of the data distribution by using the product of their values.”