Exploration and Exploitation in Federated Learning to Exclude Clients with Poisoned Data

TL;DR

This paper introduces an evolutionary-inspired federated learning algorithm that effectively excludes poisoned clients, reduces communication costs, and improves accuracy and security by iteratively removing underperforming or malicious clients.

Contribution

The paper presents a novel FL algorithm that uses clustering and iterative elimination to enhance model performance and security against poisoned data attacks.

Findings

Outperforms baseline in accuracy

Reduces communication costs

Enhances security against poisoned data

Abstract

Federated Learning (FL) is one of the hot research topics, and it utilizes Machine Learning (ML) in a distributed manner without directly accessing private data on clients. However, FL faces many challenges, including the difficulty to obtain high accuracy, high communication cost between clients and the server, and security attacks related to adversarial ML. To tackle these three challenges, we propose an FL algorithm inspired by evolutionary techniques. The proposed algorithm groups clients randomly in many clusters, each with a model selected randomly to explore the performance of different models. The clusters are then trained in a repetitive process where the worst performing cluster is removed in each iteration until one cluster remains. In each iteration, some clients are expelled from clusters either due to using poisoned data or low performance. The surviving clients are exploited in the next iteration. The remaining cluster with surviving clients is then used for training the best FL model (i.e., remaining FL model). Communication cost is reduced since fewer clients are used in the final training of the FL model. To evaluate the performance of the proposed algorithm, we conduct a number of experiments using FEMNIST dataset and compare the result against the random FL algorithm. The experimental results show that the proposed algorithm outperforms the baseline algorithm in terms of accuracy, communication cost, and security.