Researchers have developed a new type of backdoor attack against federated learning systems by inducing hardware faults, specifically bit-flips, in model parameters during training. This novel approach, termed "Chain of Bit-Flips," is task-agnostic and can be implanted by a single malicious client. The attack demonstrated a high success rate, reaching 94% with a limited number of faults on a ResNet-18 model, and discussed the practical implications and potential defenses. AI
IMPACT Highlights a new vulnerability in federated learning, potentially requiring new hardware and software defenses to secure distributed AI training.
RANK_REASON The cluster contains an academic paper detailing a new method for model poisoning in federated learning systems.
- Bit-Flips
- Federated Learning
- Hardware Faults
- Model Poisoning
- Pierre-Alain Moëllic
- ResNet-18
- Chain of Bit-Flips
AI-generated summary · Google Gemini · from 2 sources. How we write summaries →