Beyond Passive Aggregation: Active Auditing and Topology-Aware Defense in Decentralized Federated Learning
Organizations: Yunnan Key Laboratory of Statistical Modeling and Data Analysis, Yunnan University, Kunming 650091, China
Abstract
Decentralized Federated Learning (DFL) remains highly vulnerable to adaptive backdoor attacks designed to bypass traditional passive defense metrics. To address this limitation, we shift the defensive paradigm toward a novel active, interventional auditing framework. First, we establish a dynamical model to characterize the spatiotemporal diffusion of adversarial updates across complex graph topologies. Second, we introduce a suite of proactive auditing metrics, stochastic entropy anomaly, randomized smoothing Kullback-Leibler divergence, and activation kurtosis. These metrics utilize private probes to stress-test local models, effectively exposing latent backdoors that remain invisible to conventional static detection. Furthermore, we implement a topology-aware defense placement strategy to maximize global aggregation resilience. We provide theoretical property for the system's convergence under co-evolving attack and defense dynamics. Numeric empirical evaluations across diverse architectures demonstrate that our active framework is highly competitive with state-of-the-art defenses in mitigating stealthy, adaptive backdoors while preserving primary task utility.
Figures & tables
| Mechanism | Malicious Ratio | |||||
|---|---|---|---|---|---|---|
| 10% | 20% | 30% | ||||
| ACC | ASR | ACC | ASR | ACC | ASR | |
| Topology: Scale-free | ||||||
| FedAvg | 71.54 (01.75) | 39.33 (13.89) | 70.76 (01.58) | 54.17 (02.57) | 71.05 (01.61) | 59.43 (14.71) |
| Krum | 71.76 (00.86) | 24.48 (10.31) | 71.78 (00.03) | 23.25 (10.94) | 70.52 (01.81) | 40.17 (10.56) |
| TrimmedMean | 71.96 (00.64) | 05.51 (01.38) | 72.85 (00.53) | 23.85 (07.61) | 71.52 (00.88) | 46.05 (09.48) |
| Mechanism | Malicious Ratio | |||||
|---|---|---|---|---|---|---|
| 10% | 20% | 30% | ||||
| ACC | ASR | ACC | ASR | ACC | ASR | |
| Topology: Scale-free | ||||||
| FedAvg | 83.75 (00.84) | 23.78 (13.41) | 82.31 (01.01) | 49.13 (20.50) | 78.67 (01.50) | 59.93 (06.23) |
| Krum | 84.34 (00.86) | 24.54 (13.97) | 81.14 (02.47) | 43.21 (09.24) | 75.97 (01.16) | 67.21 (06.53) |
| TrimmedMean | 83.66 (01.13) | 13.75 (05.78) | 82.23 (01.11) | 18.93 (13.27) | 78.30 (02.97) | 26.90 (05.87) |
| AUP | AP | AT | ACC (%) | ASR (%) |
| Topology: Random-regular | ||||
| 0.8 | 0.8 | 0.4 | 68.42 (01.18) | 21.58 (08.52) |
| 0.8 | 0.8 | 0.5 | 67.17 (01.36) | 19.67 (06.54) |
| 0.8 | 0.9 | 0.4 | 67.55 (00.79) | 17.94 (05.80) |
| 0.8 | 0.9 | 0.5 | 67.60 (01.93) | 23.53 (10.27) |
| 0.9 | 0.8 | 0.4 | 68.11 (01.81) | 19.81 (02.72) |
| AUP | AP | AT | ACC (%) | ASR (%) |
| Topology: Random-regular | ||||
| 0.8 | 0.8 | 0.4 | 84.86 (01.07) | 03.37 (03.60) |
| 0.8 | 0.8 | 0.5 | 85.89 (00.97) | 05.55 (04.77) |
| 0.8 | 0.9 | 0.4 | 84.86 (01.07) | 03.37 (03.60) |
| 0.8 | 0.9 | 0.5 | 85.89 (00.97) | 05.55 (04.77) |
| 0.9 | 0.8 | 0.4 | 85.70 (00.50) | 05.01 (05.66) |
Federated Learning
Federated learning trains shared models across data holders without requiring them to pool their raw data.
See all 943 papers