Federated minimax problems, such as distributionally robust optimization and adversarial training, include an inner maximization variable built from each client's local data. These variables differ in meaning and dimension from one client to the next, so averaging them across clients, as standard federated minimax methods do, is ill-posed. We therefore study a federated minimax problem where the minimization variable x is shared and aggregated, while each client retains the maximization variable yi (personalized). Because these applications constrain yi to a compact convex set, we analyze projected ascent directly. We show that, in the nonconvex-concave regime, this projected personalized scheme attains the standard sublinear rate. In the nonconvex-PL regime, however, it hits a stepsize-invariant noise floor due to stochastic yi updates. To mitigate this, we propose VR-SGDA, incorporating a variance-reduced ascent step where each client maintains a private variable snapshot. By evaluating current and snapshot gradients on the same sample, the constant variance is replaced by a vanishing drift under a two-timescale regime. VR-SGDA eliminates the noise floor, attaining sublinear leading rates while preserving personalization and projection. Experiments on subpopulation-robustness and NLP adversarial training confirm both the worst-group robustness benefits and the two-timescale tracking mechanism.
Figures & tables
Method
x
y
Application motivated
Per-client y
Inner coupling
Projected ascent on y
Local SGDA [ 7 ]
shared
shared
×
×
general
×
DRFA [ 6 ]
shared
shared
partial
×
client-weight
×
Minimax Convergence Analysis [ 28 ]
shared
shared
×
×
general
×
FLRA [ 25 ]
shared
personalized
✓
✓
affine input shift
×
Partial model [ 23 ]
partial
—
n/a
n/a
n/a
n/a
Ours
shared
personalized
✓
✓
general
✓
Table 1: Comparison of related federated robust optimization frameworks. Our method is the only one that maintains personalized maximization variables yi updated by projected ascent on constrained set, under a general adversary coupling.
Table 2: Comprehensive Subpopulation Group Composition of the Colored MNIST Dataset
Framework
Worst-Client (%)
Mean (%)
ERM (Baseline)
34.09 (0.00)
55.56 (1.02)
Shared Model (SGDA)
34.09 (1.61)
55.60 (0.89)
Personalized Model (Ours)
38.18 (1.90)
54.50 (0.33)
Table 3: Federated-Adversarial performance evaluated on clean samples across Banking-77 dataset.
Framework
Worst-Group Accuracy (%)
Average Accuracy (%)
ERM (Baseline)
0.19 (0.20)
53.00 (4.57)
Shared Model(SGDA)
52.23 (2.19)
57.23 (0.87)
Personalized Model (Ours)
72.37 (0.88)
75.63 (1.25)
Table 4: Generalization and subpopulation robustness on Federated Colored MNIST (mean ± std over three seeds). Baseline ERM memorizes the spurious color correlation, collapsing on minority groups (0.19%). The Shared Model (Global DRO) stays near chance ( ∼ 52%). Our Fully Personalized Min-Max framework leverages decoupled local Stackelberg adversaries to unlearn color biases and extract invariant shape features, achieving a superior 72.37% worst-group accuracy.
Figure 1: Dual-tracking analysis showing the convergence of Φ(xt) .
Figure 2: ∥∇Φ(xt)∥2 for projected Local SGDA vs. Personalized VR-SGDA (mean of 5 seeds, band ±1 s.d.). SGDA plateaus at the noise floor; VR-SGDA removes it.
Federated learning (FL) enables collaborative model training without sharing raw data, but its performance degrades under non-IID data and stochastic client participation. Remedies built on classical Federated Averaging (FedAvg) typically presuppose that client participation probabilities are known to the server, which is rarely the case in deployed systems. We first discuss and then characterize the optimization problem that distributionally agnostic FedAvg actually solves when participation is entirely unknown, possibly highly skewed, and of variable size across rounds: uniform aggregation is shown to minimize a well-defined stochastic objective, weighted by the participation-induced marginal, at a standard O(1/T) rate for convex and possibly nonsmooth losses. Building on this characterization, we propose Federated Risk-Averse Averaging (FedeRage), a risk-averse extension of FedAvg that embeds the Conditional Value-at-Risk (CVaR) into the local objective within a natural distributionally robust optimization (DRO) framework. FedeRage implicitly upweights high-loss and infrequently participating clients while adding only a single scalar per-client, and admits an O(κ/T) rate in which the factor κ is the upper bound on the ``price" of risk aversion. In contrast with aggregation-alignment schemes based on optimal transport, which require the availability distribution as an input, FedeRage remains agnostic to it. Several experiments on three heterogeneous benchmarks indicate consistent improvements over state-of-the-art methods in accuracy, fairness, and convergence speed.
Federated Learning (FL) enables multiple clients to collaboratively train models without sharing raw data, but it is highly vulnerable to Byzantine attacks. Existing robust approaches can neutralize these threats but incur substantial computational overhead during high-dimensional gradient aggregation, an overhead that scales poorly with model size and increasingly dominates the training cost as modern models grow larger. To address this computational bottleneck, we propose Projected Dimensionality Reduction (PDR), a universal acceleration framework for vector-level distance-based robust aggregators, which performs robust aggregation by compressing gradients into a drastically smaller subspace via sparse random projection to efficiently compute reliability weights. This approach reduces the server computational complexity to an optimal O(Mp), where M is the number of clients and p is the model dimension, matching the theoretical lower bound required merely to read the gradients. We establish convergence guarantees under standard FL assumptions in prior Byzantine-robust FL analyses. By leveraging the Subspace Embedding Theorem, we show that PDR achieves optimal convergence rates of O(1/T) for non-convex functions and O(1/T) for strongly convex functions, where T denotes the number of iterations. Crucially, we mathematically demonstrate that this massive acceleration comes almost for free, merely inflating the inherent Byzantine error floor by a bounded, tunable factor of 1−ε1+ε. Experimental results on benchmark datasets confirm that integrating PDR with existing aggregators yields orders of magnitude speedups in time efficiency while maintaining highly competitive convergence performance.
Shiyuan Zuo, Jiashuo Li, Rongfei Fan +2
Beijing Institute of Technology, Beijing, China · Xi’an Jiaotong University, Xi’an, China · The Chinese University of Hong Kong (Shenzhen), Shenzhen, China
Federated learning (FL) is an emerging distributed machine learning paradigm that enables local devices to jointly train a global model while keeping data decentralized and private. We propose a variance-reduction based algorithm, VRA-FedSGD, for FL in the presence of heavy-tailed gradient noise and communication noise, where these noises are prevalent in large-scale machine learning over wireless networks and Internet of Things deployments. VRA-FedSGD employs a momentum variance reduction technique together with a nonlinear mapping to mitigate heavy-tailed gradient noise, and uses a variance-reduced aggregation mechanism to suppress heavy-tailed communication noise. In the mean sense, VRA-FedSGD achieves a convergence rate of {\smallO(K−(p−1)/(2p−1))} for nonconvex objective functions, where p is the tail index of heavy-tailed noise. In the almost sure sense, VRA-FedSGD achieves a convergence rate of O~(K−(1−1/(p−ε))) for strongly convex objective functions, where ε is an arbitrarily small constant. Simulated experiments on a logistic regression problem with real-world data verify the effectiveness of VRA-FedSGD.
Shengchao Zhao, Yongchao Liu
School of Mathematics, China University of Mining and Technology, Xuzhou, China · School of Mathematical Sciences, Dalian University of Technology, Dalian, China