Federated minimax problems, such as distributionally robust optimization and adversarial training, include an inner maximization variable built from each client's local data. These variables differ in meaning and dimension from one client to the next, so averaging them across clients, as standard federated minimax methods do, is ill-posed. We therefore study a federated minimax problem where the minimization variable x is shared and aggregated, while each client retains the maximization variable yi (personalized). Because these applications constrain yi to a compact convex set, we analyze projected ascent directly. We show that, in the nonconvex-concave regime, this projected personalized scheme attains the standard sublinear rate. In the nonconvex-PL regime, however, it hits a stepsize-invariant noise floor due to stochastic yi updates. To mitigate this, we propose VR-SGDA, incorporating a variance-reduced ascent step where each client maintains a private variable snapshot. By evaluating current and snapshot gradients on the same sample, the constant variance is replaced by a vanishing drift under a two-timescale regime. VR-SGDA eliminates the noise floor, attaining sublinear leading rates while preserving personalization and projection. Experiments on subpopulation-robustness and NLP adversarial training confirm both the worst-group robustness benefits and the two-timescale tracking mechanism.
Figures & tables
Method
x
y
Application motivated
Per-client y
Inner coupling
Projected ascent on y
Local SGDA [ 7 ]
shared
shared
×
×
general
×
DRFA [ 6 ]
shared
shared
partial
×
client-weight
×
Minimax Convergence Analysis [ 28 ]
shared
shared
×
×
general
×
FLRA [ 25 ]
shared
personalized
✓
✓
affine input shift
×
Partial model [ 23 ]
partial
—
n/a
n/a
n/a
n/a
Ours
shared
personalized
✓
✓
general
✓
Table 1: Comparison of related federated robust optimization frameworks. Our method is the only one that maintains personalized maximization variables yi updated by projected ascent on constrained set, under a general adversary coupling.
Table 2: Comprehensive Subpopulation Group Composition of the Colored MNIST Dataset
Framework
Worst-Client (%)
Mean (%)
ERM (Baseline)
34.09 (0.00)
55.56 (1.02)
Shared Model (SGDA)
34.09 (1.61)
55.60 (0.89)
Personalized Model (Ours)
38.18 (1.90)
54.50 (0.33)
Table 3: Federated-Adversarial performance evaluated on clean samples across Banking-77 dataset.
Framework
Worst-Group Accuracy (%)
Average Accuracy (%)
ERM (Baseline)
0.19 (0.20)
53.00 (4.57)
Shared Model(SGDA)
52.23 (2.19)
57.23 (0.87)
Personalized Model (Ours)
72.37 (0.88)
75.63 (1.25)
Table 4: Generalization and subpopulation robustness on Federated Colored MNIST (mean ± std over three seeds). Baseline ERM memorizes the spurious color correlation, collapsing on minority groups (0.19%). The Shared Model (Global DRO) stays near chance ( ∼ 52%). Our Fully Personalized Min-Max framework leverages decoupled local Stackelberg adversaries to unlearn color biases and extract invariant shape features, achieving a superior 72.37% worst-group accuracy.
Figure 1: Dual-tracking analysis showing the convergence of Φ(xt) .
Figure 2: ∥∇Φ(xt)∥2 for projected Local SGDA vs. Personalized VR-SGDA (mean of 5 seeds, band ±1 s.d.). SGDA plateaus at the noise floor; VR-SGDA removes it.
Federated learning (FL) enables collaborative model training without sharing raw data, but its performance degrades under non-IID data and stochastic client participation. Remedies built on classical Federated Averaging (FedAvg) typically presuppose that client participation probabilities are known to the server, which is rarely the case in deployed systems. We first discuss and then characterize the optimization problem that distributionally agnostic FedAvg actually solves when participation is entirely unknown, possibly highly skewed, and of variable size across rounds: uniform aggregation is shown to minimize a well-defined stochastic objective, weighted by the participation-induced marginal, at a standard O(1/T) rate for convex and possibly nonsmooth losses. Building on this characterization, we propose Federated Risk-Averse Averaging (FedeRage), a risk-averse extension of FedAvg that embeds the Conditional Value-at-Risk (CVaR) into the local objective within a natural distributionally robust optimization (DRO) framework. FedeRage implicitly upweights high-loss and infrequently participating clients while adding only a single scalar per-client, and admits an O(κ/T) rate in which the factor κ is the upper bound on the ``price" of risk aversion. In contrast with aggregation-alignment schemes based on optimal transport, which require the availability distribution as an input, FedeRage remains agnostic to it. Several experiments on three heterogeneous benchmarks indicate consistent improvements over state-of-the-art methods in accuracy, fairness, and convergence speed.
Personalization addresses one of the defining challenges in federated learning: statistical heterogeneity among clients. We show that the dissimilarity between the ideal personalized models of two clients can be upper bounded by the dissimilarity of their distributions. Motivated by this, we propose Karula, a data-driven regularization method that constrains pairwise model dissimilarities between clients according to their distributional differences. Distributional similarity is measured using a surrogate for the 1-Wasserstein distance adapted for the federated setting, allowing the method to adapt to highly complex interrelations between clients that approaches based on hard clustering may fail to recover. We propose an approximate projected stochastic gradient algorithm to solve the resulting constrained optimization problem, and prove that it converges at a rate of O(1/K) to a neighborhood of a stationary point.
Samuel Erickson, Mikael Johansson
Division of Decision and Control Systems, KTH Royal Institute of Technology, Stockholm, Sweden
Federated Learning (FL) enables multiple clients to collaboratively train models without sharing raw data, but it is highly vulnerable to Byzantine attacks. Existing robust approaches can neutralize these threats but incur substantial computational overhead during high-dimensional gradient aggregation, an overhead that scales poorly with model size and increasingly dominates the training cost as modern models grow larger. To address this computational bottleneck, we propose Projected Dimensionality Reduction (PDR), a universal acceleration framework for vector-level distance-based robust aggregators, which performs robust aggregation by compressing gradients into a drastically smaller subspace via sparse random projection to efficiently compute reliability weights. This approach reduces the server computational complexity to an optimal O(Mp), where M is the number of clients and p is the model dimension, matching the theoretical lower bound required merely to read the gradients. We establish convergence guarantees under standard FL assumptions in prior Byzantine-robust FL analyses. By leveraging the Subspace Embedding Theorem, we show that PDR achieves optimal convergence rates of O(1/T) for non-convex functions and O(1/T) for strongly convex functions, where T denotes the number of iterations. Crucially, we mathematically demonstrate that this massive acceleration comes almost for free, merely inflating the inherent Byzantine error floor by a bounded, tunable factor of 1−ε1+ε. Experimental results on benchmark datasets confirm that integrating PDR with existing aggregators yields orders of magnitude speedups in time efficiency while maintaining highly competitive convergence performance.
Shiyuan Zuo, Jiashuo Li, Rongfei Fan +2
Beijing Institute of Technology, Beijing, China · Xi’an Jiaotong University, Xi’an, China · The Chinese University of Hong Kong (Shenzhen), Shenzhen, China