Skip to main navigation Skip to search Skip to main content

Efficient Federated Learning against Byzantine Attacks and Data Heterogeneity via Aggregating Normalized Gradients

  • Shiyuan Zuo
  • , Xingrun Yan
  • , Rongfei Fan*
  • , Li Shen
  • , Puning Zhao
  • , Jie Xu
  • , Han Hu
  • *Corresponding author for this work
  • Beijing Institute of Technology
  • Sun Yat-Sen University
  • The Chinese University of Hong Kong, Shenzhen

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

Federated Learning (FL) enables multiple clients to collaboratively train models without sharing raw data, but is vulnerable to Byzantine attacks and data heterogeneity, which can severely degrade performance. Existing Byzantine-robust approaches tackle data heterogeneity, but incur high computational overhead during gradient aggregation, thereby slowing down the training process. To address this issue, we propose a simple yet effective Federated Normalized Gradients Algorithm (Fed-NGA), which performs aggregation by merely computing the weighted mean of the normalized gradients from each client. This approach yields a favorable time complexity of O(pM), where p is the model dimension and M is the number of clients. We rigorously prove that Fed-NGA is robust to both Byzantine faults and data heterogeneity. For non-convex loss functions, Fed-NGA achieves convergence to a neighborhood of stationary points under general assumptions, and further attains zero optimality gap under some mild conditions, which is an outcome rarely achieved in existing literature. In both cases, the convergence rate is O(1/T 1/2 −δ), where T denotes the number of iterations and δ ∈ (0, 1/2). Experimental results on benchmark datasets confirm the superior time efficiency and convergence performance of Fed-NGA over existing methods.

Original languageEnglish
Title of host publication39th Conference on Neural Information Processing Systems, NeurIPS 2025
PublisherNeural information processing systems foundation
Pages32803-32840
Number of pages38
ISBN (Electronic)9798331338275
Publication statusPublished - 2025
Event39th Conference on Neural Information Processing Systems, NeurIPS 2025 - San Diego, United States
Duration: 2 Dec 2025 → 7 Dec 2025

Publication series

NameAdvances in Neural Information Processing Systems
Volume38
ISSN (Print)1049-5258

Conference

Conference39th Conference on Neural Information Processing Systems, NeurIPS 2025
Country/TerritoryUnited States
CitySan Diego
Period2/12/25 → 7/12/25

Fingerprint

Dive into the research topics of 'Efficient Federated Learning against Byzantine Attacks and Data Heterogeneity via Aggregating Normalized Gradients'. Together they form a unique fingerprint.

Cite this