跳到主要导航 跳到搜索 跳到主要内容

Efficient Federated Learning against Byzantine Attacks and Data Heterogeneity via Aggregating Normalized Gradients

  • Shiyuan Zuo
  • , Xingrun Yan
  • , Rongfei Fan*
  • , Li Shen
  • , Puning Zhao
  • , Jie Xu
  • , Han Hu
  • *此作品的通讯作者
  • Beijing Institute of Technology
  • Sun Yat-Sen University
  • The Chinese University of Hong Kong, Shenzhen

科研成果: 书/报告/会议事项章节 › 会议稿件 › 同行评审

摘要

Federated Learning (FL) enables multiple clients to collaboratively train models without sharing raw data, but is vulnerable to Byzantine attacks and data heterogeneity, which can severely degrade performance. Existing Byzantine-robust approaches tackle data heterogeneity, but incur high computational overhead during gradient aggregation, thereby slowing down the training process. To address this issue, we propose a simple yet effective Federated Normalized Gradients Algorithm (Fed-NGA), which performs aggregation by merely computing the weighted mean of the normalized gradients from each client. This approach yields a favorable time complexity of O(pM), where p is the model dimension and M is the number of clients. We rigorously prove that Fed-NGA is robust to both Byzantine faults and data heterogeneity. For non-convex loss functions, Fed-NGA achieves convergence to a neighborhood of stationary points under general assumptions, and further attains zero optimality gap under some mild conditions, which is an outcome rarely achieved in existing literature. In both cases, the convergence rate is O(1/T 1/2 −δ), where T denotes the number of iterations and δ ∈ (0, 1/2). Experimental results on benchmark datasets confirm the superior time efficiency and convergence performance of Fed-NGA over existing methods.

源语言英语
主期刊名39th Conference on Neural Information Processing Systems, NeurIPS 2025
出版商Neural information processing systems foundation
页32803-32840
页数38
ISBN(电子版)9798331338275
出版状态已出版 - 2025
活动39th Conference on Neural Information Processing Systems, NeurIPS 2025 - San Diego, 美国
期限: 2 12月 2025 → 7 12月 2025

丛书

姓名Advances in Neural Information Processing Systems
卷38
ISSN(印刷版)1049-5258

会议

会议39th Conference on Neural Information Processing Systems, NeurIPS 2025
国家/地区美国
市San Diego
时期2/12/25 → 7/12/25

学术指纹

探究 'Efficient Federated Learning against Byzantine Attacks and Data Heterogeneity via Aggregating Normalized Gradients' 的科研主题。它们共同构成独一无二的学术指纹。

引用此