Model Poisoning Attack Impact on EMNIST Cross-silo
76.39AθFedAvg
Evaluation results
| Method | Links | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| FedAvgFL clients=200, global iterations=400, backbone=3 layer DNN, malicious clients=20%2026.04 | 76.39 | 71.24 | 25.28 | 16.22 | 17.06 | 26.11 | 5.11 | 69.29 | 65.29 | |
| CCFL clients=200, global iterations=400, backbone=3 layer DNN, malicious clients=20%2026.04 | 74.66 | 9.27 | 41.17 | 19.28 | 34.44 | — | 3.23 | 7.12 | 7.13 | |
| M-KrumFL clients=200, global iterations=400, backbone=3 layer DNN, malicious clients=20%2026.04 | 74.42 | 5.79 | 21.7 | 16.63 | 19.48 | 13.26 | 2.75 | 7.02 | 6.86 | |
| SgnGFL clients=200, global iterations=400, backbone=3 layer DNN, malicious clients=20%2026.04 | 74.42 | 7.79 | 49.26 | 18.84 | 34.52 | — | 1.74 | 8.03 | 6 | |
| FoolsGoldFL clients=200, global iterations=400, backbone=3 layer DNN, malicious clients=20%2026.04 | 74.39 | 6.15 | 6.58 | 6.63 | 6.85 | — | 6.71 | 6.82 | 5.89 | |
| MedianFL clients=200, global iterations=400, backbone=3 layer DNN, malicious clients=20%2026.04 | 74.19 | 70.96 | 21.63 | 17.07 | 13.93 | 4.97 | 5.95 | 6.09 | 19.49 | |
| Tr-MeanFL clients=200, global iterations=400, backbone=3 layer DNN, malicious clients=20%2026.04 | 73.79 | 16.95 | 21.66 | 14.55 | 15.24 | 10.57 | 7.06 | 6.82 | 21.89 | |
| FLTrustFL clients=200, global iterations=400, backbone=3 layer DNN, malicious clients=20%2026.04 | 71.2 | 2.49 | 5.72 | 11.69 | 12.25 | — | 9.15 | 10.12 | 2.76 | |
| FLAMEFL clients=200, global iterations=400, backbone=3 layer DNN, malicious clients=20%2026.04 | 71.07 | 4.58 | 66.1 | 21.03 | 41.57 | — | 6.56 | 3.47 | 4.08 | |
| FreqFedFL clients=200, global iterations=400, backbone=3 layer DNN, malicious clients=20%2026.04 | 70.76 | 3.43 | 65.8 | 20.29 | 36.56 | — | 3.79 | 3.06 | 3.48 |