Model Poisoning Attack on Purchase cross-device (test)
72.82IθXuv
Evaluation results
| Method | Links | ||
|---|---|---|---|
| XuvAggregation Rule=SgnG2026.04 | 72.82 | — | |
| FangAggregation Rule=FedAvg, Malicious Client Percentage=20%, Total FL Clients=10000, Global Iterations=500, Model Architecture=3 layer DNN2026.04 | 72.37 | — | |
| MPAFAggregation Rule=FedAvg, Malicious Client Percentage=20%, Total FL Clients=10000, Global Iterations=500, Model Architecture=3 layer DNN2026.04 | 72.22 | — | |
| PoisonedFLAggregation Rule=FedAvg, Malicious Client Percentage=20%, Total FL Clients=10000, Global Iterations=500, Model Architecture=3 layer DNN2026.04 | 72.08 | — | |
| XuvAggregation Rule=FreqFed2026.04 | 71.22 | — | |
| XuvAggregation Rule=FLAME2026.04 | 70.96 | — | |
| XuvAggregation Rule=CC2026.04 | 70.79 | — | |
| XuvAggregation Rule=FedAvg, Malicious Client Percentage=20%, Total FL Clients=10000, Global Iterations=500, Model Architecture=3 layer DNN2026.04 | 70.72 | — | |
| XsgnAggregation Rule=FedAvg, Malicious Client Percentage=20%, Total FL Clients=10000, Global Iterations=500, Model Architecture=3 layer DNN2026.04 | 62.23 | — | |
| PoisonedFLAggregation Rule=Tr-Mean2026.04 | 62.22 | — | |
| XuvAggregation Rule=Tr-Mean2026.04 | 60.97 | — | |
| Min-MaxAggregation Rule=FLAME2026.04 | 60.56 | — | |
| XsgnAggregation Rule=Tr-Mean2026.04 | 60.02 | — | |
| MPAFAggregation Rule=Tr-Mean2026.04 | 59.22 | — | |
| Min-MaxAggregation Rule=FreqFed2026.04 | 57.23 | — | |
| Min-MaxAggregation Rule=SgnG2026.04 | 55.13 | — | |
| Min-MaxAggregation Rule=CC2026.04 | 52.77 | — | |
| Min-SumAggregation Rule=FLAME2026.04 | 48.82 | — | |
| Min-SumAggregation Rule=FreqFed2026.04 | 45.62 | — | |
| MPAFAggregation Rule=M-Krum2026.04 | 45.22 | — | |
| XuvAggregation Rule=Median2026.04 | 44.7 | — | |
| Min-MaxAggregation Rule=Tr-Mean2026.04 | 44.21 | — | |
| PoisonedFLAggregation Rule=Median2026.04 | 43.22 | — | |
| Min-MaxAggregation Rule=M-Krum2026.04 | 42.47 | — | |
| XsgnAggregation Rule=Median2026.04 | 41.96 | — | |
| Min-MaxAggregation Rule=Median2026.04 | 41.93 | — | |
| PoisonedFLAggregation Rule=M-Krum2026.04 | 41.37 | — | |
| FangAggregation Rule=Median2026.04 | 40.22 | — | |
| XuvAggregation Rule=M-Krum2026.04 | 40.22 | — | |
| Min-SumAggregation Rule=CC2026.04 | 39.52 | — | |
| Min-SumAggregation Rule=Median2026.04 | 38.89 | — | |
| Min-MaxAggregation Rule=FedAvg, Malicious Client Percentage=20%, Total FL Clients=10000, Global Iterations=500, Model Architecture=3 layer DNN2026.04 | 38.23 | — | |
| Min-SumAggregation Rule=SgnG2026.04 | 37.19 | — | |
| Min-SumAggregation Rule=Tr-Mean2026.04 | 36.94 | — | |
| Min-SumAggregation Rule=M-Krum2026.04 | 35.97 | — | |
| FangAggregation Rule=M-Krum2026.04 | 32.88 | — | |
| LIEAggregation Rule=FLAME2026.04 | 26.14 | — | |
| Min-SumAggregation Rule=FedAvg, Malicious Client Percentage=20%, Total FL Clients=10000, Global Iterations=500, Model Architecture=3 layer DNN2026.04 | 25.18 | — | |
| FangAggregation Rule=Tr-Mean2026.04 | 23.56 | — | |
| MPAFAggregation Rule=Median2026.04 | 22.82 | — | |
| LIEAggregation Rule=Median2026.04 | 19.32 | — | |
| LIEAggregation Rule=Tr-Mean2026.04 | 15.63 | — | |
| XsgnAggregation Rule=CC2026.04 | 13.68 | — | |
| LIEAggregation Rule=M-Krum2026.04 | 13.3 | — | |
| XuvAggregation Rule=FoolsGold2026.04 | 10.56 | — | |
| Min-MaxAggregation Rule=FoolsGold2026.04 | 10.22 | — | |
| LIEAggregation Rule=FedAvg, Malicious Client Percentage=20%, Total FL Clients=10000, Global Iterations=500, Model Architecture=3 layer DNN2026.04 | 9.26 | — | |
| Min-SumAggregation Rule=FoolsGold2026.04 | 9.25 | — | |
| PoisonedFLAggregation Rule=FoolsGold2026.04 | 9.22 | — | |
| XsgnAggregation Rule=SgnG2026.04 | 9.21 | — | |
| XsgnAggregation Rule=M-Krum2026.04 | 9.09 | — | |
| XsgnAggregation Rule=FreqFed2026.04 | 7.35 | — | |
| LIEAggregation Rule=FLTrust2026.04 | 6.67 | — | |
| PoisonedFLAggregation Rule=FreqFed2026.04 | 5.9 | — | |
| Min-MaxAggregation Rule=FLTrust2026.04 | 5.88 | — | |
| XsgnAggregation Rule=FoolsGold2026.04 | 5.22 | — | |
| MPAFAggregation Rule=FLTrust2026.04 | 4.81 | — | |
| Min-SumAggregation Rule=FLTrust2026.04 | 4.74 | — | |
| MPAFAggregation Rule=SgnG2026.04 | 4.65 | — | |
| PoisonedFLAggregation Rule=SgnG2026.04 | 4.57 | — | |
| MPAFAggregation Rule=FoolsGold2026.04 | 4.56 | — | |
| PoisonedFLAggregation Rule=CC2026.04 | 4.39 | — | |
| PoisonedFLAggregation Rule=FLAME2026.04 | 4.37 | — | |
| LIEAggregation Rule=CC2026.04 | 4.31 | — | |
| MPAFAggregation Rule=FreqFed2026.04 | 4.21 | — | |
| XsgnAggregation Rule=FLAME2026.04 | 4.2 | — | |
| MPAFAggregation Rule=FLAME2026.04 | 4.05 | — | |
| PoisonedFLAggregation Rule=FLTrust2026.04 | 3.6 | — | |
| MPAFAggregation Rule=CC2026.04 | 3.53 | — | |
| LIEAggregation Rule=SgnG2026.04 | 3.45 | — | |
| LIEAggregation Rule=FreqFed2026.04 | 3.37 | — | |
| LIEAggregation Rule=FoolsGold2026.04 | 3.35 | — | |
| XsgnAggregation Rule=FLTrust2026.04 | 3.03 | — | |
| XuvAggregation Rule=FLTrust2026.04 | 2.86 | — | |
| No AttackAggregation Rule=FedAvg, Malicious Client Percentage=20%, Total FL Clients=10000, Global Iterations=500, Model Architecture=3 layer DNN2026.04 | — | 75.07 | |
| No AttackAggregation Rule=Median2026.04 | — | 72.39 | |
| No AttackAggregation Rule=Tr-Mean2026.04 | — | 74.04 | |
| No AttackAggregation Rule=M-Krum2026.04 | — | 74.79 | |
| No AttackAggregation Rule=CC2026.04 | — | 74.94 | |
| No AttackAggregation Rule=SgnG2026.04 | — | 74.68 | |
| No AttackAggregation Rule=FLTrust2026.04 | — | 74.22 | |
| No AttackAggregation Rule=FreqFed2026.04 | — | 73.89 | |
| No AttackAggregation Rule=FoolsGold2026.04 | — | 74.41 | |
| No AttackAggregation Rule=FLAME2026.04 | — | 74.28 |