git-disl/DataPoisoning_FL git-disl/DataPoisoning_FL

  • Stars
    star
    158
  • Rank 237,131 (Top 5 %)
  • Language
    Python
  • Created over 4 years ago
  • Updated over 3 years ago
Twitter logo Share LinkedIn logo Share Facebook logo Share
git-disl/DataPoisoning_FL
github

git-disl

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Code for Data Poisoning Attacks Against Federated Learning Systems

Data Poisoning Attacks Against Federated Learning Systems

Code for the ESORICS 2020 paper: Data Poisoning Attacks Against Federated Learning Systems

Installation

  1. Create a virtualenv (Python 3.7)
  2. Install dependencies inside of virtualenv (pip install -r requirements.pip)
  3. If you are planning on using the defense, you will need to install matplotlib. This is not required for running experiments, and is not included in the requirements file

Instructions for execution

Using this repository, you can replicate all results presented at ESORICS. We outline the steps required to execute different experiments below.

Setup

Before you can run any experiments, you must complete some setup:

  1. python3 generate_data_distribution.py This downloads the datasets, as well as generates a static distribution of the training and test data to provide consistency in experiments.
  2. python3 generate_default_models.py This generates an instance of all of the models used in the paper, and saves them to disk.

General Information

Some pointers & general information:

  • Most hyperparameters can be set in the federated_learning/arguments.py file
  • Most specific experiment settings are located in the respective experiment files (see the following sections)

Experiments - Label Flipping Attack Feasibility

Running an attack: python3 label_flipping_attack.py

Experiments - Attack Timing in Label Flipping Attacks

Running an attack: python3 attack_timing.py

Experiments - Malicious Participant Availability

Running an attack: python3 malicious_participant_availability.py

Experiments - Defending Against Label Flipping Attacks

Running the defense: python3 defense.py

Experiment Hyperparameters

Recommended default hyperparameters for CIFAR10 (using the provided CNN):

  • Batch size: 10
  • LR: 0.01
  • Number of epochs: 200
  • Momentum: 0.5
  • Scheduler step size: 50
  • Scheduler gamma: 0.5
  • Min_lr: 1e-10

Recommended default hyperparameters for Fashion-MNIST (using the provided CNN):

  • Batch size: 4
  • LR: 0.001
  • Number of epochs: 200
  • Momentum: 0.9
  • Scheduler step size: 10
  • Scheduler gamma: 0.1
  • Min_lr: 1e-10

Citing

If you use this code, please cite the paper:

@ARTICLE{2020arXiv200708432T,
       author = {{Tolpegin}, Vale and {Truex}, Stacey and {Emre Gursoy}, Mehmet and
         {Liu}, Ling},
        title = "{Data Poisoning Attacks Against Federated Learning Systems}",
      journal = {arXiv e-prints},
     keywords = {Computer Science - Machine Learning, Computer Science - Cryptography and Security, Statistics - Machine Learning},
         year = 2020,
        month = jul,
          eid = {arXiv:2007.08432},
        pages = {arXiv:2007.08432},
archivePrefix = {arXiv},
       eprint = {2007.08432},
 primaryClass = {cs.LG},
       adsurl = {https://ui.adsabs.harvard.edu/abs/2020arXiv200708432T},
      adsnote = {Provided by the SAO/NASA Astrophysics Data System}
}

More Repositories

1

awesome-LLM-game-agent-papers

A Survey on Large Language Model-Based Game Agents
202
star
2

PokeLLMon

Python
167
star
3

TOG

Real-time object detection is one of the key applications of deep neural networks (DNNs) for real-world mission-critical systems. While DNN-powered object detection systems celebrate many life-enriching opportunities, they also open doors for misuse and abuse. This project presents a suite of adversarial objectness gradient attacks, coined as TOG, which can cause the state-of-the-art deep object detection networks to suffer from untargeted random attacks or even targeted attacks with three types of specificity: (1) object-vanishing, (2) object-fabrication, and (3) object-mislabeling. Apart from tailoring an adversarial perturbation for each input image, we further demonstrate TOG as a universal attack, which trains a single adversarial perturbation that can be generalized to effectively craft an unseen input with a negligible attack time cost. Also, we apply TOG as an adversarial patch attack, a form of physical attacks, showing its ability to optimize a visually confined patch filled with malicious patterns, deceiving well-trained object detectors to misbehave purposefully.
Jupyter Notebook
121
star
4

BERT4ETH

BERT4ETH: A Pre-trained Transformer for Ethereum Fraud Detection (WWW23)
Python
96
star
5

GPTLens

Large Language Model-Powered Smart Contract Vulnerability Detection: New Perspectives (TPS23)
Solidity
70
star
6

EllipticPlusPlus

Elliptic++ Dataset: A Graph Network of Bitcoin Blockchain Transactions and Wallet Addresses
Jupyter Notebook
64
star
7

CPL_attack

Jupyter Notebook
34
star
8

awesome_LLM-harmful-fine-tuning-papers

A survey on harmful fine-tuning issue for large language model
30
star
9

scale-fl

Code for ScaleFL
Python
28
star
10

AdaTrace

Utility-aware synthesis of differentially private and attack-resilient location traces
Java
21
star
11

LRBench

A learning rate recommending and benchmarking tool.
Python
19
star
12

CLDP

Secure and utility-aware data collection with condensed local differential privacy
16
star
13

FastSwap

Dynamic and Transparent Memory Sharing for Accelerating Big Data Analytics Workloads in Virtualized Cloud
C
16
star
14

Vaccine

This is the official code for the paper "Vaccine: Perturbation-aware Alignment for Large Language Models" (NeurIPS2024)
Shell
15
star
15

EnsembleBench

A holistic framework for promoting high diversity ensemble learning.
Python
13
star
16

XMemPod

A disaggregated memory orchestration system that virtualizes cluster wide memory to scale data intensive, large memory workloads in virtualized clouds
Batchfile
13
star
17

Fed-CDP

Gradient-Leakage Resilient Federated Learning
Python
13
star
18

DLEdge

This project accelerates deep learning models on the edge with the support of running ensemble learning for performance improvement. The current version accelerates YOLO object detectors with Intel Neural Compute Stick 2 using parallel programming.
Python
13
star
19

Lockdown

A backdoor defense for federated learning via isolated subspace training (NeurIPS2023)
Python
13
star
20

EENet

Code for Adaptive Deep Neural Network Inference Optimization with EENet
Python
11
star
21

GTDLBench

Benchmarking Deep Learning Frameworks
Python
10
star
22

EMO

Efficient Multi-Object Tracking for Edge devices
Python
10
star
23

DP-Ensemble

Diversity Optimized Ensemble
Python
8
star
24

STDLens

7
star
25

Lisa

This is the official code for the paper "Lazy Safety Alignment for Large Language Models against Harmful Fine-tuning" (NeurIPS2024)
Python
7
star
26

DP_modelpublishing

Python
7
star
27

GTAttackPod

Deep neural networks (DNNs) have demonstrated impressive performance on many challenging machine learning tasks. However, DNNs are vulnerable to adversarial inputs generated by adding maliciously crafted perturbations to the benign inputs. As a growing number of attacks have been reported to generate adversarial inputs of varying sophistication, the defense-attack arms race has been accelerated. This project collects state-of-the-art attack algorithms and organizes them with a easy-to-use interface.
Python
7
star
28

EVA

Fast Edge Video Analytics
C++
6
star
29

ZipZap

Python
6
star
30

Perception-Poisoning

Perception Poisoning Attacks in Federated Learning
Python
6
star
31

Booster

This is the official code for the paper "Booster: Tackling Harmful Fine-tuning for Large Language Models via Attenuating Harmful Perturbation".
Shell
5
star
32

DLForecast

Graph mining of the bitcoin transaction data for tasks such as transaction prediction.
Python
5
star
33

HQ-Ensemble

Hierarchical Ensemble Pruning
Python
4
star
34

Valet

Efficient Orchestration of Host and Remote Shared Memory for Memory Intensive Workloads
C
4
star
35

HeteRobust

Python
3
star
36

recap

Code for CVPR24 Paper - Resource-Efficient Transformer Pruning for Finetuning of Large Models
Python
3
star
37

MSJE

MSJE Pytorch implementation
Python
2
star
38

membership_vulnerability

Python
2
star
39

GTModelZoo

HTML
2
star
40

ModelCloak

Code for ICDM 2023 Model Cloaking against Gradient Leakage
Jupyter Notebook
2
star
41

MD-CNN

Network Code for Multi-Dimension Convolutional Neural Network for Bug Localization
Python
1
star
42

GRING-App-Face_Exp_recog

G-RING application : Face Expression Recognition Federated Learning
Go
1
star
43

FUSE

Robust Object Detection Fusion Against Deception
Python
1
star
44

GRING-App-Disease_Classification

G-RING application : Implementation of disease classification federated learning task on G-RING
Go
1
star
45

PFT

Python
1
star
46

XEnsemble-1.0

Code for the XEnsemble Robust Deep Learnning project
Python
1
star
47

gt-mobisim

Simulator for generating mobility traces and query traces for large numbers of mobile agents moving in a road network.
Java
1
star
48

LRBenchPlusPlus

Jupyter Notebook
1
star
49

GRING

Go
1
star
50

TripleBit

TripleBit, a fast and compact system for large scale RDF graph. This is a mirror of https://github.com/CGCL-codes/TripeBit.
C++
1
star
51

SEJE

SEJE Pytorch implementation
Python
1
star
52

llm-topla

Jupyter Notebook
1
star