Tagged:

Federated Learning Poisoning: The Aggregation Attack Surface

FL aggregation is blind to participant intent. Malicious clients can embed backdoors or reconstruct private training data from gradients.