ScanFed: Scalable Behavior-Based Backdoor Detection in Federated Learning

Federated Learning (FL) has been adopted in practical network applications and plays a critical role. As FL allows participants to contribute to the global model by training locally with private data, it is known particularly vulnerable to neural backdoor attacks. This paper proposes a new defense, ScanFed, against neural backdoor attacks to FL systems. It leverages the synchronous nature of FL to effectively single out malicious neuron candidates and further validate if they indeed hijack the model's behaviors. Compared to existing neural backdoor defenses, ScanFed has the following distinct properties. First, it is extremely computation-friendly that is six orders of magnitude faster than state-of-the-art behavior-based backdoor defenses, rendering it highly suitable for large-scale FL systems. Second, it inherits the precise nature of behavior-based backdoor detection, making it significantly more effective than similarity-based defenses against advanced attacks. Third, it is robust to biased models uploaded by clients with non-IID (Independent and Identically Distributed) data, which is very common in practical FL systems. In addition, it is a plug-n-play scheme that can be seamlessly integrated into existing FL systems. To the best of our knowledge, this is the first behavior-based defense that enables scalable, efficient and accurate neural backdoor detection of FL systems in non-IID scenarios. This work delivers a ScanFed prototype and fully tests it in various settings of datasets, neural architectures, and backdoor attacks. The experiments demonstrate ScanFed achieves competitive accuracy and minimal detection time.