SURA detects federated-learning backdoors with 10 clean images
It reuses one small clean proxy across repeated loss-ascent probes and restores batch-norm state only at readout.
Stories per day · 30 days
Relatedfederated-learning2backdoor1dnn1edge-devices1machine-unlearning1model-ownership1model-poisoning1privacy1split-learning1unlearning1watermarking1
3 stories, newest first · one card per story
Stories tagged #batch-normalization
BatchNorm buffers can fake deletion in split-learning unlearning
CIFAR-10 forget accuracy fell 61.50 points from BN recalibration with every learnable weight fixed.
Data-free attack removes batch-norm watermarks from federated models
Tests on two federated-learning schemes strip ownership marks without training data and with little accuracy loss.