MANDERA: Malicious Node Detection in Federated Learning via Ranking
  Federated learning is a distributed learning paradigm which seeks to preserve
the privacy of each participating node's data. However, federated learning is
vulnerable to attacks, specifically to our interest, model integrity attacks.
In this paper, we propose a novel method for malicious node detection called
MANDERA. By transferring the original message matrix into a ranking matrix
whose column shows the relative rankings of all local nodes along different
parameter dimensions, our approach seeks to distinguish the malicious nodes
from the benign ones with high efficiency based on key characteristics of the
rank domain. We have proved, under mild conditions, that MANDERA is guaranteed
to detect all malicious nodes under typical Byzantine attacks with no prior
knowledge or history about the participating nodes. The effectiveness of the
proposed approach is further confirmed by experiments on two classic datasets,
CIFAR-10 and MNIST. Compared to the state-of-art methods in the literature for
defending Byzantine attacks, MANDERA is unique in its way to identify the
malicious nodes by ranking and its robustness to effectively defense a wide
range of attacks.
