Mean Aggregator Beats Robust Aggregators Under Label Poisoning Attacks on Heterogeneous Data
A team from Sun Yat-Sen University, Harvard, and Imperial College London has flipped the conventional wisdom of Byzantine-robust distributed learning: when attacks are confined to label poisoning and data is heterogeneous enough, the plain old mean aggregator outperforms — and…