Repository logo

Infoscience

  • English
  • French
Log In
Logo EPFL, École polytechnique fédérale de Lausanne

Infoscience

  • English
  • French
Log In
  1. Home
  2. Academic and Research Output
  3. Conferences, Workshops, Symposiums, and Seminars
  4. On the Conflict Between Robustness and Learning in Collaborative Machine Learning
 
conference paper

On the Conflict Between Robustness and Learning in Collaborative Machine Learning

Raynal, Mathilde  
•
Troncoso, Carmela
June 16, 2025
46th IEEE Symposium on Security and Privacy, SP 2025. Proceedings
46th IEEE Symposium on Security and Privacy

Collaborative Machine Learning (CML) allows participants to jointly train a machine learning model while keeping their training data private. In many scenarios where CML is seen as the solution to privacy issues, such as health-related applications, safety is also a primary concern. To ensure that CML processes produce models that output correct and reliable decisions even in the presence of potentially untrusted participants, researchers propose to use robust aggregators to filter out malicious contributions that negatively influence the training process. In this paper, we prove that the two prevalent forms of robust aggregators in the literature cannot eliminate the risk of compromise without preventing learning: in order to learn from collaboration, participants must always accept the risk of being the subject of harmful adversarial manipulation. Therefore, these robust aggregators are unsuitable for high-stake applications such as health-related or autonomous driving in which errors can result in physical harm. We empirically demonstrate the correctness of our theoretical findings on a selection of existing robust aggregators and relevant applications, including end-to-end results where we show that using existing robust aggregators can lead to an adversary can cause incorrect medical diagnosis or can cause self-driving cars to miss turns.

  • Details
  • Metrics
Type
conference paper
DOI
10.1109/sp61157.2025.00249
Author(s)
Raynal, Mathilde  

École Polytechnique Fédérale de Lausanne

Troncoso, Carmela
Date Issued

2025-06-16

Publisher

IEEE

Published in
46th IEEE Symposium on Security and Privacy, SP 2025. Proceedings
ISBN of the book

979-8-3315-2236-0

Start page

2171

End page

2189

Editorial or Peer reviewed

REVIEWED

Written at

EPFL

EPFL units
SPRING  
Event nameEvent acronymEvent placeEvent date
46th IEEE Symposium on Security and Privacy

SP 2025

San Francisco, CA, USA

2025-05-12 - 2025-05-15

Available on Infoscience
June 18, 2025
Use this identifier to reference this record
https://infoscience.epfl.ch/handle/20.500.14299/251432
Logo EPFL, École polytechnique fédérale de Lausanne
  • Contact
  • infoscience@epfl.ch

  • Follow us on Facebook
  • Follow us on Instagram
  • Follow us on LinkedIn
  • Follow us on X
  • Follow us on Youtube
AccessibilityLegal noticePrivacy policyCookie settingsEnd User AgreementGet helpFeedback

Infoscience is a service managed and provided by the Library and IT Services of EPFL. © EPFL, tous droits réservés