IDEAS home Printed from https://ideas.repec.org/h/spr/spochp/978-3-031-58923-2_5.html
   My bibliography  Save this book chapter

Unfair Trojan: Targeted Backdoor Attacks Against Model Fairness

In: Handbook of Trustworthy Federated Learning

Author

Listed:
  • Nicholas Furth

    (University of Tennessee at Knoxville)

  • Abdallah Khreishah

    (New Jersey Institute of Technology)

  • Guanxiong Liu

    (New Jersey Institute of Technology)

  • NhatHai Phan

    (New Jersey Institute of Technology)

  • Yasser Jararweh

    (Jordan University of Science & Technology)

Abstract

Machine learning models have been proven to have the ability to make accurate predictions on complex data tasks such as image and graph data. However, they are becoming increasingly vulnerable to various forms of attacks, such as backdoor and data poisoning attacks that can have adverse effects on model behavior. These attacks become more prevalent and complex in federated learning, where multiple local models contribute to a single global model communicating using only local gradients. Additionally, these models tend to make unfair predictions for certain protected features. Previously published works revolve around solving these issues both individually and jointly, typically by leveraging the model’s loss function to account for fairness or by adding perturbations to the unfair data. However, there has been little study on how the adversary can launch an attack that can control model fairness. This chapter demonstrates a novel and flexible attack, which we call Unfair Trojan, which aims to target model fairness while remaining stealthy. Using this attack, an adversary can have devastating effects against machine learning models, increasing their demographic parity, a key fairness metric, by up to 30%, without causing a significantly decreasing model accuracy. This chapter reveals the vulnerabilities of federated learning systems with regard to fairness and highlights the need for more robust defenses against such attacks. Our findings show the importance of understanding such attacks associated with fairness so that they can be mitigated. By revealing the ability of an adversary to exploit and amplify existing fairness issues, this chapter highlights the need for more comprehensive and proactive strategies to ensure fair predictions in machine learning applications.

Suggested Citation

  • Nicholas Furth & Abdallah Khreishah & Guanxiong Liu & NhatHai Phan & Yasser Jararweh, 2025. "Unfair Trojan: Targeted Backdoor Attacks Against Model Fairness," Springer Optimization and Its Applications, in: My T. Thai & Hai N. Phan & Bhavani Thuraisingham (ed.), Handbook of Trustworthy Federated Learning, pages 149-168, Springer.
  • Handle: RePEc:spr:spochp:978-3-031-58923-2_5
    DOI: 10.1007/978-3-031-58923-2_5
    as

    Download full text from publisher

    To our knowledge, this item is not available for download. To find whether it is available, there are three options:
    1. Check below whether another version of this item is available online.
    2. Check on the provider's web page whether it is in fact available.
    3. Perform a search for a similarly titled item that would be available.

    More about this item

    Statistics

    Access and download statistics

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:spr:spochp:978-3-031-58923-2_5. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    We have no bibliographic references for this item. You can help adding them by using this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Sonal Shukla or Springer Nature Abstracting and Indexing (email available below). General contact details of provider: http://www.springer.com .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.