BARFED: Byzantine Attack-Resistant Federated Averaging Based on Outlier Elimination

This work proposes a defense algorithm called BARFED that does not make any assumptions about data distribution, update similarity of participants, or the ratio of the malicious participants and mainly considers the outlier status of participant updates for each layer of the model architecture based on the distance to the global model.