s-Bucketing for Agnostic Byzantine-Robust Aggregation on Heterogeneous Datasets
Algorithms AIMech:BucketingForAgnosticByzantineRobustAggregationOnHeterogeneousDatasets DRAFT
Aliases: s-Bucketing for Byzantine-Robust Aggregation, ARAGG Bucketing, Agnostic Robust Aggregation via Bucketing
A randomized pre-aggregation meta-algorithm proposed by Karimireddy, He, and Jaggi (ICLR 2022) that adapts classical IID Byzantine-robust aggregators (such as Krum, Coordinate-Wise Median, and Geometric Median / RFA) to heterogeneous non-IID datasets by randomly permuting the n worker momentum vectors in each round into ceil(n/s) buckets of size at most s, averaging the vectors within each bucket to reduce inter-client pairwise variance by a factor of 1/s, and feeding the bucket averages into the base robust aggregator to satisfy the variance-agnostic (delta_{max}, c)-ARAGG condition E||hat{x} - bar{x}||^2 <= c delta rho^2.
Identity Notes & Concept Scope
Distinct from DETOX (AIMech:DetoxRedundancyBasedHierarchicalByzantineRobustGradientAggregation, which assigns redundant data partitions to fixed worker groups in an IID cloud setting and takes within-group majority/mean over identical gradients) and from unbucketed Krum (AIMech:KrumAndMultiKrumByzantineResilientGradientAggregation), Coordinate-Wise Median (AIMech:CoordinateWiseMedianAndTrimmedMeanByzantineRobustGradientAggregation), and RFA (AIMech:RobustFederatedAggregationViaSmoothedWeiszfeldGeometricMedian), which fail on imbalanced non-IID data even with delta = 0 Byzantine workers or under the Mimic attack (Section 3.1-3.2). Bucketing (Karimireddy, He, & Jaggi, ICLR 2022 / arXiv:2006.09365, Algorithms 1-2, Lemma 1, Definition A, Theorems I-IV, pp. 4-8) randomly reshuffles the n worker momentum vectors m_i^t = beta m_i^{t-1} + (1 - beta) g_i(x^{t-1}) via a fresh random permutation pi of [n] at every step, computes bucket averages y_i = (1/s) sum_{k=(i-1)s+1}^{min(n, i s)} m_{pi(k)}^t for i = 1, ..., ceil(n/s), and outputs hat{m} = AGGR(y_1, ..., y_{ceil(n/s)}) with bucket size s = floor(delta_{max} / delta).
Claims & Grounded Evidence
4 Claims
Mechanism
#bucketing-random-permutation-bucket-averaging-and-variance-reduction-lemma
Given n independent worker vectors {x_1, ..., x_n} with good subset G of size |G| >= n(1 - delta) and pairwise variance E||x_i - x_j||^2 <= rho^2, Algorithm 1 draws a uniform random permutation pi of [n], averages consecutive blocks of s vectors into y_i = (1/s) sum_{k=(i-1)s+1}^{min(n, is)} x_{pi(k)}, and passes {y_1, ..., y_{ceil(n/s)}} to AGGR; Lemma 1 proves that at least ceil(n/s)(1 - delta s) good buckets satisfy E[y_i] = E[bar{x}] and reduced pairwise variance E||y_i - y_j||^2 <= rho^2 / s.
Scope
#bucketing-aragg-composition-and-non-iid-lower-bound-theorems
Theorem I proves that choosing s = floor(delta_{max} / delta) turns Krum (delta_{max} < 1/4), Geometric Median / RFA (delta_{max} < 1/2), and Coordinate-Wise Median (delta_{max} < 1/2) into variance-agnostic (delta_{max}, c)-ARAGG aggregators with optimal error O(delta rho^2) (or O(d delta rho^2) for CM); combining ARAGG with worker momentum (Algorithm 2) achieves O(c delta zeta^2 + sigma sqrt(L F^0 (c delta + 1/n)/T) + L F^0 / T) (Theorem II), matching the information-theoretic non-IID lower bound Omega(delta zeta^2) (Theorem III) and achieving exact convergence to 0 under overparameterized strong growth B^2 < 1/(60 c delta) (Theorem IV).
Limitation
#bucketing-byzantine-fraction-amplification-and-irreducible-heterogeneity-radius-limitation
s-Bucketing amplifies the worst-case fraction of contaminated buckets by up to a factor of s (from delta to s delta <= delta_{max}), limiting the maximum bucket size to floor(delta_{max} / delta), and without overparameterization any Byzantine-robust algorithm suffers an irreducible stationarity error Omega(delta zeta^2) under non-IID heterogeneity zeta^2 > 0 (Theorem III).
Application
#bucketing-non-iid-federated-defense-against-mimic-alie-and-ipm-attacks-application
Applied to Byzantine-robust federated learning on non-IID and long-tailed partitions of MNIST against the Mimic attack (which copies a fixed honest worker along the top Oja streaming eigenvector to induce class-imbalance bias), ALIE, Inner Product Manipulation (IPM), bit-flipping, and label-flipping attacks.
⚠️ Curated Limitations & Negative Results
- Each Byzantine worker can corrupt an entire bucket of size s, increasing the effective corrupted fraction from delta to s delta and requiring delta <= delta_{max} / s.
- Under arbitrary non-IID gradient dissimilarity zeta^2 > 0 without overparameterization, no algorithm can converge closer than Omega(delta zeta^2) to a stationary point (Theorem III).
Artificial Intelligence Ontology (AIO) Grounding
Mapped AIO Classes
| AIO Target Class | Mapping Relation | Mapping Rationale |
|---|---|---|
AIO:FederatedLearning
Federated Learning
|
broad_match | AIO:FederatedLearning is the broad decentralized learning paradigm within which s-Bucketing adapts Byzantine-robust aggregators to heterogeneous client datasets. |
Evidence Sources & Primary Literature
3 Sources| Source ID | Publication / Document | Type / Access | Reference & Checksum |
|---|---|---|---|
r538-primary-pdf
|
Sai Praneeth Karimireddy, Lie He, Martin Jaggi
|
primary paper
full_text
|
ID: https://dblp.org/rec/conf/iclr/KarimireddyHJ22.xml
sha256:61bfe28ed666…
|
r538-arxiv-abs
|
Sai Praneeth Karimireddy, Lie He, Martin Jaggi
|
primary paper
abstract_only
|
ID: https://arxiv.org/abs/2006.09365
sha256:6b25d8a9e01d…
|
r538-metadata-cr
|
Sai Praneeth Karimireddy, Lie He, Martin Jaggi
|
primary paper
abstract_only
|
ID: https://dblp.org/rec/conf/iclr/KarimireddyHJ22.xml
sha256:096ac30157c4…
|
Ontology & Grounding Topology
Open in interactive network graph →Curation Provenance
Curator: Antigravity
Method: ai_assisted
Model: Gemini
Created: 2026-10-19T10:21:00Z
Updated: 2026-10-19T10:21:00Z
Explore across X-Mech
Related computational & biological Mechs:
Embedding Map
Network Graph
ProteinTraitsMech (ESM-2 pLM)
DUFMech (Domain pLM)
TraitMech
CultureMech
All 14 X-Mech Repositories