AIMech AI

s-Bucketing for Agnostic Byzantine-Robust Aggregation on Heterogeneous Datasets

Algorithms AIMech:BucketingForAgnosticByzantineRobustAggregationOnHeterogeneousDatasets DRAFT
Aliases: s-Bucketing for Byzantine-Robust Aggregation, ARAGG Bucketing, Agnostic Robust Aggregation via Bucketing
A randomized pre-aggregation meta-algorithm proposed by Karimireddy, He, and Jaggi (ICLR 2022) that adapts classical IID Byzantine-robust aggregators (such as Krum, Coordinate-Wise Median, and Geometric Median / RFA) to heterogeneous non-IID datasets by randomly permuting the n worker momentum vectors in each round into ceil(n/s) buckets of size at most s, averaging the vectors within each bucket to reduce inter-client pairwise variance by a factor of 1/s, and feeding the bucket averages into the base robust aggregator to satisfy the variance-agnostic (delta_{max}, c)-ARAGG condition E||hat{x} - bar{x}||^2 <= c delta rho^2.
Identity Notes & Concept Scope Distinct from DETOX (AIMech:DetoxRedundancyBasedHierarchicalByzantineRobustGradientAggregation, which assigns redundant data partitions to fixed worker groups in an IID cloud setting and takes within-group majority/mean over identical gradients) and from unbucketed Krum (AIMech:KrumAndMultiKrumByzantineResilientGradientAggregation), Coordinate-Wise Median (AIMech:CoordinateWiseMedianAndTrimmedMeanByzantineRobustGradientAggregation), and RFA (AIMech:RobustFederatedAggregationViaSmoothedWeiszfeldGeometricMedian), which fail on imbalanced non-IID data even with delta = 0 Byzantine workers or under the Mimic attack (Section 3.1-3.2). Bucketing (Karimireddy, He, & Jaggi, ICLR 2022 / arXiv:2006.09365, Algorithms 1-2, Lemma 1, Definition A, Theorems I-IV, pp. 4-8) randomly reshuffles the n worker momentum vectors m_i^t = beta m_i^{t-1} + (1 - beta) g_i(x^{t-1}) via a fresh random permutation pi of [n] at every step, computes bucket averages y_i = (1/s) sum_{k=(i-1)s+1}^{min(n, i s)} m_{pi(k)}^t for i = 1, ..., ceil(n/s), and outputs hat{m} = AGGR(y_1, ..., y_{ceil(n/s)}) with bucket size s = floor(delta_{max} / delta).

Claims & Grounded Evidence

4 Claims
Mechanism #bucketing-random-permutation-bucket-averaging-and-variance-reduction-lemma
Given n independent worker vectors {x_1, ..., x_n} with good subset G of size |G| >= n(1 - delta) and pairwise variance E||x_i - x_j||^2 <= rho^2, Algorithm 1 draws a uniform random permutation pi of [n], averages consecutive blocks of s vectors into y_i = (1/s) sum_{k=(i-1)s+1}^{min(n, is)} x_{pi(k)}, and passes {y_1, ..., y_{ceil(n/s)}} to AGGR; Lemma 1 proves that at least ceil(n/s)(1 - delta s) good buckets satisfy E[y_i] = E[bar{x}] and reduced pairwise variance E||y_i - y_j||^2 <= rho^2 / s.
Scope #bucketing-aragg-composition-and-non-iid-lower-bound-theorems
Theorem I proves that choosing s = floor(delta_{max} / delta) turns Krum (delta_{max} < 1/4), Geometric Median / RFA (delta_{max} < 1/2), and Coordinate-Wise Median (delta_{max} < 1/2) into variance-agnostic (delta_{max}, c)-ARAGG aggregators with optimal error O(delta rho^2) (or O(d delta rho^2) for CM); combining ARAGG with worker momentum (Algorithm 2) achieves O(c delta zeta^2 + sigma sqrt(L F^0 (c delta + 1/n)/T) + L F^0 / T) (Theorem II), matching the information-theoretic non-IID lower bound Omega(delta zeta^2) (Theorem III) and achieving exact convergence to 0 under overparameterized strong growth B^2 < 1/(60 c delta) (Theorem IV).
Limitation #bucketing-byzantine-fraction-amplification-and-irreducible-heterogeneity-radius-limitation
s-Bucketing amplifies the worst-case fraction of contaminated buckets by up to a factor of s (from delta to s delta <= delta_{max}), limiting the maximum bucket size to floor(delta_{max} / delta), and without overparameterization any Byzantine-robust algorithm suffers an irreducible stationarity error Omega(delta zeta^2) under non-IID heterogeneity zeta^2 > 0 (Theorem III).
Application #bucketing-non-iid-federated-defense-against-mimic-alie-and-ipm-attacks-application
Applied to Byzantine-robust federated learning on non-IID and long-tailed partitions of MNIST against the Mimic attack (which copies a fixed honest worker along the top Oja streaming eigenvector to induce class-imbalance bias), ALIE, Inner Product Manipulation (IPM), bit-flipping, and label-flipping attacks.

⚠️ Curated Limitations & Negative Results

Artificial Intelligence Ontology (AIO) Grounding

Mapped AIO Classes
AIO Target Class Mapping Relation Mapping Rationale
AIO:FederatedLearning
Federated Learning
broad_match AIO:FederatedLearning is the broad decentralized learning paradigm within which s-Bucketing adapts Byzantine-robust aggregators to heterogeneous client datasets.

Evidence Sources & Primary Literature

3 Sources
Source ID Publication / Document Type / Access Reference & Checksum
r538-primary-pdf
Sai Praneeth Karimireddy, Lie He, Martin Jaggi
primary paper
full_text
ID: https://dblp.org/rec/conf/iclr/KarimireddyHJ22.xml
sha256:61bfe28ed666…
r538-arxiv-abs
Sai Praneeth Karimireddy, Lie He, Martin Jaggi
primary paper
abstract_only
ID: https://arxiv.org/abs/2006.09365
sha256:6b25d8a9e01d…
r538-metadata-cr
Sai Praneeth Karimireddy, Lie He, Martin Jaggi
primary paper
abstract_only
ID: https://dblp.org/rec/conf/iclr/KarimireddyHJ22.xml
sha256:096ac30157c4…

Ontology & Grounding Topology

Open in interactive network graph →
CONCEPT KIND Algorithms AIMech:BucketingForAgnosticByzantineRobustAggregationOnHeterogeneousDatasets s-Bucketing for... 4 claims · 3 sources AIO GROUNDING AIO:FederatedLearning (1)

Curation Provenance

Curator: Antigravity
Method: ai_assisted
Model: Gemini
Created: 2026-10-19T10:21:00Z
Updated: 2026-10-19T10:21:00Z
Source File: data/curated/BucketingForAgnosticByzantineRobustAggregationOnHeterogeneousDatasets.yaml · Schema: curated_concept.yaml

Explore across X-Mech

Related computational & biological Mechs: Embedding Map Network Graph ProteinTraitsMech (ESM-2 pLM) DUFMech (Domain pLM) TraitMech CultureMech All 14 X-Mech Repositories