arXiv:2502.05041cs.LGcs.AI2025-02被引 5

测试联邦学习在能耗异常检测中对对抗攻击的脆弱性,发现其比中心化学习更易受攻击。

Federated Learning for Anomaly Detection in Energy Consumption Data: Assessing the Vulnerability to Adversarial Attacks

  • 用LSTM和Transformer在联邦学习框架下做能耗异常检测
  • PGD攻击使模型准确率下降超10%,远高于FGSM攻击
  • 适用于关注能源系统安全的从业者或研究者

异常检测在能源领域至关重要,可识别设备故障、窃电等异常模式。传统机器学习多为集中式,需上传本地数据,引发隐私与安全问题。联邦学习(FL)通过分布式训练避免数据共享,逐渐流行。然而,FL依赖神经网络,而神经网络易受对抗攻击,即通过微小扰动误导模型做出错误预测。尽管图像领域的对抗攻击已有研究,时间序列尤其是能源领域的研究仍较少,且联邦学习场景下的影响尚不明确。本文评估了基于联邦学习的能耗异常检测对对抗攻击的脆弱性。采用两种先进模型——长短期记忆网络(LSTM)和变压器(Transformers),在联邦学习设置下进行检测,并使用两种白盒攻击方法:快速梯度符号法(FGSM)和投影梯度下降法(PGD)对数据进行扰动。结果表明,联邦学习对PGD攻击更为敏感,其迭代特性导致即使使用较弱攻击也造成超过10%的准确率下降;且联邦学习受攻击影响程度高于集中式学习,凸显其亟需防御机制。

原文摘要 · Abstract (English)

Anomaly detection is crucial in the energy sector to identify irregular patterns indicating equipment failures, energy theft, or other issues. Machine learning techniques for anomaly detection have achieved great success, but are typically centralized, involving sharing local data with a central server which raises privacy and security concerns. Federated Learning (FL) has been gaining popularity as it enables distributed learning without sharing local data. However, FL depends on neural networks, which are vulnerable to adversarial attacks that manipulate data, leading models to make erroneous predictions. While adversarial attacks have been explored in the image domain, they remain largely unexplored in time series problems, especially in the energy domain. Moreover, the effect of adversarial attacks in the FL setting is also mostly unknown. This paper assesses the vulnerability of FL-based anomaly detection in energy data to adversarial attacks. Specifically, two state-of-the-art models, Long Short Term Memory (LSTM) and Transformers, are used to detect anomalies in an FL setting, and two white-box attack methods, Fast Gradient Sign Method (FGSM) and Projected Gradient Descent (PGD), are employed to perturb the data. The results show that FL is more sensitive to PGD attacks than to FGSM attacks, attributed to PGD's iterative nature, resulting in an accuracy drop of over 10% even with naive, weaker attacks. Moreover, FL is more affected by these attacks than centralized learning, highlighting the need for defense mechanisms in FL.

联邦学习异常检测对抗攻击能源数据

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。