arXiv:2503.18284cs.ITcs.LG2025-03中稿 · IEEE JSAC被引 15

提出安全聚类机制,让无线联邦学习在零信任下抗恶意设备攻击。

Byzantine-Resilient Over-the-Air Federated Learning under Zero-Trust Architecture

  • 基于零信任架构动态识别恶意设备并自适应分组。
  • 理论证明不同分组策略下模型收敛性,提升训练稳定性和准确率。
  • 适合高风险无线环境中的联邦学习应用,如工业物联网。

过空气计算(AirComp)已成为实现无线网络中通信高效联邦学习的关键技术。然而,基于空气计算的联邦学习(AirFL)固有的模拟传输机制加剧了拜占庭攻击的风险。本文提出一种新型抗拜占庭攻击的联邦学习范式——安全自适应聚类联邦学习(FedSAC),通过零信任架构(ZTA)实现拜占庭设备识别与自适应设备聚类,保护部分设备免受攻击。通过一步收敛分析,理论上刻画了不同设备聚类机制及不均等聚合权重下的收敛行为。基于分析结果,构建了每轮通信中聚类与权重因子的联合优化问题。为实现定向优化,提出基于历史信誉的动态拜占庭识别方法,并引入序列聚类法,将联合优化转化为权重优化问题而不损失最优性。采用惩罚凸-凹规划(P-CCP)求解权重,获得驻定解。数值结果表明,所提FedSAC在测试精度与收敛速度上均优于现有方法。

原文摘要 · Abstract (English)

Over-the-air computation (AirComp) has emerged as an essential approach for enabling communication-efficient federated learning (FL) over wireless networks. Nonetheless, the inherent analog transmission mechanism in AirComp-based FL (AirFL) intensifies challenges posed by potential Byzantine attacks. In this paper, we propose a novel Byzantine-robust FL paradigm for over-the-air transmissions, referred to as federated learning with secure adaptive clustering (FedSAC). FedSAC aims to protect a portion of the devices from attacks through zero trust architecture (ZTA) based Byzantine identification and adaptive device clustering. By conducting a one-step convergence analysis, we theoretically characterize the convergence behavior with different device clustering mechanisms and uneven aggregation weighting factors for each device. Building upon our analytical results, we formulate a joint optimization problem for the clustering and weighting factors in each communication round. To facilitate the targeted optimization, we propose a dynamic Byzantine identification method using historical reputation based on ZTA. Furthermore, we introduce a sequential clustering method, transforming the joint optimization into a weighting optimization problem without sacrificing the optimality. To optimize the weighting, we capitalize on the penalty convex-concave procedure (P-CCP) to obtain a stationary solution. Numerical results substantiate the superiority of the proposed FedSAC over existing methods in terms of both test accuracy and convergence rate.

联邦学习无线安全拜占庭鲁棒零信任

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。