arXiv:2504.03077cs.CRcs.AI2025-04被引 2

用身份识别技术防止恶意客户端重连攻击,提升联邦学习安全性。

Integrating Identity-Based Identification against Adaptive Adversaries in Federated Learning

  • 基于椭圆曲线的IBI身份认证机制,实现客户端可信标识
  • 实验显示结合Krum/Trimmed Mean算法可有效抵御重连恶意客户端
  • 适合关注联邦学习安全、尤其是物联网场景的开发者与研究者

联邦学习(FL)作为一种隐私保护的分布式机器学习范式受到广泛关注。然而,其面临自适应攻击者的严重威胁,尤其表现为重新连接的恶意客户端(RMCs)利用开放连接性,以修改后的攻击策略再次接入系统。为应对这一漏洞,本文提出在联邦学习中集成基于身份的识别(IBI)机制,通过椭圆曲线上的TNC-IBI方案实现客户端的身份认证,从而阻止曾被隔离的恶意客户端重新加入。该方法具有计算高效性,特别适用于物联网等资源受限环境。实验表明,将IBI与安全聚合算法(如Krum和Trimmed Mean)结合,显著提升了联邦学习对RMCs的鲁棒性。此外,本文探讨了IBI在自适应攻击检测、声誉机制及去中心化架构中的应用前景,倡导采用主动防御策略应对不断演化的自适应攻击威胁。

原文摘要 · Abstract (English)

Federated Learning (FL) has recently emerged as a promising paradigm for privacy-preserving, distributed machine learning. However, FL systems face significant security threats, particularly from adaptive adversaries capable of modifying their attack strategies to evade detection. One such threat is the presence of Reconnecting Malicious Clients (RMCs), which exploit FLs open connectivity by reconnecting to the system with modified attack strategies. To address this vulnerability, we propose integration of Identity-Based Identification (IBI) as a security measure within FL environments. By leveraging IBI, we enable FL systems to authenticate clients based on cryptographic identity schemes, effectively preventing previously disconnected malicious clients from re-entering the system. Our approach is implemented using the TNC-IBI (Tan-Ng-Chin) scheme over elliptic curves to ensure computational efficiency, particularly in resource-constrained environments like Internet of Things (IoT). Experimental results demonstrate that integrating IBI with secure aggregation algorithms, such as Krum and Trimmed Mean, significantly improves FL robustness by mitigating the impact of RMCs. We further discuss the broader implications of IBI in FL security, highlighting research directions for adaptive adversary detection, reputation-based mechanisms, and the applicability of identity-based cryptographic frameworks in decentralized FL architectures. Our findings advocate for a holistic approach to FL security, emphasizing the necessity of proactive defence strategies against evolving adaptive adversarial threats.

联邦学习安全防御身份认证物联网

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。