车载网络中用分层联邦学习防恶意节点,提升模型安全与收敛速度。
Secure Cluster-Based Hierarchical Federated Learning in Vehicular Networks
- 按车辆历史表现动态选车,结合异常检测筛选可信更新。
- 多级防御使模型收敛更快,3跳拓扑下性能优于基准方法。
- 适合车联网、自动驾驶等高安全性要求的分布式学习场景。
分层联邦学习(HFL)为智能网联汽车提供了有前景的决策方案,可缓解通信资源有限、车辆高移动性及数据异构性等问题。然而,HFL易受恶意或不可靠车辆影响,其误导性更新会严重破坏全局模型的完整性与收敛性。为此,本文提出一种新型防御框架,在基于集群的HFL架构中融合动态车辆选择与鲁棒异常检测机制,专门应对高斯噪声和梯度上升攻击。该框架通过评估车辆的历史准确率、贡献频率和异常记录,全面判断其可靠性;异常检测结合Z-score与余弦相似性分析,识别模型更新中的统计离群值与方向偏差;引入自适应阈值机制,根据车辆历史表现动态调整余弦相似性阈值,对表现稳定的车辆施加更严格标准。此外,采用加权梯度平均机制,赋予可信车辆更高权重。为防御协同攻击,还引入跨集群一致性检查,识别多个受损集群协作发送误导更新的情况。仿真结果表明,所提算法在1跳与3跳拓扑下均显著缩短收敛时间,优于基准方法。
原文摘要 · Abstract (English)
Hierarchical Federated Learning (HFL) has recently emerged as a promising solution for intelligent decision-making in vehicular networks, helping to address challenges such as limited communication resources, high vehicle mobility, and data heterogeneity. However, HFL remains vulnerable to adversarial and unreliable vehicles, whose misleading updates can significantly compromise the integrity and convergence of the global model. To address these challenges, we propose a novel defense framework that integrates dynamic vehicle selection with robust anomaly detection within a cluster-based HFL architecture, specifically designed to counter Gaussian noise and gradient ascent attacks. The framework performs a comprehensive reliability assessment for each vehicle by evaluating historical accuracy, contribution frequency, and anomaly records. Anomaly detection combines Z-score and cosine similarity analyses on model updates to identify both statistical outliers and directional deviations in model updates. To further refine detection, an adaptive thresholding mechanism is incorporated into the cosine similarity metric, dynamically adjusting the threshold based on the historical accuracy of each vehicle to enforce stricter standards for consistently high-performing vehicles. In addition, a weighted gradient averaging mechanism is implemented, which assigns higher weights to gradient updates from more trustworthy vehicles. To defend against coordinated attacks, a cross-cluster consistency check is applied to identify collaborative attacks in which multiple compromised clusters coordinate misleading updates. Together, these mechanisms form a multi-level defense strategy to filter out malicious contributions effectively. Simulation results show that the proposed algorithm significantly reduces convergence time compared to benchmark methods across both 1-hop and 3-hop topologies.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。