车辆网络用分布式联邦学习提升安全检测,共享模型防恶意行为
Distributed Federated Learning for Vehicular Network Security: Anomaly Detection Benefits and Multi-Domain Attack Threats
- 车辆通过邻居间交换模型更新,多跳传播实现协同训练
- 相比本地训练,全网分类准确率显著提升,低性能车辆获益最大
- 揭示无线干扰和数据污染双重攻击下的模型脆弱性,需更强防护
在智能网联汽车中,机器学习用于安全消息分类,对检测恶意或异常行为至关重要。然而,传统依赖集中式数据收集或纯本地训练的方法受限于车辆网络的大规模、高移动性及异构数据分布。本文探索分布式联邦学习(DFL),即车辆通过一跳邻居交换模型更新,并经多跳传播协作训练深度学习模型。基于车载参考违规行为扩展数据集(VeReMi Extension Dataset),结果表明,相比严格本地学习,DFL显著提升所有车辆的分类准确率。尤其个体准确率较低的车辆,在DFL下获得明显提升,体现网络内知识共享的优势。同时发现,本地训练数据量与动态网络连通性对整体模型准确率有强相关性。研究进一步分析了在无线干扰和训练数据投毒等多域攻击下DFL的鲁棒性与脆弱性,揭示其在面对多重攻击时的隐患,强调需制定更稳健的策略以保障车辆网络中DFL的安全性。
原文摘要 · Abstract (English)
In connected and autonomous vehicles, machine learning for safety message classification has become critical for detecting malicious or anomalous behavior. However, conventional approaches that rely on centralized data collection or purely local training face limitations due to the large scale, high mobility, and heterogeneous data distributions inherent in inter-vehicle networks. To overcome these challenges, this paper explores Distributed Federated Learning (DFL), whereby vehicles collaboratively train deep learning models by exchanging model updates among one-hop neighbors and propagating models over multiple hops. Using the Vehicular Reference Misbehavior (VeReMi) Extension Dataset, we show that DFL can significantly improve classification accuracy across all vehicles compared to learning strictly with local data. Notably, vehicles with low individual accuracy see substantial accuracy gains through DFL, illustrating the benefit of knowledge sharing across the network. We further show that local training data size and time-varying network connectivity correlate strongly with the model's overall accuracy. We investigate DFL's resilience and vulnerabilities under attacks in multiple domains, namely wireless jamming and training data poisoning attacks. Our results reveal important insights into the vulnerabilities of DFL when confronted with multi-domain attacks, underlining the need for more robust strategies to secure DFL in vehicular networks.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。