arXiv:2506.13612cs.CRcs.AI2025-06AAAI被引 8

提出安全高效的聚类联邦学习方案,保护用户隐私并抵御恶意攻击。

EBS-CFL: Efficient and Byzantine-robust Secure Clustered Federated Learning

  • 通过加权聚合正相关梯度、丢弃负相关梯度实现抗毒攻击。
  • 客户端计算开销为 O(m²l),当 m=1 时比现有方案快至少 O(log n) 倍。
  • 支持聚类身份隐匿,适合高隐私要求的分布式协作场景。

尽管联邦学习(FL)在协同学习中具有潜力,但因分布式用户的数据异质性导致性能下降。近年来,聚类联邦学习(CFL)通过根据用户相似性划分聚类来应对这一挑战。然而,当用户因隐私顾虑不愿共享聚类身份时,训练面临困难。为此,我们提出一种创新的高效且鲁棒的CFL安全聚合方案——EBS-CFL。该方案可在保护用户聚类身份隐私的同时有效训练CFL。此外,它通过丢弃负相关梯度、加权聚合正相关梯度,无需暴露个体梯度即可检测潜在投毒攻击;服务器还能验证客户端梯度编码的正确性。EBS-CFL通信开销为 O(ml + m²),计算开销为 O(m²l),其中 m 为聚类数量,l 为梯度维度。当 m = 1 时,客户端计算效率至少比对比方案高 O(log n) 倍(n 为客户端总数)。我们通过大量实验验证了该方案,并从理论上证明其安全性。

原文摘要 · Abstract (English)

Despite federated learning (FL)'s potential in collaborative learning, its performance has deteriorated due to the data heterogeneity of distributed users. Recently, clustered federated learning (CFL) has emerged to address this challenge by partitioning users into clusters according to their similarity. However, CFL faces difficulties in training when users are unwilling to share their cluster identities due to privacy concerns. To address these issues, we present an innovative Efficient and Robust Secure Aggregation scheme for CFL, dubbed EBS-CFL. The proposed EBS-CFL supports effectively training CFL while maintaining users' cluster identity confidentially. Moreover, it detects potential poisonous attacks without compromising individual client gradients by discarding negatively correlated gradients and aggregating positively correlated ones using a weighted approach. The server also authenticates correct gradient encoding by clients. EBS-CFL has high efficiency with client-side overhead O(ml + m^2) for communication and O(m^2l) for computation, where m is the number of cluster identities, and l is the gradient size. When m = 1, EBS-CFL's computational efficiency of client is at least O(log n) times better than comparison schemes, where n is the number of clients.In addition, we validate the scheme through extensive experiments. Finally, we theoretically prove the scheme's security.

联邦学习隐私保护抗攻击聚类

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。