为去中心化联邦学习设计动态信誉系统,有效识别并抑制恶意节点。
RepuNet: A Reputation System for Mitigating Malicious Clients in DFL
- 基于模型相似性、参数变化等指标动态评估节点信誉
- 在MNIST上检测准确率超95%,CIFAR-10上达76%
- 无需区块链等额外架构,适合实际部署的去中心化系统
去中心化联邦学习(DFL)允许节点在无中心服务器情况下协作训练模型,但各节点自主选择聚合伙伴,带来新威胁:恶意节点可能发送污染模型(模型投毒)、延迟提交或泛洪消息,影响系统性能。现有方案多依赖固定配置或区块链等附加基础设施,导致计算开销大、可扩展性差或适应性不足。本文提出RepuNet,一种去中心化信誉系统,可分类DFL中的威胁,并通过模型相似性、参数变化、消息延迟和通信量等指标动态评估节点行为。节点在模型聚合中的影响力根据其信誉分数调整。RepuNet集成于Nebula DFL平台,在非独立同分布(non-IID)条件下,使用MNIST与CIFAR-10数据集,测试了最多25个节点的全连接与随机拓扑结构,覆盖不同攻击强度、频率和激活间隔。实验结果表明,RepuNet能有效检测并缓解恶意行为,在MNIST场景下F1分数超过95%,在CIFAR-10场景下约为76%。这些结果凸显其适应性、鲁棒性及在真实环境中的应用潜力。
原文摘要 · Abstract (English)
Decentralized Federated Learning (DFL) enables nodes to collaboratively train models without a central server, introducing new vulnerabilities since each node independently selects peers for model aggregation. Malicious nodes may exploit this autonomy by sending corrupted models (model poisoning), delaying model submissions (delay attack), or flooding the network with excessive messages, negatively affecting system performance. Existing solutions often depend on rigid configurations or additional infrastructures such as blockchain, leading to computational overhead, scalability issues, or limited adaptability. To overcome these limitations, this paper proposes RepuNet, a decentralized reputation system that categorizes threats in DFL and dynamically evaluates node behavior using metrics like model similarity, parameter changes, message latency, and communication volume. Nodes' influence in model aggregation is adjusted based on their reputation scores. RepuNet was integrated into the Nebula DFL platform and experimentally evaluated with MNIST and CIFAR-10 datasets under non-IID distributions, using federations of up to 25 nodes in both fully connected and random topologies. Different attack intensities, frequencies, and activation intervals were tested. Results demonstrated that RepuNet effectively detects and mitigates malicious behavior, achieving F1 scores above 95% for MNIST scenarios and approximately 76% for CIFAR-10 cases. These outcomes highlight RepuNet's adaptability, robustness, and practical potential for mitigating threats in decentralized federated learning environments.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。