用欺骗信号保护隐私,优化设备分工与模型分割。
Optimizing Model Splitting and Device Task Assignment for Deceptive Signal Assisted Private Multi-hop Split Learning
- 通过欺骗信号干扰窃听者,动态分配设备任务与模型切分。
- 相比传统方法,收敛速度提升3倍,泄露信息减少13%。
- 适合隐私敏感的多跳联邦学习场景,尤其边缘计算应用。
本文研究了基于欺骗信号的私有化分层学习。多个边缘设备协同训练,同时存在试图窃取模型和数据信息的监听者。为防止信息泄露,部分设备可发送欺骗信号。需确定用于发送欺骗信号的设备集合、参与模型训练的设备集合,以及分配给每个训练设备的子模型。该问题被建模为一个优化问题,目标是在满足能量消耗和延迟约束的前提下最小化泄露信息。为此,提出一种融合内在好奇心模块与交叉注意力机制的软演员-评论家深度强化学习框架(ICM-CA),使中心服务器在不知晓监听者位置和监听概率的情况下,自主决策训练设备、欺骗信号发送设备、发射功率及子模型分配。该方法通过好奇心模块激励探索新动作与状态,利用交叉注意力模块评估历史状态-动作对的重要性,从而提升训练效率。仿真结果表明,相较于传统SAC算法,该方法可将收敛速度提升最高3倍,信息泄露降低最多13%。
原文摘要 · Abstract (English)
In this paper, deceptive signal-assisted private split learning is investigated. In our model, several edge devices jointly perform collaborative training, and some eavesdroppers aim to collect the model and data information from devices. To prevent the eavesdroppers from collecting model and data information, a subset of devices can transmit deceptive signals. Therefore, it is necessary to determine the subset of devices used for deceptive signal transmission, the subset of model training devices, and the models assigned to each model training device. This problem is formulated as an optimization problem whose goal is to minimize the information leaked to eavesdroppers while meeting the model training energy consumption and delay constraints. To solve this problem, we propose a soft actor-critic deep reinforcement learning framework with intrinsic curiosity module and cross-attention (ICM-CA) that enables a centralized agent to determine the model training devices, the deceptive signal transmission devices, the transmit power, and sub-models assigned to each model training device without knowing the position and monitoring probability of eavesdroppers. The proposed method uses an ICM module to encourage the server to explore novel actions and states and a CA module to determine the importance of each historical state-action pair thus improving training efficiency. Simulation results demonstrate that the proposed method improves the convergence rate by up to 3x and reduces the information leaked to eavesdroppers by up to 13% compared to the traditional SAC algorithm.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。