提出Pigeon-SL框架,用分组验证防恶意客户端攻击
Pigeon-SL: Robust Split Learning Framework for Edge Intelligence under Malicious Clients
- 通过鸽巢原理分组,确保至少一组全为诚实客户端
- 每轮仅保留损失最低组,使模型准确率提升15%以上
- 适合边缘智能中对抗性客户端场景,如物联网安全
分裂学习(SL)在边缘智能中展现出隐私保护与通信高效的优势,但其串行更新机制易受单个恶意客户端影响,导致模型精度显著下降。为此,我们提出Pigeon-SL,基于鸽巢原理,在M个客户端中最多存在N个恶意节点时,仍能保证至少一个完整诚实集群。每轮全局训练中,接入点将客户端划分为N+1个集群,各自独立执行标准SL,并在共享数据集上评估验证损失。仅损失最低的集群继续参与,其余被剔除,从而隔离恶意更新。进一步提出Pigeon-SL+,在选中集群上重复训练,使更新吞吐量达到标准SL水平。我们在三种典型攻击模型下验证了方法的鲁棒性:标签翻转、激活值与梯度篡改,结果表明相比基线方法,模型在准确性与抗攻击能力上均有显著提升,适用于未来智能无线网络。
原文摘要 · Abstract (English)
Recent advances in split learning (SL) have established it as a promising framework for privacy-preserving, communication-efficient distributed learning at the network edge. However, SL's sequential update process is vulnerable to even a single malicious client, which can significantly degrade model accuracy. To address this, we introduce Pigeon-SL, a novel scheme grounded in the pigeonhole principle that guarantees at least one entirely honest cluster among M clients, even when up to N of them are adversarial. In each global round, the access point partitions the clients into N+1 clusters, trains each cluster independently via vanilla SL, and evaluates their validation losses on a shared dataset. Only the cluster with the lowest loss advances, thereby isolating and discarding malicious updates. We further enhance training and communication efficiency with Pigeon-SL+, which repeats training on the selected cluster to match the update throughput of standard SL. We validate the robustness and effectiveness of our approach under three representative attack models -- label flipping, activation and gradient manipulation -- demonstrating significant improvements in accuracy and resilience over baseline SL methods in future intelligent wireless networks.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。