解决物联网中恶意节点多于正常节点时的联邦多任务学习难题
Online Decentralized Federated Multi-task Learning With Trustworthiness in Cyber-Physical Systems
- 利用信号强度等物理特性为邻居模型打信任分
- 在恶意节点占多数时仍保持接近无攻击的理想性能
- 适合自动驾驶等实时动态系统的安全协同学习
多任务学习能有效应对联邦学习中因数据异构导致的个性化建模挑战。然而,将多任务学习扩展到在线去中心化联邦学习场景尚未被充分探索。该场景适用于自动驾驶等真实应用,其中客户端点对点通信且数据分布随时间变化。更严重的问题是存在拜占庭客户端。现有抗拜占庭方法仅在拜占庭客户端少于总客户端一半时有效,但现实中难以限制其数量。近期机器人学研究发现,可利用系统网络物理特性预测客户端行为,并为接收到的信号赋予信任概率,从而实现对主导性拜占庭客户端的容错。本文提出一种在线去中心化联邦多任务学习算法,在拜占庭客户端占多数的情况下仍能实现模型个性化与鲁棒性。算法通过无线系统中的接收信号强度或辅助信息,为每轮从邻居获取的本地模型分配信任概率。仿真结果表明,所提算法性能接近无拜占庭攻击的理想情况。
原文摘要 · Abstract (English)
Multi-task learning is an effective way to address the challenge of model personalization caused by high data heterogeneity in federated learning. However, extending multi-task learning to the online decentralized federated learning setting is yet to be explored. The online decentralized federated learning setting considers many real-world applications of federated learning, such as autonomous systems, where clients communicate peer-to-peer and the data distribution of each client is time-varying. A more serious problem in real-world applications of federated learning is the presence of Byzantine clients. Byzantine-resilient approaches used in federated learning work only when the number of Byzantine clients is less than one-half the total number of clients. Yet, it is difficult to put a limit on the number of Byzantine clients within a system in reality. However, recent work in robotics shows that it is possible to exploit cyber-physical properties of a system to predict clients' behavior and assign a trust probability to received signals. This can help to achieve resiliency in the presence of a dominating number of Byzantine clients. Therefore, in this paper, we develop an online decentralized federated multi-task learning algorithm to provide model personalization and resiliency when the number of Byzantine clients dominates the number of honest clients. Our proposed algorithm leverages cyber-physical properties, such as the received signal strength in wireless systems or side information, to assign a trust probability to local models received from neighbors in each iteration. Our simulation results show that the proposed algorithm performs close to a Byzantine-free setting.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。