GShield通过学习正常梯度分布,识别并过滤恶意更新,提升联邦学习抗数据投毒能力。
GShield: Mitigating Poisoning Attacks in Federated Learning
- 基于聚类与高斯模型构建正常梯度分布基准,识别异常客户端
- 在非独立同分布数据下使目标类别准确率提升43%~65%
- 适用于隐私敏感场景下的分布式模型训练,尤其适合对抗恶意客户端
联邦学习(FL)作为一种革命性的协作训练方法,可在保护数据隐私的同时实现去中心化模型训练,但其分布式特性使其极易遭受数据投毒攻击。在此类攻击中,恶意客户端向训练过程注入伪造数据,导致全局模型性能下降或引发定向误分类。本文提出一种新型防御机制GShield,旨在检测并缓解恶意及低质量更新,特别针对非独立同分布(non-IID)数据场景。GShield通过在初始轮次中利用聚类与高斯建模学习良性梯度分布,建立可信客户端行为基准。基于此基准,系统仅聚合符合预期梯度模式的更新,有效隔离攻击客户端,保障全局模型完整性。大规模实验表明,相比现有最先进方法,GShield显著提升了模型鲁棒性,并在表格与图像数据集上保持高精度。此外,在检测到恶意和低质量客户端后,目标类别准确率提升43%至65%。
原文摘要 · Abstract (English)
Federated Learning (FL) has recently emerged as a revolutionary approach to collaborative training Machine Learning models. In particular, it enables decentralized model training while preserving data privacy, but its distributed nature makes it highly vulnerable to a severe attack known as Data Poisoning. In such scenarios, malicious clients inject manipulated data into the training process, thereby degrading global model performance or causing targeted misclassification. In this paper, we present a novel defense mechanism called GShield, designed to detect and mitigate malicious and low-quality updates, especially under non-independent and identically distributed (non-IID) data scenarios. GShield operates by learning the distribution of benign gradients through clustering and Gaussian modeling during an initial round, enabling it to establish a reliable baseline of trusted client behavior. With this benign profile, GShield selectively aggregates only those updates that align with the expected gradient patterns, effectively isolating adversarial clients and preserving the integrity of the global model. An extensive experimental campaign demonstrates that our proposed defense significantly improves model robustness compared to the state-of-the-art methods while maintaining a high accuracy of performance across both tabular and image datasets. Furthermore, GShield improves the accuracy of the targeted class by 43\% to 65\% after detecting malicious and low-quality clients.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。