arXiv:2601.01053cs.CRcs.LG2026-01被引 2

面向关键物联网的抗拜占庭攻击与抗量子加密联邦学习框架

Byzantine-Robust Federated Learning Framework with Post-Quantum Secure Aggregation for Real-Time Threat Intelligence Sharing in Critical IoT Infrastructure

  • 结合自适应加权聚合与格密码协议,同时防御恶意节点和量子攻击
  • 在40%恶意客户端情况下仍保持96.8%检测准确率,计算开销仅增加18%
  • 适用于需实时威胁共享且对安全性要求极高的工业物联网场景

关键物联网基础设施中物联网设备的普及带来了前所未有的网络安全挑战,亟需在保护数据隐私的同时具备对抗复杂攻击的协同威胁检测机制。传统物联网安全联邦学习存在两大关键漏洞:易受拜占庭攻击(恶意参与者污染模型更新)和无法抵御未来量子计算对加密聚合协议的威胁。本文提出一种新型拜占庭鲁棒联邦学习框架,集成后量子安全聚合,专为关键物联网基础设施中的实时威胁情报共享设计。该框架结合自适应加权聚合机制与基于格的密码协议,同时抵御模型投毒攻击与量子对手。引入基于声誉的客户端选择算法,动态识别并剔除拜占庭参与者,同时满足差分隐私保障。安全聚合协议采用CRYSTALS-Kyber进行密钥封装,配合同态加密确保参数更新过程中的机密性。在工业物联网入侵检测数据集上的实验表明,该框架在40%恶意攻击者环境下仍实现96.8%的威胁检测准确率,相较非安全联邦方法仅增加18%计算开销,聚合延迟低于1秒,提供256位后量子安全等级。

原文摘要 · Abstract (English)

The proliferation of Internet of Things devices in critical infrastructure has created unprecedented cybersecurity challenges, necessitating collaborative threat detection mechanisms that preserve data privacy while maintaining robustness against sophisticated attacks. Traditional federated learning approaches for IoT security suffer from two critical vulnerabilities: susceptibility to Byzantine attacks where malicious participants poison model updates, and inadequacy against future quantum computing threats that can compromise cryptographic aggregation protocols. This paper presents a novel Byzantine-robust federated learning framework integrated with post-quantum secure aggregation specifically designed for real-time threat intelligence sharing across critical IoT infrastructure. The proposed framework combines a adaptive weighted aggregation mechanism with lattice-based cryptographic protocols to simultaneously defend against model poisoning attacks and quantum adversaries. We introduce a reputation-based client selection algorithm that dynamically identifies and excludes Byzantine participants while maintaining differential privacy guarantees. The secure aggregation protocol employs CRYSTALS-Kyber for key encapsulation and homomorphic encryption to ensure confidentiality during parameter updates. Experimental evaluation on industrial IoT intrusion detection datasets demonstrates that our framework achieves 96.8% threat detection accuracy while successfully mitigating up to 40% Byzantine attackers, with only 18% computational overhead compared to non-secure federated approaches. The framework maintains sub-second aggregation latency suitable for real-time applications and provides 256-bit post-quantum security level.

联邦学习拜占庭鲁棒后量子安全物联网安全

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。