arXiv:2602.13062cs.LGcs.CR2026-02被引 1

对比持续学习在物联网中易遭隐蔽后门攻击,威胁设备长期安全。

Backdoor Attacks on Contrastive Continual Learning for IoT Systems

  • 利用对比学习的嵌入对齐特性实施后门攻击
  • 攻击可长期留存,跨越更新与部署周期
  • 适合关注边缘计算安全的开发者与研究者

物联网系统日益依赖持续学习以适应非平稳环境,如传感器漂移、用户行为变化、设备老化及对抗性动态。对比持续学习(CCL)结合对比表示学习与增量适应,实现跨任务和域的鲁棒特征复用。然而,对比目标的几何特性,若与基于重放的回放机制及稳定性保持正则化结合,会引入新的安全漏洞。值得注意的是,后门攻击可利用嵌入对齐与重放强化,植入持久恶意行为,使其在更新和部署周期中持续存在。本文对物联网系统中CCL的后门攻击进行了全面分析,形式化了嵌入级攻击目标,探讨了物联网部署中的持久性机制,并构建了针对物联网的分层分类体系。此外,比较了不同学习范式下的漏洞差异,在有限内存、边缘计算及联邦聚合等物联网约束下评估防御策略。结果表明,尽管CCL能提升物联网的自适应智能,但若未充分防护,可能加剧长期存在的表征级威胁。

原文摘要 · Abstract (English)

The Internet of Things (IoT) systems increasingly depend on continual learning to adapt to non-stationary environments. These environments can include factors such as sensor drift, changing user behavior, device aging, and adversarial dynamics. Contrastive continual learning (CCL) combines contrastive representation learning with incremental adaptation, enabling robust feature reuse across tasks and domains. However, the geometric nature of contrastive objectives, when paired with replay-based rehearsal and stability-preserving regularization, introduces new security vulnerabilities. Notably, backdoor attacks can exploit embedding alignment and replay reinforcement, enabling the implantation of persistent malicious behaviors that endure through updates and deployment cycles. This paper provides a comprehensive analysis of backdoor attacks on CCL within IoT systems. We formalize the objectives of embedding-level attacks, examine persistence mechanisms unique to IoT deployments, and develop a layered taxonomy tailored to IoT. Additionally, we compare vulnerabilities across various learning paradigms and evaluate defense strategies under IoT constraints, including limited memory, edge computing, and federated aggregation. Our findings indicate that while CCL is effective for enhancing adaptive IoT intelligence, it may also elevate long-lived representation-level threats if not adequately secured.

物联网安全持续学习后门攻击

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。