arXiv:2602.21841cs.CRcs.AI2026-02

用区块链冗余机制主动防御联邦学习攻击,提升模型安全。

Resilient Federated Chain: Transforming Blockchain Consensus into an Active Defense Layer for Federated Learning

  • 将区块链挖矿冗余转为防御层,结合鲁棒聚合规则。
  • 在多种攻击场景下显著提升模型鲁棒性,优于基线方法。
  • 适合关注去中心化学习安全的开发者与研究者。

联邦学习(FL)作为构建可信AI的关键范式,支持隐私保护的分布式模型训练。然而,其易受对抗攻击威胁,损害模型完整性与数据机密性,而传统数据检测手段因不兼容去中心化设计难以应用。尽管已有将区块链与联邦学习结合的尝试,但其在抵御攻击方面的潜力尚未被充分探索。本文提出一种新型区块链增强型联邦学习框架——弹性联邦链(RFC),基于现有联邦学习证明(Proof of Federated Learning)架构,将池化挖矿机制中的冗余资源转化为主动防御层,并结合鲁棒聚合规则。此外,共识机制引入灵活评估函数,可自适应应对不同攻击策略。在图像分类任务中,针对多种对抗场景的实验表明,相比基线方法,RFC 显著提升了系统鲁棒性,为保障去中心化学习环境安全提供了可行方案。

原文摘要 · Abstract (English)

Federated Learning (FL) has emerged as a key paradigm for building Trustworthy AI systems by enabling privacy-preserving, decentralized model training. However, FL is highly susceptible to adversarial attacks that compromise model integrity and data confidentiality, a vulnerability exacerbated by the fact that conventional data inspection methods are incompatible with its decentralized design. While integrating FL with Blockchain technology has been proposed to address some limitations, its potential for mitigating adversarial attacks remains largely unexplored. This paper introduces Resilient Federated Chain (RFC), a novel blockchain-enabled FL framework designed specifically to enhance resilience against such threats. RFC builds upon the existing Proof of Federated Learning architecture by repurposing the redundancy of its Pooled Mining mechanism as an active defense layer that can be combined with robust aggregation rules. Furthermore, the framework introduces a flexible evaluation function in its consensus mechanism, allowing for adaptive defense against different attack strategies. Extensive experimental evaluation on image classification tasks under various adversarial scenarios, demonstrates that RFC significantly improves robustness compared to baseline methods, providing a viable solution for securing decentralized learning environments.

联邦学习区块链安全防御

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。