用频谱能量分析法,高效防御无人机群联邦学习中的隐蔽后门攻击。
TASER: Task-Aware Spectral Energy Refine for Backdoor Suppression in UAV Swarms Decentralized Federated Learning
- 基于梯度频谱集中特性,不依赖复杂异常检测
- 对隐蔽攻击成功率低于20%,准确率损失小于5%
- 适合资源受限的去中心化无人机集群场景
随着基于无人机的去中心化联邦学习(UAV-DFL)中后门攻击日益隐蔽和复杂,现有防御手段因高度依赖异常检测而易被规避。在缺乏全局协调与资源受限的UAV-DFL环境中,此类方法难以适用。相比之下,梯度频谱分析提供新路径。通过对现有隐蔽攻击的实证分析发现:攻击者越努力模仿正常行为,其梯度的频谱集中性越明显。受此启发,我们提出任务感知频谱能量精炼(TASER)——首个无需复杂异常检测、利用频谱集中性的高效去中心化防御框架。TASER通过保留主任务相关频段系数、剔除其余部分,从结构上破坏后门任务。理论证明其有效性,并实验验证:可有效抵御绕过传统异常检测的隐蔽攻击,攻击成功率低于20%,准确率损失低于5%。
原文摘要 · Abstract (English)
As backdoor attacks in UAV-based decentralized federated learning (DFL) grow increasingly stealthy and sophisticated, existing defenses have likewise escalated in complexity. Yet these defenses, which rely heavily on outlier detection, remain vulnerable to carefully crafted backdoors. In UAV-DFL, the lack of global coordination and limited resources further render outlier-based defenses impractical. Against this backdrop, gradient spectral analysis offers a promising alternative. While prior work primarily leverages low-frequency coefficients for pairwise comparisons, it neglects to analyze the intrinsic spectral characteristics of backdoor gradients. Through empirical analysis of existing stealthy attacks, we reveal a key insight: the more effort attackers invest in mimicking benign behaviors, the more distinct the spectral concentration becomes. Motivated by this, we propose Task-Aware Spectral Energy Refine (TASER) -- a decentralized defense framework. To our knowledge, this is the first efficient backdoor defense that utilizes spectral concentration instead of complex outlier detection, enabling mitigation of stealthy attacks by structurally disrupting the backdoor task. To suppress the backdoor task, TASER preserves main-task-relevant frequency coefficients and discards others. We provide theoretical guarantees and demonstrate through experiments that TASER remains effective against stealthy backdoor attacks that bypass outlier-based defenses, achieving attack success rate below 20% and accuracy loss under 5%.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。