提出SecureAFL框架,提升异步联邦学习抗攻击能力
SecureAFL: Secure Asynchronous Federated Learning
- 通过检测异常更新与补全缺失客户端贡献来增强鲁棒性
- 采用坐标中位数等拜占庭鲁棒聚合方法,有效防御中毒攻击
- 适合关注联邦学习安全性的研究人员和工业应用开发者
联邦学习(FL)允许多个客户端在不共享私有训练数据的前提下,通过服务器协同训练全局机器学习模型。传统FL采用同步方式,服务器需等待大量客户端的模型更新后才进行聚合,但存在慢速节点问题。为解决此问题,异步FL架构允许服务器在接收到任意客户端的本地模型更新后立即更新全局模型。然而,异步FL的去中心化特性使其易受中毒攻击。现有防御机制仍易受高级攻击或依赖不现实的服务器假设。本文提出SecureAFL,一种新型框架,旨在保护异步FL免受中毒攻击。SecureAFL通过检测并丢弃异常更新,同时估算缺失客户端的贡献,提升系统鲁棒性;并结合坐标中位数等拜占庭鲁棒聚合技术,融合已接收与估算的更新。在多个真实世界数据集上的大量实验表明,SecureAFL具有显著有效性。
原文摘要 · Abstract (English)
Federated learning (FL) enables multiple clients to collaboratively train a global machine learning model via a server without sharing their private training data. In traditional FL, the system follows a synchronous approach, where the server waits for model updates from numerous clients before aggregating them to update the global model. However, synchronous FL is hindered by the straggler problem. To address this, the asynchronous FL architecture allows the server to update the global model immediately upon receiving any client's local model update. Despite its advantages, the decentralized nature of asynchronous FL makes it vulnerable to poisoning attacks. Several defenses tailored for asynchronous FL have been proposed, but these mechanisms remain susceptible to advanced attacks or rely on unrealistic server assumptions. In this paper, we introduce SecureAFL, an innovative framework designed to secure asynchronous FL against poisoning attacks. SecureAFL improves the robustness of asynchronous FL by detecting and discarding anomalous updates while estimating the contributions of missing clients. Additionally, it utilizes Byzantine-robust aggregation techniques, such as coordinate-wise median, to integrate the received and estimated updates. Extensive experiments on various real-world datasets demonstrate the effectiveness of SecureAFL.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。