arXiv:2605.09232cs.CRcs.LG2026-05

提出统一威胁模型与评估框架,对比物联网分布式学习中的隐私保护方法。

Privacy-Preserving Distributed Learning in IoT Systems: A Unified Threat Model and Evaluation Framework

论文配图:Privacy-Preserving Distributed Learning in IoT Systems: A Unified Threat Model and Evaluation Framework
图 1 · 摘自论文原文
  • 构建涵盖多种攻击的统一威胁模型
  • 发现隐私强度与系统效率存在根本权衡
  • 轻量级布隆过滤器编码在低开销下有效保隐私

物联网设备的普及推动了分布式学习的发展,数据本地化但共享模型更新。尽管减少了集中式数据收集,梯度、参数和中间表示的交换仍带来隐私风险。已有隐私保护技术包括差分隐私、密码学方法和轻量级系统方案。然而,现有综述多孤立评估,缺乏在真实攻击模型和物联网资源约束下的统一比较框架。本文系统分析了物联网环境中分布式学习的隐私保护技术,提出涵盖模型逆向、成员推断、梯度泄露和通信攻击的统一威胁模型,并构建评估框架,从隐私鲁棒性与系统效率(计算、内存、通信开销)角度对比多种方法。分析涵盖差分隐私、同态加密、安全多方计算、分布式选择性随机梯度下降及布隆过滤器方法。结果表明隐私强度与系统效率存在根本权衡;布隆过滤器编码通过碰撞引发的模糊性实现轻量级隐私保护,同时保持低计算与通信开销。论文为物联网分布式学习中的隐私设计提供统一视角。

原文摘要 · Abstract (English)

The increasing deployment of Internet-of-Things (IoT) devices has accelerated the use of distributed learning frameworks, where data remains local while model updates are shared across decentralized systems. Although this reduces centralized data collection, it introduces privacy risks through the exchange of gradients, model parameters, and intermediate representations. A variety of privacy-preserving techniques have been proposed to address these risks, including differential privacy, cryptographic methods, and lightweight system-level approaches. However, existing surveys often evaluate these methods in isolation and lack a unified framework for comparing their effectiveness under realistic attack models and IoT resource constraints. This paper presents a structured analysis of privacy-preserving techniques for distributed learning in IoT environments. A unified threat model is introduced that captures model inversion, membership inference, gradient leakage, and communication-based attacks. Building on this model, an evaluation framework is developed to compare methods in terms of both privacy robustness and system-level efficiency, including computational, memory, and communication overhead. Using this framework, representative approaches including differential privacy, homomorphic encryption, secure multi-party computation, distributed selective stochastic gradient descent, and Bloom Filter-based methods are analyzed. The results highlight a fundamental trade-off between privacy strength and system efficiency. In particular, Bloom Filter-based encodings are shown to provide lightweight privacy through collision-induced ambiguity while maintaining low computational and communication overhead. The paper provides a unified perspective on privacy-preserving design choices for distributed learning in IoT systems.

隐私保护物联网分布式学习威胁模型

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。