提出去中心化排序学习框架RankGuard,防恶意攻击且效率高。
Efficient and Robust Online Learning to Rank in Decentralized Systems

- 用户直接交换模型更新,通过私有点击历史验证新模型
- 在4个基准上抵御4种攻击,性能优于基线,效率最高提升62倍
- 首个具备收敛性证明的去中心化在线排序学习方法
在线学习排序(OLTR)依赖可信中心服务器收集用户实时交互数据,但易引入偏见。去中心化学习允许用户直接协作训练共享排序模型,避免中心机构。然而,恶意节点可能发送污染模型更新,损害整体排序质量。本文提出RankGuard框架,用户间直接交换模型更新,并通过自身私有的点击历史(修正位置偏差)评估接收模型:仅当新模型能更好解释用户历史行为时才被采纳。该机制使恶意节点难以伪造有效更新而不真正改善用户体验。我们推导出RankGuard的理论收敛性保证,据知是首个对去中心化OLTR算法的正式收敛分析。在四个标准基准和三种点击模型上,评估了四种中毒攻击(含自适应攻击),结果表明RankGuard在多数场景中优于所有基线,效率最高达最接近竞争者62倍。
原文摘要 · Abstract (English)
In Online Learning to Rank (OLTR), ranking models are trained directly from live user interactions, but existing systems rely on a trusted central server to collect and process these interactions. This leaves operators free to introduce biases that conflict with user interests. Decentralized learning offers an attractive alternative, allowing users to collaboratively train a shared ranking model by exchanging model updates directly with one another, without any central authority. In such settings, however, malicious nodes can send poisoned model updates that degrade the ranking quality of honest nodes. We introduce RankGuard, a decentralized OLTR framework in which users collaboratively train ranking models and exchange model updates directly with other nodes. RankGuard defends against poisoning attacks by carefully evaluating incoming models against the user's own private click history, corrected for position bias. An incoming model is only aggregated if it better explains the user's past interactions than the current local model, making it fundamentally hard for malicious nodes to craft updates that pass this test without also genuinely helping the user. We derive a theoretical convergence guarantee of RankGuard. To the best of our knowledge, this is the first formal convergence analysis of a decentralized OLTR algorithm. We evaluate RankGuard against four poisoning attacks, including a powerful adaptive attack, using four standard benchmarks and three click models. RankGuard outperforms all baselines in most settings while being up to 62x more efficient than its closest competitors.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。