提出新框架让分布式学习节点在受攻击时仍保持模型一致且准确。
Model-Consistent Byzantine-Resilient Decentralized Federated Learning for Collaborative Missions

- 用异步共识协议确保所有节点聚合相同模型更新
- 在非独立同分布数据下仍保持高精度,抵御中毒攻击
- 适合军事、自动驾驶等需统一决策的协作任务
去中心化联邦学习(DFL)使自主节点无需依赖中心服务器即可协同训练人工智能模型。然而现有方案无法保证全局模型一致性,这在关键协作任务中会破坏决策统一性与安全性。该缺陷还加剧了拜占庭敌手的威胁,后者利用去中心化拓扑和弱同步性实施欺骗与模型投毒攻击。本文提出DFL-C,一种新型抗拜占庭的去中心化联邦学习架构,使节点在协同训练中实现全局模型一致性。其核心是将异步公共子集(ACS)共识协议嵌入DFL流程,确保各节点即使遭受拜占庭欺骗,也能聚合统一的模型更新。此外,引入双域信任评分机制,有效抵御数据域内的拜占庭操纵,包括模型投毒攻击,并显著降低共识协议运行时间。实验表明,DFL-C在存在拜占庭行为时仍保持模型精度,实现全局一致性,且共识开销适中。相较于不保证一致性的先进方案BALANCE,DFL-C在无目标投毒攻击下表现更优,后门攻击下表现相当,且在非独立同分布(non-IID)场景下优势更加明显。
原文摘要 · Abstract (English)
Decentralized federated learning (DFL) is a promising paradigm for autonomous nodes to collaboratively train AI models without relying on a central server. However, existing DFL solutions do not guarantee global model consistency, a critical requirement for collaborative mission-critical scenarios where model divergence undermines decision uniformity and safety. This lack of consistency also amplifies vulnerability to Byzantine adversaries, who exploit the decentralized network topology and weak synchrony to perform equivocation and model poisoning attacks against individual victims. This paper introduces DFL-C, a novel Byzantine-resilient DFL architecture that enables decentralized nodes to perform collaborative training with global model consistency. At its core, DFL-C integrates an asynchronous common subset (ACS) consensus protocol into the DFL workflow to ensure all nodes aggregate a uniform set of model updates to establish global model consistency, despite individual Byzantine equivocation. DFL-C further implements a dual-domain trust scoring mechanism to provide resilience against data-domain Byzantine manipulations including model poisoning attacks. This mechanism complements the consensus protocol, significantly reducing the latter's runtime. Our experimental results demonstrate that DFL-C maintains model accuracy while achieving global model consistency under Byzantine behaviors with moderate consensus overhead. Notably, when compared with the state-of-the-art DFL solution BALANCE (Fang et al.) that does not provide model consistency, DFL-C achieves better model accuracy against untargeted model poisoning attacks and comparable resilience against backdoor attacks, with the advantage widened under non-IID scenarios.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。