提出新型加密方法,让车载驾驶监控系统在联邦学习中同时防偷窥和防攻击。
SecureDrive-FL: Joint Differential Privacy and Gradient-Aware Selective Homomorphic Encryption for Federated Driver Monitoring

- 动态识别敏感梯度部分进行选择性加密,节省计算开销。
- 在非独立同分布数据下保持73.6%准确率,抵御中间人窃听和模型投毒。
- 首次实现差分隐私与同态加密闭环协同,适合智能汽车等高安全场景。
联邦学习虽支持隐私保护的分布式训练,但梯度更新仍面临中间人拦截与模型投毒风险。本文提出GASHE(梯度感知选择性同态加密),动态识别并仅加密超过差分隐私校准敏感阈值的梯度分量,而非对所有参数统一加密。基于GASHE,构建SecureDrive-FL框架,将DP-SGD与GASHE结合,实现训练时隐私与通信时保密性的闭环融合:DP-SGD的校准参数直接生成GASHE加密掩码。在非独立同分布联邦设置下的十类分心驾驶员分类任务中,SecureDrive-FL在仅增加约8–10%运行时间开销的前提下,准确率达73.6%(与单独使用DP-SGD的74.0%相当),对抗攻击成功率仅为3.9%,且能有效抵御中间人窃听(单独使用DP-SGD时准确率跌至10.4%)。所有实验均在每轮ε₀=4的差分隐私噪声注入下完成。
原文摘要 · Abstract (English)
Federated Learning (FL) enables privacy-aware distributed training, yet gradient updates remain exploitable: Man-in-the-Middle (MitM) interception exposes updates in transit, while model poisoning corrupts global convergence. We first introduce GASHE (Gradient-Aware Selective Homomorphic Encryption), a novel selective encryption strategy that dynamically identifies and encrypts only the gradient components exceeding a DP-calibrated sensitivity threshold, rather than encrypting all parameters uniformly as in static layer-based or full-parameter CKKS schemes. Building on GASHE, we introduce SecureDrive-FL, a federated driver monitoring framework that couples DP-SGD with GASHE to create the first closed-loop DP+HE privacy pipeline: DP-SGD calibration parameters directly derive the GASHE encryption mask, unifying training-time privacy and communication-time confidentiality. Evaluated on a ten-class distracted driver classification task under non-IID federated splits, SecureDrive-FL matches DP-SGD alone's poisoning resistance (73.6% vs. 74.0% accuracy, 3.9% Attack Success Rate for both) while additionally withstanding MitM interception, where DP-SGD alone collapses to near-random accuracy (78.2% vs. 10.4%), all under only approx. 8--10% additional runtime overhead relative to DP-SGD alone---under DP-SGD noise injection with per-round privacy parameter epsilon_0=4.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。