多模态协作提升去中心化联邦蒸馏的鲁棒性,对抗恶意数据攻击。
Robust Decentralized Federated Distillation via Multi-Modality Knowledge Collaboration

- 通过类别、边界、相关性三模态评估预测可靠性
- 在非独立同分布数据下准确率提升,抵御恶意攻击
- 适合边缘计算、无人机等不可靠场景下的联邦学习
本文提出一种鲁棒的去中心化联邦蒸馏方法,使异构模型客户端通过共享无标签公共数据上的预测进行协作。每个客户端对收到的预测进行三模态评估:类别预测、边界决策与预测相关性,过滤不可靠客户端,按可靠性分配权重,并为每类知识构建教师模型。最终使用私有数据计算的监督梯度验证蒸馏梯度,移除冲突的预测与边界梯度,抑制冲突关系梯度后再更新模型。理论证明在拜占庭攻击下,诚实客户端仍能实现稳定局部优化。跨模态融合后,拜占庭影响被有效控制在蒸馏梯度与客户端私有梯度上。CIFAR-10与CIFAR-100上的大量实验表明,该方法在非独立同分布数据和拜占庭攻击下显著提升了客户端异构模型的预测准确率。随着边缘计算与任务导向无人机协作中去中心化联邦学习需求增长,本方法在存在接收端特定恶意预测的不可靠真实场景中具有广泛应用潜力。
原文摘要 · Abstract (English)
This paper propose a robust decentralized federated distillation method that enables clients with heterogeneous models to collaborate through predictions on shared unlabeled public data. In the proposed method, each client first evaluates the received predictions in three modalities of class prediction, boundary decision, and prediction correlation. It then filters unreliable clients, assigns reliability-based weights to the retained clients, and constructs a teacher for each type of knowledge. Finally, the corresponding distillation gradients are validated using a supervised gradient computed from private data. Conflicting prediction and boundary gradients are removed, and conflicting relation gradients are suppressed before the final model update. We prove the convergence of the proposed method by showing stable local optimization for honest clients under Byzantine distillation. Particularly, we show that our method ensures a bounded Byzantine influence on both distillation gradients and individual client private gradients after cross-modality fusion, thereby enabling stable local optimization for honest clienunder Byzantine distillation. Extensive experiments on CIFAR-10 and CIFAR-100 demonstrate that the proposed method improves the prediction accuracy of heterogeneous models of clients under non-IID data and Byzantine attacks. As the booming demands of federated learning in decentralized environments such as edge computing and mission-oriented UAV collaborations, our method has a great potential for adoption of DFL in unreliable real-world scenarios where clients are exposed to receiver-specific Byzantine messages of malicious predictions.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。