• Complex
  • Title
  • Keyword
  • Abstract
  • Scholars
  • Journal
  • ISSN
  • Conference
成果搜索

author:

Wu, Minzhe (Wu, Minzhe.) [1] | Zhao, Bowen (Zhao, Bowen.) [2] | Xiao, Yang (Xiao, Yang.) [3] | Deng, Congjian (Deng, Congjian.) [4] | Liu, Yuan (Liu, Yuan.) [5] | Liu, Ximeng (Liu, Ximeng.) [6] (Scholars:刘西蒙)

Indexed by:

EI Scopus SCIE

Abstract:

Federated learning (FL) is an emerging paradigm for privacy-preserving machine learning, in which multiple clients collaborate to generate a global model through training individual models with local data. However, FL is vulnerable to model poisoning attacks (MPAs) as malicious clients are able to destroy the global model by modifying local models. Although numerous model poisoning defense methods are extensively studied, they remain vulnerable to newly proposed optimized MPAs and are constrained by the necessity to presume a certain proportion of malicious clients. To this end, in this paper, we propose MODEL, a model poisoning defense framework for FL through truth discovery (TD). A distinctive aspect of MODEL is its ability to effectively prevent both optimized and byzantine MPAs. Furthermore, it requires no presupposed threshold for different settings of malicious clients (e.g., less than 33% or no more than 50%). Specifically, a TD-based metric and a clustering-based filtering mechanism are proposed to evaluate local models and avoid presupposing a threshold. Furthermore, MODEL is effective for non-independent and identically distributed (non-IID) training data. In addition, inspired by game theory, we incorporate a truthful and fair incentive mechanism in MODEL to encourage active client participation while mitigating the potential desire for attacks from malicious clients. Extensively comparative experiments demonstrate that MODEL effectively safeguards against optimized MPAs and outperforms the state-of-the-art.

Keyword:

Adaptation models Computational modeling Data models Federated learning Filtering game theory Hidden Markov models incentive mechanism model poisoning defense Servers Training truth discovery

Community:

  • [ 1 ] [Wu, Minzhe]Xidian Univ, Guangzhou Inst Technol, Guangzhou 510555, Peoples R China
  • [ 2 ] [Zhao, Bowen]Xidian Univ, Guangzhou Inst Technol, Guangzhou 510555, Peoples R China
  • [ 3 ] [Wu, Minzhe]Xidian Univ, Shaanxi Key Lab Blockchain & Secure Comp, Guangzhou 510555, Peoples R China
  • [ 4 ] [Zhao, Bowen]Xidian Univ, Shaanxi Key Lab Blockchain & Secure Comp, Guangzhou 510555, Peoples R China
  • [ 5 ] [Xiao, Yang]Xidian Univ, Sch Cyber Engn, Xian 710126, Peoples R China
  • [ 6 ] [Xiao, Yang]Xidian Univ, Univ Shaanxi Prov, Engn Res Ctr Trusted Digital Econ, Xian 710126, Peoples R China
  • [ 7 ] [Deng, Congjian]Guangzhou Yunqu Informat Technol Co Ltd, Guangzhou 510000, Peoples R China
  • [ 8 ] [Liu, Yuan]Guangzhou Univ, Cyberspace Inst Adv Technol, Guangzhou 510006, Guangdong, Peoples R China
  • [ 9 ] [Liu, Ximeng]Fuzhou Univ, Coll Comp & Data Sci, Fuzhou 350108, Fujian, Peoples R China

Reprint 's Address:

  • [Zhao, Bowen]Xidian Univ, Guangzhou Inst Technol, Guangzhou 510555, Peoples R China;;[Zhao, Bowen]Xidian Univ, Shaanxi Key Lab Blockchain & Secure Comp, Guangzhou 510555, Peoples R China;;[Xiao, Yang]Xidian Univ, Sch Cyber Engn, Xian 710126, Peoples R China;;[Xiao, Yang]Xidian Univ, Univ Shaanxi Prov, Engn Res Ctr Trusted Digital Econ, Xian 710126, Peoples R China;;

Show more details

Version:

Related Keywords:

Related Article:

Source :

IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY

ISSN: 1556-6013

Year: 2024

Volume: 19

Page: 8747-8759

6 . 3 0 0

JCR@2023

Cited Count:

WoS CC Cited Count:

SCOPUS Cited Count:

ESI Highly Cited Papers on the List: 0 Unfold All

WanFang Cited Count:

Chinese Cited Count:

30 Days PV: 3

Online/Total:143/9986953
Address:FZU Library(No.2 Xuyuan Road, Fuzhou, Fujian, PRC Post Code:350116) Contact Us:0591-22865326
Copyright:FZU Library Technical Support:Beijing Aegean Software Co., Ltd. 闽ICP备05005463号-1