• Complex
  • Title
  • Keyword
  • Abstract
  • Scholars
  • Journal
  • ISSN
  • Conference
成果搜索

author:

Zhang, Haiyan (Zhang, Haiyan.) [1] | Li, Xinghua (Li, Xinghua.) [2] | Xu, Mengfan (Xu, Mengfan.) [3] | Liu, Ximeng (Liu, Ximeng.) [4] (Scholars:刘西蒙) | Wu, Tong (Wu, Tong.) [5] | Weng, Jian (Weng, Jian.) [6] | Deng, Robert H. (Deng, Robert H..) [7]

Indexed by:

EI Scopus SCIE

Abstract:

There is substantial attention to federated learning with its ability to train a powerful global model collaboratively while protecting data privacy. Despite its many advantages, federated learning is vulnerable to backdoor attacks, where an adversary injects malicious weights into the global model, making the global model's targeted predictions incorrect. Existing defenses based on identifying and eliminating malicious weights ignore the similarity variation of the local weights during iterations in the malicious model detection and the presence of benign weights in the malicious model during the malicious local weight elimination, resulting in a poor defense and a degradation of global model accuracy. In this paper, we defend against backdoor attacks from the perspective of local models. First, a malicious model detection method based on interpretability techniques is proposed. The method appends a sampling check after clustering to identify malicious models accurately. We further design a malicious local weight elimination method based on local weight contributions. This method preserves the benign weights in the malicious model to maintain their contributions to the global model. Finally, we analyze the security of the proposed method in terms of model closeness and then verify the effectiveness of the proposed method through experiments. In comparison with existing defenses, the results show that BADFL improves the global model accuracy by 23.14% while reducing the attack success rate to 0.04% in the best case.

Keyword:

Accuracy Adaptation models Anomaly detection Artificial neural networks backdoor attack clustering Federated learning Fires interpretability Servers Training

Community:

  • [ 1 ] [Zhang, Haiyan]Xidian Univ, State Key Lab Integrated Serv Networks, Xian 710071, Peoples R China
  • [ 2 ] [Li, Xinghua]Xidian Univ, State Key Lab Integrated Serv Networks, Xian 710071, Peoples R China
  • [ 3 ] [Wu, Tong]Xidian Univ, State Key Lab Integrated Serv Networks, Xian 710071, Peoples R China
  • [ 4 ] [Zhang, Haiyan]Xidian Univ, Sch Cyber Engn, Xian 710071, Peoples R China
  • [ 5 ] [Li, Xinghua]Xidian Univ, Sch Cyber Engn, Xian 710071, Peoples R China
  • [ 6 ] [Wu, Tong]Xidian Univ, Sch Cyber Engn, Xian 710071, Peoples R China
  • [ 7 ] [Xu, Mengfan]Shaanxi Normal Univ, Sch Comp Sci, Xian 710062, Peoples R China
  • [ 8 ] [Liu, Ximeng]Fuzhou Univ, Key Lab Informat Secur Network Syst, Fuzhou 350108, Peoples R China
  • [ 9 ] [Weng, Jian]Jinan Univ, Coll Cyber Secur, Guangzhou 510632, Peoples R China
  • [ 10 ] [Deng, Robert H.]Singapore Management Univ, Sch Informat Syst, Singapore 178902, Singapore

Reprint 's Address:

  • [Li, Xinghua]Xidian Univ, State Key Lab Integrated Serv Networks, Xian 710071, Peoples R China;;[Li, Xinghua]Xidian Univ, Sch Cyber Engn, Xian 710071, Peoples R China

Show more details

Version:

Related Keywords:

Source :

IEEE TRANSACTIONS ON KNOWLEDGE AND DATA ENGINEERING

ISSN: 1041-4347

Year: 2024

Issue: 11

Volume: 36

Page: 5661-5674

8 . 9 0 0

JCR@2023

Cited Count:

WoS CC Cited Count: 2

SCOPUS Cited Count: 2

ESI Highly Cited Papers on the List: 0 Unfold All

WanFang Cited Count:

Chinese Cited Count:

30 Days PV: 5

Online/Total:52/9417329
Address:FZU Library(No.2 Xuyuan Road, Fuzhou, Fujian, PRC Post Code:350116) Contact Us:0591-22865326
Copyright:FZU Library Technical Support:Beijing Aegean Software Co., Ltd. 闽ICP备05005463号-1