Federated Learning (FL) as a secure distributed learning frame gains interest in Internet of Things (IoT) due to its capability of protecting private data of participants. However, traditional FL systems are vulnerable to attacks such as Free-Rider (FR) attack, which causes not only unfairness but also privacy leakage and inferior performance to FL systems. The existing defense mechanisms against FR attacks only concern the scenarios where the adversaries declare less than 50% of the total amount of clients. Moreover, they lose effectiveness in resisting selfish FR (SFR) attacks. In this paper, we propose a Parameter Audit-based Secure and fair federated learning Scheme (PASS) against FR attacks. The PASS has the following key features: (a) works well in the scenario where adversaries are more than 50% of the total amount of clients; (b) is effective in countering anonymous FR attacks and SFR attacks; (c) prevents from privacy leakage without accuracy loss. Extensive experimental results verify the data protecting capability in mean square error against privacy leakage and reveal the effectiveness of PASS in terms of a higher defense success rate and lower false positive rate against anonymous SFR attacks. Note in addition, PASS produces no effect on FL accuracy when there is no FR adversary.
翻译:联邦学习联合会(FL)作为安全的分布式学习框架,由于有能力保护参与者的私人数据,因此对物联网(IoT)的兴趣增加,然而,传统的FL系统很容易受到攻击,例如Free-rider(Frider)攻击,这不仅造成不公平,而且造成隐私渗漏,使FL系统业绩低下。目前针对FR攻击的防御机制仅涉及对手申报不到客户总数的50%的隐私渗漏情况;此外,他们在抵制自私FR(SFR)攻击中丧失了效力;在本文中,我们提议针对FR攻击采取基于参数的基于审计的安全和公正的联合学习计划(PASS)。PASS具有以下关键特征:(a) 在对手占客户总数的50%以上的情况下运作良好;(b) 有效打击匿名的FR攻击和SFR攻击;(c) 防止隐私渗漏而不造成准确性损失。广泛的实验结果证实PASS在防止隐私渗漏方面有中隐性错误的数据保护能力,并揭示PAS在更高的防御成功率和降低对匿名SFR攻击的虚假积极率方面的有效性。