arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2006.08259cs.LGstat.ML
收藏

健壮的联邦推荐系统

Robust Federated Recommendation System

Zhejiang University(浙江大学);National University of Singapore(新加坡国立大学)

Chen Chen, Jingfeng Zhang, Anthony K. H. Tung, Mohan Kankanhalli, Gang Chen

摘要:

联邦推荐系统可以提供良好的性能,而不收集用户的私人数据,使他们有吸引力。但是,它们容易受到低成本的中毒攻击,从而降低其性能。在本文中,我们开发了一种新的联邦推荐技术,对拜占庭客户端盛行的中毒攻击是强大的。我们认为,拜占庭检测的关键是监测客户端的模型参数的梯度。然后,我们提出了一个强大的学习策略,而不是使用模型参数,中央服务器计算和利用梯度过滤拜占庭客户端。从理论上讲,我们证明我们的强大的学习策略,我们提出的拜占庭弹性的定义。从经验上讲,我们证实了我们的强大的学习策略,采用四个数据集在联邦推荐系统的有效性。

英文摘要:

Federated recommendation systems can provide good performance without collecting users' private data, making them attractive. However, they are susceptible to low-cost poisoning attacks that can degrade their performance. In this paper, we develop a novel federated recommendation technique that is robust against the poisoning attack where Byzantine clients prevail. We argue that the key to Byzantine detection is monitoring of gradients of the model parameters of clients. We then propose a robust learning strategy where instead of using model parameters, the central server computes and utilizes the gradients to filter out Byzantine clients. Theoretically, we justify our robust learning strategy by our proposed definition of Byzantine resilience. Empirically, we confirm the efficacy of our robust learning strategy employing four datasets in a federated recommendation system.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑