arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2209.04418cs.LGcs.CRcs.NIeess.SP

通过区块链实现可信联邦学习

Trustworthy Federated Learning via Blockchain

School of Information Science and Technology, ShanghaiTech University(上海科技大学信息科学与技术学院);JD Technology Group(京东科技集团)

Zhanpeng Yang, Yuanming Shi, Yong Zhou, Zixin Wang, Kai Yang

AI总结:

针对联邦学习面临的恶意设备与服务器攻击,论文提出区块链赋能的B-FL架构,并用深度强化学习优化带宽和功率分配以降低训练时延。

摘要:

人工智能(AI)的安全关键场景,例如自动驾驶、物联网、智慧医疗等,对可信AI提出了严格要求,以在可靠决策下保障隐私和安全。作为可信AI的新兴分支,联邦学习(FL)被视为一种有前景的隐私保护框架,可在协作设备上训练全局AI模型。然而,FL框架中仍然存在安全挑战,例如来自恶意设备的Byzantine攻击,以及来自恶意服务器的模型篡改攻击,这些攻击会降低或破坏所训练全局AI模型的准确性。本文中,我们提出一种去中心化的基于区块链的FL(B-FL)架构:使用安全的全局聚合算法抵御恶意设备,并在多个边缘服务器之间部署高效且低能耗的实用Byzantine容错共识协议,以防止来自恶意服务器的模型篡改。然而,要在网络边缘实现B-FL系统,区块链共识协议中的多轮交叉验证会导致较长的训练时延。因此,我们构建了一个联合考虑带宽和功率分配的网络优化问题,以最小化由渐进学习轮次组成的长期平均训练时延。我们进一步提出将该网络优化问题转化为Markov决策过程,并利用基于深度强化学习的算法,以较低计算复杂度提供较高系统性能。仿真结果表明,B-FL能够抵御来自边缘设备和服务器的恶意攻击,并且与基线算法相比,基于深度强化学习的算法可显著降低B-FL的训练时延。

英文摘要:

The safety-critical scenarios of artificial intelligence (AI), such as autonomous driving, Internet of Things, smart healthcare, etc., have raised critical requirements of trustworthy AI to guarantee the privacy and security with reliable decisions. As a nascent branch for trustworthy AI, federated learning (FL) has been regarded as a promising privacy preserving framework for training a global AI model over collaborative devices. However, security challenges still exist in the FL framework, e.g., Byzantine attacks from malicious devices, and model tampering attacks from malicious server, which will degrade or destroy the accuracy of trained global AI model. In this paper, we shall propose a decentralized blockchain based FL (B-FL) architecture by using a secure global aggregation algorithm to resist malicious devices, and deploying practical Byzantine fault tolerance consensus protocol with high effectiveness and low energy consumption among multiple edge servers to prevent model tampering from the malicious server. However, to implement B-FL system at the network edge, multiple rounds of cross-validation in blockchain consensus protocol will induce long training latency. We thus formulate a network optimization problem that jointly considers bandwidth and power allocation for the minimization of long-term average training latency consisting of progressive learning rounds. We further propose to transform the network optimization problem as a Markov decision process and leverage the deep reinforcement learning based algorithm to provide high system performance with low computational complexity. Simulation results demonstrate that B-FL can resist malicious attacks from edge devices and servers, and the training latency of B-FL can be significantly reduced by deep reinforcement learning based algorithm compared with baseline algorithms.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑