arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2603.04422cs.LGcs.AIcs.CEcs.DC
收藏

FedEMA-Distill: 基于指数移动平均的知识蒸馏用于鲁棒联邦学习

FedEMA-Distill: Exponential Moving Average Guided Knowledge Distillation for Robust Federated Learning

Department of Science and Technology, TÉLUQ, University of Quebec(科学与技术系,TÉLUQ,魁北克大学);Higher School of Technology, Hassan II University(技术高等学院,哈桑二世大学)

Hamza Reguieg, Mohamed El Kamili, Essaid Sabir

AI总结:

FedEMA-Distill通过结合指数移动平均与日志its聚合,提升联邦学习的鲁棒性和通信效率,减少通信开销并增强对抗性攻击下的稳定性。

摘要:

联邦学习(FL)在客户端持有异质非独立同分布(非IID)数据以及某些客户端行为对抗性时往往会退化,导致客户端漂移、收敛缓慢和通信开销高。本文提出了FedEMA-Distill,一种服务器端过程,结合了全局模型的指数移动平均(EMA)与从客户端上传的预测日志its在小公共代理数据集上的集合知识蒸馏。客户端运行标准本地训练,仅上传压缩的日志its,并可能使用不同的模型架构,因此无需更改客户端软件即可支持设备间的模型异质性。在CIFAR-10、CIFAR-100、FEMNIST和AG News数据集上进行实验,结果显示FedEMA-Distill在代表性的基线方法上将top-1准确率提高了几个百分点(在CIFAR-10上最高提高+5%,在CIFAR-100上最高提高+6%),在30-35%更少的通信轮次内达到目标准确率,并将每轮客户端上行数据量减少到0.09-0.46 MB,即大约比传输完整模型权重少一个数量级。在服务器上使用坐标-wise中位数或修剪均值聚合日志its进一步在存在10-20%拜占庭客户端的情况下稳定了训练,并在攻击下产生良好的校准预测。这些结果表明,将时间平滑与日志its-only聚合相结合提供了一种通信高效且抗攻击的FL流程,该流程易于部署且与安全聚合和差分隐私兼容,因为仅交换聚合或混淆的模型输出。

英文摘要:

Federated learning (FL) often degrades when clients hold heterogeneous non-Independent and Identically Distributed (non-IID) data and when some clients behave adversarially, leading to client drift, slow convergence, and high communication overhead. This paper proposes FedEMA-Distill, a server-side procedure that combines an exponential moving average (EMA) of the global model with ensemble knowledge distillation from client-uploaded prediction logits evaluated on a small public proxy dataset. Clients run standard local training, upload only compressed logits, and may use different model architectures, so no changes are required to client-side software while still supporting model heterogeneity across devices. Experiments on CIFAR-10, CIFAR-100, FEMNIST, and AG News under Dirichlet-0.1 label skew show that FedEMA-Distill improves top-1 accuracy by several percentage points (up to +5% on CIFAR-10 and +6% on CIFAR-100) over representative baselines, reaches a given target accuracy in 30-35% fewer communication rounds, and reduces per-round client uplink payloads to 0.09-0.46 MB, i.e., roughly an order of magnitude less than transmitting full model weights. Using coordinate-wise median or trimmed-mean aggregation of logits at the server further stabilizes training in the presence of up to 10-20% Byzantine clients and yields well-calibrated predictions under attack. These results indicate that coupling temporal smoothing with logits-only aggregation provides a communication-efficient and attack-resilient FL pipeline that is deployment-friendly and compatible with secure aggregation and differential privacy, since only aggregated or obfuscated model outputs are exchanged.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑