Abstract:In distributed systems, data may partially overlap in sample and feature spaces, that is, horizontal and vertical data partitioning. By combining horizontal and vertical federated learning (FL), hybrid FL emerges as a promising solution to simultaneously deal with data overlapping in both sample and feature spaces. Due to its decentralized nature, hybrid FL is vulnerable to model poisoning attacks, where malicious devices corrupt the global model by sending crafted model updates to the server. Existing work usually analyzes the statistical characteristics of all updates to resist model poisoning attacks. However, training local models in hybrid FL requires additional communication and computation steps, increasing the detection cost. In addition, due to data diversity in hybrid FL, solutions based on the assumption that malicious models are distinct from honest models may incorrectly classify honest ones as malicious, resulting in low accuracy. To this end, we propose a secure and efficient hybrid FL against model poisoning attacks. Specifically, we first identify two attacks to define how attackers manipulate local models in a harmful yet covert way. Then, we analyze the execution time and energy consumption in hybrid FL. Based on the analysis, we formulate an optimization problem to minimize training costs while guaranteeing accuracy considering the effect of attacks. To solve the formulated problem, we transform it into a Markov decision process and model it as a multiagent reinforcement learning (MARL) problem. Then, we propose a malicious device detection (MDD) method based on MARL to select honest devices to participate in training and improve efficiency. In addition, we propose an alternative poisoned model detection (PMD) method considering model change consistency. This method aims to prevent poisoned models from being used in the model aggregation. Experimental results validate that under the random local model poisoning attack, the proposed MDD method can save over 50% training costs while guaranteeing accuracy. When facing the advanced adaptive local model poisoning (ALMP) attack, utilizing both the proposed MDD and PMD methods achieves the desired accuracy while reducing execution time and energy consumption.

Multitentacle Federated Learning Over Software-Defined Industrial Internet of Things Against Adaptive Poisoning Attacks

FDSFL: Filtering Defense Strategies Toward Targeted Poisoning Attacks in IIoT-Based Federated Learning Networking System.

Data Poisoning Attacks on Federated Machine Learning

Federated Learning based on Defending Against Data Poisoning Attacks in IoT

Leveraging MTD to Mitigate Poisoning Attacks in Decentralized FL with Non-IID Data

Dependable Federated Learning for IoT Intrusion Detection Against Poisoning Attacks

Clean-label Poisoning Attacks on Federated Learning for IoT

SCA: Sybil-Based Collusion Attacks of IIoT Data Poisoning in Federated Learning

A Blockchain-based Federated Learning Framework for Defending Against Poisoning Attacks in IIOT

SPEFL: Efficient Security and Privacy Enhanced Federated Learning Against Poisoning Attacks

Poisoning Attacks in Federated Edge Learning for Digital Twin 6G-enabled IoTs: An Anticipatory Study

Depriving the Survival Space of Adversaries Against Poisoned Gradients in Federated Learning

Defending Against Data Poisoning Attack in Federated Learning With Non-IID Data

Defending Against Data Poisoning Attacks: from Distributed Learning to Federated Learning

Federated Learning in Adversarial Environments: Testbed Design and Poisoning Resilience in Cybersecurity

FL-PTD: A Privacy Preserving Defense Strategy Against Poisoning Attacks in Federated Learning.

SBPA: Sybil-Based Backdoor Poisoning Attacks for Distributed Big Data in AIoT-Based Federated Learning System

Fed-LSAE: Thwarting Poisoning Attacks against Federated Cyber Threat Detection System via Autoencoder-based Latent Space Inspection

FLEAM: A Federated Learning Empowered Architecture to Mitigate DDoS in Industrial IoT

Data Poisoning Attacks Against Federated Learning Systems

Secure and Efficient Federated Learning Against Model Poisoning Attacks in Horizontal and Vertical Data Partitioning