Abstract:Federated learning (FL) is a distributed machine learning paradigm in the Internet of Things (IoT), which allows multiple devices to collaboratively train models without leaking local data. In the open scenario of IoT, malicious devices can launch poisoning attacks to compromise the final model by submitting crafted gradients. Some previous studies defend against poisoning attacks by analyzing the statistical characteristics of plaintext gradients. However, plaintext gradients would expose private information to malicious FL devices or servers. To simultaneously resist poisoning attacks and preserve privacy, cryptography technology can be utilized to obfuscate the gradients in defense methods, but the private calculation of resisting poisoning attack methods will cause efficiency problems, especially imposing unaffordable overhead on resource-limited IoT devices. Therefore, resisting poisoning attacks efficiently while protecting privacy remains a challenge. This paper proposes a secure and privacy-enhanced FL (SPEFL) framework for efficient privacy-preserving and poisoning-resistant federated learning in IoT. We design an efficient secure computation protocol based on a three-server architecture to facilitate the cryptographic computation of large linear and complex nonlinear operators in the method against poisoning attacks. In SPEFL, most of the calculations are efficiently performed on the servers, which will not impose too much burden on resource-limited IoT devices. In addition, we design a security-enhanced verifiable protocol to detect the malicious behavior of the server and guarantee the correctness of FL aggregation results. Experimental and theoretical results demonstrate that SPEFL can efficiently complete FL training meanwhile guaranteeing the accuracy of the model.

ApaPRFL: Robust Privacy-Preserving Federated Learning Scheme Against Poisoning Adversaries for Intelligent Devices Using Edge Computing

Towards robust and privacy-preserving federated learning in edge computing

APFed: Anti-Poisoning Attacks in Privacy-Preserving Heterogeneous Federated Learning.

A Differentially Private Federated Learning Model Against Poisoning Attacks in Edge Computing

FLPP: A Federated-Learning-Based Scheme for Privacy Protection in Mobile Edge Computing

SPEFL: Efficient Security and Privacy Enhanced Federated Learning Against Poisoning Attacks

RFLPA: A Robust Federated Learning Framework against Poisoning Attacks with Secure Aggregation

Robust and privacy-preserving federated learning with distributed additive encryption against poisoning attacks

Efficiently Achieving Privacy Preservation and Poisoning Attack Resistance in Federated Learning

Ubiquitous Intelligent Federated Learning Privacy-Preserving Scheme under Edge Computing

Efficient and Privacy-Preserving Federated Learning Against Poisoning Adversaries

Privacy-Preserving Federated Learning for Internet of Medical Things Under Edge Computing

PROFL: A Privacy-Preserving Federated Learning Method with Stringent Defense Against Poisoning Attacks

RFed: Robustness-Enhanced Privacy-Preserving Federated Learning Against Poisoning Attack

An Efficient and Dynamic Privacy-Preserving Federated Learning System for Edge Computing

VPFL: A verifiable privacy-preserving federated learning scheme for edge computing systems

Secure Decentralized Aggregation to Prevent Membership Privacy Leakage in Edge-based Federated Learning

DPFLA: Defending Private Federated Learning Against Poisoning Attacks

Pocket Diagnosis: Secure Federated Learning against Poisoning Attack in the Cloud

DLDP-FL: Dynamic local differential privacy federated learning method based on mesh network edge devices