Abstract:Differential privacy (DP) is widely used for protecting privacy in crowdsensing by adding noises. However, malicious attackers can exploit noise to launch covert data poisoning attacks. In this paper, we propose a game-based defense approach to resist such data poisoning attacks in DP-based crowdsensing systems. In this approach, attackers are believed to be powerful as they can refine their attack strategy based on the observations of deployed defenders' defense strategy. Specifically, the defenders formulate the defense as a functional minimization problem (which cannot be directly solved by numerical optimization algorithms because its decision variable is a set of functions), resisting data poisoning attacks by deleting data shared by identified malicious workers through the log-likelihood ratio test. To obtain a current defense strategy, the decision variable of the problem is relaxed into the coefficients of basis-based linear combinations through the variable-basis approximation, and then solved using the simulated annealing genetic algorithm. Correspondingly, the attackers formulate their attack strategy as a bi-level maximization problem (which is an NP-hard problem), biasing crowdsensing results as much as possible while remaining undetected. Since the attackers can know the defense strategy, they may bypass the defenders by constraining the expected log-likelihood ratio test. Additionally, the attackers can evade truth discovery methods deployed in crowdsensing using DP noise. To determine a current attack strategy, the bi-level problem is decomposed into upper-level and lower-level sub-problems, wherein the upper-level sub-problem is solved by the variational methods, and then these sub-problems are alternately optimized. Finally, we propose a local minimax points calculating algorithm to obtain an equilibrium point in the defenders-attackers game, thereby finding an optimal defense strategy to resist the powerful data poisoning attack. Extensive experiments on real-world and synthetic datasets show that the proposed game-based defense approach can effectively defend powerful and covert attackers.

Data Poisoning Attacks and Defenses in Dynamic Crowdsourcing with Online Data Quality Learning

Data Poisoning Attacks on Crowdsourcing Learning

Black-Box Data Poisoning Attacks on Crowdsourcing

Data Poisoning Attacks in Internet-of-Vehicle Networks: Taxonomy, State-of-The-Art, and Future Directions.

Data Poisoning Attacks and Defenses to LDP-based Privacy-Preserving Crowdsensing

Defending Data Poisoning Attacks in DP-Based Crowdsensing: A Game-Theoretic Approach

Attack under Disguise

Deep Reinforcement Learning for Partially Observable Data Poisoning Attack in Crowdsensing Systems.

Data Quality in Crowdsourcing and Spamming Behavior Detection

Socially Privacy-Preserving Data Collection for Crowdsensing

Disguised As Privacy: Data Poisoning Attacks Against Differentially Private Crowdsensing Systems

Leveraging Crowdsourcing for Efficient Malicious Users Detection in Large-Scale Social Networks

Garbage In, Garbage Out: Poisoning Attacks Disguised With Plausible Mobility in Data Aggregation

Crowd-Empowered Privacy-Preserving Data Aggregation for Mobile Crowdsensing.

Stronger Data Poisoning Attacks Break Data Sanitization Defenses

With Great Dispersion Comes Greater Resilience: Efficient Poisoning Attacks and Defenses for Linear Regression Models

Research on Data Poisoning Attack against Smart Grid Cyber–Physical System Based on Edge Computing

Online data poisoning attack against edge AI paradigm for IoT-enabled smart city

Malicious Crowdsourcing Worker Detection Using Privacy-Aware Group Queries.

An Online Learning Approach to Improving the Quality of Crowd-Sourcing

False Discovery Rate Control and Statistical Quality Assessment of Annotators in Crowdsourced Ranking