Abstract:Federated learning (FL) is a distributed machine learning paradigm in the Internet of Things (IoT), which allows multiple devices to collaboratively train models without leaking local data. In the open scenario of IoT, malicious devices can launch poisoning attacks to compromise the final model by submitting crafted gradients. Some previous studies defend against poisoning attacks by analyzing the statistical characteristics of plaintext gradients. However, plaintext gradients would expose private information to malicious FL devices or servers. To simultaneously resist poisoning attacks and preserve privacy, cryptography technology can be utilized to obfuscate the gradients in defense methods, but the private calculation of resisting poisoning attack methods will cause efficiency problems, especially imposing unaffordable overhead on resource-limited IoT devices. Therefore, resisting poisoning attacks efficiently while protecting privacy remains a challenge. This paper proposes a secure and privacy-enhanced FL (SPEFL) framework for efficient privacy-preserving and poisoning-resistant federated learning in IoT. We design an efficient secure computation protocol based on a three-server architecture to facilitate the cryptographic computation of large linear and complex nonlinear operators in the method against poisoning attacks. In SPEFL, most of the calculations are efficiently performed on the servers, which will not impose too much burden on resource-limited IoT devices. In addition, we design a security-enhanced verifiable protocol to detect the malicious behavior of the server and guarantee the correctness of FL aggregation results. Experimental and theoretical results demonstrate that SPEFL can efficiently complete FL training meanwhile guaranteeing the accuracy of the model.

A Differentially Private Federated Learning Model Against Poisoning Attacks in Edge Computing

APFed: Anti-Poisoning Attacks in Privacy-Preserving Heterogeneous Federated Learning.

Towards robust and privacy-preserving federated learning in edge computing

Efficient and Privacy-Preserving Federated Learning Against Poisoning Adversaries

DP-Poison: Poisoning Federated Learning under the Cover of Differential Privacy

Efficiently Achieving Privacy Preservation and Poisoning Attack Resistance in Federated Learning

FL-PTD: A Privacy Preserving Defense Strategy Against Poisoning Attacks in Federated Learning.

RFed: Robustness-Enhanced Privacy-Preserving Federated Learning Against Poisoning Attack

ApaPRFL: Robust Privacy-Preserving Federated Learning Scheme Against Poisoning Adversaries for Intelligent Devices Using Edge Computing

PPFL-IDS: Privacy-Preserving Federated Learning Based IDS Against Poisoning Attacks

Model Poisoning Attack in Differential Privacy-Based Federated Learning

Data Poisoning Attack Based on Privacy Reasoning and Countermeasure in Federated Learning

Pocket Diagnosis: Secure Federated Learning against Poisoning Attack in the Cloud

Challenges and Countermeasures of Federated Learning Data Poisoning Attack Situation Prediction

Deep Model Poisoning Attack on Federated Learning

DPFLA: Defending Private Federated Learning Against Poisoning Attacks

Asynchronous Federated Learning with Differential Privacy for Edge Intelligence

FedCC: Robust Federated Learning against Model Poisoning Attacks

SPEFL: Efficient Security and Privacy Enhanced Federated Learning Against Poisoning Attacks

DefendFL: A Privacy-Preserving Federated Learning Scheme Against Poisoning Attacks

Data Poisoning Attacks on Federated Machine Learning