Abstract:In Internet of Things (IoT) applications, federated learning is commonly used for distributedly training models in a privacy-preserving manner. Recently, federated learning is broadly applied to autonomous driving for training intelligent decision models without disseminating local data remotely. Although federated learning provides a safer training manner for protecting data privacy in autonomous driving, the model training process is still vulnerable to poisoning attacks from vehicle client ends. It is beneficial to study poisoning attacks for enhancing the robustness of the training process to generate reliable decisions for safe driving. Until now, a few researches on poisoning attacks against classification models under federated learning scenarios have been proposed. However, those poisoning attacks against classification tasks cannot be directly applied to regression tasks in a federated learning framework, especially autonomous driving tasks such as steering angle control and brake control. The biggest challenge is that the output of non-linear regression models in federated learning is a dynamic sequential value decided by an online updated non-linear function. Thus, minor attacks can affect the overall non-linear function inference outputs leading to a failed stealthy attack. Based on existing challenges, this paper proposes an ATTack against Federated Learning based Autonomous Vehicle framework(ATT_FLAV) to evaluate and enhance the robustness of the federated learning-based autonomous driving models and take the steering angle control task as a representative non-linear regression task to illustrate the methodology. In the proposed framework, a bandit-based AttackRegion-UCB (AR-UCB) algorithm is designed for dynamic data poisoning attacks against the non-linear regression model. This is a black-box attack strategy that chooses the target attack label region dynamically in each federated learning round based on historical attack experiences. Compared with the attack performance of baseline poisoning attacks and the robustness under defense schemas, the proposed poisoning attack strategy can achieve superior attack performance via continuous data poisoning attacks against the federated learning framework.

Federated Learning based on Defending Against Data Poisoning Attacks in IoT

Dependable Federated Learning for IoT Intrusion Detection Against Poisoning Attacks

FDSFL: Filtering Defense Strategies Toward Targeted Poisoning Attacks in IIoT-Based Federated Learning Networking System.

Privacy-Preserving Federated Learning Against Label-Flipping Attacks on Non-IID Data

Clean-label Poisoning Attacks on Federated Learning for IoT

Defending Against Data Poisoning Attack in Federated Learning With Non-IID Data

Depriving the Survival Space of Adversaries Against Poisoned Gradients in Federated Learning

FL-PTD: A Privacy Preserving Defense Strategy Against Poisoning Attacks in Federated Learning.

A Blockchain-based Federated Learning Framework for Defending Against Poisoning Attacks in IIOT

Defending Against Data Poisoning Attacks: from Distributed Learning to Federated Learning

Data Poisoning Attacks Against Federated Learning Systems

Poisoning Attacks on Federated Learning for Autonomous Driving

Data Poisoning Attacks on Federated Machine Learning

Federated Learning in Adversarial Environments: Testbed Design and Poisoning Resilience in Cybersecurity

Multitentacle Federated Learning Over Software-Defined Industrial Internet of Things Against Adaptive Poisoning Attacks

SPEFL: Efficient Security and Privacy Enhanced Federated Learning Against Poisoning Attacks

Bandit-based Data Poisoning Attack Against Federated Learning for Autonomous Driving Models.

DefendFL: A Privacy-Preserving Federated Learning Scheme Against Poisoning Attacks

Defending Against Poisoning Attacks in Federated Learning with Blockchain

FLDetector: Defending Federated Learning Against Model Poisoning Attacks via Detecting Malicious Clients

Formal Logic-guided Robust Federated Learning against Poisoning Attacks