Abstract:Federated learning (FL) has attracted widespread attention in the Internet of Things domain recently. With FL, multiple distributed devices can cooperatively train a global model by transmitting model updates without disclosing the original data. However, the distributed nature of FL makes it vulnerable to data poisoning attacks. In practice, malicious clients can launch the label-flipping attack (LFA) by simply tampering with the labels of local data, thus causing the global model to misclassify the samples of a selected class as the target class. Although some defense mechanisms have been proposed, they rely on specific assumptions about data distribution, and their performance degrades significantly when the data on clients are non-IID. Besides, most existing methods require clients to upload model updates in plaintext so that the server can identify and remove the malicious updates. But, direct transmission of model updates may still reveal private information. Considering these issues, we develop a label-flipping-robust and privacy-preserving FL (LFR-PPFL) algorithm, which is applicable to both independent and identically distributed (IID) and non-IID data. We first propose a detection method based on temporal analysis on cosine similarity to distinguish malicious clients from benign clients. Then, we propose a privacy-preserving computation protocol based on homomorphic encryption to implement this detection method and perform federated aggregation while protecting the privacy of clients. Besides, a detailed theoretical analysis is given to demonstrate the privacy guarantee of the proposed protocol. Experimental results on real-world data sets show that the proposed algorithm can effectively defend against LFAs under various data distributions.

VPFL: A Verifiable Property Federated Learning Framework Against Invisible Attacks in Distributed IoT

Privacy-Preserving Federated Learning Against Label-Flipping Attacks on Non-IID Data

A Framework for Evaluating Privacy-Utility Trade-off in Vertical Federated Learning

Enhancing Privacy in Distributed Intelligent Vehicles with Information Bottleneck Theory

SVFL: Secure Vertical Federated Learning on Linear Models.

Privacy-Preserving Federated Learning Framework Based on Chained Secure Multiparty Computing

PerVK: A Robust Personalized Federated Framework to Defend Against Backdoor Attacks for IoT Applications

OpenVFL: A Vertical Federated Learning Framework With Stronger Privacy-Preserving

Privacy and Robustness in Federated Learning: Attacks and Defenses

Vulnerabilities of Data Protection in Vertical Federated Learning Training and Countermeasures

Securing Federated Learning: A Covert Communication-based Approach

PVD-FL: A Privacy-Preserving and Verifiable Decentralized Federated Learning Framework

Secure Federated Learning Model Verification - A Client-side Backdoor Triggered Watermarking Scheme.

RPIFL: Reliable and Privacy-Preserving Federated Learning for the Internet of Things

Exploiting Unintended Property Leakage in Blockchain-Assisted Federated Learning for Intelligent Edge Computing

Backdoor Threats from Compromised Foundation Models to Federated Learning

BlindFL: Vertical Federated Machine Learning Without Peeking into Your Data

UIFV: Data Reconstruction Attack in Vertical Federated Learning

FLPM: A property modification scheme for data protection in federated learning

URVFL: Undetectable Data Reconstruction Attack on Vertical Federated Learning

Hijack Vertical Federated Learning Models As One Party