Abstract:Federated learning (FL) has attracted widespread attention in the Internet of Things domain recently. With FL, multiple distributed devices can cooperatively train a global model by transmitting model updates without disclosing the original data. However, the distributed nature of FL makes it vulnerable to data poisoning attacks. In practice, malicious clients can launch the label-flipping attack (LFA) by simply tampering with the labels of local data, thus causing the global model to misclassify the samples of a selected class as the target class. Although some defense mechanisms have been proposed, they rely on specific assumptions about data distribution, and their performance degrades significantly when the data on clients are non-IID. Besides, most existing methods require clients to upload model updates in plaintext so that the server can identify and remove the malicious updates. But, direct transmission of model updates may still reveal private information. Considering these issues, we develop a label-flipping-robust and privacy-preserving FL (LFR-PPFL) algorithm, which is applicable to both independent and identically distributed (IID) and non-IID data. We first propose a detection method based on temporal analysis on cosine similarity to distinguish malicious clients from benign clients. Then, we propose a privacy-preserving computation protocol based on homomorphic encryption to implement this detection method and perform federated aggregation while protecting the privacy of clients. Besides, a detailed theoretical analysis is given to demonstrate the privacy guarantee of the proposed protocol. Experimental results on real-world data sets show that the proposed algorithm can effectively defend against LFAs under various data distributions.

Privacy-preserving Data Selection for Horizontal and Vertical Federated Learning

Sample-level Data Selection for Federated Learning.

Efficient and Privacy-Preserving Feature Importance-based Vertical Federated Learning

Performance-Enhanced Federated Learning with Differential Privacy for Internet of Things

FedSDG-FS: Efficient and Secure Feature Selection for Vertical Federated Learning

Privacy-Preserving Federated Learning Against Label-Flipping Attacks on Non-IID Data

Client Selection in Federated Learning: Principles, Challenges, and Opportunities

Hierarchical federated learning with global differential privacy

OpenVFL: A Vertical Federated Learning Framework With Stronger Privacy-Preserving

A Hybrid Self-Supervised Learning Framework for Vertical Federated Learning

Federated Feature Selection for Horizontal Federated Learning in IoT Networks

Vertical Federated Learning without Revealing Intersection Membership

Efficient Vertical Federated Learning with Secure Aggregation

Federated Learning with Personalized Differential Privacy Combining Client Selection

Privacy-Preserving Federated Learning with Differentially Private Hyperdimensional Computing

Adaptive and Efficient Participant Selection in Vertical Federated Learning

A Communication-efficient Federated Learning Assisted by Central Data: Implementation of Vertical Training into Horizontal Federated Learning

FedV: Privacy-Preserving Federated Learning over Vertically Partitioned Data

Privacy preserving federated learning for full heterogeneity

Federated Select: A Primitive for Communication- and Memory-Efficient Federated Learning