Abstract:Federated learning (FL) is an emerging distributed learning paradigm widely used in vehicular networks, where vehicles are enabled to train the deep model for the server while keeping private data locally. However, the annotation of private data by vehicular users is very difficult since the high costs and professional needs, and one solution is that roadside infrastructures could provide label mapping to the data according to the geographical coordinates. In this scenario where vehicles and roadside infrastructures hold the data and labels, respectively, traditional FL is not applicable since it needs each participant to have both data and labels. In this paper, we propose a federated split learning (FSL) paradigm that split the deep model into two submodels which are trained separately in the vehicles and the roadside infrastructures. The vehicles and the roadside infrastructures exchange the intermediate data (i.e., smashed data and cut layer gradients) in training local submodels and upload the local gradients to the global server for aggregation into the global model. Specifically, we first adopt three types of privacy attacks to demonstrate that attackers could recover the private data and labels according to the shared intermediate data and uploaded local gradients. We then propose a differential privacy (DP)-based defense mechanism to defend the privacy attacks by perturbing the intermediate data. Furthermore, we design a contract-based incentive mechanism that encourages vehicles and roadside infrastructures to enhance training performance by adjusting their privacy strategies. The simulation results illustrated that the proposed defense mechanism can remarkably emasculate the performance of attacks and the proposed incentive mechanism is efficient in the FSL paradigm for vehicular networks.

Federated Split Learning with Data and Label Privacy Preservation in Vehicular Networks

Privacy-Preserved Federated Learning for Autonomous Driving

Privacy protection in intelligent vehicle networking: A novel federated learning algorithm based on information fusion

Privacy-Preserving Federated Learning Against Label-Flipping Attacks on Non-IID Data

LFGurad: A defense against label flipping attack in federated learning for vehicular network

Model Partition and Resource Allocation for Split Learning in Vehicular Edge Networks

Beyond Model Splitting: Preventing Label Inference Attacks in Vertical Federated Learning with Dispersed Training

Blockchain-Based Federated Learning in Mobile Edge Networks with Application in Internet of Vehicles

Adaptive and Parallel Split Federated Learning in Vehicular Edge Computing

Blockchain-Enabled Federated Learning Approach for Vehicular Networks

Advancements of federated learning towards privacy preservation: from federated learning to split learning

Cascade Vertical Federated Learning Towards Straggler Mitigation and Label Privacy over Distributed Labels

Joint Top-K Sparsification and Shuffle Model for Communication-Privacy-Accuracy Tradeoffs in Federated Learning-Based IoV

Hierarchical Federated Learning: Architecture, Challenges, and Its Implementation in Vehicular Networks

Provable Defense against Privacy Leakage in Federated Learning from Representation Perspective

PPSFL: Privacy-Preserving Split Federated Learning for heterogeneous data in edge-based Internet of Things

OpenVFL: A Vertical Federated Learning Framework With Stronger Privacy-Preserving

Vulnerabilities of Data Protection in Vertical Federated Learning Training and Countermeasures

Mobility, Communication and Computation Aware Federated Learning for Internet of Vehicles

A Privacy-preserving Aggregation Scheme with Continuous Authentication for Federated Learning in VANETs

Mobility-Aware Federated Self-supervised Learning in Vehicular Network