FedECPA:在基于区块链的联合学习中,针对基于扩展的模型中毒攻击的有效对策
Rukayat Olapojoye1, Tara Salman1, Mohamed Baza2
1Department of Computer Science, Texas Tech University, Lubbock, TX 79409, USA.
Sensors (Basel, Switzerland)
|October 29, 2025
概括
基于区块链的联合学习 (BFL) 易受扩大攻击的影响. 本研究介绍了FedECPA,这是一种有效的防御机制,可以保护BFL模型免受这些攻击,保持高精度.
科学领域:
- 人工智能的人工智能
- 机器学习 机器学习
- 区块链技术 区块链技术
- 物联网的物联网,就是物联网.
背景情况:
- 联合学习 (FL) 能够在物联网 (IoT) 数据上实现分布式机器学习 (ML),同时保持隐私.
- 基于区块链的联合学习 (BFL) 通过去中心化增强了FL,但引入了新的漏洞,特别是模型中毒攻击.
- 基于扩展的模型中毒攻击对BFL系统的完整性构成重大威胁.
研究的目的:
- 调查BFL系统对基于扩展的模型中毒攻击的脆弱性.
- 提出和评估FedECPA,这是一个有效的对抗措施,以对抗BFL的这些攻击.
- 与现有的防御机制相比,证明FedECPA的有效性.
主要方法:
- 在BFL环境中分析基于缩放模型的中毒攻击载体.
- 开发FedECPA,这是FedAvg算法的扩展,包含异常客户端检测.
- 使用MNIST和CIFAR-10数据集在各种攻击场景和数据分布 (IID和非IID) 下进行实验性评估.
- 对比FedECPA的性能与Multikrum防御机制的性能.
主要成果:
- BFL系统容易受到基于缩放的模型中毒攻击,降低模型性能.
- FedECPA有效地识别和过出有助于中毒攻击的客户.
- FedECPA显著超过基线和Multikrum,在MNIST (IID) 和89% (非IID) 上达到98%的准确性,分别超过基线4%和38%.
- 在CIFAR-10数据集上也观察到类似的性能增长.
结论:
- 在BFL中,FedECPA提供了对基于扩展的模型中毒攻击的强有力的防御.
- 拟议的方法提高了分散的联合学习系统的安全性和可靠性.
- 对于部署安全和准确的BFL应用程序,FedECPA提供了一个实用的解决方案.
相关概念视频
Strategies for Assessing and Addressing Confounding
356
Confounding is a critical issue in epidemiological studies, often leading to misleading conclusions about associations between exposures and outcomes. It occurs when the relationship between the exposure and the outcome is mixed with the effects of other factors that influence the outcome. Given that, addressing confounding is of high importance for drawing accurate inferences in research.
Confounding can be addressed at both the design phase of a study and through analytical methods after data...
Confounding can be addressed at both the design phase of a study and through analytical methods after data...
356
Model Approaches for Pharmacokinetic Data: Distributed Parameter Models
238
Pharmacokinetic models are mathematical constructs that represent and predict the time course of drug concentrations in the body, providing meaningful pharmacokinetic parameters. These models are categorized into compartment, physiological, and distributed parameter models.
The distributed parameter models are specifically designed to account for variations and differences in some drug classes. This model is particularly useful for assessing regional concentrations of anticancer or...
The distributed parameter models are specifically designed to account for variations and differences in some drug classes. This model is particularly useful for assessing regional concentrations of anticancer or...
238
Mechanistic Models: Compartment Models in Algorithms for Numerical Problem Solving
282
Mechanistic models play a crucial role in algorithms for numerical problem-solving, particularly in nonlinear mixed effects modeling (NMEM). These models aim to minimize specific objective functions by evaluating various parameter estimates, leading to the development of systematic algorithms. In some cases, linearization techniques approximate the model using linear equations.
In individual population analyses, different algorithms are employed, such as Cauchy's method, which uses a...
In individual population analyses, different algorithms are employed, such as Cauchy's method, which uses a...
282
Fast Decoupled and DC Powerflow
724
The fast decoupled power flow method addresses contingencies in power system operations, such as generator outages or transmission line failures. This method provides quick power flow solutions, essential for real-time system adjustments. Fast decoupled power flow algorithms simplify the Jacobian matrix by neglecting certain elements, leading to two sets of decoupled equations:
724
