Defending Against Poisoning Attacks in Federated Learning with Blockchain

Fuente: arXiv
Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Dong, Nanqing, Wang, Zhipeng, Sun, Jiahao, Kampffmeyer, Michael, Knottenbelt, William, Xing, Eric
Format: Preprint
Veröffentlicht: 2023
Schlagworte:
Online-Zugang:
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
_version_ 1866916156132032512
author Dong, Nanqing
Wang, Zhipeng
Sun, Jiahao
Kampffmeyer, Michael
Knottenbelt, William
Xing, Eric
author_facet Dong, Nanqing
Wang, Zhipeng
Sun, Jiahao
Kampffmeyer, Michael
Knottenbelt, William
Xing, Eric
contents In the era of deep learning, federated learning (FL) presents a promising approach that allows multi-institutional data owners, or clients, to collaboratively train machine learning models without compromising data privacy. However, most existing FL approaches rely on a centralized server for global model aggregation, leading to a single point of failure. This makes the system vulnerable to malicious attacks when dealing with dishonest clients. In this work, we address this problem by proposing a secure and reliable FL system based on blockchain and distributed ledger technology. Our system incorporates a peer-to-peer voting mechanism and a reward-and-slash mechanism, which are powered by on-chain smart contracts, to detect and deter malicious behaviors. Both theoretical and empirical analyses are presented to demonstrate the effectiveness of the proposed approach, showing that our framework is robust against malicious client-side behaviors.
format Preprint
id arxiv_https___arxiv_org_abs_2307_00543
institution arXiv
publishDate 2023
record_format arxiv
spellingShingle Defending Against Poisoning Attacks in Federated Learning with Blockchain
Dong, Nanqing
Wang, Zhipeng
Sun, Jiahao
Kampffmeyer, Michael
Knottenbelt, William
Xing, Eric
Machine Learning
Artificial Intelligence
Cryptography and Security
Computer Science and Game Theory
In the era of deep learning, federated learning (FL) presents a promising approach that allows multi-institutional data owners, or clients, to collaboratively train machine learning models without compromising data privacy. However, most existing FL approaches rely on a centralized server for global model aggregation, leading to a single point of failure. This makes the system vulnerable to malicious attacks when dealing with dishonest clients. In this work, we address this problem by proposing a secure and reliable FL system based on blockchain and distributed ledger technology. Our system incorporates a peer-to-peer voting mechanism and a reward-and-slash mechanism, which are powered by on-chain smart contracts, to detect and deter malicious behaviors. Both theoretical and empirical analyses are presented to demonstrate the effectiveness of the proposed approach, showing that our framework is robust against malicious client-side behaviors.
title Defending Against Poisoning Attacks in Federated Learning with Blockchain
topic Machine Learning
Artificial Intelligence
Cryptography and Security
Computer Science and Game Theory
url https://arxiv.org/abs/2307.00543