Securing Distributed Network Digital Twin Systems Against Model Poisoning Attacks

Fuente: arXiv
Guardado en:
Detalles Bibliográficos
Autores principales: Zhang, Zifan, Fang, Minghong, Chen, Mingzhe, Li, Gaolei, Lin, Xi, Liu, Yuchen
Formato: Preprint
Publicado: 2024
Materias:
Acceso en línea:
Etiquetas: Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
_version_ 1866913647256666112
author Zhang, Zifan
Fang, Minghong
Chen, Mingzhe
Li, Gaolei
Lin, Xi
Liu, Yuchen
author_facet Zhang, Zifan
Fang, Minghong
Chen, Mingzhe
Li, Gaolei
Lin, Xi
Liu, Yuchen
contents In the era of 5G and beyond, the increasing complexity of wireless networks necessitates innovative frameworks for efficient management and deployment. Digital twins (DTs), embodying real-time monitoring, predictive configurations, and enhanced decision-making capabilities, stand out as a promising solution in this context. Within a time-series data-driven framework that effectively maps wireless networks into digital counterparts, encapsulated by integrated vertical and horizontal twinning phases, this study investigates the security challenges in distributed network DT systems, which potentially undermine the reliability of subsequent network applications such as wireless traffic forecasting. Specifically, we consider a minimal-knowledge scenario for all attackers, in that they do not have access to network data and other specialized knowledge, yet can interact with previous iterations of server-level models. In this context, we spotlight a novel fake traffic injection attack designed to compromise a distributed network DT system for wireless traffic prediction. In response, we then propose a defense mechanism, termed global-local inconsistency detection (GLID), to counteract various model poisoning threats. GLID strategically removes abnormal model parameters that deviate beyond a particular percentile range, thereby fortifying the security of network twinning process. Through extensive experiments on real-world wireless traffic datasets, our experimental evaluations show that both our attack and defense strategies significantly outperform existing baselines, highlighting the importance of security measures in the design and implementation of DTs for 5G and beyond network systems.
format Preprint
id arxiv_https___arxiv_org_abs_2407_01917
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Securing Distributed Network Digital Twin Systems Against Model Poisoning Attacks
Zhang, Zifan
Fang, Minghong
Chen, Mingzhe
Li, Gaolei
Lin, Xi
Liu, Yuchen
Networking and Internet Architecture
Cryptography and Security
Distributed, Parallel, and Cluster Computing
In the era of 5G and beyond, the increasing complexity of wireless networks necessitates innovative frameworks for efficient management and deployment. Digital twins (DTs), embodying real-time monitoring, predictive configurations, and enhanced decision-making capabilities, stand out as a promising solution in this context. Within a time-series data-driven framework that effectively maps wireless networks into digital counterparts, encapsulated by integrated vertical and horizontal twinning phases, this study investigates the security challenges in distributed network DT systems, which potentially undermine the reliability of subsequent network applications such as wireless traffic forecasting. Specifically, we consider a minimal-knowledge scenario for all attackers, in that they do not have access to network data and other specialized knowledge, yet can interact with previous iterations of server-level models. In this context, we spotlight a novel fake traffic injection attack designed to compromise a distributed network DT system for wireless traffic prediction. In response, we then propose a defense mechanism, termed global-local inconsistency detection (GLID), to counteract various model poisoning threats. GLID strategically removes abnormal model parameters that deviate beyond a particular percentile range, thereby fortifying the security of network twinning process. Through extensive experiments on real-world wireless traffic datasets, our experimental evaluations show that both our attack and defense strategies significantly outperform existing baselines, highlighting the importance of security measures in the design and implementation of DTs for 5G and beyond network systems.
title Securing Distributed Network Digital Twin Systems Against Model Poisoning Attacks
topic Networking and Internet Architecture
Cryptography and Security
Distributed, Parallel, and Cluster Computing
url https://arxiv.org/abs/2407.01917