计算机研究与发展2024,Vol.61Issue(10) :2607-2626.DOI:10.7544/issn1000-1239.202440487

基于联邦学习的后门攻击与防御算法综述

Survey of Backdoor Attack and Defense Algorithms Based on Federated Learning

刘嘉浪 郭延明 老明瑞 于天元 武与伦 冯云浩 吴嘉壮
计算机研究与发展2024,Vol.61Issue(10) :2607-2626.DOI:10.7544/issn1000-1239.202440487

基于联邦学习的后门攻击与防御算法综述

Survey of Backdoor Attack and Defense Algorithms Based on Federated Learning

刘嘉浪 1郭延明 1老明瑞 1于天元 1武与伦 1冯云浩 1吴嘉壮1
扫码查看

作者信息

  • 1. 大数据与决策实验室(国防科技大学) 长沙 410000
  • 折叠

摘要

联邦学习旨在解决数据隐私和数据安全问题,大量客户端在本地进行分布式训练后,中央服务器再聚合各本地客户端提供的模型参数更新,但中央服务器无法看到这些参数的具体更新过程,这种特性会带来严重的安全问题,即恶意参与者可以在本地模型中训练中毒模型并上传参数,再在全局模型中引入后门功能.关注于联邦学习特有场景下的安全性和鲁棒性研究,即后门攻击与防御,总结了联邦学习下产生后门攻击的场景,并归纳了联邦学习下后门攻击和防御的最新方法,对各种攻击和防御方法的性能进行了比较和分析,揭示了其优势和局限.最后,指出了联邦学习下后门攻击和防御的各种潜在方向和新的挑战.

Abstract

Federated learning is designed for data privacy and data security issues,after a large number of clients are trained locally in a distributed manner,the central server then aggregates the model parameter updates provided by each local client,but the central server is unable to see how these parameters are updated,and this feature creates a serious security issue,i.e.,a malicious participant can train a poisoned model and upload the parameters in the local model,and then globally model to introduce backdoor features.In this paper,we focus on the security and robustness research under the scenarios specific to federated learning,i.e.,backdoor attack and defense,summarize the scenarios that generate backdoor attacks under federated learning,summarize the latest methods of backdoor attack and defense under federated learning,and compare and analyze the performance of the various attack and defense methods,revealing their advantages and limitations.Finally,we point out various potential directions and new challenges for backdoor attacks and defenses under federated learning.

关键词

联邦学习/后门攻击/后门防御/数据隐私/数据安全

Key words

federated learning/backdoor attack/backdoor defense/data privacy/data security

引用本文复制引用

出版年

2024
计算机研究与发展
中国科学院计算技术研究所 中国计算机学会

计算机研究与发展

CSTPCDCSCD北大核心
影响因子:2.649
ISSN:1000-1239
参考文献量5
段落导航相关论文