基于对比训练的联邦学习后门防御方法
Backdoor defense method in federated learning based on contrastive training
摘要
Abstract
In response to the inadequacy of existing defense methods for backdoor attacks in federated learning to effec-tively remove embedded backdoor features from models,while simultaneously reducing the accuracy of the primary task,a federated learning backdoor defense method called ContraFL was proposed,which utilized contrastive training to dis-rupt the clustering process of backdoor samples in the feature space,thereby rendering the global model classifications in federated learning independent of the backdoor trigger features.Specifically,on the server side,a trigger generation algo-rithm was developed to construct a generator pool to restore potential backdoor triggers in the training samples of the global model.Consequently,the trigger generator pool was distributed to the participants by the server,where each par-ticipant added the generated backdoor triggers to their local samples to achieve backdoor data augmentation.Experi-mental results demonstrate that ContraFL effectively defends against various backdoor attacks in federated learning,out-performing existing defense methods.关键词
联邦学习/后门攻击/对比训练/触发器/后门防御Key words
federated learning/backdoor attack/contrastive training/trigger/backdoor defense分类
信息技术与安全科学引用本文复制引用
张佳乐,朱诚诚,成翔,孙小兵,陈兵..基于对比训练的联邦学习后门防御方法[J].通信学报,2024,45(3):182-196,15.基金项目
国家自然科学基金资助项目(No.62206238) (No.62206238)
江苏省基础研究计划自然科学基金资助项目(No.BK20220562) (No.BK20220562)
江苏省高等学校基础科学(自然科学)研究基金资助项目(No.22KJB520010) (自然科学)
中国博士后科学基金资助项目(No.2023M732985) (No.2023M732985)
中国民航大学民航飞联网重点实验室开放基金资助项目(No.MHFLW202304) (No.MHFLW202304)
江苏省研究生科研创新计划基金资助项目(No.KYCX23_3534) The National Natural Science Foundation of China(No.62206238),The Basic Research Program Natural Science Foundation of Jiangsu Province(No.BK20220562),The Natural Science Foundation of Jiangsu Higher Education Institutions(No.22KJB520010),The China Postdoctoral Science Foundation(No.2023M732985),The Open Fund for the Key Laboratory of Flying Internet at Civil Aviation University of China(No.MHFLW202304),The Postgraduate Research and Practice Innovation Program of Jiangsu Province(No.KYCX23_3534) (No.KYCX23_3534)