Back to the articles list | Back to browse issues page

XML Print

Federated Learning Trustworthiness against Label Flipping in Complex Intelligent Environments
Mohammad Ali Zamani1 , Fatemeh Amiri2 , Nasser Yazdani3
1- Electrical and Computer Engineering Faculty University of Tehran Tehran, Iran
2- Department of Computer Engineering Hamedan University of Technology Hamedan, Iran
3- Electrical and Computer Engineering University of Tehran Tehran, Iran , yazdani@ut.ac.ir
Abstract:   (17 Views)
A decentralized method of machine learning, federated learning (FL) enables several clients to work together to train models without disclosing their raw data. However, because of its openness, it is also susceptible to poisoning assaults, especially label-flipping (LF), in which harmful clients alter training labels to taint the global model. Such effort drifts the model in a way that the model performance dwindles in specific attack-related classes while behaving the same as benign clients for other classes to increase complexity for detecting solutions. We combat this by using a defense mechanism that dynamically modifies trust factors to filter out malicious updates based on last-layer gradient similarity. By assessing the defense across a variety of datasets and more complex adversarial scenarios, such as multi-group attacks with different intensities, this study builds on earlier studies.  According to experimental data, the method maintains accuracy within a proper level of the clean model while drastically reducing the impact of label-flipping, cutting the attack success rate by 50%.  These results demonstrate how important it is to have adaptive security measures in place to protect FL models in hostile and changing contexts.
Keywords: Federated Learning, Machine learning robustness, Label-flipping attacks, Targeted poisoning attacks, complex intelligent agents.
Full-Text [PDF 1512 kb]   (7 Downloads)    
Type of Study: Research | Subject: Information Technology
Add your comments about this article : Your username or Email:
CAPTCHA
Send email to the article author

Rights and permissions
Creative Commons License This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.