Privacy Preservation for Federated Learning with Robust Aggregation in Edge Computing

Liu, Wentao and Xu, Xiaolong and Li, Dejuan and Qi, Lianyong and Dai, Fei and Dou, Wanchun and Ni, Qiang (2023) Privacy Preservation for Federated Learning with Robust Aggregation in Edge Computing. IEEE Internet of Things Journal, 10 (8). pp. 7343-7355. ISSN 2327-4662

Text (Privacy Preservation for Federated Learning with Robust Aggregation in Edge Computing)
Privacy_Preservation_for_Federated_Learning_with_Robust_Aggregation_in_Edge_Computing.pdf - Accepted Version
Available under License Creative Commons Attribution-NonCommercial.
Download (659kB)

Abstract

Benefiting from the powerful data analysis and prediction capabilities of artificial intelligence (AI), the data on the edge is often transferred to the cloud center for centralized training to obtain an accurate model. To resist the risk of privacy leakage due to frequent data transmission between the edge and the cloud, federated learning (FL) is engaged in the edge paradigm, uploading the model updated on the edge server (ES) to the central server for aggregation, instead of transferring data directly. However, the adversarial ES can infer the update of other ESs from the aggregated model and the update may still expose some characteristics of data of other ESs. Besides, there is a certain probability that the entire aggregation is disrupted by the adversarial ESs through uploading a malicious update. In this paper, a privacy-preserving FL scheme with robust aggregation in edge computing is proposed, named FL-RAEC. First, the hybrid privacy-preserving mechanism is constructed to preserve the integrity and privacy of the data uploaded by the ESs. For the robust model aggregation, a phased aggregation strategy is proposed. Specifically, anomaly detection based on autoencoder is performed while some ESs are selected for anonymous trust verification at the beginning. In the next stage, via multiple rounds of random verification, the trust score of each ES is assessed to identify the malicious participants. Eventually, FL-RAEC is evaluated in detail, depicting that FL-RAEC has strong robustness and high accuracy under different attacks.