Fortifying SplitFed Learning: Strengthening Resilience Against Malicious Clients
Year: 2024
Type: conference-paper
Abstract: This article analyzes SplitFed Learning against model poisoning vulnerability and develops methods to protect such a system against these attacks. SplitFed learning is a distributed learning paradigm where a neural network model is split between clients and the server, contrasting with traditional Federated Learning. SplitFed learning enables enhanced security and data privacy, and clients do not need to perform heavy computation in model training, as they only need to train a part of the model. This approach ensures that the model can make precise predictions while maintaining the confidentiality of sensitive information. In addition to implementing a SplitFed model, the paper proposes a distance-based method that can poison SplitFed learning-based systems. Subsequently, this paper develops a novel prevention strategy based on robust statistical properties of the sample. To test the proposed methodology, we used the image cell dataset of the malaria parasite as a test case. By addressing the impacts of adversarial attacks, this paper contributes to the advancement of deep learning techniques.
Institutions: Anglia Ruskin University, Radford University
Language: English
Subfield: Artificial Intelligence
Field: Computer Science
Domain: Physical Sciences
Open Access status: gold
OpenAlex ID: W4408282215