PrivacySecurityTrustworthinesscs.LG
Trustworthy Federated Learning via Blockchain
Zhanpeng Yang, Yuanming Shi, Yong Zhou, Zixin Wang, Kai Yang
August 13, 2022
IEEE Internet of Things Journal
115 citations
6 influential
Key Takeaways
-
Federated learning improves privacy but introduces new security risks: The paper identifies that while federated learning protects privacy by training AI models across multiple devices without centralizing data, it remains vulnerable to "Byzantine attacks from malicious devices" and "model tampering attacks from malicious server" that can degrade the accuracy of the trained AI model.
-
Blockchain can add a security layer to federated learning: The proposed solution uses blockchain technology with a "secure global aggregation algorithm" to detect and resist malicious devices, and implements a "Byzantine fault tolerance consensus protocol" to prevent tampering by malicious servers—addressing two major attack vectors in collaborative AI training.
-
Security improvements come with practical trade-offs: The paper acknowledges that implementing blockchain-based federated learning creates a significant challenge: "multiple rounds of cross-validation in blockchain consensus protocol will induce long training latency," meaning the added security protections slow down the time it takes to train AI models.
-
Network optimization is needed for real-world deployment: To make trustworthy federated learning practical at the network edge, the authors formulate solutions that jointly optimize "bandwidth and power allocation for the minimization of long-term average training latency," indicating that responsible AI systems require careful engineering beyond just security protocols.