Loading…
SVFLDetector: a decentralized client detection method for Byzantine problem in vertical federated learning
In recent years, with the deepening of cross-industry cooperation, vertical federated learning with multiple overlapping samples and fewer overlapping features has attracted extensive attention. Vertical federated learning increases the challenge of detecting Byzantine clients due to feature heterog...
Saved in:
Published in: | Computing 2024-05, Vol.106 (5), p.1659-1679 |
---|---|
Main Authors: | , , , |
Format: | Article |
Language: | English |
Subjects: | |
Citations: | Items that this one cites |
Online Access: | Get full text |
Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
Summary: | In recent years, with the deepening of cross-industry cooperation, vertical federated learning with multiple overlapping samples and fewer overlapping features has attracted extensive attention. Vertical federated learning increases the challenge of detecting Byzantine clients due to feature heterogeneity, in contrast to horizontal federated learning. Existing methods for detecting Byzantine clients can be divided into statistical-based and detection-based types. The detection-based type breaks the limit on the number of Byzantine clients. To our knowledge, current research in vertical federated learning relies on the assumption of a reliable third-party coordinator and is based on statistical type. In this work, we propose a framework based on a detection type called SVFLDetector to detect Byzantine clients in vertical federated learning. The key ideas of SVFLDetector are: (1) we combine decentralized vertical federated learning with split learning, utilizing their respective advantages and eliminating the impact of a third-party server; (2) according to the heterogeneity of features in vertical federated learning, we use a client detection method which is achieved by grouping through feature encoding and performing cross validation within groups to identify Byzantine clients; (3) we propose a penalty function to reduce the impact of Byzantine clients on model aggregation. Numerical experiments show that our method has strong robustness against various Byzantine attacks. |
---|---|
ISSN: | 0010-485X 1436-5057 |
DOI: | 10.1007/s00607-024-01262-5 |