As deep neural networks continue to scale and enable emerging applications such as agentic AI systems, training increasingly relies on distributed paradigms across heterogeneous edge devices. However, this shift introduces significant security challenges, particularly model poisoning attacks, which are largely underexplored in model-parallel settings. To address these challenges, we propose a trusted and attack-resilient mechanism for distributed DNN training that supports both data and model parallelism. The mechanism leverages a blockchain-enabled infrastructure to ensure the tamper-resistant and auditable execution of security-critical operations. It introduces a Loss-aware Credit Evaluation mechanism to assess agent reliability based on group-level training dynamics and a Shuffling-based Isolation Mechanism to progressively cluster and isolate malicious agents across training epochs. In addition, Byzantine-tolerant aggregation (BTA) is employed to further mitigate adversarial influence during model aggregation. Extensive experiments demonstrate that the proposed mechanism achieves superior robustness and efficiency compared with state-of-the-art methods under diverse poisoning attack scenarios.
Zhonghui Wu, Yun-Xiao Ma, Lu Lu et al.· Future Internet· 0 citations
This work proposes SeqFedRPC, a novel model decoupling based SFL framework with regularized parameter clustering, and employs a clustering‐based scheme to adaptively decouple the model parameters into shared and personalized subsets, thereby addressing the challenge of non‐IID data.
Peng Mao, Tian Du, Zhonghui Wu et al.· Transactions on Emerging Tel...· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.