NAAFL: A Non-Authoritative Anarchic Federated Learning for Defending Against Malicious Attacks

The centralized server in traditional federated learning (FL) is authoritative (i.e. decisive control), which may cause immeasurable damage to the system's security in the event of decision failure or attack. To weaken the authority of the central server, existing studies have proposed blockchain-based federated learning (BFL) approaches. However, existing BFL still suffers from high resource overhead and difficulty in resisting high malicious ratio (more than 50%) attacks. To address the above challenge, this paper proposes an efficient and secure non-authoritative (i.e. highly decentralized) anarchic (i.e. distributed self-governance) federated learning framework which is named NAAFL. During the local process of NAAFL, an area credit-based screening mechanism for participating devices is proposed to ensure that participating devices are always highly trusted devices with higher total credit values. Then, to effectively exclude a high percentage of malicious training gradients, a multi-device validation voting mechanism based on historical information is designed to construct the global gradient. Subsequently, to weaken the central server authority and reduce the resource overhead while guaranteeing security, a secure and low-consumption consensus mechanism based on the federation chain is proposed, and the overhead is further reduced by a momentum acceleration algorithm. Finally, the theoretical analysis and experimental simulation are conducted on the proposed NAAFL. The results further show that the proposed NAAFL outperforms existing studies and can defend against attacks with up to 80% malicious ratio, which exceeds the common threshold (50%) of existing studies. Meanwhile, the overhead of NAAFL is reduced by about 77.51% compared to BFL.