ZETA: ZEro-Trust Attack Framework with Split Learning for Autonomous Vehicles in 6G Networks
Sunder Ali Khowaja, Parus Khuwaja, Kapal Dev, Keshav Singh, Lewis Nkenyereye, Daniel C. Kilper · 2024
In past, due to data and model security concerns, modern communication systems mainly focus on the use of edge computing devices for enabling immersive applications and services. Federated learning is one of the preferred solutions but it stresses the computation capability of the edge devices for immersive applications. Much research is now focusing on split learning as an alternative due to its ability of performing joint training with limited computing resources. However, split learning is also vulnerable to data reconstruction, feature space hijacking, and model inversion attacks, which are quite common concerning immersive applications such as Metaverse. In this regard, we propose a ZEro-Trust Attack (ZETA) framework for data reconstruction and model inversion attacks for autonomous vehicles opting for split learning strategies. We propose the joint training of client, server, and shadow models for both the reconstruction and main task to fool existing methods. Our experimental results demonstrate that the proposed method is capable of reconstructing client's data with an error of 0.0032. This study is proposed as a basis to design more sophisticated defense mechanisms for autonomous vehicles to protect user services in 5G/6G networks.