A Secure and Decentralized DLaaS Platform for Edge Resource Scheduling Against Adversarial Attacks

Edge Computing is promising for latency-sensitive applications. However, current edge resource scheduling is inefficient. Deep Learning as a Service (DLaaS) provides deep learning methods to optimize the resource scheduling problem, but faces great challenges of security and reliability. On one hand, DLaaS training agents and raw data are exposed to various adversarial attacks. On the other hand, dishonest DLaaS trainers can generate poisoned models to attack the DLaaS system. In this article, we propose
SAPE
, a
S
ecure and decentralized DL
A
aS
P
latform in
E
dge computing. SAPE allows users to submit their tasks, which will be scheduled to the appropriate edge clusters to minimize the task execution time. We formulate the resource scheduling problem and develop the federated deep reinforcement learning (DRL) method to optimize the problem and resist the adversarial attacks of DLaaS. We utilize blockchain and propose a consortium-based verification scheme to improve the reliability of the federated training process, protecting the DLaaS models from being poisoned and compromised. We conduct experiments to evaluate the latency and security performance of SAPE and the federated DRL scheduling policy. The results show that SAPE outperforms the traditional schemes when defending against adversarial attacks towards the DLaaS platform in edge computing.