Search papers, labs, and topics across Lattice.
This paper introduces RankGuard, a decentralized framework for Online Learning to Rank (OLTR) that enables users to collaboratively train ranking models while mitigating the risks of malicious updates. By evaluating incoming model updates against a user's private click history, RankGuard ensures that only beneficial updates are aggregated, effectively defending against poisoning attacks. The framework not only provides a theoretical convergence guarantee but also demonstrates superior performance and efficiency, outperforming existing methods by up to 62 times in various scenarios.
RankGuard outperforms traditional centralized OLTR systems by ensuring robust defenses against poisoning attacks while enhancing efficiency in decentralized environments.
In Online Learning to Rank (OLTR), ranking models are trained directly from live user interactions, but existing systems rely on a trusted central server to collect and process these interactions. This leaves operators free to introduce biases that conflict with user interests. Decentralized learning offers an attractive alternative, allowing users to collaboratively train a shared ranking model by exchanging model updates directly with one another, without any central authority. In such settings, however, malicious nodes can send poisoned model updates that degrade the ranking quality of honest nodes. We introduce RankGuard, a decentralized OLTR framework in which users collaboratively train ranking models and exchange model updates directly with other nodes. RankGuard defends against poisoning attacks by carefully evaluating incoming models against the user's own private click history, corrected for position bias. An incoming model is only aggregated if it better explains the user's past interactions than the current local model, making it fundamentally hard for malicious nodes to craft updates that pass this test without also genuinely helping the user. We derive a theoretical convergence guarantee of RankGuard. To the best of our knowledge, this is the first formal convergence analysis of a decentralized OLTR algorithm. We evaluate RankGuard against four poisoning attacks, including a powerful adaptive attack, using four standard benchmarks and three click models. RankGuard outperforms all baselines in most settings while being up to 62x more efficient than its closest competitors.
