TAR-DT: A Trusted and Attack-Resilient Mechanism for Distributed DNN Training in Agentic Edge Intelligence

Abstract

As deep neural networks continue to scale and enable emerging applications such as agentic AI systems, training increasingly relies on distributed paradigms across heterogeneous edge devices. However, this shift introduces significant security challenges, particularly model poisoning attacks, which are largely underexplored in model-parallel settings. To address these challenges, we propose a trusted and attack-resilient mechanism for distributed DNN training that supports both data and model parallelism. The mechanism leverages a blockchain-enabled infrastructure to ensure the tamper-resistant and auditable execution of security-critical operations. It introduces a Loss-aware Credit Evaluation mechanism to assess agent reliability based on group-level training dynamics and a Shuffling-based Isolation Mechanism to progressively cluster and isolate malicious agents across training epochs. In addition, Byzantine-tolerant aggregation (BTA) is employed to further mitigate adversarial influence during model aggregation. Extensive experiments demonstrate that the proposed mechanism achieves superior robustness and efficiency compared with state-of-the-art methods under diverse poisoning attack scenarios.