FLVoogd - Robust And Privacy Preserving Federated Learning
Abstract
In this work, we propose FLVoogd, an updated federated learning method in which servers and clients collaboratively eliminate Byzantine attacks while preserving privacy. In particular, servers use automatic Density-based Spatial Clustering of Applications with Noise (DBSCAN) combined with S2PC to cluster the benign majority without acquiring sensitive personal information. Meanwhile, clients build dual models and perform test-based distance controlling to adjust their local models toward the global one to achieve personalizing. Our framework is automatic and adaptive that servers/clients don’t need to tune the parameters during the training. In addition, our framework leverages Secure Multi-party Computation (SMPC) operations, including multiplications, additions, and comparison, where costly operations, like division and square root, are not required. Evaluations are carried out on some conventional datasets from the image classification field. The result shows that FLVoogd can effectively reject malicious uploads in most scenarios; meanwhile, it avoids data leakage from the server-side.
links
👉 Link to the full paper (published version)
👉 Link to the full paper (archived version)
📚 Link to CRYPTAI LAB to see more works
Citation
@InProceedings{pmlr-v189-yuhang23a,
title={FLVoogd: Robust And Privacy Preserving Federated Learning},
author={Yuhang, Tian and Rui, Wang and Yanqi, Qiao and Emmanouil, Panaousis and Kaitai, Liang},
booktitle={Proceedings of The 14th Asian Conference on Machine Learning},
pages={1022--1037},
year={2023},
editor={Khan, Emtiyaz and Gonen, Mehmet},
volume={189},
series={Proceedings of Machine Learning Research},
month={12--14 Dec},
publisher={PMLR},
pdf={https://proceedings.mlr.press/v189/yuhang23a/yuhang23a.pdf},
url={https://proceedings.mlr.press/v189/yuhang23a.html},
}
