Abstract:Federated learning (FL) has demonstrated tremendous success in various mission-critical large-scale scenarios. However, such promising distributed learning paradigm is still vulnerable to privacy inference and byzantine attacks. The former aims to infer the privacy of target participants involved in training, while the latter focuses on destroying the integrity of the constructed model. To mitigate the above two issues, a few works recently explored unified solutions by utilizing generic secure computation techniques and common byzantine-robust aggregation rules, but there are two major limitations: 1) they suffer from impracticality due to efficiency bottlenecks, and 2) they are still vulnerable to various types of attacks because of model incomprehensiveness. To approach the above problems, in this paper, we present SecureFL, an efficient, private and byzantine-robust FL framework. SecureFL follows the state-of-the-art byzantine-robust FL method (FLTrust NDSS’21), which performs comprehensive byzantine defense by normalizing the updates’ magnitude and measuring directional similarity, adapting it to the privacy-preserving context. More importantly, we carefully customize a series of cryptographic components. First, we design a crypto-friendly validity checking protocol that functionally replaces the normalization operation in FLTrust, and further devise tailored cryptographic protocols on top of it. Benefiting from the above optimizations, the communication and computation costs are reduced by half without sacrificing the robustness and privacy protection. Second, we develop a novel preprocessing technique for costly matrix multiplication. With this technique, the directional similarity measurement can be evaluated securely with negligible computation overhead and zero communication cost. Extensive evaluations conducted on three real-world datasets and various neural network architectures demonstrate that SecureFL outperforms prior art up to two orders of magnitude in efficiency with state-of-the-art byzantine robustness.

CorBin-FL: A Differentially Private Federated Learning Mechanism using Common Randomness

Decentralized Iot Data Sharing: A Blockchain-Based Federated Learning Approach with Joint Optimizations for Efficiency and Privacy

Binary Federated Learning with Client-Level Differential Privacy

A Federated Learning Framework Based on Differentially Private Continuous Data Release

Differentially Private Federated Learning with an Adaptive Noise Mechanism

Privacy-aware Berrut Approximated Coded Computing for Federated Learning

FDP-FL: Differentially Private Federated Learning with Flexible Privacy Budget Allocation

Privacy-Preserving Federated Learning Framework Based on Chained Secure Multiparty Computing

DMM: Distributed Matrix Mechanism for Differentially-Private Federated Learning using Packed Secret Sharing

Performance-Enhanced Federated Learning with Differential Privacy for Internet of Things

Fair Differentially Private Federated Learning Framework

A Novel Privacy Enhancement Scheme with Dynamic Quantization for Federated Learning

Federated Learning with Differential Privacy

Performance Analysis and Optimization in Privacy-Preserving Federated Learning

Differentially Private Online Federated Learning with Correlated Noise

Distributed Differentially Private Computation of Functions with Correlated Noise

ALI-DPFL: Differentially Private Federated Learning with Adaptive Local Iterations

Immersion and Invariance-based Coding for Privacy-Preserving Federated Learning

Universally Harmonizing Differential Privacy Mechanisms for Federated Learning: Boosting Accuracy and Convergence

Efficient, Private and Robust Federated Learning

FedSeC: a Robust Differential Private Federated Learning Framework in Heterogeneous Networks