Abstract:Federated learning (FL) has demonstrated tremendous success in various mission-critical large-scale scenarios. However, such promising distributed learning paradigm is still vulnerable to privacy inference and byzantine attacks. The former aims to infer the privacy of target participants involved in training, while the latter focuses on destroying the integrity of the constructed model. To mitigate the above two issues, a few works recently explored unified solutions by utilizing generic secure computation techniques and common byzantine-robust aggregation rules, but there are two major limitations: 1) they suffer from impracticality due to efficiency bottlenecks, and 2) they are still vulnerable to various types of attacks because of model incomprehensiveness. To approach the above problems, in this paper, we present SecureFL, an efficient, private and byzantine-robust FL framework. SecureFL follows the state-of-the-art byzantine-robust FL method (FLTrust NDSS’21), which performs comprehensive byzantine defense by normalizing the updates’ magnitude and measuring directional similarity, adapting it to the privacy-preserving context. More importantly, we carefully customize a series of cryptographic components. First, we design a crypto-friendly validity checking protocol that functionally replaces the normalization operation in FLTrust, and further devise tailored cryptographic protocols on top of it. Benefiting from the above optimizations, the communication and computation costs are reduced by half without sacrificing the robustness and privacy protection. Second, we develop a novel preprocessing technique for costly matrix multiplication. With this technique, the directional similarity measurement can be evaluated securely with negligible computation overhead and zero communication cost. Extensive evaluations conducted on three real-world datasets and various neural network architectures demonstrate that SecureFL outperforms prior art up to two orders of magnitude in efficiency with state-of-the-art byzantine robustness.

Towards robust and privacy-preserving federated learning in edge computing

PFLF: Privacy-Preserving Federated Learning Framework for Edge Computing

Secure Decentralized Aggregation to Prevent Membership Privacy Leakage in Edge-based Federated Learning

Robust and privacy-preserving federated learning with distributed additive encryption against poisoning attacks

ApaPRFL: Robust Privacy-Preserving Federated Learning Scheme Against Poisoning Adversaries for Intelligent Devices Using Edge Computing

Towards the Robustness of Differentially Private Federated Learning

Efficiently Achieving Privacy Preservation and Poisoning Attack Resistance in Federated Learning

Secure and Efficient Decentralized Federated Learning with Data Representation Protection

VPFL: A verifiable privacy-preserving federated learning scheme for edge computing systems

Efficient, Private and Robust Federated Learning

Privacy Preservation for Federated Learning With Robust Aggregation in Edge Computing

LSFL: A Lightweight and Secure Federated Learning Scheme for Edge Computing

Performance-Enhanced Federated Learning with Differential Privacy for Internet of Things

PPSFL: Privacy-Preserving Split Federated Learning for heterogeneous data in edge-based Internet of Things

Efficient and Privacy-Preserving Federated Learning Against Poisoning Adversaries

Privacy and Robustness in Federated Learning: Attacks and Defenses

LF3PFL: A Practical Privacy-Preserving Federated Learning Algorithm Based on Local Federalization Scheme

Shield Against Gradient Leakage Attacks: Adaptive Privacy-Preserving Federated Learning

Lightweight Byzantine-Robust and Privacy-Preserving Federated Learning.

Reliable and Privacy-Preserving Federated Learning with Anomalous Users

LDP-Fed+: A robust and privacy-preserving federated learning based classification framework enabled by local differential privacy