Abstract:As a distributed learning framework, Federated Learning (FL) allows different local learners/participants to collaboratively train a joint model without exposing their own localdata,andoffersafeasiblesolutiontolegallyresolvedataislands.However,among them, the data privacy and model security are two challenges. The former means that, if original data are used for trained FL models, various methods can be used to deduce the original data samples, thereby causing the leakage of data. The latter implies that unreliable/malicious participants may affect or destroy the joint FL model, through uploading wrong local model parameters. Therefore, this paper proposes a novel distributed FL training framework, namely LDP-Fed + , which takes into account differential privacy protection and model security defense. Specifically, firstly, a local perturbationmoduleisaddedatthelocallearnerside,whichperturbstheoriginaldata of local learners through feature extraction, binary encoding and decoding, and random response. Then, through using the perturbed data, local neural network model is trained to obtain the network parameters that meet local differential protection, to effectively deal with model inversion attacks. Secondly, a security defense module is added on the server side, which uses the auxiliary model and differential index mechanismtoselectanappropriatenumberoflocaldisturbanceparametersforaggre-gationtoenhancemodelsecuritydefenseanddealwithmembershipinferenceattacks. The experimental results show that, compared with other federated learning models based on differential privacy, LDP-Fed + has stronger robustness for model security and higher accuracy for model training while ensuring strict privacy protection.

A Systematic Survey for Differential Privacy Techniques in Federated Learning

Differentially Private Federated Learning: A Systematic Review

Federated Transfer Learning with Differential Privacy

Differential Privacy Meets Federated Learning under Communication Constraints

The Impact of Differential Privacy on Model Fairness in Federated Learning.

Differential Privacy for Deep and Federated Learning: A Survey

From distributed machine learning to federated learning: In the view of data privacy and security

Recent Advances on Federated Learning: A Systematic Survey

Federated f-Differential Privacy

Client-based differential privacy federated learning

Federated Learning with Differential Privacy

A Differential Privacy Strategy Based on Local Features of Non-Gaussian Noise in Federated Learning

Privacy, accuracy, and model fairness trade-offs in federated learning

Differential Privacy-enabled Federated Learning for Sensitive Health Data

LDP-Fed+: A robust and privacy-preserving federated learning based classification framework enabled by local differential privacy

Exploring Homomorphic Encryption and Differential Privacy Techniques towards Secure Federated Learning Paradigm

An Adaptive Differential Privacy Method Based on Federated Learning

A Survey on Federated Learning Systems: Vision, Hype and Reality for Data Privacy and Protection

Fair Differentially Private Federated Learning Framework

FedSeC: a Robust Differential Private Federated Learning Framework in Heterogeneous Networks