Abstract:Federated learning (FL) has demonstrated tremendous success in various mission-critical large-scale scenarios. However, such promising distributed learning paradigm is still vulnerable to privacy inference and byzantine attacks. The former aims to infer the privacy of target participants involved in training, while the latter focuses on destroying the integrity of the constructed model. To mitigate the above two issues, a few works recently explored unified solutions by utilizing generic secure computation techniques and common byzantine-robust aggregation rules, but there are two major limitations: 1) they suffer from impracticality due to efficiency bottlenecks, and 2) they are still vulnerable to various types of attacks because of model incomprehensiveness. To approach the above problems, in this paper, we present SecureFL, an efficient, private and byzantine-robust FL framework. SecureFL follows the state-of-the-art byzantine-robust FL method (FLTrust NDSS’21), which performs comprehensive byzantine defense by normalizing the updates’ magnitude and measuring directional similarity, adapting it to the privacy-preserving context. More importantly, we carefully customize a series of cryptographic components. First, we design a crypto-friendly validity checking protocol that functionally replaces the normalization operation in FLTrust, and further devise tailored cryptographic protocols on top of it. Benefiting from the above optimizations, the communication and computation costs are reduced by half without sacrificing the robustness and privacy protection. Second, we develop a novel preprocessing technique for costly matrix multiplication. With this technique, the directional similarity measurement can be evaluated securely with negligible computation overhead and zero communication cost. Extensive evaluations conducted on three real-world datasets and various neural network architectures demonstrate that SecureFL outperforms prior art up to two orders of magnitude in efficiency with state-of-the-art byzantine robustness.

Achieving Secure Federated Learning Assisted by Covert Communication

Securing Federated Learning: A Covert Communication-based Approach

Asynchronous Federated Learning over Wireless Communication Networks.

Secure Federated Learning over Wireless Communication Networks with Model Compression

Secure Federated Learning with Model Compression.

Federated Learning with Unsourced Random Access.

Decentralized Federated Learning under Communication Delays.

Energy-Efficient Wireless Federated Learning: A Secrecy Oriented Design Via Sequential Artificial Jamming

Latency Oriented Secure Wireless Federated Learning: A Channel-Sharing Approach with Artificial Jamming

Secure and Efficient Decentralized Federated Learning with Data Representation Protection

Robust Design of Federated Learning for Edge-Intelligent Networks

UAV-Enabled Covert Federated Learning

Reputation-Based Federated Learning for Secure Wireless Networks

Efficient, Private and Robust Federated Learning

Mitigating Evasion Attacks in Federated Learning-Based Signal Classifiers

Secure and efficient federated learning via novel multi-party computation and compressed sensing

A Stealthy Communication Model for Protecting Aggregated Results Integrity in Federated Learning

Toward Secure and Private Over-the-Air Federated Learning

Robust Federated Learning for Wireless Networks: A Demonstration with Channel Estimation

Accuracy-Security Tradeoff with Balanced Aggregation and Artificial Noise for Wireless Federated Learning

Over-the-Air Federated Learning In Broadband Communication