Abstract:As one of the most important methods of privacy computing, federated learning has attracted much attention as it makes data available but invisible (i.e., uploading gradients instead of raw data). However, adversaries may still recover some private information such as tabs, memberships or even training data, from gradients. Additionally, the malicious server may return the incorrect or forged aggregated result to clients for certain illegal interests. To ensure verifiability and privacy-preservation, in this paper, we present a verifiable secure aggregation scheme under the dual-server federated learning framework. Specifically, we combine the learning with error (LWE) cryptosystem with the secret sharing technique to guarantee the privacy of the aggregated result and each client's local gradient. Meanwhile, we skillfully design a double-verification protocol, including the server-side and client-side verification, to efficiently verify the correctness of the aggregated result and ensure data availability. Specifically, two servers mutually verify the correctness of the aggregated result through the linear homomorphic hash technique. After passing the server-side mutual verification, the malicious server may still directly broadcast the forged aggregated result to clients. Our client-side verification protocol can ensure data availability to identify the correct aggregation result sent by the semi-trusted server. To the best of our knowledge, existing solutions do not take data availability into account. Extensive experimental comparisons with the state-of-the-art schemes demonstrate the effectiveness and efficiency of the proposed scheme in terms of accuracy, computational cost and communication overhead.

On the Security of Verifiable and Oblivious Secure Aggregation for Privacy-Preserving Federated Learning

EVFL: Towards Efficient Verifiable Federated Learning Via Parameter Reuse and Adaptive Sparsification

Privacy-Enhanced and Verification-Traceable Aggregation for Federated Learning.

SVFLC: Secure and Verifiable Federated Learning With Chain Aggregation

An efficient privacy-preserving and verifiable scheme for federated learning

WVFL: Weighted Verifiable Secure Aggregation in Federated Learning

A Privacy-preserving Aggregation Scheme with Continuous Authentication for Federated Learning in VANETs

PPFLV: privacy-preserving federated learning with verifiability

Split Aggregation: Lightweight Privacy-Preserving Federated Learning Resistant to Byzantine Attacks

FSSA: Efficient 3-Round Secure Aggregation for Privacy-Preserving Federated Learning

Eluding Secure Aggregation in Federated Learning via Model Inconsistency

Efficient Vertical Federated Learning with Secure Aggregation

Toward Secure and Verifiable Hybrid Federated Learning

Securing Secure Aggregation: Mitigating Multi-Round Privacy Leakage in Federated Learning

Practical and Efficient Secure Aggregation for Privacy-Preserving Machine Learning.

Uncovering Attacks and Defenses in Secure Aggregation for Federated Deep Learning

PriRoAgg: Achieving Robust Model Aggregation with Minimum Privacy Leakage for Federated Learning

Secure Aggregation is Not Private Against Membership Inference Attacks

Enabling Privacy-Preserving and Publicly Auditable Federated Learning

Breaking Secure Aggregation: Label Leakage from Aggregated Gradients in Federated Learning

No Vandalism: Privacy-Preserving and Byzantine-Robust Federated Learning