Title
Privacy-Enhanced Federated Learning Against Poisoning Adversaries
Abstract
Federated learning (FL), as a distributed machine learning setting, has received considerable attention in recent years. To alleviate privacy concerns, FL essentially promises that multiple parties jointly train the model by exchanging gradients rather than raw data. However, intrinsic privacy issue still exists in FL, e.g., user's training samples could be revealed by solely inferring gradients. Moreover, the emerging poisoning attack also poses a crucial security threat to FL. In particular, due to the distributed nature of FL, malicious users may submit crafted gradients during the training process to undermine the integrity and availability of the model. Furthermore, there exists a contradiction in simultaneously addressing two issues, that is, privacy-preserving FL solutions are dedicated to ensuring gradients indistinguishability, whereas the defenses against poisoning attacks tend to remove outliers based on their similarity. To solve such a dilemma, in this paper, we aim to build a bridge between the two issues. Specifically, we present a privacy-enhanced FL (PEFL) framework that adopts homomorphic encryption as the underlying technology and provides the server with a channel to punish poisoners via the effective gradient data extraction of the logarithmic function. To the best of our knowledge, the PEFL is the first effort to efficiently detect the poisoning behaviors in FL under ciphertext. Detailed theoretical analyses illustrate the security and convergence properties of the scheme. Moreover, the experiments conducted on real-world datasets show that the PEFL can effectively defend against label-flipping and backdoor attacks, two representative poisoning attacks in FL.
Year
DOI
Venue
2021
10.1109/TIFS.2021.3108434
IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY
Keywords
DocType
Volume
Training, Data privacy, Privacy, Servers, Security, Computational modeling, Data models, Federated learning, poisoning attack, privacy protection, cloud computing
Journal
16
ISSN
Citations 
PageRank 
1556-6013
0
0.34
References 
Authors
0
6
Name
Order
Citations
PageRank
Xiaoyuan Liu1101.52
Hongwei Li215412.60
Guowen Xu312915.17
Zongqi Chen400.34
Xiaoming Huang541.07
Rongxing Lu65091301.87