Privacy-Preserving and Fairness-Aware Federated Learning for Critical Infrastructure Protection and Resilience
Yanjun Zhang, Ruoxi Sun, Liyue Shen, Guangdong Bai, Minhui Xue, Mark Huasong Meng, Xue Li, Ryan K. L. Ko, Surya Nepal
Abstract
The energy industry is undergoing significant transformations as it strives to achieve net-zero emissions and future-proof its infrastructure, where every participant in the power grid has the potential to both consume and produce energy resources. Federated learning -which enables multiple participants to collaboratively train a model without aggregating the training data -becomes a viable technology. However, the global model parameters that have to be shared for optimization are still susceptible to training data leakage. In this work, we propose Confined Gradient Descent (CGD) that enhances the privacy of federated learning by eliminating the sharing of global model parameters. CGD exploits the fact that a gradient descent optimization can start with a set of discrete points and converges to another set in the neighborhood of the global minimum of the objective function. As such, each participant can independently initiate its own private global model (referred to as the confined model), and collaboratively learn it towards the optimum. The updates to their own models are worked out in a secure collaborative way during the training process. In such a manner, CGD retains the ability of learning from distributed data but greatly diminishes information sharing. Such a strategy also allows the proprietary confined models to adapt to the heterogeneity in federated learning, providing inherent benefits of fairness. We theoretically and empirically demonstrate that decentralized CGD (i) provides a stronger differential privacy (DP) protection; (ii) is robust against the state-of-the-art poisoning privacy attacks; (iii) results in bounded fairness guarantee among participants; and (iv) provides high test accuracy (comparable with centralized learning) with a bounded convergence rate over four real-world datasets. CCS CONCEPTS • Security and privacy; • Computing methodologies → Machine learning; This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike International 4.0 License.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Your agent calls
Luneget_paper_fulltext
Free to start. No credit card required.
Terminal
Install the CLIlune papers fulltext 652d519a-97b1-427d-a1a4-a790e8c851acBuilds on15
- Deep Learning with Differential PrivacyMartín Abadi, Andy Chu, Ian J. Goodfellow, H. Brendan McMahan et al.CCS 2016 · 7,620 citations
- Membership Inference Attacks Against Machine Learning ModelsReza Shokri, Marco Stronati, Congzheng Song, Vitaly ShmatikovS&P 2017 · 5,137 citations
- Practical Secure Aggregation for Privacy-Preserving Machine LearningKallista A. Bonawitz, Vladimir Ivanov, Ben Kreuter, Antonio Marcedone et al.CCS 2017 · 3,936 citations
- SecureML: A System for Scalable Privacy-Preserving Machine LearningPayman Mohassel, Yupeng ZhangS&P 2017 · 2,107 citations
- Comprehensive Privacy Analysis of Deep Learning: Passive and Active White-box Inference Attacks against Centralized and Federated LearningMilad Nasr, Reza Shokri, Amir HoumansadrS&P 2019 · 1,778 citations
Related papers
- Federated Learning for Face Recognition with Gradient CorrectionYifan Niu, Weihong DengAAAI 2022 · 83 citations
- BlockDFL: A Blockchain-based Fully Decentralized Peer-to-Peer Federated Learning FrameworkZhen Qin, Xueqiang Yan, Mengchu Zhou, Shuiguang DengWWW 2024 · 39 citations
- Towards the Robustness of Differentially Private Federated LearningTao Qi, Huili Wang, Yongfeng HuangAAAI 2024 · 30 citations
- Multi-Dimensional Fair Federated LearningCong Su, Guoxian Yu, Jun Wang, Hui Li et al.AAAI 2024 · 12 citations
- PrivateFL: Accurate, Differentially Private Federated Learning via Personalized Data TransformationYuchen Yang, Bo Hui, Haolin Yuan, Neil Zhenqiang Gong et al.USENIX Security 2023
