Protection against Source Inference Attacks in Federated Learning using Unary Encoding and Shuffling - Archive ouverte HAL
Communication Dans Un Congrès Année : 2024

Protection against Source Inference Attacks in Federated Learning using Unary Encoding and Shuffling

Résumé

Federated Learning (FL) enables clients to train a joint model without disclosing their local data. Instead, they share their local model updates with a central server that moderates the process and creates a joint model. However, FL is susceptible to a series of privacy attacks. Recently, the source inference attack (SIA) has been proposed where an honest-but-curious central server tries to identify exactly which client owns a specific data record. n this work, we propose a defense against SIAs by using a trusted shuffler, without compromising the accuracy of the joint model. We employ a combination of unary encoding with shuffling, which can effectively blend all clients' model updates, preventing the central server from inferring information about each client's model update separately. In order to address the increased communication cost of unary encoding we employ quantization. Our preliminary experiments show promising results; the proposed mechanism notably decreases the accuracy of SIAs without compromising the accuracy of the joint model.
Fichier principal
Vignette du fichier
SIA_Defense-13.pdf (541.7 Ko) Télécharger le fichier
Origine Fichiers éditeurs autorisés sur une archive ouverte

Dates et versions

hal-04707344 , version 1 (30-09-2024)

Licence

Identifiants

Citer

Andreas Athanasiou, Kangsoo Jung, Catuscia Palamidessi. Protection against Source Inference Attacks in Federated Learning using Unary Encoding and Shuffling. CCS 2024 - The ACM Conference on Computer and Communications Security, ACM, Oct 2024, Salt Lake City, United States. ⟨10.1145/3658644.3691411⟩. ⟨hal-04707344⟩
150 Consultations
81 Téléchargements

Altmetric

Partager

More