FedSel: Federated SGD Under Local Differential Privacy with Top-k Dimension Selection

被引:73
作者
Liu, Ruixuan [1 ]
Cao, Yang [2 ]
Yoshikawa, Masatoshi [2 ]
Chen, Hong [1 ]
机构
[1] Renmin Univ China, Beijing, Peoples R China
[2] Kyoto Univ, Kyoto, Japan
来源
DATABASE SYSTEMS FOR ADVANCED APPLICATIONS (DASFAA 2020), PT I | 2020年 / 12112卷
基金
中国国家自然科学基金;
关键词
Local differential privacy; Federated learning;
D O I
10.1007/978-3-030-59410-7_33
中图分类号
TP18 [人工智能理论];
学科分类号
081104 ; 0812 ; 0835 ; 1405 ;
摘要
As massive data are produced from small gadgets, federated learning on mobile devices has become an emerging trend. In the federated setting, Stochastic Gradient Descent (SGD) has been widely used in federated learning for various machine learning models. To prevent privacy leakages from gradients that are calculated on users' sensitive data, local differential privacy (LDP) has been considered as a privacy guarantee in federated SGD recently. However, the existing solutions have a dimension dependency problem: the injected noise is substantially proportional to the dimension d. In this work, we propose a two-stage framework FedSel for federated SGD under LDP to relieve this problem. Our key idea is that not all dimensions are equally important so that we privately select Top-k dimensions according to their contributions in each iteration of federated SGD. Specifically, we propose three private dimension selection mechanisms and adapt the gradient accumulation technique to stabilize the learning process with noisy updates. We also theoretically analyze privacy, accuracy and time complexity of FedSel, which outperforms the state-of-the-art solutions. Experiments on real-world and synthetic datasets verify the effectiveness and efficiency of our framework.
引用
收藏
页码:485 / 501
页数:17
相关论文
共 32 条
  • [1] Agarwal N, 2018, ADV NEUR IN, V31
  • [2] Aji Alham Fikri, 2017, P 2017 C EMPIRICAL M, P440
  • [3] Alistarh D, 2018, ADV NEUR IN, V31
  • [4] Bhowmick A, 2019, Arxiv, DOI arXiv:1812.00984
  • [5] Bonawitz K, 2019, Arxiv, DOI [arXiv:1902.01046, DOI 10.48550/ARXIV.1902.01046]
  • [6] Practical Secure Aggregation for Privacy-Preserving Machine Learning
    Bonawitz, Keith
    Ivanov, Vladimir
    Kreuter, Ben
    Marcedone, Antonio
    McMahan, H. Brendan
    Patel, Sarvar
    Ramage, Daniel
    Segal, Aaron
    Seth, Karn
    [J]. CCS'17: PROCEEDINGS OF THE 2017 ACM SIGSAC CONFERENCE ON COMPUTER AND COMMUNICATIONS SECURITY, 2017, : 1175 - 1191
  • [7] Duchi JC, 2018, J AM STAT ASSOC, V113, P182, DOI 10.1080/01621459.2017.1389735
  • [8] Local Privacy and Statistical Minimax Rates
    Duchi, John C.
    Jordan, Michael I.
    Wainwright, Martin J.
    [J]. 2013 IEEE 54TH ANNUAL SYMPOSIUM ON FOUNDATIONS OF COMPUTER SCIENCE (FOCS), 2013, : 429 - 438
  • [9] The Algorithmic Foundations of Differential Privacy
    Dwork, Cynthia
    Roth, Aaron
    [J]. FOUNDATIONS AND TRENDS IN THEORETICAL COMPUTER SCIENCE, 2013, 9 (3-4): : 211 - 406
  • [10] Fang MH, 2020, PROCEEDINGS OF THE 29TH USENIX SECURITY SYMPOSIUM, P1623