提出新方法让联邦学习模型高效删去用户数据,同时保持模型性能。
Federated Unlearning with Gradient Descent and Conflict Mitigation
- 设计非冲突梯度下降方向,避免解混淆导致的性能下降。
- 在多个场景下比现有最优方法更有效删除数据且保留模型精度。
- 适合关注隐私保护与模型可擦除性的研究人员使用。
联邦学习(FL)近年来受到广泛关注,但即使客户端不共享数据,全局模型仍可能隐式记忆本地数据。因此,有必要从全局模型中有效移除特定客户端的数据,以缓解隐私泄露风险并实现“被遗忘权”。联邦去学习(FU)被视为一种无需全量重训练即可删除数据的有前景方案。然而,去学习过程中梯度冲突常导致模型性能显著下降;此外,在恢复模型性能时,模型易回退已执行的去学习操作。为此,本文提出正交最速下降联邦去学习(FedOSD)。首先设计一种去学习交叉熵损失,解决梯度上升的收敛问题;随后在不与其它客户端梯度冲突的前提下,计算最接近目标客户端梯度的最速下降方向,从而高效去学习并减轻性能损失。去学习后,通过维持去学习成果来恢复模型性能。大量实验验证,FedOSD在多种联邦学习场景下均优于当前最优的去学习算法,在去学习效果和模型性能方面表现更优。
原文摘要 · Abstract (English)
Federated Learning (FL) has received much attention in recent years. However, although clients are not required to share their data in FL, the global model itself can implicitly remember clients' local data. Therefore, it's necessary to effectively remove the target client's data from the FL global model to ease the risk of privacy leakage and implement ``the right to be forgotten". Federated Unlearning (FU) has been considered a promising way to remove data without full retraining. But the model utility easily suffers significant reduction during unlearning due to the gradient conflicts. Furthermore, when conducting the post-training to recover the model utility, the model is prone to move back and revert what has already been unlearned. To address these issues, we propose Federated Unlearning with Orthogonal Steepest Descent (FedOSD). We first design an unlearning Cross-Entropy loss to overcome the convergence issue of the gradient ascent. A steepest descent direction for unlearning is then calculated in the condition of being non-conflicting with other clients' gradients and closest to the target client's gradient. This benefits to efficiently unlearn and mitigate the model utility reduction. After unlearning, we recover the model utility by maintaining the achievement of unlearning. Finally, extensive experiments in several FL scenarios verify that FedOSD outperforms the SOTA FU algorithms in terms of unlearning and model utility.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。