arXiv:2503.16251cs.LGcs.CV2025-03中稿 · ICLR被引 4

RESFL在联邦学习中平衡隐私、公平与性能,提升模型可靠性。

RESFL: An Uncertainty-Aware Framework for Responsible Federated Learning by Balancing Privacy, Fairness and Utility

  • 通过对抗性隐私解耦与不确定性加权聚合,协同优化隐私与公平性。
  • 在自动驾驶数据集上实现高mAP,公平性差距降低17%,隐私攻击成功率下降37%。
  • 适合注重公平性与安全性的高风险场景,如医疗、自动驾驶等应用。

联邦学习(FL)在关键领域实现了无需集中数据聚合的协作建模,但现有隐私保护框架常损害公平性与可靠性。差分隐私虽能减少数据泄露,却可能掩盖敏感属性,加剧群体性能差距。本文研究了基于目标检测的联邦学习中的隐私-公平权衡问题,提出RESFL框架,联合优化隐私与公平性。该框架结合对抗性隐私解耦与不确定性引导的公平感知聚合:前者通过梯度反转层抑制敏感属性信息,降低隐私风险并保留公平相关结构;后者采用证据神经网络自适应加权客户端更新,优先采纳公平差异小、置信度高的贡献。实验表明,在高风险自动驾驶场景下,RESFL在FACET和CARLA数据集上取得高mAP,成员推理攻击成功率降低37%,平等机会差距相比FedAvg基线减少17%,同时保持更强的对抗鲁棒性。尽管聚焦自动驾驶,该框架具有领域无关性,可推广至广泛应用场景。

原文摘要 · Abstract (English)

Federated Learning (FL) has gained prominence in machine learning applications across critical domains by enabling collaborative model training without centralized data aggregation. However, FL frameworks that protect privacy often sacrifice fairness and reliability. Differential privacy can reduce data leakage, but it may also obscure sensitive attributes needed for bias correction, thereby worsening performance gaps across demographic groups. This work studies the privacy-fairness trade-off in FL-based object detection and introduces RESFL, an integrated framework that jointly improves both objectives. RESFL combines adversarial privacy disentanglement with uncertainty-guided fairness-aware aggregation. The adversarial component uses a gradient reversal layer to suppress sensitive attribute information, reducing privacy risks while preserving fairness-relevant structure. The uncertainty-aware aggregation component uses an evidential neural network to adaptively weight client updates, prioritizing contributions with lower fairness disparities and higher confidence. This produces robust and equitable FL model updates. Experiments in high-stakes autonomous vehicle settings show that RESFL achieves high mAP on FACET and CARLA, reduces membership-inference attack success by 37%, reduces the equality-of-opportunity gap by 17% relative to the FedAvg baseline, and maintains stronger adversarial robustness. Although evaluated in autonomous driving, RESFL is domain-agnostic and can be applied to a broad range of application domains beyond this setting.

联邦学习公平性隐私保护自动驾驶

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。