arXiv:2507.13591cs.CRcs.LG2025-07被引 2

提出安全可扩展的联邦学习框架,兼顾隐私与效率

FuSeFL: Fully Secure and Scalable Federated Learning

  • 采用轻量级MPC实现客户端对等训练,服务器仅负责聚合与路由
  • 相比基线提升13倍训练速度,服务器内存降低50%
  • 同时防护梯度泄漏、成员推断等攻击,适合高合规要求场景

联邦学习(FL)可在不集中客户数据的情况下实现协同模型训练,适用于敏感隐私领域。现有方法虽利用同态加密、差分隐私或安全多方计算抵御模型反演、成员推断和梯度泄露等推理攻击,但普遍存在计算与内存开销高的问题。此外,多数方法忽视全局模型本身的保密性,而该模型可能具有商业机密性质。这些挑战限制了安全联邦学习在大规模数据及严格合规场景下的实用性。本文提出FuSeFL,一种全安全且可扩展的联邦学习方案:通过轻量级安全多方计算将训练去中心化至客户端对,服务器仅承担安全聚合、客户端配对与路由任务。该设计避免了服务器瓶颈,无需完整数据外传,全程保障数据、模型与更新的机密性。实验表明,FuSeFL能有效防御未经授权的观测、重建攻击及梯度泄露、成员推断和反演攻击,相较基线实现最高13倍训练加速与50%服务器内存节省。

原文摘要 · Abstract (English)

Federated Learning (FL) enables collaborative model training without centralizing client data, making it attractive for privacy-sensitive domains. While existing approaches employ cryptographic techniques such as homomorphic encryption, differential privacy, or secure multiparty computation to mitigate inference attacks, including model inversion, membership inference, and gradient leakage, they often suffer from high computational and memory overheads. Moreover, many methods overlook the confidentiality of the global model itself, which may be proprietary and sensitive. These challenges limit the practicality of secure FL, especially in settings that involve large datasets and strict compliance requirements. We present FuSeFL, a Fully Secure and scalable FL scheme, which decentralizes training across client pairs using lightweight MPC, while confining the server's role to secure aggregation, client pairing, and routing. This design eliminates server bottlenecks, avoids full data offloading, and preserves full confidentiality of data, model, and updates throughout training. Based on our experiment, FuSeFL defends against unauthorized observation, reconstruction attacks, and inference attacks such as gradient leakage, membership inference, and inversion attacks, while achieving up to $13 \times$ speedup in training time and 50% lower server memory usage compared to our baseline.

联邦学习安全计算隐私保护高效训练

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。