考虑社交网络中隐私传播,设计了更公平高效的联邦学习隐私保护机制。
Multi-Hop Privacy Propagation for Differentially Private Federated Learning in Social Networks
- 构建多跳隐私传播模型,量化社交关系带来的间接隐私泄露。
- 通过双阶段博弈求解最优激励策略,提升客户端收益并降低服务器成本。
- 适用于社交网络中的隐私敏感场景,尤其适合注重公平性的系统设计。
联邦学习(FL)允许去中心化客户端在不共享本地数据的前提下协作训练模型,从而增强隐私保护并促进社交网络中客户端间的合作。然而,这些社交连接引入了隐私外部性:一个客户端的隐私损失不仅取决于其自身的隐私保护策略,还受他人隐私决策通过多跳交互在网络中传播的影响。本文提出一种面向社交关系的隐私保护联邦学习机制,系统量化了通过多跳传播导致的间接隐私泄露。将服务器-客户端交互建模为两阶段斯塔克尔伯格博弈,其中服务器作为领导者优化激励策略,客户端作为追随者战略性选择隐私预算,以控制添加噪声的幅度来决定隐私保护水平。为缓解网络中隐私估计的信息不对称问题,引入均值场估计器近似平均外部隐私风险。理论证明了均值场估计器不动点的存在性与收敛性,并推导出斯塔克尔伯格纳什均衡的闭式表达式。尽管从客户端激励角度设计,该机制仍实现了近似最优的社会福利,由价格悖论(PoA)分析揭示。在多种数据集上的实验表明,该方法显著提升了客户端效用,降低了服务器成本,同时保持模型性能,优于忽略社交关系的基线(SA)以及仅考虑社交外部性的现有方法。
原文摘要 · Abstract (English)
Federated learning (FL) enables collaborative model training across decentralized clients without sharing local data, thereby enhancing privacy and facilitating collaboration among clients connected via social networks. However, these social connections introduce privacy externalities: a client's privacy loss depends not only on its privacy protection strategy but also on the privacy decisions of others, propagated through the network via multi-hop interactions. In this work, we propose a socially-aware privacy-preserving FL mechanism that systematically quantifies indirect privacy leakage through a multi-hop propagation model. We formulate the server-client interaction as a two-stage Stackelberg game, where the server, as the leader, optimizes incentive policies, and clients, as followers, strategically select their privacy budgets, which determine their privacy-preserving levels by controlling the magnitude of added noise. To mitigate information asymmetry in networked privacy estimation, we introduce a mean-field estimator to approximate the average external privacy risk. We theoretically prove the existence and convergence of the fixed point of the mean-field estimator and derive closed-form expressions for the Stackelberg Nash Equilibrium. Despite being designed from a client-centric incentive perspective, our mechanism achieves approximately-optimal social welfare, as revealed by Price of Anarchy (PoA) analysis. Experiments on diverse datasets demonstrate that our approach significantly improves client utilities and reduces server costs while maintaining model performance, outperforming both Social-Agnostic (SA) baselines and methods that account for social externalities.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。