用随机掩码和量化保护联邦学习中的模型隐私。
Enhancing Model Privacy in Federated Learning with Random Masking and Quantization
- 通过随机掩码隐藏部分参数,量化剩余参数以生成隐私代理。
- 在多个模型和任务上保持性能,同时提升参数保护强度。
- 适合关注模型知识产权保护的研究者与开发者。
传统联邦学习旨在通过分布式边缘设备协同训练共享全局模型,同时保持原始数据本地化,以保护数据隐私。大型语言模型(LLMs)的兴起带来了新挑战:其庞大的计算需求和专业技能门槛引发对知识产权(IP)保护的担忧。这凸显了需要一种既能保护敏感数据又能防护专有模型的联邦学习方法。为此,我们提出FedQSN,该方法利用随机掩码隐藏模型参数的子网络,并对剩余参数应用量化。由此,服务器在每轮通信中仅传输一个隐私保护的全局模型代理,从而增强模型机密性。在多种模型和任务上的实验结果表明,该方法不仅在联邦学习设置中维持了强大的模型性能,相比基线方法还实现了更强的参数保护效果。
原文摘要 · Abstract (English)
The primary goal of traditional federated learning is to protect data privacy by enabling distributed edge devices to collaboratively train a shared global model while keeping raw data decentralized at local clients. The rise of large language models (LLMs) has introduced new challenges in distributed systems, as their substantial computational requirements and the need for specialized expertise raise critical concerns about protecting intellectual property (IP). This highlights the need for a federated learning approach that can safeguard both sensitive data and proprietary models. To tackle this challenge, we propose FedQSN, a federated learning approach that leverages random masking to obscure a subnetwork of model parameters and applies quantization to the remaining parameters. Consequently, the server transmits only a privacy-preserving proxy of the global model to clients during each communication round, thus enhancing the model's confidentiality. Experimental results across various models and tasks demonstrate that our approach not only maintains strong model performance in federated learning settings but also achieves enhanced protection of model parameters compared to baseline methods.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。