用联邦学习保护隐私,实现跨机构支付欺诈检测
Privacy-Preserving Federated Fraud Detection in Payment Transactions with NVIDIA FLARE
- 基于NVIDIA FLARE框架,多机构协作训练反欺诈模型
- 联邦模型平均F1达0.903,接近集中式训练的0.925
- 支持合规部署,兼具可解释性与差分隐私保护
金融欺诈损失持续上升,而监管、隐私和数据主权限制使集中式欺诈检测难以实施。联邦学习(FL)为机构间协作训练模型提供了新范式,无需共享原始交易数据。本文基于NVIDIA FLARE框架,开展面向真实场景的多机构试点研究,模拟异构金融机构组成的联邦系统,各机构面对不同欺诈类型且数据完全隔离。采用深度神经网络通过联邦平均(FedAvg)训练,结果显示联邦模型平均F1得分为0.903,显著优于本地模型(0.643),并接近集中训练表现(0.925),同时保障数据主权。分析表明,模型在10轮通信内即可收敛,适合对延迟和成本敏感的金融环境。进一步使用基于Shapley的特征归因评估可解释性,证实联邦模型依赖语义合理、领域相关的决策信号。最后,引入样本级差分隐私(DP-SGD),验证了良好的隐私-效用权衡。
原文摘要 · Abstract (English)
Fraud-related financial losses continue to rise, while regulatory, privacy, and data-sovereignty constraints increasingly limit the feasibility of centralized fraud detection systems. Federated Learning (FL) has emerged as a promising paradigm for enabling collaborative model training across institutions without sharing raw transaction data. Yet, its practical effectiveness under realistic, non-IID financial data distributions remains insufficiently validated. In this work, we present a multi-institution, industry-oriented proof-of-concept study evaluating federated anomaly detection for payment transactions using the NVIDIA FLARE framework. We simulate a realistic federation of heterogeneous financial institutions, each observing distinct fraud typologies and operating under strict data isolation. Using a deep neural network trained via federated averaging (FedAvg), we demonstrate that federated models achieve a mean F1-score of 0.903 - substantially outperforming locally trained models (0.643) and closely approaching centralized training performance (0.925), while preserving full data sovereignty. We further analyze convergence behavior, showing that strong performance is achieved within 10 federated communication rounds, highlighting the operational viability of FL in latency- and cost-sensitive financial environments. To support deployment in regulated settings, we evaluate model interpretability using Shapley-based feature attribution and confirm that federated models rely on semantically coherent, domain-relevant decision signals. Finally, we incorporate sample-level differential privacy via DP-SGD and demonstrate favorable privacy-utility trade-offs...
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。