首页|联邦学习快速加密聚合方案及仿真分析

联邦学习快速加密聚合方案及仿真分析

扫码查看
为解决传统的加密聚合方案使用同态加密(homomorphic encryption,HE)对所有梯度进行加密保护,导致计算和通信成本增加的问题,提出一种快速加密聚合方案RandomCrypt.执行剪切和量化以固定梯度值范围;在梯度上添加两种类型的噪声分别进行加密和差分隐私(differential privacy,DP)保护;对噪声密钥执行HE,以修复由DP保护引起的精度损失.基于FATE框架实现了 RandomCrypt方案,并开展了黑客攻击仿真实验,实验结果表明本方案可有效抵抗反推攻击且保证训练精度的同时,相比传统方案仅需要45%~51%的通信成本和5%~23%的计算成本.
A Fast Federated Learning-based Crypto-aggregation Scheme and Its Simulation Analysis
To solve the problem of increased computation and communication costs caused by using homomorphic encryption(HE)to protect all gradients in traditional cryptographic aggregation(crypto-aggregation)schemes,a fast crypto-aggregation scheme called RandomCrypt was proposed.RandomCrypt performed clipping and quantization to fix the range of gradient values and then added two types of noise on the gradient for encryption and differential privacy(DP)protection.It conducted HE on noise keys to revise the precision loss caused by DP protection.RandomCrypt was implemented based on a FATE framework,and a hacking simulation experiment was conducted.The results show that the proposed scheme can effectively hinder inference attacks while ensuring training accuracy.It only requires 45%~51%communication cost and 5%~23%computation cost compared with traditional schemes.

federated learningdifferential privacyhomomorphic encryptioninference attackhacking simulation

吕泊伸、宋晓

展开 >

北京航空航天大学 网络空间安全学院,北京 100191

联邦学习 差分隐私 同态加密 反推攻击 攻击仿真

2024

系统仿真学报
北京仿真中心 中国系统仿真学会

系统仿真学报

CSTPCD北大核心
影响因子:0.551
ISSN:1004-731X
年,卷(期):2024.36(12)