CADRE provides customizable data-readiness metrics, rules, remedies, and aggregated reports for privacy-preserving federated learning, demonstrated on six datasets.
EIFFeL: Ensuring Integrity for Federated Learning
1 Pith paper cite this work. Polarity classification is still indexing.
abstract
Federated learning (FL) enables clients to collaborate with a server to train a machine learning model. To ensure privacy, the server performs secure aggregation of updates from the clients. Unfortunately, this prevents verification of the well-formedness (integrity) of the updates as the updates are masked. Consequently, malformed updates designed to poison the model can be injected without detection. In this paper, we formalize the problem of ensuring \textit{both} update privacy and integrity in FL and present a new system, \textsf{EIFFeL}, that enables secure aggregation of \textit{verified} updates. \textsf{EIFFeL} is a general framework that can enforce \textit{arbitrary} integrity checks and remove malformed updates from the aggregate, without violating privacy. Our empirical evaluation demonstrates the practicality of \textsf{EIFFeL}. For instance, with $100$ clients and $10\%$ poisoning, \textsf{EIFFeL} can train an MNIST classification model to the same accuracy as that of a non-poisoned federated learner in just $2.4s$ per iteration.
citation-role summary
citation-polarity summary
fields
cs.CR 1years
2025 1verdicts
CONDITIONAL 1roles
baseline 1polarities
baseline 1representative citing papers
citing papers explorer
-
CADRE: Customizable Assurance of Data Readiness in Privacy-Preserving Federated Learning
CADRE provides customizable data-readiness metrics, rules, remedies, and aggregated reports for privacy-preserving federated learning, demonstrated on six datasets.