FedLAP-DP: Federated Learning by Sharing Differentially Private Loss Approximations
Reviewed by Pith T0 review T1 audit T2 compute T3 formal T4 kernel pith:JLGONFRTrecord.jsonopen to challenge →
read the original abstract
Conventional gradient-sharing approaches for federated learning (FL), such as FedAvg, rely on aggregation of local models and often face performance degradation under differential privacy (DP) mechanisms or data heterogeneity, which can be attributed to the inconsistency between the local and global objectives. To address this issue, we propose FedLAP-DP, a novel privacy-preserving approach for FL. Our formulation involves clients synthesizing a small set of samples that approximate local loss landscapes by simulating the gradients of real images within a local region. Acting as loss surrogates, these synthetic samples are aggregated on the server side to uncover the global loss landscape and enable global optimization. Building upon these insights, we offer a new perspective to enforce record-level differential privacy in FL. A formal privacy analysis demonstrates that FedLAP-DP incurs the same privacy costs as typical gradient-sharing schemes while achieving an improved trade-off between privacy and utility. Extensive experiments validate the superiority of our approach across various datasets with highly skewed distributions in both DP and non-DP settings. Beyond the promising performance, our approach presents a faster convergence speed compared to typical gradient-sharing methods and opens up the possibility of trading communication costs for better performance by sending a larger set of synthetic images. The source is available at \url{https://github.com/hui-po-wang/FedLAP-DP}.
This paper has not been read by Pith yet.
Forward citations
Cited by 1 Pith paper
-
FLRSP: Privacy-Preserving Federated Learning Using Randomly Selected Model Parameters
FLRSP enhances privacy in federated learning by randomly selecting model parameters for sharing, delivering competitive image classification accuracy and improved resistance to reconstruction attacks on ResNet34 and V...
discussion (0)
Sign in with ORCID, Apple, or X to comment. Anyone can read and Pith papers without signing in.