PPFL: privacy-preserving federated learning with trusted execution environments

By Fan Mo, Hamed Haddadi, Kleomenis Katevas, Eduard Marin, Diego Perino, Nicolas Kourtellis. ACM SIGMOBILE International Conference on Mobile Systems, Applications, and Services, 2021

317 citations recorded by the source corpus.

We propose and implement a Privacy-preserving Federated Learning (PPFL) framework for mobile systems to limit privacy leakages in federated learning. Leveraging the widespread presence of Trusted Execution Environments (TEEs) in high-end and mobile devices, we utilize TEEs on clients for local training, and on servers for secure aggregation, so that model/gradient updates are hidden from adversaries. Challenged by the limited memory size of current TEEs, we leverage greedy layer-wise training to train each model's layer inside the trusted area until its convergence. The performance evaluation of our implementation shows that PPFL can significantly improve privacy while incurring small system overheads at the client-side. In particular, PPFL can successfully defend the trained model against data reconstruction, property inference, and membership inference attacks. Furthermore, it can achieve comparable model utility with fewer communication rounds (0.54×) and a similar amount of network traffic (1.002×) compared to the standard federated learning of a complete model. This is achieved while only introducing up to ~15% CPU time, ~18% memory usage, and ~21% energy consumption overhead in PPFL's client-side.

Subfields: Artificial Intelligence

View Paper: https://www.semanticscholar.org/paper/874c12895675a22846721bab05efa3c24d2d9423

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

  1. Michael G. Rabbat
  2. Hongyuan Zhan
  3. Mani Malek
  4. John Nguyen
  5. Ashkan Yousefpour
  6. Kshitiz Malik
  7. Dzmitry Huba
  8. Angelia Nedić

Citations in the corpus