FLRSP: Privacy-Preserving Federated Learning Using Randomly Selected Model Parameters
For federated learning practitioners, this method offers a simple approach to enhance privacy without sacrificing accuracy, though it is an incremental improvement over existing techniques.
FLRSP proposes a privacy-preserving federated learning method that randomly selects model parameters for sharing, achieving improved accuracy and robustness against attacks compared to prior methods in image classification tasks using ResNet34 and ViT.
In this paper, we propose a method for privacy-preserving federated learning that uses randomly selected model parameters to update global models. High-quality deep neural networks (DNN) models require a huge amount of training data in general, but model training raises privacy concerns when dealing with sensitive or personal information. Federated learning is a distributed machine learning framework in which multiple clients and a server train a model collaboratively. However, if the shared updates are compromised, an attacker may reconstruct the original training data. In addition, previous methods for improving robustness generally reduce the accuracy. To overcome these issues, in our method called federated learning using randomly selected model parameters (FLRSP), model parameters computed in each local server are randomly selected and shared to update a global model in a central server. In experiments, image classification tasks were carried out on the ResNet34 architecture and the Vision Transformer (ViT) under the use of Federated Stochastic Gradient Descent (FedSGD) and Federated Averaging (FedAvg), and the results demonstrated our method's effectiveness in terms of image classification accuracy and robustness against state-of-the-art attacks compared with previous methods.