TY - GEN
T1 - PPDL
T2 - 18th International Conference on Network and System Security, NSS 2024
AU - Ghavamipour, Ali Reza
AU - Hao Zhao, Benjamin Zi
AU - Turkmen, Fatih
PY - 2025
Y1 - 2025
N2 - Decentralized learning (DL) offers a novel paradigm in machine learning by distributing training across clients without central aggregation, enhancing scalability and efficiency. However, DL’s peer-to-peer model introduces unique challenges in protecting machine learning models against inference attacks and privacy leaks. By forgoing central bottlenecks, DL demands privacy-preserving aggregation methods to protect data from ‘honest but curious’ clients and adversaries, maintaining network-wide privacy. Privacy-preserving DL faces the additional hurdle of client dropout, clients not submitting updates due to connectivity problems or unavailability, further complicating the aggregation. In this paper, we propose three secret sharing-based dropout resilience protocols for privacy-preserving DL. We evaluate the efficiency, performance, and accuracy of these protocols through experiments on open datasets MNIST, Fashion-MNIST, SVHN, and CIFAR-10. We also compare our protocols with traditional secret-sharing solutions including a scenario that contains up to 1000 clients. Evaluations show that our protocols significantly outperform conventional methods, especially in scenarios with up to 30% of clients dropping out and model sizes of up to 106 parameters. Our proposals demonstrate significantly high efficiency with larger models, higher dropout rates, and extensive client networks, highlighting their effectiveness in enhancing decentralized learning systems’ privacy and dropout robustness.
AB - Decentralized learning (DL) offers a novel paradigm in machine learning by distributing training across clients without central aggregation, enhancing scalability and efficiency. However, DL’s peer-to-peer model introduces unique challenges in protecting machine learning models against inference attacks and privacy leaks. By forgoing central bottlenecks, DL demands privacy-preserving aggregation methods to protect data from ‘honest but curious’ clients and adversaries, maintaining network-wide privacy. Privacy-preserving DL faces the additional hurdle of client dropout, clients not submitting updates due to connectivity problems or unavailability, further complicating the aggregation. In this paper, we propose three secret sharing-based dropout resilience protocols for privacy-preserving DL. We evaluate the efficiency, performance, and accuracy of these protocols through experiments on open datasets MNIST, Fashion-MNIST, SVHN, and CIFAR-10. We also compare our protocols with traditional secret-sharing solutions including a scenario that contains up to 1000 clients. Evaluations show that our protocols significantly outperform conventional methods, especially in scenarios with up to 30% of clients dropping out and model sizes of up to 106 parameters. Our proposals demonstrate significantly high efficiency with larger models, higher dropout rates, and extensive client networks, highlighting their effectiveness in enhancing decentralized learning systems’ privacy and dropout robustness.
UR - https://www.scopus.com/pages/publications/105001336932
U2 - 10.1007/978-981-96-3531-3_5
DO - 10.1007/978-981-96-3531-3_5
M3 - Conference proceeding contribution
AN - SCOPUS:105001336932
SN - 9789819635306
T3 - Lecture Notes in Computer Science
SP - 82
EP - 106
BT - Network and System Security
A2 - Song, Houbing Herbert
A2 - Di Pietro, Roberto
A2 - Alrabaee, Saed
A2 - Tubishat, Mohammad
A2 - Al-kfairy, Mousa
A2 - Alfandi, Omar
PB - Springer, Springer Nature
CY - Singapore
Y2 - 20 November 2024 through 22 November 2024
ER -