Papers
Topics
Authors
Recent
Search
2000 character limit reached

FHAUC: Privacy Preserving AUC Calculation for Federated Learning using Fully Homomorphic Encryption

Published 21 Mar 2024 in cs.CR | (2403.14428v1)

Abstract: Ensuring data privacy is a significant challenge for machine learning applications, not only during model training but also during evaluation. Federated learning has gained significant research interest in recent years as a result. Current research on federated learning primarily focuses on preserving privacy during the training phase. However, model evaluation has not been adequately addressed, despite the potential for significant privacy leaks during this phase as well. In this paper, we demonstrate that the state-of-the-art AUC computation method for federated learning systems, which utilizes differential privacy, still leaks sensitive information about the test data while also requiring a trusted central entity to perform the computations. More importantly, we show that the performance of this method becomes completely unusable as the data size decreases. In this context, we propose an efficient, accurate, robust, and more secure evaluation algorithm capable of computing the AUC in horizontal federated learning systems. Our approach not only enhances security compared to the current state-of-the-art but also surpasses the state-of-the-art AUC computation method in both approximation performance and computational robustness, as demonstrated by experimental results. To illustrate, our approach can efficiently calculate the AUC of a federated learning system involving 100 parties, achieving 99.93% accuracy in just 0.68 seconds, regardless of data size, while providing complete data privacy.

Definition Search Book Streamline Icon: https://streamlinehq.com
References (30)
  1. Openfhe: Open-source fully homomorphic encryption library. In Proceedings of the 10th Workshop on Encrypted Computing & Applied Homomorphic Cryptography, pp.  53–63, 2022.
  2. Privacy-preserving deep learning via additively homomorphic encryption. IEEE transactions on information forensics and security, 13(5):1333–1345, 2017.
  3. Towards federated learning at scale: System design. In Talwalkar, A., Smith, V., and Zaharia, M. (eds.), Proceedings of Machine Learning and Systems, volume 1, pp.  374–388, 2019.
  4. Homomorphic encryption for arithmetic of approximate numbers. In Advances in Cryptology–ASIACRYPT 2017: 23rd International Conference on the Theory and Applications of Cryptology and Information Security, Hong Kong, China, December 3-7, 2017, Proceedings, Part I 23, pp.  409–437. Springer, 2017.
  5. ElGamal, T. A public key cryptosystem and a signature scheme based on discrete logarithms. IEEE transactions on information theory, 31(4):469–472, 1985.
  6. Privacy preserving machine learning with homomorphic encryption and federated learning. Future Internet, 13(4):94, 2021.
  7. Machine learning, medical diagnosis, and biomedical engineering research-commentary. Biomedical engineering online, 13:1–9, 2014.
  8. Gentry, C. Fully homomorphic encryption using ideal lattices. In Proceedings of the forty-first annual ACM symposium on Theory of computing, pp.  169–178, 2009.
  9. Diffprivlib: the IBM differential privacy library. ArXiv e-prints, 1907.02444 [cs.CR], July 2019.
  10. Advances and open problems in federated learning. Foundations and Trends® in Machine Learning, 14(1–2):1–210, 2021.
  11. Kononenko, I. Machine learning for medical diagnosis: history, state of the art and perspective. Artificial Intelligence in medicine, 23(1):89–109, 2001.
  12. Federated learning: Challenges, methods, and future directions. IEEE signal processing magazine, 37(3):50–60, 2020.
  13. Secure model fusion for distributed learning using partial homomorphic encryption. Policy-Based Autonomic Data Governance, pp.  154–179, 2019.
  14. An examination of data confidentiality and disclosure issues related to publication of empirical roc curves. Academic radiology, 20(7):889–896, 2013.
  15. Federated learning: Collaborative machine learning without centralized training data. Google AI Blog, 04 2017.
  16. Communication-efficient learning of deep networks from decentralized data. In Artificial intelligence and statistics, pp.  1273–1282. PMLR, 2017.
  17. A survey on security and privacy of federated learning. Future Generation Computer Systems, 115:619–640, 2021. ISSN 0167-739X. doi: https://doi.org/10.1016/j.future.2020.10.007.
  18. Deep learning recommendation model for personalization and recommendation systems. arXiv preprint arXiv:1906.00091, 2019.
  19. Paillier, P. Public-key cryptosystems based on composite degree residuosity classes. In International conference on the theory and applications of cryptographic techniques, pp.  223–238. Springer, 1999.
  20. A method for obtaining digital signatures and public-key cryptosystems. Communications of the ACM, 21(2):120–126, 1978.
  21. Privacy-preserving federated neural network learning for disease-associated cell classification. Patterns, 3(5), 2022.
  22. Differentially private algorithms for empirical machine learning. arXiv preprint arXiv:1411.5428, 2014.
  23. Dpauc: Differentially private auc computation in federated learning. arXiv preprint arXiv:2208.12294, 2022.
  24. ppaurora: Privacy preserving area under receiver operating characteristic and precision-recall curves. In Li, S., Manulis, M., and Miyaji, A. (eds.), Network and System Security, pp.  265–280, Cham, 2023. Springer Nature Switzerland. ISBN 978-3-031-39828-5.
  25. Verifiable fully homomorphic encryption. arXiv preprint arXiv:2301.07041, 2023.
  26. Federated learning with differential privacy: Algorithms and performance analysis. IEEE Transactions on Information Forensics and Security, 15:3454–3469, 2020.
  27. Yeh, S.-T. et al. Using trapezoidal rule for the area under a curve calculation. Proceedings of the 27th Annual SAS® User Group International (SUGI’02), pp.  1–5, 2002.
  28. Batchcrypt: Efficient homomorphic encryption for cross-silo federated learning. In Proceedings of the 2020 USENIX Annual Technical Conference (USENIX ATC 2020), 2020.
  29. idlg: Improved deep leakage from gradients. arXiv preprint arXiv:2001.02610, 2020.
  30. Deep leakage from gradients. Advances in neural information processing systems, 32, 2019.

Summary

No one has generated a summary of this paper yet.

Paper to Video (Beta)

No one has generated a video about this paper yet.

Whiteboard

No one has generated a whiteboard explanation for this paper yet.

Open Problems

We haven't generated a list of open problems mentioned in this paper yet.

Continue Learning

We haven't generated follow-up questions for this paper yet.

Collections

Sign up for free to add this paper to one or more collections.