NotesFAQContact Us
Collection
Advanced
Search Tips
Back to results
ERIC Number: ED658146
Record Type: Non-Journal
Publication Date: 2024
Pages: 132
Abstractor: As Provided
ISBN: 979-8-3831-8147-8
ISSN: N/A
EISSN: N/A
Available Date: N/A
Privacy in Federated Learning
Mengjiao Zhang
ProQuest LLC, Ph.D. Dissertation, Stevens Institute of Technology
The rise of Artificial Intelligence technology has raised concerns about the potential compromise of privacy due to the handling of personal data. Private AI prevents cybercrimes and falsehoods and protects human freedom and trust. While Federated Learning offers a solution by model training across decentralized devices or servers, thereby preserving data localization, it may leak client information through communicated gradients and parameters. Conventional defenses, such as dropout, GAN, and adversarial training, fail to either obstruct these attacks or significantly hamper model performance. This thesis centers on defending against gradient-based attacks in Federated Learning while upholding model efficiency and performance. As our first contribution, we introduce the pragmatic defense mechanism of Double-Blind Collaborative Learning (DBCL), which employs random matrix sketching on parameters and repeated sketching generation, achieving enhanced privacy without substantial computational overhead or lowering accuracy. Our primary investigation delves into byte coding for privacy in Natural Language Processing (NLP). This novel approach involves random-byte mapping with a subword fusion strategy, yielding promising experimental outcomes characterized by fortified privacy, memory efficiency, and accuracy. Notably, our approach obstructs an attacker's ability to reconstruct text token candidates for a batch of inputs, thus fortifying the resilience of private text in Federated Learning against potential recovery attempts, making the recovery of private data in federated learning much harder -- paving a way to a safer environment in both the real and virtual worlds. [The dissertation citations contained here are published with the permission of ProQuest LLC. Further reproduction is prohibited without permission. Copies of dissertations may be obtained by Telephone (800) 1-800-521-0600. Web page: http://www.proquest.com/en-US/products/dissertations/individuals.shtml.]
ProQuest LLC. 789 East Eisenhower Parkway, P.O. Box 1346, Ann Arbor, MI 48106. Tel: 800-521-0600; Web site: http://www.proquest.com/en-US/products/dissertations/individuals.shtml
Publication Type: Dissertations/Theses - Doctoral Dissertations
Education Level: N/A
Audience: N/A
Language: English
Sponsor: N/A
Authoring Institution: N/A
Grant or Contract Numbers: N/A
Author Affiliations: N/A