Security-enhanced machine learning framework based on PATE

Privacy aggregated teacher ensembles (PATE) is a general machine learning framework that provides privacy-preserving for training data. However, this framework faces security risks in the distributed learning environment. Firstly, the involvement of illicit nodes in communication may lead to aggregation result inaccuracies. Secondly, the semi-honest aggregator and teacher nodes could potentially result in privacy leaks of other teacher nodes. Thirdly, the aggregation results are influenced by each teacher, and there may be poisoning attacks during the aggregation process. Fourthly, malicious aggregator may tamper with the information sent to student nodes or attempt to access relevant information about student node training labels. To address the above issues, we propose a machine learning framework with stronger security and privacy in a distributed learning environment based on principal component analysis and secures multi-party computing. The framework is subjected to security analysis and experimental validation. The security analysis establishes the framework's robustness and privacy-preserving characteristics, while experimental validation demonstrates its practical viability.

Authors

Institutions

Publication Details

Journal
International Journal of Information and Computer Security
Published
2025-01-01
DOI
https://doi.org/10.1504/ijics.2025.145126
Primary Topic
Network Security and Intrusion Detection
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Security-enhanced machine learning framework based on PATE

Xian Guo, Junli Fang, Yongbo Jiang, Jing Wang et al.
International Journal of Information and Computer Security
Network Security and Intrusion Detection
article

Security-enhanced machine learning framework based on PATE

Xian Guo, Junli Fang, Yongbo Jiang, Jing Wang, Kai Zheng
article en

Abstract

Privacy aggregated teacher ensembles (PATE) is a general machine learning framework that provides privacy-preserving for training data. However, this framework faces security risks in the distributed learning environment. Firstly, the involvement of illicit nodes in communication may lead to aggregation result inaccuracies. Secondly, the semi-honest aggregator and teacher nodes could potentially result in privacy leaks of other teacher nodes. Thirdly, the aggregation results are influenced by each teacher, and there may be poisoning attacks during the aggregation process. Fourthly, malicious aggregator may tamper with the information sent to student nodes or attempt to access relevant information about student node training labels. To address the above issues, we propose a machine learning framework with stronger security and privacy in a distributed learning environment based on principal component analysis and secures multi-party computing. The framework is subjected to security analysis and experimental validation. The security analysis establishes the framework's robustness and privacy-preserving characteristics, while experimental validation demonstrates its practical viability.

International Journal of Information and Computer SecurityVol. 26(1/2)
Lanzhou University of Technology (CN)
Openalex Percentile: Top 95%
Network Security and Intrusion Detection
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.