PDLG: Prevent Deep Leakage from Gradients based on Dataset Condensation in Federated Meta-Learning
Federated Meta-Learning (FML) has achieved privacy protection and intelligent improvement in many fields, such as healthcare and finance. However, the small dataset characteristic of FML may satisfy the strong assumptions of Deep Leakage from Gradients (DLG) attacks, making it susceptible to such attacks. Previous research has considered the strong assumptions of DLG to be impractical in real-world scenarios, resulting in a gap in the defense against DLG attacks in FML scenarios. In this paper, we propose a method called Prevent Deep Leakage Gradients (PDLG), PDLG utilizes condensation of training dataset to prevent DLG in FML, addressing the strong assumption problem of DLG in real-world scenarios. Specifically, PDLG first condenses the local raw training data through the client. Second use condensation data instead of the raw training data to train the model, and evaluate the changes in model classification performance in FML. Third DLG is used for the condensed dataset. As the Mean Square Error (MSE) between the real and the dummy gradients decreased, DLG could not restore the original images. The experimental results demonstrated that the classification performance of the models trained on condensation data remained within 10%. PDLG achieving a balance between model performance and privacy.
Authors
- Yingzhi Zhang (ORCID: https://orcid.org/0000-0002-2856-5156)
- Longxiang Gao (ORCID: https://orcid.org/0000-0002-3026-7537)
- Weimin Bian
- Lei Cui (ORCID: https://orcid.org/0000-0002-1932-1440)
- Feng Wu (ORCID: https://orcid.org/0000-0003-3077-0762)
- Shouyue Sun (ORCID: https://orcid.org/0000-0002-2330-4977)
Institutions
- University of Technology Sydney (AU)
- Qilu University of Technology (CN)
- Shandong Academy of Sciences (CN)
Publication Details
- Published
- 2024-12-20
- DOI
- https://doi.org/10.1109/msn63567.2024.00076
- Primary Topic
- Adversarial Robustness in Machine Learning
- Type
- article
- Field-Weighted Citation Impact
- 0.00