Federated Learning exploits local model training to aggregate and create a global model without sharing raw data. Each client trains a local model and shares it to aggregate a global one. Several works demonstrate that starting from trained weights, it's possible to reconstruct the original used data. For this reason, the research and industrial world introduced the Homomorphic Encryption technique to encrypt the transmitted local model's weights. This approach protects the trained weights from a hypothetical malicious aggregator server that can not perform operations over plaintext weights. In the proposed work, we implement a Federated Learning solution applying Homomorphic Encryption using the Flower framework and the Tenseal library. Our solution follows best practices for custom aggregation strategies with the Flower framework, making it possible to provide it to the community.

Flower Full-Compliant Implementation of Federated Learning with Homomorphic Encryption

Catalfamo, Alessio;Carnevale, Lorenzo;Garofalo, Marco;Villari, Massimo
2024-01-01

Abstract

Federated Learning exploits local model training to aggregate and create a global model without sharing raw data. Each client trains a local model and shares it to aggregate a global one. Several works demonstrate that starting from trained weights, it's possible to reconstruct the original used data. For this reason, the research and industrial world introduced the Homomorphic Encryption technique to encrypt the transmitted local model's weights. This approach protects the trained weights from a hypothetical malicious aggregator server that can not perform operations over plaintext weights. In the proposed work, we implement a Federated Learning solution applying Homomorphic Encryption using the Flower framework and the Tenseal library. Our solution follows best practices for custom aggregation strategies with the Flower framework, making it possible to provide it to the community.
File in questo prodotto:
Non ci sono file associati a questo prodotto.
Pubblicazioni consigliate

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.

Utilizza questo identificativo per citare o creare un link a questo documento: https://hdl.handle.net/11570/3342535
 Attenzione

Attenzione! I dati visualizzati non sono stati sottoposti a validazione da parte dell'ateneo

Citazioni
  • ???jsp.display-item.citation.pmc??? ND
  • Scopus 2
  • ???jsp.display-item.citation.isi??? 1
social impact