CORTEXA
← Browse
semantic_scholarProceedings on Privacy Enhancing Technologies

SoK: Verifiable Integrity Claims for Privacy-Preserving Federated Learning

Andrea Rizzini, Marco Esposito, Tommaso Gagliardoni, F. Bruschi

TL;DR: This SoK model federated learning as an append-only transcript of submissions, admissions, aggregation, and finalization events, and formalize verifiability as a collection of integrity claims issued by clients and the aggregator, and checked by different verifier classes.

Federated Learning (FL) is an advancement in Machine Learning motivated by the need to preserve the privacy of the data used to train models. While it effectively addresses this issue, the multi-participant paradigm on which it is based introduces several challenges. Among these are the risks that participating entities may behave dishonestly and fail to perform their tasks correctly. This misbehavior, in turn, also threatens privacy, because an undetected deviation in training or aggregation can silently undermine the confidentiality guarantees that FL was designed to provide. This motivates mechanisms that provide checkable evidence that released checkpoints are consistent with a declared learning specification and an auditable execution trace. In this SoK, we model federated learning as an append-only transcript of submissions, admissions, aggregation, and finalization events, and formalize verifiability as a collection of integrity claims issued by clients and the aggregator, and checked by different verifier classes. We derive a taxonomy of recurring client-side and aggregator-side claims and use it to analyze representative verifiable FL (VFL) systems spanning Zero-Knowledge Proofs (ZKP) and Trusted Execution Environment (TEE) technologies. Our analysis suggests that, while verifiable aggregation is comparatively mature, data verifiability appears feasible but still sparsely adopted in practice, and verifiable training remain costly and rarely scale to modern models.

View free PDFSource page

Related papers

semantic_scholarProceedings on Privacy Enhancing Technologies

FHEON: A Configurable Framework for Developing Privacy-Preserving Encrypted Neural Networks

Nges Brian Njungle, Eric Jahns, Michel A. Kinsy

TL;DR: FHEON is presented, an open-source configurable framework for developing privacy-preserving neural network models for inference using the CKKS scheme of HE, and outperform all state-of-the-art HE inference works in both latency and memory utilization.

The widespread adoption of Machine Learning as a Service raises critical privacy and security concerns, particularly about data confidentiality and trust in both cloud providers and the machine learning models provided. Homomorphic Encryption (HE) has emerged as a promising solut…

View free PDFSource page
semantic_scholarProceedings on Privacy Enhancing Technologies

Training TFHE-Based Neural Networks with Approximated Floating-Point Arithmetic

Emanuel Nicoletti, Fabrizio Pittorino, Alessandro Falcetta, Luca Colombo, Manuel Roveri

TL;DR: This work presents a framework that enables approximate floating-point training within TFHE by reinterpreting IEEE 754 representations as encrypted integers and operating on them with redesigned arithmetic, and performs the first fully encrypted training of a small-scale CNN under TFHE.

Training neural networks under Torus Fully Homomorphic Encryption (TFHE) is severely constrained by the native restriction of the scheme to boolean and integer arithmetic, forcing prior work to rely on quantized integer pipelines limited to shallow MLPs. We present a framework th…

View free PDFSource page