Efficient Full-Stack Private Federated Deep Learning with Post-Quantum Security

Fuente: arXiv
Salvato in:
Dettagli Bibliografici
Autori principali: Zhang, Yiwei, Behnia, Rouzbeh, Yavuz, Attila A., Ebrahimi, Reza, Bertino, Elisa
Natura: Preprint
Pubblicazione: 2025
Soggetti:
Accesso online:
Tags: Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
_version_ 1866909605873844224
author Zhang, Yiwei
Behnia, Rouzbeh
Yavuz, Attila A.
Ebrahimi, Reza
Bertino, Elisa
author_facet Zhang, Yiwei
Behnia, Rouzbeh
Yavuz, Attila A.
Ebrahimi, Reza
Bertino, Elisa
contents Federated learning (FL) enables collaborative model training while preserving user data privacy by keeping data local. Despite these advantages, FL remains vulnerable to privacy attacks on user updates and model parameters during training and deployment. Secure aggregation protocols have been proposed to protect user updates by encrypting them, but these methods often incur high computational costs and are not resistant to quantum computers. Additionally, differential privacy (DP) has been used to mitigate privacy leakages, but existing methods focus on secure aggregation or DP, neglecting their potential synergies. To address these gaps, we introduce Beskar, a novel framework that provides post-quantum secure aggregation, optimizes computational overhead for FL settings, and defines a comprehensive threat model that accounts for a wide spectrum of adversaries. We also integrate DP into different stages of FL training to enhance privacy protection in diverse scenarios. Our framework provides a detailed analysis of the trade-offs between security, performance, and model accuracy, representing the first thorough examination of secure aggregation protocols combined with various DP approaches for post-quantum secure FL. Beskar aims to address the pressing privacy and security issues FL while ensuring quantum-safety and robust performance.
format Preprint
id arxiv_https___arxiv_org_abs_2505_05751
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Efficient Full-Stack Private Federated Deep Learning with Post-Quantum Security
Zhang, Yiwei
Behnia, Rouzbeh
Yavuz, Attila A.
Ebrahimi, Reza
Bertino, Elisa
Cryptography and Security
Federated learning (FL) enables collaborative model training while preserving user data privacy by keeping data local. Despite these advantages, FL remains vulnerable to privacy attacks on user updates and model parameters during training and deployment. Secure aggregation protocols have been proposed to protect user updates by encrypting them, but these methods often incur high computational costs and are not resistant to quantum computers. Additionally, differential privacy (DP) has been used to mitigate privacy leakages, but existing methods focus on secure aggregation or DP, neglecting their potential synergies. To address these gaps, we introduce Beskar, a novel framework that provides post-quantum secure aggregation, optimizes computational overhead for FL settings, and defines a comprehensive threat model that accounts for a wide spectrum of adversaries. We also integrate DP into different stages of FL training to enhance privacy protection in diverse scenarios. Our framework provides a detailed analysis of the trade-offs between security, performance, and model accuracy, representing the first thorough examination of secure aggregation protocols combined with various DP approaches for post-quantum secure FL. Beskar aims to address the pressing privacy and security issues FL while ensuring quantum-safety and robust performance.
title Efficient Full-Stack Private Federated Deep Learning with Post-Quantum Security
topic Cryptography and Security
url https://arxiv.org/abs/2505.05751