Efficient Byzantine-Robust Privacy-Preserving Federated Learning via Dimension Compression

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Qin, Xian, Yang, Xue, Tang, Xiaohu
Format: Preprint
Published: 2025
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866918141193355264
author Qin, Xian
Yang, Xue
Tang, Xiaohu
author_facet Qin, Xian
Yang, Xue
Tang, Xiaohu
contents Federated Learning (FL) allows collaborative model training across distributed clients without sharing raw data, thus preserving privacy. However, the system remains vulnerable to privacy leakage from gradient updates and Byzantine attacks from malicious clients. Existing solutions face a critical trade-off among privacy preservation, Byzantine robustness, and computational efficiency. We propose a novel scheme that effectively balances these competing objectives by integrating homomorphic encryption with dimension compression based on the Johnson-Lindenstrauss transformation. Our approach employs a dual-server architecture that enables secure Byzantine defense in the ciphertext domain while dramatically reducing computational overhead through gradient compression. The dimension compression technique preserves the geometric relationships necessary for Byzantine defence while reducing computation complexity from $O(dn)$ to $O(kn)$ cryptographic operations, where $k \ll d$. Extensive experiments across diverse datasets demonstrate that our approach maintains model accuracy comparable to non-private FL while effectively defending against Byzantine clients comprising up to $40\%$ of the network.
format Preprint
id arxiv_https___arxiv_org_abs_2509_11870
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Efficient Byzantine-Robust Privacy-Preserving Federated Learning via Dimension Compression
Qin, Xian
Yang, Xue
Tang, Xiaohu
Cryptography and Security
Federated Learning (FL) allows collaborative model training across distributed clients without sharing raw data, thus preserving privacy. However, the system remains vulnerable to privacy leakage from gradient updates and Byzantine attacks from malicious clients. Existing solutions face a critical trade-off among privacy preservation, Byzantine robustness, and computational efficiency. We propose a novel scheme that effectively balances these competing objectives by integrating homomorphic encryption with dimension compression based on the Johnson-Lindenstrauss transformation. Our approach employs a dual-server architecture that enables secure Byzantine defense in the ciphertext domain while dramatically reducing computational overhead through gradient compression. The dimension compression technique preserves the geometric relationships necessary for Byzantine defence while reducing computation complexity from $O(dn)$ to $O(kn)$ cryptographic operations, where $k \ll d$. Extensive experiments across diverse datasets demonstrate that our approach maintains model accuracy comparable to non-private FL while effectively defending against Byzantine clients comprising up to $40\%$ of the network.
title Efficient Byzantine-Robust Privacy-Preserving Federated Learning via Dimension Compression
topic Cryptography and Security
url https://arxiv.org/abs/2509.11870