Big Data Research ›› 2022, Vol. 8 ›› Issue (5): 12-32.doi: 10.11959/j.issn.2096-0271.2022038

• TOPIC: DATA CIRCULATION AND PRIVACY COMPUTING • Previous Articles     Next Articles

Threats and defenses of federated learning: a survey

Jianhan WU1,2, Shijing SI1, Jianzong WANG1, Jing XIAO1   

  1. 1 Ping An Technology (Shenzhen) Co., Ltd., Shenzhen 518063, China
    2 University of Science and Technology of China, Hefei 230026, China
  • Online:2022-09-15 Published:2022-09-01
  • Supported by:
    The Key Research and Development Program of Guangdong Province(2021B0101400003)

Abstract:

With the comprehensive application of machine learning technology, data security problems occur from time to time, and people’s demand for privacy protection is emerging, which undoubtedly reduces the possibility of data sharing between different entities, making it difficult to make full use of data and giving rise to data islands.Federated learning (FL), as an effective method to solve the problem of data islands, is essentially distributed machine learning.Its biggest characteristic is to save user data locally so that the models’ joint training process won’t leak sensitive data of partners.Nevertheless, there are still many security risks in federated learning in reality, which need to be further studied.The possible attack means and corresponding defense measures were investigated in federal learning comprehensively and systematically.Firstly, the possible attacks and threats were classified according to the training stages of federal learning, common attack methods of each category were enumerated, and the attack principle of corresponding attacks was introduced.Then the specific defense measures against these attacks and threats were summarized along with the principle analysis, to provide a detailed reference for the researchers who first contact this field.Finally, the future work in this research area was highlighted, and several areas that need to be focused on were pointed out to help improve the security of federal learning.

Key words: federated learning, attack, defense, privacy protection, machine learning

CLC Number: 

No Suggested Reading articles found!