[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-detail-121356-en":3,"doc-seo-121356-105":29,"detail-sidebar-cat-0-en-105":81},{"code":4,"msg":5,"data":6},0,"success",{"doc_id":7,"user_id":8,"nickname":9,"user_avatar":10,"doc_module":4,"category_id":11,"category_name":12,"doc_title":13,"doc_description":14,"doc_content":15,"file_id":16,"file_url":17,"file_type":18,"file_size":19,"view_count":20,"is_deleted":4,"is_public":20,"is_downloadable":20,"audit_status":20,"page_count":20,"language":21,"language_code":22,"site_id":23,"html_lang":22,"table_of_contents":24,"faqs":25,"seo_title":26,"seo_description":14,"update_tm":27,"read_time":28},121356,2336464648746,"Skyler","https://ap-avatar.wpscdn.com/davatar_276721f389ce27ea32af1340a28f341c",8,"Research & Report","A Federated Machine Learning System that Protects Privacy and Defends against Poison Attacks","A federated machine learning framework is presented to reduce security risks in federated learning, where untrusted clients can degrade model accuracy through poisoned or faulty updates, and where external aggregation can leak client data. The solution combines homomorphic encryption with an aggregation approach that operates on encrypted client vectors and leverages a trusted execution environment for controlled decryption of aggregated results. A proof-of-concept implementation simulates client-server interactions using a neural network model and demonstrates measurable runtime overhead and privacy-oriented processing.","Department Of Engineering  \nArvid Gustafson  \nHonors Poster Presentation  \n3 May 2023  \nAdvisor: Wensheng Zhang  \nA Federated Machine Learning System that Protects Privacy and Defends against Poison Attacks  \nIntroduction  \nMachine learning (ML) refers to using some model, a function that yields some output like a number from an input like numbers or images, often a neural network. This model is calibrated by a continual process of testing, by applying the model to some data, observing its outputs, and adjusting its settings, often with the help of linear algebra. Federated ML (FML) is a way to train such an ML model. In FML, a single server holds an ML model, and distributes is to client computers, which train the received model, sends back recommendations for adjusting its settings. Once all training has completed, or after some time limit, the server then applies these changes upon its model by aggregating or averaging them. Then, the cycle repeats until the model is deemed sufficiently accurate.  \nHowever, as it stands, FML has some security vulnerabilities. Malicious, incompetent or mistaken clients may recommend adjustments that make the model less accurate, perhaps by using faulty data to train with. Additionally, the server may use some external means of aggregating client results, like the cloud, due to its size. However, the use of such technology can reveal confidential information about these clients, such as inferring the data they used.  \nIn order to account for both of these vulnerabilities, we employ the use of Homomorphic Encryption (HE), and a suitable algorithm with it. HE allows for some operations to occur on encrypted data like addition and multiplication. Our algorithm lies in aggregation, accepting client options as encrypted vectors of numbers, and it is shown to the right. It requires access to a Trusted Execution Environment (TEE) to decrypt aggregated random groups of client results.  \nAlgorithm  \n/* D – Array of Encrypted Client Results Arrays  \n* M – Array of Magnitudes of Client Results  \n* numWeights – The Size of Client Results  \n* numClients – The Number of Clients  \n* W – Encrypted Initial Model Weights */ Aggregate(W, D, M, numWeights, numClients):  \n/* Generate an array R[NUM_GROUPS][numWeights]  \n* that assigns a client c's weight w to a  \n* group if and only if R[c][w] == 1.  \n* Let N[i] be sqrt( sum ( R[i][*], *) */ For i from 0 until NUM_GROUPS:  \nFor j from 0 until numClients:  \nFor k from 0 until numWeights:  \nS[k] = R[i][k] / (N[i]*M[j]) C1 = D[j] * encode(S)  \nFor k=1; k \u003C numWeights; k \u003C\u003C= 1: C2 = rotate_vector(C1,k) C1 = C1 + C2  \nC[i][j] = decode(C1[0]) // on TEET[i] = avg( max( abs(C[k][i]-C[k][j]), k), j) L = 1 – T; a = min(L)  \nL = log( (L/a) / (1 .05 - (L/a)) ) + 0.5 a = min(L); L = L – a; a = min(L)  \nIf a \u003C 0.05: L.fill(1)  \nElse: L = L / a  \nFor i from 0 until numClients:  \nFor j from 0 until numWeights:  \nX[j] = L[i] / numClients  \nW += D[i] * encode(X)  \nPrototye  \nTo demonstrate this algorithm, we have made a proof-of-concept software application that simulates a FML system. For our ML model, we used a basic Neural Network (NN), a diagram of which can be seen to the right. The NN could be used to model either an XOR gate or a NOR gate, usually an XOR gate.  \nFor HE, we used the MS Seal library. However, we ran into trouble using separate programs when MS Seal did not provide a good way to transfer a Ciphertext over a connection, as clients encode their results. Therefore, to simulate interactions between clients and servers, we used a single multithreaded program running on a single computer. This way, we could let the client threads share public key and ciphertexts through shared pointers. An example of output from our program is shown to the right.  \nPerformance  \nFor 4 client threads with 1000 training iterations each and 4 server iterations:  \n• With Security: 3 seconds and 213 milliseconds.  \n• Without Security: 335 milliseconds.  \nFuture Work  \nThe next steps this","cbCairztvcpH1gS2","https://ap.wps.com/l/cbCairztvcpH1gS2","pdf",250033,1,"English","en",105,"# Introduction\n# Algorithm\n# Prototype\n# Performance\n# Future Work\n# Acknowledgements","[{\"question\":\"What performance difference is reported between using the security mechanism and not using it?\",\"answer\":\"For four client threads with 1000 training iterations each and four server iterations, the system reports about 3.213 seconds with security and about 335 milliseconds without security.\"}]","A Federated Machine Learning System that Protects Privacy and Defends against Poison Attacks | PDF",1785735215,3,{"code":4,"msg":30,"data":31},"ok",{"site_id":23,"language":22,"slug":32,"title":13,"keywords":33,"description":14,"schema_data":34,"social_meta":76,"head_meta":78,"extra_data":80,"updated_unix":27},"a-federated-machine-learning-system-that-protects-privacy-and-defends-against-poison-attacks","",{"@graph":35,"@context":75},[36,52,66],{"@type":37,"itemListElement":38},"BreadcrumbList",[39,43,47,49],{"item":40,"name":41,"@type":42,"position":20},"https://docshare.wps.com","Home","ListItem",{"item":44,"name":45,"@type":42,"position":46},"https://docshare.wps.com/document/","Document",2,{"item":48,"name":12,"@type":42,"position":28},"https://docshare.wps.com/document/research-report/",{"item":50,"name":13,"@type":42,"position":51},"https://docshare.wps.com/document/a-federated-machine-learning-system-that-protects-privacy-and-defends-against-poison-attacks/121356/",4,{"url":50,"name":13,"@type":53,"author":54,"headline":13,"publisher":56,"fileFormat":59,"inLanguage":22,"description":14,"dateModified":60,"datePublished":60,"encodingFormat":59,"isAccessibleForFree":61,"interactionStatistic":62},"DigitalDocument",{"name":9,"@type":55},"Person",{"url":40,"name":57,"@type":58},"DocShare","Organization","application/pdf","2026-08-03",true,{"@type":63,"interactionType":64,"userInteractionCount":20},"InteractionCounter",{"@type":65},"ViewAction",{"@type":67,"mainEntity":68},"FAQPage",[69],{"name":70,"@type":71,"acceptedAnswer":72},"What performance difference is reported between using the security mechanism and not using it?","Question",{"text":73,"@type":74},"For four client threads with 1000 training iterations each and four server iterations, the system reports about 3.213 seconds with security and about 335 milliseconds without security.","Answer","https://schema.org",{"og:url":50,"og:type":77,"og:title":13,"og:site_name":57,"og:description":14},"article",{"robots":79,"canonical":50},"index,follow",{"doc_id":7,"site_id":23},{"code":4,"msg":5,"data":82},[83,87,91,95,100,105,110,113,118,121,125],{"id":20,"doc_module":4,"doc_module_name":45,"category_name":84,"show_sort_weight":85,"slug":86},"Story & Novel",90,"story-novel",{"id":46,"doc_module":4,"doc_module_name":45,"category_name":88,"show_sort_weight":89,"slug":90},"Literature",80,"literature",{"id":51,"doc_module":4,"doc_module_name":45,"category_name":92,"show_sort_weight":93,"slug":94},"Exam",70,"exam",{"id":96,"doc_module":4,"doc_module_name":45,"category_name":97,"show_sort_weight":98,"slug":99},5,"Comic",60,"comic",{"id":101,"doc_module":4,"doc_module_name":45,"category_name":102,"show_sort_weight":103,"slug":104},6,"Technology",50,"technology",{"id":106,"doc_module":4,"doc_module_name":45,"category_name":107,"show_sort_weight":108,"slug":109},7,"Healthcare",40,"healthcare",{"id":11,"doc_module":4,"doc_module_name":45,"category_name":12,"show_sort_weight":111,"slug":112},30,"research-report",{"id":114,"doc_module":4,"doc_module_name":45,"category_name":115,"show_sort_weight":116,"slug":117},9,"Religion & Spirituality",20,"religion-spirituality",{"id":116,"doc_module":4,"doc_module_name":45,"category_name":119,"show_sort_weight":116,"slug":120},"World Cup","world-cup",{"id":122,"doc_module":4,"doc_module_name":45,"category_name":123,"show_sort_weight":122,"slug":124},10,"Lifestyle","lifestyle",{"id":126,"doc_module":4,"doc_module_name":45,"category_name":127,"show_sort_weight":96,"slug":128},19,"General","general"]