More about HKUST
Minimum Exposure Approach for Trustworthy Vertical Federated Learning
PhD Thesis Proposal Defence Title: "Minimum Exposure Approach for Trustworthy Vertical Federated Learning" by Mr. Dashan GAO Abstract: As artificial intelligence advances, addressing data scarcity and privacy concerns becomes crucial. Federated Learning (FL) offers a privacy-preserving framework for collaborative model training across organizations. Specifically, Vertical Federated Learning (VFL) faces unique challenges arising from vertically partitioned data among parties. This proposal introduces a minimum-exposure approach for trustworthy VFL, aiming to expose only the minimum-necessary information needed, thereby balancing trustworthiness objectives such as privacy, utility, robustness, and efficiency. By categorizing information exposure into data and model parameter exposure, this approach proposes guides targeted mitigation strategies. First, we address intra-sample label exposure in VFL with a two-phase framework: offline-phase cleansing and training-phase perturbation. Our proposed Label Privacy Source Coding (LPSC) encodes the minimum-necessary label information in the offline phase. Then, we employ adversarial training to enhance privacy during training. Second, we further explore a more challenging VFL scenario with arbitrarily-aligned samples. We introduce the Complementary Knowledge Distillation (CKD) framework to minimizing intra-sample information exposure and facilitate privacy-preserving knowledge transfer among parties. Third, we tackle model parameter exposure in heterogeneous federated transfer learning by proposing a cryptobraphy-based framework PP-HFTL. A model integration method in PP-HFTL reduces model parameter exposure and allows local model inference. Extensive experiments on real-world datasets demonstrate the effectiveness and efficiency of our approaches. For future work, we aim to address inter-sample information exposure in VFL by proposing a secure vertical federated dataset condensation (VFDC) framework. Date: Thursday, 21 November 2024 Time: 10:00am - 12:00noon Venue: Room 4472 Lifts 25/26 Committee Members: Prof. Qiang Yang (Supervisor) Prof. Kai Chen (Co-supervisor) Dr. Yangqiu Song (Chairperson) Dr. Qifeng Chen