Efficiency-optimized Data Perturbation in Local Differentially Private Federated Learning
Bibliographic record
Abstract
Abstract Federated learning (FL) pours vitality into developing data-driven AI. However, there are still some challenges, such as balancing the security and efficiency in FL. Differential privacy is one of the dominant means in privacy-preserving machine learning. Local differential privacy (LDP) further realizes the confidentiality of the server by perturbing the transmitting parameters, which is naturally applicable for the decentralized FL. However, the current research exists the weaknesses of low communication efficiency and poor adaptability in complex deep learning models. In this work, we propose an efficiency-optimized LDP data perturbation mechanism (Adaptive-Harmony), which allows adaptive parameter range to reduce variance and improve model accuracy. Specifically, each client in each round adaptively selects perturbation parameters according to model training. Furthermore, only 1-bit data transmission for each dimension of the model parameters, thus significantly reducing the communication overhead. Theoretical analysis and proof have shown that Adaptive-Harmony holds the same asymptotic error bounds and convergence performance as advanced works but with minimal communication costs. An LDP-FL framework (Optimal LDP-FL) is also proposed, taking Adaptive-Harmony as the core. We also introduce a parameter shuffling in the Optimal LDP-FL, which avoids server tracking clients through the model parameters, thereby improving privacy levels without consuming the privacy budget. Comprehensive experiments on the MNIST and Fashion MNIST datasets show that the proposed method can significantly reduce computational and communication costs with the same level of privacy and model utility.
Fetched live from OpenAlex and de-inverted. Abstracts are not stored in this database: the inverted indexes are 8.6 GB of the frame’s 9.3 GB of text, and the host has 13 GB free.
How this classification was reachedexpand
Full frame machine prediction
Teacher imitationNot calibrated prevalence, not ground truth. Human validation pending. The Gemma side is a direct model label for every work in the frame, read from the title-only record. The Codex side is a classifier learned from the 10,348 direct Codex labels and calibrated to design-weighted sample rates; fields without enough sample support carry no Codex call. Candidate is the union of the two sides; consensus is their intersection. These outputs are machine_predicted_unvalidated and are not human labels.
Distilled classifier scores by category (both heads)
| Category | Codex | Gemma |
|---|---|---|
| Metaresearch | 0.004 | 0.010 |
| Meta-epidemiology (narrow) | 0.001 | 0.000 |
| Meta-epidemiology (broad) | 0.002 | 0.001 |
| Bibliometrics | 0.000 | 0.001 |
| Science and technology studies | 0.001 | 0.002 |
| Scholarly communication | 0.001 | 0.003 |
| Open science | 0.003 | 0.003 |
| Research integrity | 0.001 | 0.002 |
| Insufficient payload (model declined to judge) | 0.001 | 0.000 |
Machine scores (provisional)
The two teacher heads of the student model, read on this work. A score orders the frame for review; it never asserts a category, and the validation status ships verbatim with every row.
Baseline scores from an immature model (maturity gate not passed, 7 training rounds). Scores rank; they never assert a category.
score_only:v0-immature-baseline · verbatim from the scoring run: score_only means the number may rank works, and no category label ships from itClassification
machine, unvalidatedMachine predicted; a candidate call from one source (direct Gemma or distilled Codex), not a consensus.
How this classification was reached, model by model and score by score, is at the end of the page under "How this classification was reached".