Biscotti: A Ledger for Private and Secure Peer-to-Peer Machine Learning

November 24, 2018 · Entered Twilight · 🏛 arXiv.org

"Last commit was 5.0 years ago (≥5 year threshold)"

Evidence collected by the PWNC Scanner

Repo contents: .gitignore, Biscotti, CentralBlockML, DistSys, FedSys, LICENSE, LocalPerfTest, LogFiles, ML, README.md, azure-deploy, azure, data, e, eval, eval_FT, eval_vrf, global-deploy-eval, keyGeneration, kyber-demo, lib, nsdi-eval-reruns, nsdi-eval, poison_eval, usenix-eval, vrf-reference, vrf_main.go

Authors Muhammad Shayan, Clement Fung, Chris J. M. Yoon, Ivan Beschastnikh arXiv ID 1811.09904 Category cs.LG: Machine Learning Cross-listed cs.CR, cs.DC, stat.ML Citations 88 Venue arXiv.org Repository https://github.com/DistributedML/Biscotti ⭐ 110 Last Checked 1 month ago

Abstract

Federated Learning is the current state of the art in supporting secure multi-party machine learning (ML): data is maintained on the owner's device and the updates to the model are aggregated through a secure protocol. However, this process assumes a trusted centralized infrastructure for coordination, and clients must trust that the central service does not use the byproducts of client data. In addition to this, a group of malicious clients could also harm the performance of the model by carrying out a poisoning attack. As a response, we propose Biscotti: a fully decentralized peer to peer (P2P) approach to multi-party ML, which uses blockchain and cryptographic primitives to coordinate a privacy-preserving ML process between peering clients. Our evaluation demonstrates that Biscotti is scalable, fault tolerant, and defends against known attacks. For example, Biscotti is able to protect the privacy of an individual client's update and the performance of the global model at scale when 30% of adversaries are trying to poison the model. The implementation can be found at: https://github.com/DistributedML/Biscotti