The application of federated extreme gradient boosting to mobile crowdsensing apps brings several benefits, in particular high performance on efficiency and classification. However, it also brings a new challenge for data and model privacy protection. Besides it being vulnerable to Generative Adversarial Network (GAN) based user data reconstruction attack, there is not the existing architecture that considers how to preserve model privacy. In this paper, we propose a secret sharing based federated learning architecture FedXGB to achieve the privacy-preserving extreme gradient boosting for mobile crowdsensing. Specifically, we first build a secure classification and regression tree (CART) of XGBoost using secret sharing. Then, we propose a secure prediction protocol to protect the model privacy of XGBoost in mobile crowdsensing. We conduct a comprehensive theoretical analysis and extensive experiments to evaluate the security, effectiveness, and efficiency of FedXGB. The results indicate that FedXGB is secure against the honest-but-curious adversaries and attains less than 1% accuracy loss compared with the original XGBoost model.
翻译:应用联合会式极端梯度推进移动式人群感测应用程序带来若干好处,特别是在效率和分类方面的高性能。然而,它也给数据和模型隐私保护带来了新的挑战。除了容易受到基于基因反versarial网络(GAN)的用户数据重建攻击外,现有架构中也没有考虑如何保护模型隐私的现有架构。在本文中,我们提议采用基于秘密共享的联合会式学习架构FedXGB, 以实现移动式人群感测的隐私保护极端梯度增强。具体地说,我们首先利用秘密共享来建立一个安全的XGBoost分类和回归树(CART ) 。然后,我们提出一个安全预测协议,以保护移动式人群感测中的XGBost模型隐私。我们进行了全面的理论分析和广泛的实验,以评估FedXGB的安全、效力和效率。结果显示,FedXGB对诚实但有敌意的对手是安全的,并且比原XGBO最差1%的精确损失。