Federated Learning for User Privacy and Data Confidentiality

Nathalie Baracaldo, Olivia Choudhury, Gauri Joshi, Ramesh Raskar, Shiqiang Wang, Han Yu

Keywords:  Federated learning    Data privacy    Privacy-preserving machine learning  


Training machine learning models in a centralized fashion often faces significant challenges due to regulatory and privacy concerns in real-world use cases. These include distributed training data, computational resources to create and maintain a central data repository, and regulatory guidelines (GDPR, HIPAA) that restrict sharing sensitive data. Federated learning (FL) is a new paradigm in machine learning that can mitigate these challenges by training a global model using distributed data, without the need for data sharing. The extensive application of machine learning to analyze and draw insight from real-world, distributed, and sensitive data necessitates familiarization with and adoption of this relevant and timely topic among the scientific community.Despite the advantages of federated learning, and its successful application in certain industry-based cases, this field is still in its infancy due to new challenges that are imposed by limited visibility of the training data, potential lack of trust among participants training a single model, potential privacy inferences, and in some cases, limited or unreliable connectivity.The goal of this workshop is to bring together researchers and practitioners interested in FL. This day-long event will facilitate interaction among students, scholars, and industry professionals from around the world to understand the topic, identify technical challenges, and discuss potential solutions. This will lead to an overall advancement of FL and its impact in the community.

For a detailed workshop schedule, please visit:

Workshop date: July 18, 2020 (Saturday)
Starting at 9 am in US Eastern Daylight Time,

Chat is not available.

Timezone: »


Sat 5:45 a.m. - 6:00 a.m. [iCal]

Presenters of Keynote Session 1 and Technical Talks Session 1 please connect to the main Zoom room of this workshop, to make sure that everything works well.

Sat 6:00 a.m. - 6:10 a.m. [iCal]
Opening remarks (Talk)
Nathalie Baracaldo, Olivia Choudhury, Gauri Joshi, Ramesh Raskar, Shiqiang Wang, Han Yu
Sat 6:10 a.m. - 6:35 a.m. [iCal]

Abstract: Federated learning systems need to balance the efficiency and security of machine learning algorithms while maintaining model accuracy. In this talk we discuss this trade-off in two settings. One is when two collaborating organisations wish to transfer the knowledge from one to another via a federated learning framework. We present a federated transfer learning algorithm to both improve the security and the performance while preserving privacy. Another case is when one exploits differential privacy in a federated learning framework to ensure efficiency, but this may cause security degradation. To solve the problem, we employ a dual-headed network architecture that guarantees training data privacy by exerting secret gradient perturbations to original gradients, while maintaining high performance of the global shared model. We find that the combination of secret-public networks provides a preferable alternative to DP-based mechanisms in federated learning applications.

Biography: Qiang Yang is Chief Artificial Intelligence Officer of WeBank and Chair Professor of CSE Department of Hong Kong Univ. of Sci. and Tech. He is the Conference Chair of AAAI-21, President of Hong Kong Society of Artificial Intelligence and Robotics(HKSAIR) and a former President of IJCAI (2017-2019). He is a fellow of AAAI, ACM, IEEE and AAAS. His research interests include transfer learning and federated learning. He is the founding EiC of two journals: IEEE Transactions on Big Data and ACM Transactions on Intelligent Systems and Technology.

Qiang Yang
Sat 6:35 a.m. - 7:25 a.m. [iCal]
  1. Wonyong Jeong, Jaehong Yoon, Eunho Yang and Sung Ju Hwang. Federated Semi-Supervised Learning with Inter-Client Consistency
  2. Ishika Singh, Haoyi Zhou, Kunlin Yang, Meng Ding, Bill Lin and Pengtao Xie. Differentially-private Federated Neural Architecture Search
  3. Laura Rieger, Rasmus Malik Thaarup Høegh and Lars Kai Hansen. Client Adaptation improves Federated Learning with Simulated Non-IID Clients
  4. Hanlin Lu, Changchang Liu, Ting He, Shiqiang Wang and Kevin S. Chan. Sharing Models or Coresets: A Study based on Membership Inference Attack
Ishika Singh, Laura Rieger, Rasmus Høegh, Hanlin Lu, Wonyong Jeong
Sat 7:25 a.m. - 7:40 a.m. [iCal]

Presenters of Keynote Session 2 and Lightning Talks Session 1 please connect to the main Zoom room of this workshop, to make sure that everything works well.

Sat 7:40 a.m. - 8:05 a.m. [iCal]

Abstract: Federated learning in consumer scenarios has garnered a lot of interest. However, its application in large enterprises brings to bear additional needs and guarantees. In this talk, I will highlight key drivers for federated learning in enterprises, illustrate representative uses cases, and summarize the requirements for a platform that can support it. I will then present the newly released IBM Federated Learning framework (git, white paper) and show how it can be used and extended by researchers. Finally, I will highlight recent advances in federated learning and privacy from IBM Research.

Biography: Rania Khalaf is the Director of AI Platforms and Runtimes at IBM Research where she leads teams pushing the envelope in AI platforms to make creating AI models and applications easy, fast, and safe for data scientists and developers. Her multi-disciplinary teams tackle key problems at the intersection of core AI, distributed systems, human computer interaction and cloud computing. Prior to this role, Rania was Director of Cloud Platform, Programming Models and Runtimes. Rania serves as a Judge for the MIT Solve AI for Humanity Prize, on the Leadership Challenge Group for MIT Solve's Learning for Girils and Women Challenge and on the Advisory Board of the Hariri Institute for Computing at Boston University. She has received several Outstanding Technical Innovation awards for major impact to the field of computer science and was a finalist for the 2019 MassTLC CTO of the Year award.

Rania Khalaf
Sat 8:05 a.m. - 8:35 a.m. [iCal]
  1. Zhaohui Yang, Mingzhe Chen, Walid Saad, Choong Seon Hong, Mohammad Shikh-Bahaei, H. Vincent Poor and Shuguang Cui. Delay Minimization for Federated Learning Over Wireless Communication Networks
  2. Angel Navia Vázquez, Manuel-Alberto Vázquez-López and Jesús Cid-Sueiro. Double Confidential Federated Machine Learning Logistic Regression for Industrial Data Platforms
  3. Kun Li, Fanglan Zheng, Jiang Tian and Xiaojia Xiang. A Federated F-score Based Ensemble Model for Automatic Rule Extraction
  4. Hajime Ono and Tsubasa Takahashi. Locally Private Distributed Reinforcement Learning
  5. Yang Liu, Zhihao Yi and Tianjian Chen. Defending backdoor attacks in feature-partitioned collaborative learning
  6. Tianyi Chen, Xiao Jin, Yuejiao Sun and Wotao Yin. VAFL: a Method of Vertical Asynchronous Federated Learning
  7. Shahab Asoodeh and Flavio Calmon. Differentially Private Federated Learning: An Information-Theoretic Perspective
  8. Mathieu Andreux, Andre Manoel, Romuald Menuet, Charlie Saillard and Chloé Simpson. Federated Survival Analysis with Discrete-Time Cox Models
  9. Myungjae Shin, Chihoon Hwang, Joongheon Kim, Jihong Park, Mehdi Bennis and Seong-Lyun Kim. XOR Mixup: Privacy-Preserving Data Augmentation for One-Shot Federated Learning
Zhaohui Yang, Angel Navia-Vázquez, KUN LI, Hajime Ono, Yang Liu, Yuejiao Sun, Shahab Asoodeh, Chihoon Hwang, Romuald Menuet
Sat 8:35 a.m. - 9:05 a.m. [iCal]

Poster session with presenters of Lightning Talks Session 1. Individual Zoom links will be provided separately.

Sat 9:05 a.m. - 10:20 a.m. [iCal]

Presenters of Keynote Session 3 and Technical Talks Session 2 please connect to the main Zoom room of this workshop at 1:05 pm EDT, to make sure that everything works well.

Sat 10:20 a.m. - 10:45 a.m. [iCal]

Abstract: Alexa is a virtual assistant AI technology launched by Amazon in 2014. One of key enabling technologies is wakeword, which allows users to interact with Alexa devices hands-free via voice. We present some of the unique ML challengesposed in wakeword, and how Federated Learning can be used to address them. We also present some considerations when bringing Federated Learning to consumer grade, embedded applications.

Biography: Shiv Vitaladevuni is a Senior Manager in Machine Learning at Amazon Alexa, focusing on R&D for Alexa family of devices such as Echo, Dot, FireTV, etc. At Amazon, Shiv leads a team of scientists and engineers inventing embedded speechand ML products used by millions of Alexa customers across all Alexa devices, around the globe. His team conducts research in areas such as Federated ML, Large scale semi/unsupervised learning, User diversity and fairness in ML, Speaker adaptation and personalization,memory efficient deep learning models, etc. Prior to Amazon, Shiv worked on video and text document analysis at Raytheon BBN Technologies, and bio-medical image analysis at Howard Hughes Medical Institute.

Shiv Vitaladevuni
Sat 10:45 a.m. - 12:10 p.m. [iCal]
  1. Jinhyun So, Basak Guler and A. Salman Avestimehr. Turbo-Aggregate: Breaking the Quadratic Aggregation Barrier in Secure Federated Learning
  2. Chong Liu, Yuqing Zhu, Kamalika Chaudhuri and Yu-Xiang Wang. Revisiting Model-Agnostic Private Learning: Faster Rates and Active Learning
  3. Honglin Yuan and Tengyu Ma. Federated Accelerated Stochastic Gradient Descent
  4. Krishna Pillutla, Sham Kakade and Zaid Harchaoui. Robust Aggregation for Federated Learning
  5. Leighton Pate Barnes, Huseyin A. Inan, Berivan Isik and Ayfer Ozgur. rTop-k: A Statistical Estimation Approach to Distributed SGD
  6. Ashkan Yousefpour, Brian Nguyen, Siddartha Devic, Guanhua Wang, Abdul Rahman Kreidieh, Hans Lobel, Alexandre Bayen and Jason Jue. ResiliNet: Failure-Resilient Inference in Distributed Neural Networks
  7. Swanand Kadhe, Nived Rajaraman, O. Ozan Koyluoglu and Kannan Ramchandran. FastSecAgg: Scalable Secure Aggregation for Privacy-Preserving Federated Learning
Jinhyun So, Chong Liu, Honglin Yuan, Krishna Pillutla, Leighton P Barnes, Ashkan Yousefpour, Swanand Kadhe
Sat 12:10 p.m. - 12:25 p.m. [iCal]

Presenters of Keynote Session 4 and Lightning Talks Session 2 please connect to the main Zoom room of this workshop, to make sure that everything works well.

Sat 12:25 p.m. - 12:50 p.m. [iCal]

Abstract: The shuffle model of computation, also known as the Encode-Shuffle-Analyze (ESA) architecture, is a recently introduced powerful approach towards combining anonymization channels and differentially private distributed computations. We present general results about amplification-by-shuffling unlocked by ESA, as well as more specialized theoretical and empirical findings. We discuss challenges of instantiating the shuffle model in practice.

Biography: Ilya Mironov obtained his Ph.D. in cryptography from Stanford in 2003. In 2003-2014 he was a member of Microsoft Research-Silicon Valley Campus, where he contributed to early works on differential privacy. In 2015-2019 he worked in Google Brain. Since 2019 he has been part of Facebook AI working on privacy-preserving machine learning.

Ilya Mironov
Sat 12:50 p.m. - 1:15 p.m. [iCal]
  1. Avishek Ghosh, Jichan Chung, Dong Yin and Kannan Ramchandran. An Efficient Framework for Clustered Federated Learning
  2. Saurav Prakash, Sagar Dhakal, Mustafa Akdeniz, Amir Salman Avestimehr and Nageen Himayat. Coded Computing for Federated Learning at the Edge
  3. Amirhossein Reisizadeh, Farzan Farnia, Ramtin Pedarsani and Ali Jadbabaie. Robust Federated Learning: The Case of Affine Distribution Shifts
  4. Mikhail Khodak, Tian Li, Liam Li, Maria-Florina Balcan, Virginia Smith and Ameet Talwalkar. Weight-Sharing for Hyperparameter Optimization in Federated Learning
  5. Vaikkunth Mugunthan, Ravi Rahman and Lalana Kagal. BlockFLow: An Accountable and Privacy-Preserving Solution for Federated Learning
  6. Vaikkunth Mugunthan, Anton Peraire-Bueno and Lalana Kagal. PrivacyFL: A simulator for privacy-preserving and secure federated learning
  7. Hossein Hosseini, Sungrack Yun, Hyunsin Park, Christos Louizos, Joseph Soriaga and Max Welling. Federated Learning of User Authentication Models
  8. Xinwei Zhang, Mingyi Hong, Sairaj Dhople, Wotao Yin and Yang Liu. FedPD: A Federated Learning Framework with Optimal Rates and Adaptivity to Non-IID Data
Jichan Chung, Saurav Prakash, Misha Khodak, Ravi Rahman, Vaikkunth Mugunthan, xinwei zhang, Hossein Hosseini
Sat 1:15 p.m. - 1:45 p.m. [iCal]

Poster session with presenters of Lightning Talks Session 2. Individual Zoom links will be provided separately.

Sat 1:45 p.m. - 2:00 p.m. [iCal]

Presenter of Keynote Session 5 please connect to the main Zoom room of this workshop, to make sure that everything works well.

Sat 2:00 p.m. - 2:25 p.m. [iCal]

Abstract: Motivated by the explosive growth in federated learning research, 22 Google researchers and 36 academics from 24 institutions collaborated on a paper titled Advances and Open Problems in Federated Learning. In this talk, I will survey some of the main themes from the paper, particularly the defining characteristics and challenges of different FL settings. I will then briefly discuss some of the ways FL increasingly powers Google products, and also highlight several exciting FL research results from Google.

Biography: Brendan McMahan is a research scientist at Google, where he leads efforts on decentralized and privacy-preserving machine learning. His team pioneered the concept of federated learning, and continues to push the boundaries of what is possible when working with decentralized data using privacy-preserving techniques. Previously, he has worked in the fields of online learning, large-scale convex optimization, and reinforcement learning. Brendan received his Ph.D. in computer science from Carnegie Mellon University.

Brendan McMahan
Sat 2:25 p.m. - 2:35 p.m. [iCal]
Closing remarks (Talk)
Nathalie Baracaldo, Olivia Choudhury, Gauri Joshi, Ramesh Raskar, Shiqiang Wang, Han Yu