RPFL: Robust and Privacy Federated Learning against Backdoor and Sample Inference Attacks

Federated learning (FL) offers a solution for mitigating the issue of data silo. However, FL faces threats to both robustness and privacy, which hinder the widespread application of FL. Most existing approaches focus on one of these threats or require significant resources to tackle both simultaneously. To meet the requirements of robustness and privacy, we propose a robust and privacy-preserving FL (RPFL) based on random selection and lightweight sharing. Our random selection method effectively invalidates malicious models to protect the integrity of the global model. On the other hand, we employ the technique of multi-party computation (MPC) to enhance privacy. To mitigate additional communication overhead and computation overhead introduced by MPC, we propose lightweight sharing. Besides, we adopt compressed sensing and parameter-clipping to further improve the communication efficiency and robustness of RPFL. We prove the performance of RPFL in terms of robustness, privacy, as well as efficiency. The extensive experimental results demonstrate that RPFL effectively improves the robustness and privacy of FL with only a negligible performance penalty.