arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2503.08085cs.LGcs.CRcs.CV

PRISM:面向联邦生成模型的隐私保护型改进随机掩码方法

PRISM: Privacy-Preserving Improved Stochastic Masking for Federated Generative Models

Ulsan National Institute of Science and Technology (UNIST)(蔚山科学技术院);Yonsei University(延世大学)

Kyeongkook Seo, Dong-Jun Han, Jaejun Yoo

AI总结:

针对联邦生成模型通信成本高、异构数据下训练不稳定的问题,提出PRISM框架,通过搜索随机网络最优二进制掩码、结合MMD损失与MADA聚合,实现低通信开销、高生成性能的轻量隐私保护联邦生成模型。

摘要:

尽管联邦学习(FL)近年来取得了进展,但由于通信成本高、异构数据环境下训练不稳定等挑战,生成模型与联邦学习的融合仍受到限制。为解决这些问题,我们提出PRISM——一种专为生成模型设计的联邦学习框架,它能保证:(1)在异构数据分布下性能稳定;(2)在通信成本和最终模型规模方面具备资源效率。\n我们方法的核心是为随机网络搜索最优随机二进制掩码,而非更新模型权重,以此识别出具有高生成性能的稀疏子网络,即“强彩票”。通过以随机方式传输二进制掩码,PRISM将通信开销降至最低。该方法结合最大平均差异(MMD)损失,以及服务端的掩码感知动态移动平均聚合方法(MADA),通过缓解联邦学习场景中的局部偏移,实现稳定且强大的生成能力。此外,得益于其稀疏化特性,PRISM无需额外剪枝或量化即可生成轻量级模型,非常适合边缘设备等环境。\n在MNIST、FMNIST、CelebA和CIFAR10上的实验表明,PRISM性能优于现有方法,同时以极低的通信成本保障隐私。PRISM是首个在复杂数据集的非独立同分布(non-IID)且隐私保护的联邦学习挑战性环境下成功生成图像的方法,而此前的方法在这类场景中表现不佳。

英文摘要:

Despite recent advancements in federated learning (FL), the integration of generative models into FL has been limited due to challenges such as high communication costs and unstable training in heterogeneous data environments. To address these issues, we propose PRISM, a FL framework tailored for generative models that ensures (i) stable performance in heterogeneous data distributions and (ii) resource efficiency in terms of communication cost and final model size. The key of our method is to search for an optimal stochastic binary mask for a random network rather than updating the model weights, identifying a sparse subnetwork with high generative performance; i.e., a ``strong lottery ticket''. By communicating binary masks in a stochastic manner, PRISM minimizes communication overhead. This approach, combined with the utilization of maximum mean discrepancy (MMD) loss and a mask-aware dynamic moving average aggregation method (MADA) on the server side, facilitates stable and strong generative capabilities by mitigating local divergence in FL scenarios. Moreover, thanks to its sparsifying characteristic, PRISM yields a lightweight model without extra pruning or quantization, making it ideal for environments such as edge devices. Experiments on MNIST, FMNIST, CelebA, and CIFAR10 demonstrate that PRISM outperforms existing methods, while maintaining privacy with minimal communication costs. PRISM is the first to successfully generate images under challenging non-IID and privacy-preserving FL environments on complex datasets, where previous methods have struggled.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑