Trustworthy AI using confidential federated learning: federated learning and confidential computing are not competing technologies
File(s)3665220.pdf (1.11 MB)
Published version
Author(s)
Guo, Jinnan
Pietzuch, Peter
Paverd, Andrew
Vaswani, Kapil
Type
Report
Abstract
The principles of security, privacy, accountability, transparency, and fairness are the cornerstones of modern AI regulations. Classic FL was designed with a strong emphasis on security and privacy, at the cost of transparency and accountability. CFL addresses this gap with a careful combination of FL with TEEs and commitments. In addition, CFL brings other desirable security properties, such as code-based access control, model confidentiality, and protection of models during inference. Recent advances in confidential computing such as confidential containers and confidential GPUs mean that existing FL frameworks can be extended seamlessly to support CFL with low overheads. For these reasons, CFL is likely to become the default mode for deploying FL workloads.
Date Issued
2024-04
Date Acceptance
2024-05-01
Citation
ACM queue : tomorrow's computing today, 2024, pp.87-107
ISSN
1542-7730
Publisher
ACM
Start Page
87
End Page
107
Journal / Book Title
ACM queue : tomorrow's computing today
Volume
22
Issue
2
Copyright Statement
Copyright © 2024 Owner/Author.
This work is licensed under a Creative Commons Attribution International 4.0 License.
This work is licensed under a Creative Commons Attribution International 4.0 License.
License URL
Identifier
http://dx.doi.org/10.1145/3665220
Publication Status
Published
Date Publish Online
2024-05-24