DeepChain: Auditable and Privacy-Preserving Deep Learning with Blockchain-based Incentive

Jiasi Weng, Jian Weng

IEEE Transactions on Dependable and Secure Computing · 2019 · 84 citations · 36 references

DOIFull text

Open access

Concepts

TL;DR

Deep learning outperforms traditional algorithms, yet privacy concerns and security vulnerabilities in federated learning—such as malicious gradient manipulation—have prompted interest in privacy‑preserving, secure frameworks. This work introduces DeepChain, a distributed, secure, and fair deep‑learning framework designed to address these federated‑learning security issues. DeepChain enforces correct participant behavior through a blockchain‑based incentive mechanism, while guaranteeing data privacy and providing full auditability of the training process. Prototype experiments on a real dataset demonstrate that DeepChain performs promisingly across various settings.

Abstract

Deep learning can achieve higher accuracy than traditional machine learning algorithms in a variety of machine learning tasks. Recently, privacy-preserving deep learning has drawn tremendous attention from information security community, in which neither training data nor the training model is expected to be exposed. Federated learning is a popular learning mechanism, where multiple parties upload local gradients to a server and the server updates model parameters with the collected gradients. However, there are many security problems neglected in federated learning, for example, the participants may behave incorrectly in gradient collecting or parameter updating, and the server may be malicious as well. In this article, we present a distributed, secure, and fair deep learning framework named DeepChain to solve these problems. DeepChain provides a value-driven incentive mechanism based on Blockchain to force the participants to behave correctly. Meanwhile, DeepChain guarantees data privacy for each participant and provides auditability for the whole training process. We implement a prototype of DeepChain and conduct experiments on a real dataset for different settings, and the results show that our DeepChain is promising.

References

36