A Comparative Study of Privacy-Preserving Techniques in Federated Learning: A Performance and Security Analysis

Faculty Computer Science Year: 2025
Type of Publication: ZU Hosted Pages:
Authors:
Journal: Information MDPI Volume:
Keywords : , Comparative Study , Privacy-Preserving Techniques , Federated Learning:    
Abstract:
Federated learning (FL) is a machine learning technique where clients exchange only local model updates with a central server that combines them to create a global model after local training. While FL offers privacy benefits through local training, privacy-preserving strategies are needed since model updates can leak training data information due to various attacks. To enhance privacy and attack robustness, techniques like homomorphic encryption (HE), Secure Multi-Party Computation (SMPC), and the Private Aggregation of Teacher Ensembles (PATE) can be combined with FL. Currently, no study has combined more than two privacy-preserving techniques with FL or comparatively analyzed their combinations. We conducted a comparative study of privacy-preserving techniques in FL, analyzing performance and security. We implemented FL using an artificial neural network (ANN) with a Malware Dataset from Kaggle for malware detection. To enhance privacy, we proposed models combining FL with the PATE, SMPC, and HE. All models were evaluated against poisoning attacks (targeted and untargeted), a backdoor attack, a model inversion attack, and a man in the middle attack. The combined models maintained performance while improving attack robustness. FL_SMPC, FL_CKKS, and FL_CKKS_SMPC improved both their performance and attack resistance. All the combined models outperformed the base FL model against the evaluated attacks. FL_PATE_CKKS_SMPC achieved the lowest backdoor attack success rate (0.0920). FL_CKKS_SMPC best resisted untargeted poisoning attacks (0.0010 success rate). FL_CKKS and FL_CKKS_SMPC best defended against targeted poisoning attacks (0.0020 success rate). FL_PATE_SMPC best resisted model inversion attacks (19.267 MSE). FL_PATE_CKKS_SMPC best defended against man in the middle attacks with the lowest degradation in accuracy (1.68%), precision (1.94%), recall (1.68%), and the F1-score (1.64%).
   
     
 
       

Author Related Publications

  • Eman selim, "Evaluating Model Inversion Attack Success Across Neural Architectures in Federated Learning for Malware Classification", Springer Nature, 2025 More
  • Eman selim, "A Survey of Federated Learning Privacy Preservation Techniques for Malicious Behavior Detection", International Association for Digital Transfor mation and Technological Innovation, 2025 More
  • Eman selim, "Privacy-Preserving Federated Learning in Network Intrusion Detection: A Systematic Literature Review", Zagazig University, 2025 More
  • Eman selim, "A Lightweight Android Malware Classifier Using Novel Feature Selection Methods", MDPI, 2020 More
  • Eman selim, "On Malware Detection on Android Smartphones", IJRASET, 2020 More

Department Related Publications

  • Walid Ibrahim Ibrahim Khedr, "Enhanced inter-ASN handover authentication scheme for IEEE 802.16m network", Institution of Engineering and Technology United Kingdom, 2015 More
  • Walid Ibrahim Ibrahim Khedr, "Improved Lightweight Authentication Scheme For Ieee 802.11P Vehicle-to-Infrastructure Communications", Old City Publishing, Inc., USA, 2015 More
  • Khalied Mohamed Hosny, "Comments on "Robust circularly orthogonal moment based on Chebyshev rational function", Digital Signal Processing, Vol. 62, p. 249-258, 2017.", Elsevier, 2017 More
  • Ehab Roshdy Mohamed, "Solving systems of nonlinear equations via conjugate direction flower pollination algorithm", inderscience, 2017 More
  • Ehab Roshdy Mohamed, "Krill herd algorithm based on cuckoo search for solving engineering optimization problems", # Springer Science+Business Media New York 2017, 2017 More
Tweet