Privacy and Trust Redefined in Federated Machine Learning
Not on the map. Why?
Abstract (arXiv)
A common privacy issue in traditional machine learning is that data needs to be disclosed for the training procedures. In situations with highly sensitive data such as healthcare records, accessing this information is challenging and often prohibited. Luckily, privacy-preserving technologies have been developed to overcome this hurdle by distributing the computation of the training and ensuring the data privacy to their owners. The distribution of the computation to multiple participating entities introduces new privacy complications and risks. In this paper, we present a privacy-preserving decentralised workflow that facilitates trusted federated learning among participants. Our proof-of-concept defines a trust framework instantiated using decentralised identity technologies being developed under Hyperledger projects Aries/Indy/Ursa. Only entities in possession of Verifiable Credentials issued from the appropriate authorities are able to establish secure, authenticated communication channels authorised to participate in a federated learning workflow related to mental health data.
Key facts. Cited by 13 papers in the map (data through 7 Oct 2026). Builds on 52 of its 134 references that are in the map. First posted on arXiv 29 Mar 2021.
Builds on
52 of 134 references.
References · 52
- 2015Distilling the Knowledge in a Neural Networkcited by 10,076
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,592
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2019Advances and Open Problems in Federated Learningcited by 3,021
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2016Deep Learning with Differential Privacycited by 2,682
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2016Federated Learning: Strategies for Improving Communication Efficiencycited by 1,461
- 2016Practical Black-Box Attacks against Machine Learningcited by 893
- 2017Ensemble Adversarial Training: Attacks and Defensescited by 833
- 2019Towards Federated Learning at Scale: System Designcited by 826
- 2018How To Backdoor Federated Learningcited by 745
38 more
- 2015Distillation as a Defense to Adversarial Perturbations against Deep Neural Networkscited by 675
- 2017Renyi Differential Privacycited by 643
- 2016Stealing Machine Learning Models via Prediction APIscited by 602
- 2018Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networkscited by 550
- 2018ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Modelscited by 475
- 2019STRIP: A Defence Against Trojan Attacks on Deep Neural Networkscited by 437
- 2018Detecting Backdoor Attacks on Deep Neural Networks by Activation Clusteringcited by 429
- 2017Adversarial Examples: Attacks and Defenses for Deep Learningcited by 350
- 2018Client Selection for Federated Learning with Heterogeneous Resources in Mobile Edgecited by 347
- 2018Analyzing Federated Learning through an Adversarial Lenscited by 346
- 2019HopSkipJumpAttack: A Query-Efficient Decision-Based Attackcited by 328
- 2017Certified Defenses for Data Poisoning Attackscited by 288
- 2019The Secret Revealer: Generative Model-Inversion Attacks Against Deep Neural Networkscited by 241
- 2018Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learningcited by 219
- 2017Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimizationcited by 188
- 2016Practical Secure Aggregation for Federated Learning on User-Held Datacited by 178
- 2017Machine Learning Models that Remember Too Muchcited by 165
- 2018Activation Functions: Comparison of trends in Practice and Research for Deep Learningcited by 130
- 2019Overcoming Forgetting in Federated Learning on Non-IID Datacited by 120
- 2016An Analysis of Deep Neural Network Models for Practical Applicationscited by 114
- 2018A generic framework for privacy preserving deep learningcited by 103
- 2018A General Approach to Adding Differential Privacy to Iterative Training Procedurescited by 84
- 2018Privacy Preserving Machine Learning: Threats and Solutionscited by 78
- 2014Learning Activation Functions to Improve Deep Neural Networkscited by 62
- 2020Data Poisoning Attacks on Federated Machine Learningcited by 58
- 2019Local Differential Privacy for Deep Learningcited by 46
- 2014An introduction to Docker for reproducible research, with examples from the R environmentcited by 25
- 2018Privacy-preserving Machine Learning through Data Obfuscationcited by 18
- 2020FedFMC: Sequential Efficient Federated Learning on Non-iid Datacited by 17
- 2020Asymmetric Private Set Intersection with Applications to Contact Tracing and Private Vertical Federated Machine Learningcited by 12
- 2016Curie: A method for protecting SVM Classifier from Poisoning Attackcited by 9
- 2016Distributed Deep Learning Using Synchronous Stochastic Gradient Descentcited by 8
- 2017Performance Comparison of Intrusion Detection Systems and Application of Machine Learning to Snort Systemcited by 8
- 2020A Distributed Trust Framework for Privacy-Preserving Machine Learningcited by 7
- 2018A Review of Homomorphic Encryption Libraries for Secure Computationcited by 4
- 2018A First Look at Identity Management Schemes on the Blockchaincited by 2
- 2020A Privacy-Preserving Healthcare Framework Using Hyperledger Fabriccited by 2
- 2020Trust-by-Design: Evaluating Issues and Perceptions within Clinical Passportingcited by 1
50 most cited of 52 All 52 (JSON)
Built on by
Citing papers per year: 2021: 4; 2022: 1; 2023: 3; 2024: 2; 2025: 2; 2026: 1.
13 papers.
Sort:
- 2021Federated Learning for Smart Healthcare: A Surveycited by 182
- 2021PyVertical: A Vertical Federated Learning Framework for Multi-headed SplitNNcited by 35
- 2021Practical Defences Against Model Inversion Attacks for Split Neural Networkscited by 29
- 2023Recent Methodological Advances in Federated Learning for Healthcarecited by 11
- 2025Federated Learning for Cyber Physical Systems: A Comprehensive Surveycited by 6
- 2025A Thorough Assessment of the Non-IID Data Impact in Federated Learningcited by 5
- 2023Trustworthy Federated Learning: A Surveycited by 4
- 2021Providing Assurance and Scrutability on Shared Data and Machine Learning Models with Verifiable Credentialscited by 3
- 2024A Comprehensive Survey and Classification of Evaluation Criteria for Trustworthy Artificial Intelligencecited by 3
- 2024Federated Learning in Healthcare: Model Misconducts, Security, Challenges, Applications, and Future Research Directions -- A Systematic Reviewcited by 1
- 2022Differential Privacy: What is all the noise about?cited by 0
- 2023AI Product Security: A Primer for Developerscited by 0
1 more
- 2026SoK: A Systematic Bidirectional Literature Review of AI & DLT Convergence11 May 2026
- 2025Federated Learning for Cyber Physical Systems: A Comprehensive Survey8 May 2025
- 2025A Thorough Assessment of the Non-IID Data Impact in Federated Learning21 Mar 2025
- 2024A Comprehensive Survey and Classification of Evaluation Criteria for Trustworthy Artificial Intelligence10 Oct 2024
- 2024Federated Learning in Healthcare: Model Misconducts, Security, Challenges, Applications, and Future Research Directions -- A Systematic Review22 May 2024
- 2023Recent Methodological Advances in Federated Learning for Healthcare4 Oct 2023
- 2023Trustworthy Federated Learning: A Survey19 May 2023
- 2023AI Product Security: A Primer for Developers18 Apr 2023
- 2022Differential Privacy: What is all the noise about?19 May 2022
- 2021Federated Learning for Smart Healthcare: A Survey16 Nov 2021
- 2021Providing Assurance and Scrutability on Shared Data and Machine Learning Models with Verifiable Credentials13 May 2021
- 2021Practical Defences Against Model Inversion Attacks for Split Neural Networks12 Apr 2021
1 more
- 2021Federated Learning for Smart Healthcare: A Surveycited by 182
- 2021PyVertical: A Vertical Federated Learning Framework for Multi-headed SplitNNcited by 35
- 2021Practical Defences Against Model Inversion Attacks for Split Neural Networkscited by 29
- 2023Recent Methodological Advances in Federated Learning for Healthcarecited by 11
- 2025Federated Learning for Cyber Physical Systems: A Comprehensive Surveycited by 6
- 2025A Thorough Assessment of the Non-IID Data Impact in Federated Learningcited by 5
- 2023Trustworthy Federated Learning: A Surveycited by 4
- 2021Providing Assurance and Scrutability on Shared Data and Machine Learning Models with Verifiable Credentialscited by 3
- 2024A Comprehensive Survey and Classification of Evaluation Criteria for Trustworthy Artificial Intelligencecited by 3
- 2024Federated Learning in Healthcare: Model Misconducts, Security, Challenges, Applications, and Future Research Directions -- A Systematic Reviewcited by 1
- 2022Differential Privacy: What is all the noise about?cited by 0
- 2023AI Product Security: A Primer for Developerscited by 0
12 most cited of 13 All 13 (JSON)
- 2026SoK: A Systematic Bidirectional Literature Review of AI & DLT Convergence11 May 2026
- 2025Federated Learning for Cyber Physical Systems: A Comprehensive Survey8 May 2025
- 2025A Thorough Assessment of the Non-IID Data Impact in Federated Learning21 Mar 2025
- 2024A Comprehensive Survey and Classification of Evaluation Criteria for Trustworthy Artificial Intelligence10 Oct 2024
- 2024Federated Learning in Healthcare: Model Misconducts, Security, Challenges, Applications, and Future Research Directions -- A Systematic Review22 May 2024
- 2023Recent Methodological Advances in Federated Learning for Healthcare4 Oct 2023
- 2023Trustworthy Federated Learning: A Survey19 May 2023
- 2023AI Product Security: A Primer for Developers18 Apr 2023
- 2022Differential Privacy: What is all the noise about?19 May 2022
- 2021Federated Learning for Smart Healthcare: A Survey16 Nov 2021
- 2021Providing Assurance and Scrutability on Shared Data and Machine Learning Models with Verifiable Credentials13 May 2021
- 2021Practical Defences Against Model Inversion Attacks for Split Neural Networks12 Apr 2021
12 newest of 13 All 13 (JSON)