Binary Linear Tree Commitment-based Ownership Protection for Distributed Machine Learning
Not on the map. Why?
Abstract (arXiv)
Distributed machine learning enables parallel training of extensive datasets by delegating computing tasks across multiple workers. Despite the cost reduction benefits of distributed machine learning, the dissemination of final model weights often leads to potential conflicts over model ownership as workers struggle to substantiate their involvement in the training computation. To address the above ownership issues and prevent accidental failures and malicious attacks, verifying the computational integrity and effectiveness of workers becomes particularly crucial in distributed machine learning. In this paper, we proposed a novel binary linear tree commitment-based ownership protection model to ensure computational integrity with limited overhead and concise proof. Due to the frequent updates of parameters during training, our commitment scheme introduces a maintainable tree structure to reduce the costs of updating proofs. Distinguished from SNARK-based verifiable computation, our model achieves efficient proof aggregation by leveraging inner product arguments. Furthermore, proofs of model weights are watermarked by worker identity keys to prevent commitments from being forged or duplicated. The performance analysis and comparison with SNARK-based hash commitments validate the efficacy of our model in preserving computational integrity within distributed machine learning.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 9 of its 42 references that are in the map. First posted on arXiv 11 Jan 2024.
Builds on
9 of 42 references.
References · 9
- 2018Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooringcited by 357
- 2020Minibatch vs Local SGD for Heterogeneous Distributed Learningcited by 147
- 2021Proof-of-Learning: Definitions and Practicecited by 84
- 2019IPGuard: Protecting Intellectual Property of Deep Neural Networks via Fingerprinting the Classification Boundarycited by 70
- 2021Defending against Model Stealing via Verifying Embedded External Featurescited by 46
- 2022SSLGuard: A Watermarking Scheme for Self-supervised Learning Pre-trained Encoderscited by 45
- 2021Poison Forensics: Traceback of Data Poisoning Attacks in Neural Networkscited by 40
- 2022How to Steer Your Adversary: Targeted and Efficient Model Stealing Defenses with Gradient Redirectioncited by 21
- 2019Drynx: Decentralized, Secure, Verifiable System for Statistical Queries and Machine Learning on Distributed Datasetscited by 8
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2025A Privacy-Preserving Cloud Architecture for Distributed Machine Learning at Scale
- 2024A Quantization-based Technique for Privacy Preserving Distributed Learning
- 2025Fully Decentralized Certified Unlearning
- 2021FedCom: A Byzantine-Robust Local Model Aggregation Rule Using Data Commitment for Federated Learning
- 2024Exposing the Vulnerability of Decentralized Learning to Membership Inference Attacks Through the Lens of Graph Mixing
- 2023FedRight: An Effective Model Copyright Protection for Federated Learning
- 2026Trust-But-Verify: Poisoning-Resilient Locally Private Graph Learning Protocols
- 2024No Vandalism: Privacy-Preserving and Byzantine-Robust Federated Learning