TernaryVote: Differentially Private, Communication Efficient, and Byzantine Resilient Distributed Optimization on Heterogeneous Data
Not on the map. Why?
Abstract (arXiv)
Distributed training of deep neural networks faces three critical challenges: privacy preservation, communication efficiency, and robustness to fault and adversarial behaviors. Although significant research efforts have been devoted to addressing these challenges independently, their synthesis remains less explored. In this paper, we propose TernaryVote, which combines a ternary compressor and the majority vote mechanism to realize differential privacy, gradient compression, and Byzantine resilience simultaneously. We theoretically quantify the privacy guarantee through the lens of the emerging f-differential privacy (DP) and the Byzantine resilience of the proposed algorithm. Particularly, in terms of privacy guarantees, compared to the existing sign-based approach StoSign, the proposed method improves the dimension dependence on the gradient size and enjoys privacy amplification by mini-batch sampling while ensuring a comparable convergence rate. We also prove that TernaryVote is robust when less than 50% of workers are blind attackers, which matches that of SIGNSGD with majority vote. Extensive experimental results validate the effectiveness of the proposed algorithm.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 43 of its 59 references that are in the map. First posted on arXiv 16 Feb 2024.
Builds on
43 of 59 references.
References · 43
- 2019Advances and Open Problems in Federated Learningcited by 3,046
- 2016Deep Learning with Differential Privacycited by 2,728
- 2019Deep Leakage from Gradientscited by 1,021
- 2018Byzantine-Robust Distributed Learning: Towards Optimal Statistical Ratescited by 711
- 2020The Future of Digital Health with Federated Learningcited by 633
- 2018signSGD: Compressed Optimisation for Non-Convex Problemscited by 571
- 2018Sparsified SGD with Memorycited by 376
- 2018The Hidden Vulnerability of Distributed Learning in Byzantiumcited by 329
- 2019Error Feedback Fixes SignSGD and other Gradient Compression Schemescited by 310
- 2019A Little Is Enough: Circumventing Defenses For Distributed Learningcited by 288
- 2019Can You Really Backdoor Federated Learning?cited by 255
- 2021Achieving Linear Speedup with Partial Worker Participation in Non-IID Federated Learningcited by 193
31 more
- 2020Federated Learning with Compression: Unified Analysis and Sharp Guaranteescited by 160
- 2018cpSGD: Communication-efficient and differentially-private distributed SGDcited by 158
- 2018RSA: Byzantine-Robust Stochastic Aggregation Methods for Distributed Learning from Heterogeneous Datasetscited by 149
- 2019Fall of Empires: Breaking Byzantine-tolerant SGD by Inner Product Manipulationcited by 141
- 2020Learning from History for Byzantine Robust Optimizationcited by 137
- 2020The Discrete Gaussian for Differential Privacycited by 135
- 2020Byzantine-Robust Learning on Heterogeneous Datasets via Bucketingcited by 128
- 2021The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregationcited by 128
- 2018Generalized Byzantine-tolerant SGDcited by 95
- 2020Local and Central Differential Privacy for Robustness and Privacy in Federated Learningcited by 78
- 2021Understanding Clipping for Federated Learning: Convergence and Client-Level Differential Privacycited by 69
- 2020Breaking the Communication-Privacy-Accuracy Trilemmacited by 68
- 2021The Skellam Mechanism for Differentially Private Federated Learningcited by 68
- 2022Byzantine Machine Learning Made Easy by Resilient Averaging of Momentumscited by 63
- 2019Stochastic Sign Descent Methods: New Algorithms and Better Theorycited by 49
- 2022Gradient Obfuscation Gives a False Sense of Security in Federated Learningcited by 39
- 2020Stochastic-Sign SGD for Federated Learning with Theoretical Guaranteescited by 35
- 2022Byzantine-Robust Federated Learning with Optimal Statistical Rates and Privacy Guaranteescited by 30
- 2019Distributed Training with Heterogeneous Data: Bridging Median- and Mean-Based Algorithmscited by 29
- 2023On the Privacy-Robustness-Utility Trilemma in Distributed Learningcited by 24
- 2023Privacy Amplification via Compression: Achieving the Optimal Privacy-Accuracy-Communication Trade-off in Distributed Mean Estimationcited by 22
- 2021Differential Privacy and Byzantine Resilience in SGD: Do They Add Up?cited by 18
- 2022Privacy-Aware Compression for Federated Data Analysiscited by 17
- 2022Bridging Differential Privacy and Byzantine-Robustness via Model Aggregationcited by 13
- 2018signSGD with Majority Vote is Communication Efficient And Fault Tolerantcited by 11
- 2021Improving Differentially Private SGD via Randomly Sparsified Gradientscited by 8
- 2023Byzantine-Robust Federated Learning with Variance Reduction and Differential Privacycited by 8
- 2022Privacy-Aware Compression for Federated Learning Through Numerical Mechanism Designcited by 6
- 2016The Team Surviving Orienteers Problem: Routing Robots in Uncertain Environments with Survival Constraintscited by 4
- 2022Distributed Non-Convex Optimization with One-Bit Compressors on Heterogeneous Data: Efficient and Resilient Algorithmscited by 4
- 2023Breaking the Communication-Privacy-Accuracy Tradeoff with f-Differential Privacycited by 3
Built on by
Citing papers per year: 2025: 2.
2 papers.