{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,26]],"date-time":"2025-03-26T11:56:38Z","timestamp":1742990198554,"version":"3.40.3"},"publisher-location":"Cham","reference-count":51,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030968953"},{"type":"electronic","value":"9783030968960"}],"license":[{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022]]},"DOI":"10.1007\/978-3-030-96896-0_14","type":"book-chapter","created":{"date-parts":[[2022,7,7]],"date-time":"2022-07-07T12:16:52Z","timestamp":1657196212000},"page":"313-336","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Private Parameter Aggregation for Federated Learning"],"prefix":"10.1007","author":[{"given":"K. R.","family":"Jayaram","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ashish","family":"Verma","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2022,2,8]]},"reference":[{"key":"14_CR1","doi-asserted-by":"crossref","unstructured":"Abadi M, Chu A, Goodfellow I, McMahan HB, Mironov I, Talwar K, Zhang L (2016) Deep learning with differential privacy. In: Proceedings of the 2016 ACM SIGSAC conference on computer and communications security, association for computing machinery, New York, NY, CCS \u201916, pp 308\u2013318","DOI":"10.1145\/2976749.2978318"},{"key":"14_CR2","unstructured":"Agarwal N, Suresh AT, Yu FXX, Kumar S, McMahan B (2018) cpSGD: Communication-efficient and differentially-private distributed SGD. In: NeurIPS 2018"},{"key":"14_CR3","doi-asserted-by":"crossref","unstructured":"Aono Y, Hayashi T, Trieu Phong L, Wang L (2016) Scalable and secure logistic regression via homomorphic encryption. In: Proceedings of the Sixth ACM conference on data and application security and privacy. Association for Computing Machinery, New York, NY, CODASPY \u201916, pp 142\u2013144","DOI":"10.1145\/2857705.2857731"},{"key":"14_CR4","unstructured":"Bonawitz K, Eichner H, Grieskamp W, Huba D, Ingerman A, Ivanov V, Kiddon C, Kone\u010dny\u0300 J, Mazzocchi S, McMahan HB et al (2019) Towards federated learning at scale: System design. Preprint. arXiv:190201046"},{"key":"14_CR5","volume-title":"On-line learning and stochastic approximations","author":"L Bottou","year":"1998","unstructured":"Bottou L (1998) On-line learning and stochastic approximations. In: On-line learning in neural networks. Cambridge University Press, New York"},{"key":"14_CR6","doi-asserted-by":"publisher","first-page":"69","DOI":"10.1016\/j.ins.2020.02.037","volume":"522","author":"Y Chen","year":"2020","unstructured":"Chen Y, Luo F, Li T, Xiang T, Liu Z, Li J (2020) A training-integrity privacy-preserving federated learning scheme with trusted execution environment. Inf Sci 522:69\u201379","journal-title":"Inf Sci"},{"key":"14_CR7","doi-asserted-by":"crossref","unstructured":"Cheng P, Eykholt K, Gu Z, Jamjoom H, Jayaram KR, Valdez E, Verma A (2021) Separation of powers in federated learning. CoRR abs\/2105.09400. https:\/\/arxiv.org\/abs\/2105.09400, http:\/\/2105.09400","DOI":"10.1145\/3477114.3488765"},{"key":"14_CR8","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9781107337756","volume-title":"Secure multiparty computation and secret sharing","author":"R Cramer","year":"2015","unstructured":"Cramer R, Damgrd IB, Nielsen JB (2015) Secure multiparty computation and secret sharing, 1st edn. Cambridge University Press, Cambridge","edition":"1"},{"key":"14_CR9","doi-asserted-by":"crossref","unstructured":"Dai W, Sunar B (2016) cuHE: A homomorphic encryption accelerator library. In: Cryptography and information security in the Balkans. Springer International Publishing","DOI":"10.1007\/978-3-319-29172-7_11"},{"key":"14_CR10","first-page":"643","volume-title":"Proceedings of the 32nd annual cryptology conference on advances in cryptology \u2014 CRYPTO 2012 - Volume 7417","author":"I Damg\u00e5rd","year":"2012","unstructured":"Damg\u00e5rd I, Pastro V, Smart N, Zakarias S (2012) Multiparty computation from somewhat homomorphic encryption. In: Proceedings of the 32nd annual cryptology conference on advances in cryptology \u2014 CRYPTO 2012 - Volume 7417. Springer-Verlag, Berlin, Heidelberg, pp 643\u2013662"},{"key":"14_CR11","unstructured":"Data61 C (2020) Multi-Protocol SPDZ. https:\/\/github.com\/data61\/MP-SPDZ"},{"issue":"3\u20134","key":"14_CR12","first-page":"211","volume":"9","author":"C Dwork","year":"2014","unstructured":"Dwork C, Roth A (2014) The algorithmic foundations of differential privacy. Found Trends Theor Comput Sci 9(3\u20134):211\u2013407","journal-title":"Found Trends Theor Comput Sci"},{"key":"14_CR13","doi-asserted-by":"publisher","first-page":"70","DOI":"10.1561\/3300000019","volume":"2","author":"D Evans","year":"2018","unstructured":"Evans D, Kolesnikov V, Rosulek M (2018) A pragmatic introduction to secure multi-party computation. Found Trends Privacy Secur 2:70","journal-title":"Found Trends Privacy Secur"},{"key":"14_CR14","unstructured":"Fredrikson M, Lantz E, Jha S, Lin S, Page D, Ristenpart T (2014) Privacy in pharmacogenetics: An end-to-end case study of personalized warfarin dosing. In: 23rd USENIX security symposium (USENIX Security 14). USENIX Association, San Diego, CA, pp 17\u201332. https:\/\/www.usenix.org\/conference\/usenixsecurity14\/technical-sessions\/presentation\/fredrikson_matthew"},{"key":"14_CR15","doi-asserted-by":"crossref","unstructured":"Fredrikson M, Jha S, Ristenpart T (2015) Model inversion attacks that exploit confidence information and basic countermeasures. In: Proceedings of the 22nd ACM SIGSAC conference on computer and communications security. Association for Computing Machinery, New York, NY, CCS \u201915, pp 1322\u20131333","DOI":"10.1145\/2810103.2813677"},{"key":"14_CR16","doi-asserted-by":"publisher","first-page":"105","DOI":"10.1007\/978-3-642-32009-5_8","volume-title":"Advances in Cryptology \u2013 CRYPTO 2012","author":"S Garg","year":"2012","unstructured":"Garg S, Sahai A (2012) Adaptively secure multi-party computation with dishonest majority. In: Safavi-Naini R, Canetti R (eds) Advances in Cryptology \u2013 CRYPTO 2012. Springer Berlin Heidelberg, Berlin, Heidelberg, pp 105\u2013123"},{"key":"14_CR17","unstructured":"Geiping J, Bauermeister H, Dr\u00f6ge H, Moeller M (2020) Inverting gradients\u2013how easy is it to break privacy in federated learning? Preprint. arXiv:200314053"},{"issue":"3","key":"14_CR18","doi-asserted-by":"publisher","first-page":"97","DOI":"10.1145\/1666420.1666444","volume":"53","author":"C Gentry","year":"2010","unstructured":"Gentry C (2010) Computing arbitrary functions of encrypted data. Commun ACM 53(3):97\u2013105","journal-title":"Commun ACM"},{"key":"14_CR19","doi-asserted-by":"crossref","unstructured":"He K, Zhang X, Ren S, Sun J (2016) Deep residual learning for image recognition. In: 2016 IEEE conference on computer vision and pattern recognition (CVPR), pp 770\u2013778","DOI":"10.1109\/CVPR.2016.90"},{"key":"14_CR20","doi-asserted-by":"crossref","unstructured":"Jayaram KR, Verma A, Verma A, Thomas G, Sutcher-Shepard C (2020) Mystiko: Cloud-mediated, private, federated gradient descent. In: 2020 IEEE 13th international conference on cloud computing (CLOUD). IEEE Computer Society, Los Alamitos, CA, pp 201\u2013210","DOI":"10.1109\/CLOUD49709.2020.00039"},{"key":"14_CR21","unstructured":"Jayaraman B, Evans D (2019) Evaluating differentially private machine learning in practice. In: 28th USENIX Security Symposium (USENIX Security 19), USENIX Association, Santa Clara, CA, pp 1895\u20131912. https:\/\/www.usenix.org\/conference\/usenixsecurity19\/presentation\/jayaraman"},{"key":"14_CR22","unstructured":"Jost C, Lam H, Maximov A, Smeets BJM (2015) Encryption performance improvements of the paillier cryptosystem. IACR Cryptology ePrint Archive. https:\/\/eprint.iacr.org\/2015\/864"},{"key":"14_CR23","unstructured":"Kairouz P, McMahan HB, Avent B, Bellet A, Bennis M, Bhagoji AN, Bonawitz K, Charles Z, Cormode G, Cummings R et al (2019) Advances and open problems in federated learning. Preprint. arXiv:191204977"},{"key":"14_CR24","doi-asserted-by":"crossref","unstructured":"Karger D, Lehman E, Leighton T, Panigrahy R, Levine M, Lewin D (1997) Consistent hashing and random trees: Distributed caching protocols for relieving hot spots on the world wide web. In: Proceedings of the twenty-ninth annual ACM symposium on theory of computing. Association for Computing Machinery, New York, NY, STOC \u201997, pp 654\u2013663","DOI":"10.1145\/258533.258660"},{"key":"14_CR25","doi-asserted-by":"crossref","unstructured":"Keller M, Yanai A (2018) Efficient maliciously secure multiparty computation for ram. In: EUROCRYPT (3). Springer, pp 91\u2013124. https:\/\/doi.org\/10.1007\/978-3-319-78372-7_4","DOI":"10.1007\/978-3-319-78372-7_4"},{"key":"14_CR26","doi-asserted-by":"publisher","first-page":"158","DOI":"10.1007\/978-3-319-78372-7_6","volume-title":"Advances in cryptology \u2013 EUROCRYPT 2018","author":"M Keller","year":"2018","unstructured":"Keller M, Pastro V, Rotaru D (2018) Overdrive: Making SPDZ great again. In: Nielsen JB, Rijmen V (eds) Advances in cryptology \u2013 EUROCRYPT 2018. Springer International Publishing, Cham, pp 158\u2013189"},{"key":"14_CR27","unstructured":"Krizhevsky A (2009) Learning multiple layers of features from tiny images. https:\/\/www.cs.toronto.edu\/~kriz\/learning-features-2009-TR.pdf, https:\/\/www.cs.toronto.edu\/~kriz\/cifar.html"},{"key":"14_CR28","volume-title":"Introduction to parallel computing: design and analysis of algorithms","author":"V Kumar","year":"1994","unstructured":"Kumar V, Grama A, Gupta A, Karypis G (1994) Introduction to parallel computing: design and analysis of algorithms. Benjamin-Cummings Publishing, California"},{"issue":"7553","key":"14_CR29","first-page":"436","volume":"521","author":"Y Lecun","year":"2015","unstructured":"Lecun Y, Bengio Y, Hinton G (2015) Deep learning. Nat Cell Biol 521(7553):436\u2013444","journal-title":"Nat Cell Biol"},{"key":"14_CR30","doi-asserted-by":"publisher","first-page":"325","DOI":"10.1007\/978-3-642-24861-0_22","volume-title":"Information security","author":"J Lee","year":"2011","unstructured":"Lee J, Clifton C (2011) How much is enough? choosing \ud835\udf16 for differential privacy. In: Lai X, Zhou J, Li H (eds) Information security. Springer Berlin Heidelberg, Berlin, Heidelberg, pp 325\u2013340"},{"key":"14_CR31","unstructured":"Marr B (2018) 27 Incredible examples of AI and machine learning in practice. Forbes Magazine"},{"key":"14_CR32","unstructured":"McMahan HB, Andrew G (2018) A general approach to adding differential privacy to iterative training procedures. CoRR abs\/1812.06210. http:\/\/arxiv.org\/abs\/1812.06210"},{"key":"14_CR33","doi-asserted-by":"crossref","unstructured":"Melis L, Song C, De Cristofaro E, Shmatikov V (2019) Exploiting unintended feature leakage in collaborative learning. In: 2019 IEEE symposium on security and privacy. IEEE, pp 691\u2013706","DOI":"10.1109\/SP.2019.00029"},{"key":"14_CR34","doi-asserted-by":"publisher","DOI":"10.1093\/acprof:oso\/9780199671670.001.0001","volume-title":"Cloud computing law","author":"C Millard","year":"2013","unstructured":"Millard C (2013) Cloud computing law. Oxford University Press"},{"key":"14_CR35","doi-asserted-by":"crossref","unstructured":"Mironov I (2017) R\u00e9nyi differential privacy. In: 2017 IEEE 30th computer security foundations symposium (CSF), pp 263\u2013275","DOI":"10.1109\/CSF.2017.11"},{"key":"14_CR36","doi-asserted-by":"crossref","unstructured":"Mo F, Haddadi H, Katevas K, Marin E, Perino D, Kourtellis N (2021) PPFL: Privacy-preserving federated learning with trusted execution environments. In: Proceedings of the 19th annual international conference on mobile systems, applications, and services. Association for Computing Machinery, New York, NY, MobiSys \u201921, pp 94\u2013108","DOI":"10.1145\/3458864.3466628"},{"key":"14_CR37","unstructured":"Yuval Netzer, Tao Wang, Adam Coates, Alessandro Bissacco, Bo Wu, Andrew Y. Ng Reading digits in natural images with unsupervised feature learning NIPS workshop on deep learning and unsupervised feature learning 2011"},{"issue":"5","key":"14_CR38","doi-asserted-by":"publisher","first-page":"1333","DOI":"10.1109\/TIFS.2017.2787987","volume":"13","author":"LT Phong","year":"2018","unstructured":"Phong LT, Aono Y, Hayashi T, Wang L, Moriai S (2018) Privacy-preserving deep learning via additively homomorphic encryption. Trans Inf Forens Secur 13(5):1333\u20131345","journal-title":"Trans Inf Forens Secur"},{"key":"14_CR39","doi-asserted-by":"crossref","unstructured":"Rescorla E (2018) The transport layer security (TLS) protocol version 1.3. RFC 8446","DOI":"10.17487\/RFC8446"},{"key":"14_CR40","doi-asserted-by":"publisher","unstructured":"Sabt M, Achemlal M, Bouabdallah A (2015) Trusted execution environment: What it is, and what it is not. In: 2015 IEEE Trustcom\/BigDataSE\/ISPA, vol 1, pp 57\u201364. https:\/\/doi.org\/10.1109\/Trustcom.2015.357","DOI":"10.1109\/Trustcom.2015.357"},{"key":"14_CR41","doi-asserted-by":"crossref","unstructured":"Shokri R, Shmatikov V (2015) Privacy-preserving deep learning. In: ACM CCS \u201915","DOI":"10.1145\/2810103.2813687"},{"key":"14_CR42","doi-asserted-by":"crossref","unstructured":"Shokri R, Stronati M, Song C, Shmatikov V (2017) Membership inference attacks against machine learning models. In: 2017 IEEE symposium on security and privacy (SP), pp 3\u201318","DOI":"10.1109\/SP.2017.41"},{"key":"14_CR43","doi-asserted-by":"crossref","unstructured":"Song S, Chaudhuri K, Sarwate A (2013) Stochastic gradient descent with differentially private updates. In: 2013 IEEE global conference on signal and information processing, GlobalSIP 2013 - Proceedings, 2013 IEEE global conference on signal and information processing, GlobalSIP 2013 - Proceedings, pp 245\u2013248","DOI":"10.1109\/GlobalSIP.2013.6736861"},{"key":"14_CR44","volume-title":"Cryptography and network security: principles and practice","author":"W Stallings","year":"2013","unstructured":"Stallings W (2013) Cryptography and network security: principles and practice, 6th edn. Prentice Hall Press, Upper Saddle River","edition":"6"},{"key":"14_CR45","doi-asserted-by":"crossref","unstructured":"Truex S, Baracaldo N, Anwar A, Steinke T, Ludwig H, Zhang R, Zhou Y (2019) A hybrid approach to privacy-preserving federated learning. In: Proceedings of the 12th ACM workshop on artificial intelligence and security. Association for Computing Machinery, New York, NY, AISec\u201919, pp 1\u201311","DOI":"10.1145\/3338501.3357370"},{"key":"14_CR46","unstructured":"Volos S, Vaswani K, Bruno R (2018) Graviton: Trusted execution environments on GPUs. In: 13th USENIX symposium on operating systems design and implementation (OSDI 18). USENIX Association, Carlsbad, CA, pp 681\u2013696. https:\/\/www.usenix.org\/conference\/osdi18\/presentation\/volos"},{"key":"14_CR47","doi-asserted-by":"crossref","unstructured":"Xu R, Baracaldo N, Zhou Y, Anwar A, Ludwig H (2019) Hybridalpha: An efficient approach for privacy-preserving federated learning. In: Proceedings of the 12th ACM workshop on artificial intelligence and security. Association for Computing Machinery, New York, NY, AISec\u201919, pp 13\u201323. https:\/\/doi.org\/10.1145\/3338501.3357371","DOI":"10.1145\/3338501.3357371"},{"key":"14_CR48","doi-asserted-by":"crossref","unstructured":"Yin H, Mallya A, Vahdat A, Alvarez JM, Kautz J, Molchanov P (2021) See through gradients: Image batch recovery via GradInversion. Preprint. arXiv:210407586","DOI":"10.1109\/CVPR46437.2021.01607"},{"key":"14_CR49","doi-asserted-by":"crossref","unstructured":"Zhang X, Li F, Zhang Z, Li Q, Wang C, Wu J (2020) Enabling execution assurance of federated learning at untrusted participants. In: IEEE INFOCOM 2020 - IEEE conference on computer communications, pp 1877\u20131886","DOI":"10.1109\/INFOCOM41043.2020.9155414"},{"key":"14_CR50","unstructured":"Zhao B, Mopuri KR, Bilen H (2020) iDLG: Improved deep leakage from gradients. Preprint. arXiv:200102610"},{"key":"14_CR51","unstructured":"Zhu L, Liu Z, Han S (2019) Deep leakage from gradients. In: Advances in neural information processing systems, pp 14774\u201314784"}],"container-title":["Federated Learning"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-96896-0_14","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,7,7]],"date-time":"2022-07-07T12:23:50Z","timestamp":1657196630000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-96896-0_14"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022]]},"ISBN":["9783030968953","9783030968960"],"references-count":51,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-96896-0_14","relation":{},"subject":[],"published":{"date-parts":[[2022]]},"assertion":[{"value":"8 February 2022","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}}]}}