Hardening Confidential Federated Compute against Side-channel Attacks

2026-03-22

AI Summary

This work addresses the vulnerability of confidential federated computing platforms to insider threats that exploit side channels to circumvent differential privacy guarantees. It presents the first systematic analysis of the insider side-channel attack surface in this setting and proposes leveraging differential privacy as an active defense mechanism to mitigate two critical classes of attacks. One of the proposed defense strategies has been integrated into an open-source library and empirically validated for effectiveness. By innovatively combining differential privacy with confidential computing, this study offers a practical and deployable approach to mitigating side-channel risks in federated learning systems.

Technology Category

Machine Learning: PrivacyComputer Vision: Adversarial Attacks & RobustnessConstraint Satisfaction and Optimization: Distributed CSP/Optimization

Application Category

Security and Privacy: Data transparency and provenanceUser Modeling, Personalization and Recommendation: Federated recommendation systems and personalizationSystems and Infrastructure for Web, Mobile and WoT: Federated Web and WoT systems, including distributed, federated and edge-based data processing

Abstract

In this work, we identify a set of side-channels in our Confidential Federated Compute platform that a hypothetical insider could exploit to circumvent differential privacy (DP) guarantees. We show how DP can mitigate two of the side-channels, one of which has been implemented in our open-source library.

Problem

• Confidential Federated Compute
• Side-channel Attacks
• Differential Privacy
• Privacy Leakage
• Insider Threat

Innovation

• Confidential Federated Compute
• Side-channel Attacks
• Differential Privacy
• Privacy-preserving Computation
• Secure Multi-party Computation