Title: ROBUST FEDERATED LEARNING THROUGH REP-RESENTATION MATCHING AND ADAPTIVE HYPER-PARAMETERS

Abstract: Federated learning is a distributed, privacy-aware learning scenario which trains a single model on data belonging to several clients. Each client trains a local model on its data and the local models are then aggregated by a central party. Current federated learning methods struggle in cases with heterogeneous client-side data distributions which can quickly lead to divergent local models and a collapse in performance. Careful hyper-parameter tuning is particularly important in these cases but traditional automated hyper-parameter tuning methods would require several training trials which is often impractical in a federated learning setting. We describe a two-pronged solution to the issues of robustness and hyper-parameter tuning in federated learning settings. We propose a novel representation matching scheme that reduces the divergence of local models by ensuring the feature representations in the global (aggregate) model can be derived from the locally learned representations. We also propose an online hyper-parameter tuning scheme which uses an online version of the REINFORCE algorithm to find a hyper-parameter distribution that maximizes the expected improvements in training loss. We show on several benchmarks that our two-part scheme of local representation matching and global adaptive hyper-parameters significantly improves performance and training robustness. 1 

1. INTRODUCTION:

The size of the data used to train machine learning models is steadily increasing, and the privacy concerns associated with storing and managing this data are becoming more pressing. Offloading model training to the data owners is an attractive solution to address both scalability and privacy concerns. This gives rise to the Federated Learning (FL) setting (McMahan et al., 2016) where several clients collaboratively train a model without disclosing their data. In synchronous FL, training proceeds in rounds where at the beginning of each round, a central party sends the latest version of the model to the clients. The clients (or a subset of them) train the received model on their local datasets and then communicate the resulting models to the central party at the end of the round. The central party aggregates the client models (typically by averaging them) to obtain the new version of the model which it then communicates to the clients in the next round.

The FL setting poses a unique set of challenges compared to standard stochastic gradient descent (SGD) learning on a monolithic dataset. In real-world settings, data from each client may be drawn from different distributions, and this heterogeneity can lead the local learning processes to diverge from each other, harming the convergence rate and final performance of the aggregate model. We address this challenge in two ways: (1) adaptive on-line tuning of hyper-parameters; and (2) adding a regularization term that punishes divergent representation learning across clients.

Traditional hyper-parameter tuning schemes, such as random search (Bergstra & Bengio, 2012) or Bayesian methods (Bergstra et al., 2011; Snoek et al., 2012) , require several training runs to evaluate the fitness of different hyper-parameters. This is impractical in the FL setting, which strives to minimize unnecessary communication. To address this issue, we formulate the hyper-parameter selection problem as an online reinforcement learning (RL) problem: in each round, the learners perform an action by selecting particular hyper-parameter values, and at the end of the round get a reward which is the relative reduction in training loss. We then update the hyper-parameter selection policy online to maximize the rewards.

Unlike centralized SGD, where there is a single trajectory of parameter updates, the FL setting has many local parameter trajectories, one per each active client. Even though they share the same initial point, these trajectories could significantly diverge. Averaging the endpoints of these divergent trajectories at the end of a training round would then result in a poor model (Zhao et al., 2018) . Clients with heterogeneous data distributions exacerbate this effect as each client could quickly learn representations specific to its local dataset. We introduce a scheme that mitigates the problem of divergent representations: each client uses the representations it learns to reconstruct the representations in the initial model it receives. A client is thus discouraged from learning representations that are too specific and that discard information about the globally learned representations. We show that this representation matching scheme significantly improves robustness and accuracy in the presence of heterogeneous client-side data distributions.

We evaluate the performance of our two-part scheme, representation matching and online hyperparameter adjustments, on image classification tasks: MNIST, CIFAR10; and on a keyword spotting (KWS) task. We show that for homogeneous client-side data distributions, our scheme consistently improves accuracy. For heterogeneous clients, in addition to improving accuracy, our scheme improves training robustness and stops catastrophic training failures without having to manually tune hyper-parameters for each task.

2. RELATED WORK:

The simplest automated hyper-parameter tuning methods execute random searches in hyperparameter space to find the best-performing hyper-parameters (Bergstra & Bengio, 2012) . Random search is outperformed by Bayesian methods (Bergstra et al., 2011; Snoek et al., 2012) that use the performance of previously selected hyper-parameters to inform the choice of new hyper-parameter to try. In these methods, the fitness of a hyper-parameter choice is the post-training validation accuracy. Running the training process to completion in order to evaluate the hyper-parameter fitness is computationally intensive. This motivates running partial training runs instead (Klein et al., 2016; Li et al., 2016) . However, in FL settings with tight communication budgets, running several (partial) training runs to select the right hyper-parameters could still be impractical.

Hyper-parameters can be optimized using gradient descent to minimize the final validation loss. To avoid storing the entire training trajectory in order to evaluate the hyper-gradients, Maclaurin et al. (2015) uses reversible learning dynamics to allow the entire training trajectory to be reconstructed from the final model. Alternatively, the hyper-gradients can be calculated in a forward manner, albeit at an increased memory overhead (Franceschi et al., 2017) . Using the hyper-gradient to optimize hyper-parameters is an iterative process that requires several standard training runs (hyper-iterations), again making this approach impractical in a communication-constrained FL setting. Hyper-parameters can be optimized using SGD in tandem with model parameters through the use of hyper-networks (Ha et al., 2016; Lorraine & Duvenaud, 2018) which map hyper-parameters to optimal model parameters. It is unclear how hyper-networks can be learned in a FL setting as we are interested in choosing hyper-parameters that result in the best post-aggregation model and not the hyper-parameters chosen by any particular client to optimize its own model on its own dataset.

The hyper-parameter tuning approaches most related to ours are those based on RL methods. Daniel et al. (2016); Jomaa et al. (2019) learn policies and/or state-action values that are then used to select good hyper-parameters. However, several training runs are needed to learn the policies and the action values. Perhaps the closest approach to ours is the method in Xu et al. (2017) which trains an actor-critic network in tandem with the main model and uses it to select actions (hyper-parameter choices) that maximize the expected reduction in training loss. It is unclear how this approach can be applied in a FL setting as the training process on each client has no access to the loss of interest which is the loss of the post-aggregation model. FL typically struggles when the client-side data distributions are significantly different (McMahan et al., 2016; Zhao et al., 2018) as this causes the parameter trajectories to significantly diverge across different clients. This severely degrades the performance of the averaged model (Zhao et al., 2018) . One straightforward solution is to reduce the SGD steps each client takes between the synchronization (model averaging) points. More frequent model synchronization, however, increases communication volume. Various compression methods (Sattler et al., 2019; Konečnỳ et al., 2016) are able to compress the model updates, which makes it possible to synchronize more frequently and mitigate the effect of heterogeneous data distributions. Sattler et al. (2019) takes the extreme case of synchronizing after every SGD step, which reduces the FL setting to standard SGD. An alternative solution is to mix the datasets of the different clients to obtain more homogeneous client-side data distributions (Zhao et al., 2018) . This, however, compromises the privacy of the clients' data.

3. METHODS:

We build upon the federated averaging (FedAvg) algorithm (McMahan et al., 2016) and introduce two novel aspects to it: global adaptive hyper-parameters and local (per-client) representation matching. We first give an informal description of the complete algorithm. We consider a synchronous FedAvg setting with K clients, where D k is the dataset local to client k. Training proceeds in rounds. Figure 1 illustrates the steps involved in training round t. The server maintains a distribution P (H|ψ) over the space of hyper-parameters H. At the beginning of round t (Fig. 1a ), the selected clients receive the most recent model parameters from the server, w t , together with training hyper-parameters h t sampled from P (H|ψ t ). Client i uses two copies of w t to initialize two models: a fixed model M F and a trainable model M i t . The parameters w i t of M i t are trained using SGD (Fig. 1b ). Client i maintains a set of local parameters θ i t that it uses to map the activations in M i t to the activations in M F . θ i t and w i t are simultaneously trained to minimize a two-component loss: the first component is the standard training loss of M i t on D i (for example, the cross-entropy loss); the second component is the mean squared difference between the activations in M F and the activations reconstructed from M i t using θ i t . We denote this second component as the representation matching loss. In the final step in the round (Fig. 1c ), each participating client sends its final model parameters, w i t , to the central server. The server aggregates the model parameters, and uses the loss of the resulting model to update the parameters ψ of the hyper-parameter distribution, P (H|ψ).

3.1. REPRESENTATION MATCHING:

We now describe the representation matching scheme. For an example model, Fig. 2 illustrates how the local parameters θ i in client i are used to map the activations of the model being trained, M i ,to the activations of the fixed model M F . M i is parameterized by w i while M F is parameterized by w which was received from the server at the beginning of training. To simplify notation, we dropped the index of the round, t. Given a data point x ∼ D i , x is fed to M i and M F to obtain the layer activations [a 1 (x; w i ), . . . a M (x; w i )] and [a 1 (x; w), . . . , a M (x; w)], respectively. These are not all the model activations, but only the M activations we are interested in matching. The activations in the two models are matched by a set of matching layers parameterized by 2 ). Instead of deriving the activations of one layer in M F from the activations of the corresponding layer in M i , we found performance significantly improves if the activations of one layer are instead derived from the activations of the next layer of interest above it. As shown in the representative example in Fig. 2 , the activations/layers of interest are the input layer, the point-wise non-linearity layers and the top layer. We use convolutional matching layers if the input has spatial information (such as within a convolutional stack), and fully-connected matching layers otherwise. To reverse a pooling operation, we follow the scheme in Zhao et al. (2015) and unpool pooled activations using the pooling positions used during the pooling operation as shown in Fig. 2 .

θ i (θ i ≡ [θ i 1 , θ i 2 , θ i 3 ] in Fig.

Given a training point and label (x, y) ∼ D i , we define the matching loss at client i as:

L i M (x; w i , w, θ i ) = j=M -1 j=1 ||f j (a j+1 (x; w i ); θ i j ) -a j (x; w)|| 2 2 (1)

where f j denotes the j th matching layer. The per-point training loss at client i is:

L i (x, y; w i , w, θ i ) = L C (a M (x; w i ); y) + L i M (x; w i , w, θ i ) (2)

where L C is the cross-entropy loss and a M (x; w i ) is the top layer activation in the trainable model.

Our representation matching architecture is similar in some respects to auto-encoding architectures, particularly ladder networks (Rasmus et al., 2015) . Unlike ladder networks, however, we do not reconstruct the activations of a non-noisy model from a noisy model but rather, reconstruct the activations of the most recent aggregate model from the activations of the model while it is being trained on a local dataset. This has a regularizing influence as it stops the clients from learning representations that are too specific to their local datasets. This should also ameliorate the effect of model divergence in the clients as all client models have to learn representations that are mappable to a common set of representations defined by the common aggregate model. Additional regularization comes about because a layer's activations are used to reconstruct the activations of a layer below it.

A similar technique was used in what-where autoencoders (Zhao et al., 2015) , and was shown to significantly improve accuracy. Our approach is fundamentally distinct, however, as we use the activations in one one model, M i , to reconstruct the activations in a different model, M F .

Our representation matching scheme is similar in spirit to the techniques used to learn invariant feature representations for domain adaptation where the goal is to minimize the discrepancy between the distributions of features extracted from different domains. However, current techniques for learning domain-invariant features (Ganin et al., 2016; Shen et al., 2017) are incompatible with the FL setting as they require the learner to have access to data from different domains (clients in our case) in order to match the feature distributions across these domains.

3.2. ADAPTIVE HYPER-PARAMETERS:

At each round, the server provides the clients with training hyper-parameters. The hyper-parameters h t provided in round t are a sample from P (H|ψ t ). Let L t be the loss of the aggregate model at the beginning of round t on a representative set of data points (we describe in the next subsection practical schemes for evaluating L t ). We define the reward received for choosing hyper-parameter h t as r t = (L t -L t+1 )/L t . The use of relative loss reduction is motivated by the desire to have the scale of rewards unchanged throughout training. At round t, the goal is to maximize:

EQUATION

Taking the derivative of J t and approximating it with a one-sample Monte Carlo estimate, we obtain

EQUATION

The score-function or REINFORCE gradient estimator (Williams, 1992) in Eq. 5 can be readily evaluated and can be used to update ψ t . However, the variance of this gradient estimator can be quite high (Rezende et al., 2014) , especially since we are using a single-sample estimate. To reduce variance, we introduce a reward baseline (Greensmith et al., 2004) which is the weighted average reward in an interval [t -Z, t + Z] centered around t. The update equation for ψ t is:

ψ t+1 ← ψ t -η H (r t -rt )∇ ψt log(P (h t |ψ t )) where rt = γ Z τ =t+Z τ =t-Z τ =t (Z + 1 -|τ -t|)r τ (6)

where η H is the hyper learning rate and γ Z a normalizing constant. We weigh nearby rewards more heavily than distant rewards when calculating the baseline in round t. A causal version of Eq. 6 that only depends on past rewards is:

EQUATION

which is the update equation for ψ that we use. Even though we are using RL terminology, there are several fundamental differences between our problem and traditional RL problems. First, the setting is non-stationary as the same action in different rounds could lead to a different reward distribution. For example, large learning rates are appropriate towards the beginning of training but would increase the loss towards the end of training. In our scheme, this is reflected in the design of the baseline which weighs nearby rewards more heavily as these provide a more accurate baseline of the rewards at the current state of the learning problem. This non-stationary behavior can be modeled as a partially-observable Markov decision process (Jaakkola et al., 1995) . While several techniques can be used to learn policies in non-stationary settings (Padakandla et al., 2019; Abdallah & Kaisers, 2016) , these methods are not online and require several trajectories (training runs in our case) to optimize the policy. The second difference from traditional RL methods is that we do not seek to maximize the (discounted) sum of rewards, but rather, at each round t, we seek to maximize the rewards in a small interval [t -Z, t] which is what allows us to formulate an online algorithm.

3.3. FULL ALGORITHM AND PRACTICAL CONSIDERATIONS:

Algorithm 1 describes the FedAvg algorithm with our two contributions: representation matching and adaptive hyper-parameters. There are a couple of practical considerations that we address here:

Evaluating the loss of the aggregate model: After each round, the server needs to evaluate the loss of the aggregate model in order to obtain the reward signal (Line 15 in algorithm 1). This could be done in two ways:1) The server maintains a small validation set on which it evaluates the loss. This validation set has to be representative of the clients' data. Unlike the scheme in Zhao et al. (2015) , this validation set is not shared with the clients and can be collected from them in a secure way to avoid revealing the origin of each data point. 2) At the start of a round, the clients themselves evaluate the loss of the aggregate model on a small part of their training data and then send the scalar loss to the server. The server averages these losses to obtain an estimate of the loss. This estimate is good if the fraction of participating clients in the round is high, which would make the evaluated loss more representative of the loss across all clients. In our experiments, we use the first approach.

Algorithm 1 Federated averaging with representation matching and online hyper-parameter tuning.

Setting with T training rounds, K clients, n k datapoints per client, N total datapoints, and a fraction C of clients participating in each round 1: initialize w 1 and θ 1 1 , . . . , θ K 1 and ψ 1 2: L 1 ← Loss(w 1 ) 3: for t=1 to T do 4:

h t ∼ P (•|ψ t )

Sample a set of hyper-parameters 

[w i t , θ i t ] ← [w i t , θ i t ] -η(h t )∇ [w i t ,θ i t ] L i (X, Y ; w i t , w t , θ i t )

L i as defined in Eq. 2 11:

end for 12:

θ i t+1 ← θ i t 13:

end for 14:

w t+1 ← w t + i∈St n k N (w i t -w t )

15:

L t+1 ← Loss(w t+1 )

16:

r t ← (L t -L t+1 )/L t 17:

Z ← min(Z, t -1)

18: , A ). Since different hyper-parameters can have different scales, we shift and normalize the allowed values for each hyper-parameter so that they have zero mean and are in the range [-0.5, 0.5] before constructing the grid. The grid of hyper-parameters H thus has zero-mean and the same scale in all dimensions. This increase the stability of the hyper-parameter tuning algorithm as the optimization space is uniform in all directions.

ψ t+1 ← ψ t -η H τ =t τ =t-Z (r τ -rt )∇ ψτ log(P (h τ |ψ )) where rt = 1 Z +1 τ =t τ =t-Z

We choose a discrete hyper-parameter space H to force different hyper-parameter choices to be significantly different, which would provide more distinct reward signals to the online REINFORCE algorithm. The choice of a uni-modal distribution, such as the discrete Gaussian, encourages hyperparameter exploration to focus on areas around the mode. This embodies the inductive bias that the optimal hyper-parameter in one round is close to the optimal hyper-parameter in the previous round.

4. EXPERIMENTAL RESULTS:

We evaluate the performance of our two-part scheme on the MNIST and CIFAR10 image classification datasets, and on a KWS task using the speech commands dataset (Warden, 2018) . We restrict the KWS task to only ten keywords. In all experiments, we use ten clients and use one of two data distributions: iid where the dataset is split randomly across the ten clients, and non-iid where each client only has data points belonging to one of the ten classes. We use our online hyper-parameter tuning scheme to tune the learning rate and the number of SGD iterations (see algorithm 1). In all experiments, we use the same hyper-hyper-parameters controlling the hyper-parameter tuning process which are the hyper-learning rate η H , the hyper-parameter grid H, and the REINFORCE baseline interval Z. One exception is the KWS task where we modify the grid H to reduce the number of allowed SGD iterations per round to reflect the smaller size of the dataset. A batch size of 64 is used throughout. In all experiments, we add an entropy regularization (ER) term (Pereyra et al., 2017) to the client losses during training. For client i in round t with input x, the ER loss term has the form:

EQUATION

where H(•) is the entropy operator and a M the top layer activity. L ER penalizes highly confident (low entropy) output distributions when their entropy falls below H min . This loss term significantly improves the performance of the FedAvg algorithm in the presence of non-iid client data.

As a comparison baseline, we run experiments with a fixed decay schedule for both the learning rate and the number of SGD iterations per round. As a baseline for our representation matching scheme, we run experiments where each client's training loss is augmented with a term that penalizes weight divergence between the client model parameters and the initial parameters received from the server. For client i in round t, this weight divergence (WD) loss term has the form ||w t -w i t || 2 2 . This penalty function was introduced into the FL setting by the FedProx algorithm (Li et al., 2018) to mitigate the effect of model divergence.

We report results for the standard FedAvg algorithm (FA), FedAvg with a weight divergence loss term in the clients (FA+WD), and FedAvg augmented with adaptive hyper-parameters(AH) and/or representation matching (RM). We consider two values for C (the fraction of clients participating in each round): C = 0.5 and C = 1.0. For the baselines, FA and FA+WD, we manually tuned the hyper-parameters decay schedule to obtain best accuracy. This tuning was done separately for the iid and non-iid cases . All experiments were repeated 3 times.

MNIST : We use a fully-connected network with two hidden layers with 100 neurons each. As shown in table 1, the best performing algorithm is FA+AH. The use of representation matching causes a slight degradation in performance (FA+RM+AH and FA+RM) . It is interesting to look at the trajectory of the mean µ of the discrete Gaussian hyper-parameter distribution P (H|µ, A). This is shown in the first column of Fig. 3 for the iid and non-iid cases. In the non-iid case, the online REINFORCE algorithm pushes the mean learning rate down as it detects that a smaller learning rate yields greater loss reductions, while in the iid case, the mean learning rate is pushed up instead. This aligns with what a practitioner would do to ensure convergence in the more challenging non-iid case. The REINFORCE algorithm chooses to keep the mean number of SGD iterations per round relatively high for most of the training run. As shown in table 1, these choices yield slightly better accuracy (FA+AH) than the fixed training schedule used in the standard FA algorithm. We use a network with two convolutional layers (with 32 and 64 feature maps and 5x5 kernels) followed by two fully connected layers (with 1024 and 10 neurons). 2x2 max pooling was used after each convolutional layer. As shown in table 2, the use of representation matching yields a significant improvement in accuracy for the non-iid case while slightly improving performance in the iid case. The benefit of adaptive hyper-parameters over a fixed hyper-parameter schedule are more equivocal. The evolution of adaptive hyper-parameters is shown in the second column of Fig. 3 . Unlike the MNIST case, the REINFORCE algorithm chooses to push down the learning rate for the iid case as well which actually leads to better performance in the iid case compared to the fixed schedule (FA vs. FA+AH and FA+RM+AH vs. FA+RM in table 2 ). In the non-iid case, the fixed schedule performs better, though.

Keyword spotting task : We calculate the mel spectrogram for each speech command to obtain a 32x32 input to our network. The network we use has four convolutional layers with 3x3 kernels and 64 feature maps each (with 2x2 max pooling after each pair), followed by two fully connected layers of 1024 and 10 neurons. In this deeper network, representation matching is essential in the non-iid case as shown in table 3 since training consistently fails in its absence. It might be possible that with fine tuning of hyper-parameters, training would be possible in the non-iid case. However, representation matching obviates the need for such fine tuning. FA+RM+AH consistently outperforms all other methods indicating the hyper-parameters schedule found by the REINFORCE algorithm (third column in Fig. 3 ) is better than the fixed schedule. Communication and computational overhead : Our representation matching scheme does not introduce any communication overhead between the clients and the central server. The adaptive hyper-parameters scheme introduces a negligible communication overhead for sending two scalar hyper-parameters to the clients each round. As for computational overhead, we quantify the wallclock run-time1 for training a client for 30 SGD iterations or mini-batches (mini-batch size of 64).

Where adaptive hyper-parameters are used, we also include the time needed to execute the adaptive hyper-parameter tuning procedure. The results are shown in table 4. We note that the overhead of our hyper-parameter tuning procedure is negligible (FA vs. FA+AH) and is typically less than 2%. This negligible computational overhead is primarily the cost of a single inference pass to evaluate the loss L t on a very small subset of the training set. The representation matching scheme is more demanding as as it requires optimizing a more complicated loss during each SGD iteration at the client. 

5. DISCUSSION:

We described two additions to the FedAvg algorithm: representation matching and adaptive hyperparameters. We compared representation matching (FA+RM) against a scheme based on penalizing weight divergence (FA+WD) and FA+RM came out on top by a significant margin in the more difficult tasks we tried: CIFAR10 and KWS. We compared our adaptive hyper-parameter scheme against a fixed hyper-parameter schedule chosen based on experience. In most cases, adaptive hyper-parameters outperform the fixed-schedule scheme. The combination of our two new additions (FA+RM+AH) slightly improves performance compared to standard FA in the small MNIST network and significantly improves performance on the deeper networks used in CIFAR10 and KWS.

The hyper-parameter schedule chosen by our REINFORCE algorithm exhibits some easily interpretable behavior such as reducing the learning rate in the more difficult non-iid cases. However, we see some behavior that does not have an immediately obvious interpretation. For example, in order to maximize rewards in the non-iid case, reducing the learning rate is more important than reducing the number of SGD iterations per round as can be seen in Fig. 3 . It is important to note that at each round, our online REINFORCE algorithm only seeks to maximize the loss improvement in the last few rounds. Moreover, our algorithm continuously samples hyper-parameters around the mean to determine the direction of highest reward. These noisy hyper-parameter choices could prove problematic in settings that depend on highly tuned schedules and which have no room for online exploration of hyper-parameters. We thus expect our scheme would be outperformed by traditional automated hyper-parameter tuning methods that tune hyper-parameters to maximize the final validation loss. However, our scheme is significantly more efficient as it does not require repeated training and introduces only a small computational overhead in each round.

:

Code used to run all experiments is available under the anonymous repository https://gitlab.com/ anon.iclr2020/robust_federated_learning

Experiments were run on a machine with a single TitanXP GPU, 32G of RAM, and an Intel Xeon E5-2699A processor.

Figures and Tables:

Figure 1: The three steps in a federated learning round. (a) The server communicates the latest model parameters w t and the training hyper-parameters h t to each client. (b) client i trains the model parameters w i t and the representation matching parameters θ i t to minimize the classification loss and the matching loss. (c) Each client sends back the updated model parameters to the server. The server aggregates the received parameters, evaluates the loss of the aggregate model, and updates the parameters of the hyper-parameter distribution, ψ, based on the history of the aggregate losses.

Figure 2: Illustration of representation matching using a model with one convolutional layer and two fully connected layers. Layers whose activations are used in the matching loss are shown in red. The matching layers map the activations in M i to the activations in M F .

of P (H|ψ) : For D hyper-parameters, we use a discrete D-dimensional hyperparameter space. For the p th hyper-parameter, we have a finite set of allowable values H p . H is a D-dimensional grid containing all possible combinations of the allowed values of the D hyperparameter. |H| = D p=1 |H p |. For P (H|ψ) we use a D-dimensional discrete Gaussian. Let N (•|µ, A) be a standard(continuous) D-dimensional Gaussian with mean µ and precision A. Let h j = (h 1 j , . . . , h D j ) be a point on the grid H. P (h j |ψ) = 1 Z N (h j |µ, A) where ψ = {µ, A} and Z = h∈H N (h|µ

Figure 3: Evolution of the mean of the hyper-parameter distribution P (H|ψ) for the iid and non-iid cases. Results taken from the FA+RM+AH algorithm when C = 1.0. The evolution of the means are shown separately for the learning rate (first row) and for the number of SGD steps per round (second row), with one column each for the MNIST, CIFAR10, and keyword spotting (KWS) tasks. During training, the means are forced to stay within the ranges defined by the hyper-parameter grid.

MNIST accuracy figures

Table content: <table><tr><td/><td>Data Distribution</td><td>FA</td><td>FA+WD</td><td>FA+RM+AH</td><td>FA+RM</td><td>FA+AH</td></tr><tr><td>C=1.0</td><td>iid non-iid</td><td colspan="5">97.9 ± 0.1 97.9 ± 0.005 97.9 ± 0.06 97.8 ± 0.06 98.0 ± 0.04 94.7 ± 0.07 94.8 ± 0.2 94.7 ± 0.08 94.5 ± 0.3 95.5 ± 0.04</td></tr><tr><td>C=0.5</td><td>iid non-iid</td><td colspan="2">97.4 ± 0.06 97.3 ± 0.03 92.1 ± 0.8 92.0 ± 0.4</td><td colspan="3">98.1 ± 0.06 97.4 ± 0.05 98.2 ± 0.01 92.5 ± 0.1 91.6 ± 0.3 93.2 ± 0.8</td></tr><tr><td colspan="2">CIFAR10 :</td><td/><td/><td/><td/></tr></table>

CIFAR10 accuracy figures

Table content: <table><tr><td/><td/><td/><td colspan="3">Data Distribution</td><td colspan="2">FA</td><td/><td/><td colspan="2">FA+WD</td><td colspan="3">FA+RM+AH</td><td/><td/><td>FA+RM</td><td>FA+AH</td></tr><tr><td colspan="3">C=1.0</td><td/><td colspan="2">iid non-iid</td><td colspan="6">81.9 ± 0.3 81.4 ± 0.2 44.2 ± 0.9 44.3 ± 0.8</td><td colspan="3">84.3 ± 0.1 52.4 ± 2.2</td><td colspan="4">83.5 ± 0.1 52.9 ± 0.05 44.8 ± 5.8 83.4 ± 1.2</td></tr><tr><td colspan="3">C=0.5</td><td/><td colspan="2">iid non-iid</td><td colspan="6">76.8 ± 0.3 76.6 ± 0.2 33.4 ± 1.0 34.4 ± 0.9</td><td colspan="3">79.2 ± 1.9 39.8 ± 3.8</td><td colspan="4">76.0 ± 0.2 43.3 ± 0.8</td><td>82.0 ± 1.04 19.8 ± 7.0</td></tr><tr><td/><td>0.05</td><td/><td/><td colspan="2">MNIST</td><td/><td/><td>0.05</td><td/><td/><td colspan="2">CIFAR10</td><td/><td/><td>0.05</td><td/><td/><td>KWS</td></tr><tr><td>learning rate</td><td>0.01 0.02 0.03 0.04</td><td/><td/><td/><td colspan="2">noniid iid fixed schedule</td><td>learning rate</td><td>0.01 0.02 0.03 0.04</td><td/><td/><td/><td colspan="2">noniid iid fixed schedule</td><td>learning rate</td><td>0.01 0.02 0.03 0.04</td><td/><td/><td>noniid iid fixed schedule</td></tr><tr><td/><td>0.00</td><td>0</td><td>100</td><td colspan="2">200 round 300</td><td>400</td><td>500</td><td>0.00</td><td>0</td><td>100</td><td colspan="2">200 round 300</td><td>400</td><td>500</td><td>0.00</td><td>0</td><td>100</td><td>200 round 300</td><td>400</td><td>500</td></tr><tr><td/><td>0</td><td/><td>100</td><td>200</td><td>300</td><td>400</td><td>500</td><td/><td/><td/><td/><td/><td/><td/><td/><td/><td/></tr></table>

Keyword spotting task accuracy figures

Table content: <table><tr><td/><td>Data Distribution</td><td>FA</td><td>FA+WD</td><td>FA+RM+AH</td><td>FA+RM</td><td>FA+AH</td></tr><tr><td>C=1.0</td><td>iid non-iid</td><td colspan="2">93.0 ± 0.2 93.5 ± 0.2 28.4 ± 7.2 29.9 ± 7.3</td><td>94.4 ± 0.2 81.1 ± 0.5</td><td colspan="2">92.9 ± 0.3 94.0 ± 0.4 79.2 ± 0.6 9.8 ± 0.2</td></tr><tr><td>C=0.5</td><td>iid non-iid</td><td colspan="2">91.4 ± 0.3 93.0 ± 0.4 11.45 ± 1.7 11.8 ± 2.7</td><td>94.3 ± 0.1 74.9 ± 2.5</td><td colspan="2">91.0 ± 0.2 93.2 ± 0.4 60.7 ± 3.3 10.0 ± 0.3</td></tr></table>

Wall-clock run-time in seconds. Mean and std. from 200 trials.

Table content: <table><tr><td>Task</td><td>FA</td><td>FA+WD</td><td>FA+RM+AH</td><td>FA+RM</td><td>FA+AH</td></tr><tr><td>MNIST</td><td colspan="5">0.39 ± 0.007 0.41 ± 0.008 0.43 ± 0.007 0.42 ± 0.007 0.39 ± 0.007</td></tr><tr><td colspan="2">CIFAR10 0.50 ± 0.02</td><td>0.54 ± 0.01</td><td>0.67 ± 0.02</td><td>0.66 ± 0.02</td><td>0.51 ± 0.02</td></tr><tr><td>KWS</td><td>1.83 ± 0.05</td><td>1.96 ± 0.05</td><td>2.03 ± 0.04</td><td>2.01 ± 0.04</td><td>1.85 ± 0.05</td></tr></table>

Peer review (iclr2020):
- Good paper. However, the theoretical novelty is quite limited. There is no guarantee whatsoever whether the good empirical results achieved on the three experimented would persist with other datasets. Similarly, there is no analysis of the conditions required so that such empirical superiority would hold. - The flow of the ideas in the paper is clear and unequivocal. However, writing has a lot of room for improvement in terms of typos and grammatical mistakes. Examples -- p1: *are become* -- p5: *several fundamental difference* - I think an analysis and comparisons based on computational run-time would be necessary to check how the RL-based methodology would fare w.r.t. FA and the other FL frameworks in comparison. - What about comparing to other federated learning frameworks, i.e. other than versions and extensions of FA? - In the Introduction, it was promised that the proposed method would stop catastrophic training failures; has that been actually described in the experiments? - Similarly so for the robustness issue (which is also the first word in the paper title), where is the empirical demonstration of the robustness of the proposed method? - Regarding the last paragraph in Section 2.2 and the first fundamental difference between the proposed modelling choice and RL, is the former still different from non-stationary RL? An example of recent works on non-stationary RL is *Reinforcement learning in non-stationary environments* by Padakandla et al. 2019. - This is not strictly necessary, but might be a done in a future work or so: Did you consider comparing to methods which are based on learning invariant representations (which is quite similar to the methodology pursued in the paper) adopted in different ML paradigms like domain adaptation?