F ED BE: M AKING B AYESIAN M ODEL E NSEMBLE A PPLICABLE TO F EDERATED L EARNING
Anonymous authors
Paper under double-blind review
A BSTRACT
Federated learning aims to collaboratively train a strong global model by accessing users’ locally trained models but not their own data.
A crucial step is therefore to aggregate local models into a global model, which has been shown challenging when users have non-i i d. data.
In this paper, we propose a novel aggregation algorithm named F ED BE, which takes a Bayesian inference perspective by sampling higher-quality global models and combining them via B ayesian model E nsemble, leading to much robust aggregation.
We show that an effective model distribution can be constructed by simply ﬁtting a Gaussian or Dirichlet distribution to the local models.
Our empirical studies validate F ED BE’s superior performance, especially when users’ data are not i.i d. and when the neural networks go deeper.
Moreover,
F ED BE is compatible with recent efforts in regularizing users’ model training, making it an easily applicable module: you only need to replace the aggregation method but leave other parts of your federated learning algorithm intact.
I NTRODUCTION
Modern machine learning algorithms are data and computation hungry.
It is therefore desired to collect as many data and computational resources as possible, for example, from individual users (e.g., users’ smartphones and pictures taken on them), without raising concerns in data security and privacy.
Federated learning has thus emerged as a promising learning paradigm, which leverages individuals’ computational powers and data securely — by only sharing their locally trained models with the server — to jointly optimize a global model (Kone ˇ cn ` y et al., 2016; Yang et al., 2019).
Federated learning (FL) generally involves multiple rounds of communication between the server and clients (i.e., individual sites).
Within each round, the clients ﬁrst train their own models using their own data, usually with limited sizes.
The server then aggregates these models into a single, global model.
The clients then begin the next round of training, using the global model as the initialization.
We focus on model aggregation , one of the most critical steps in FL.
The standard method is
F ED A VG (McMahan et al., 2017), which performs element-wise average over clients’ model weights.
Assuming that each client’s data are sampled i.i.d.
from their aggregated data, F ED A VG has been shown convergent to the ideal model trained in a centralized way using the aggregated data (Zinkevich et al., 2010; McMahan et al., 2017; Zhou & Cong, 2017).
Its performance, however, can degrade drastically if such an assumption does not hold in practice (Karimireddy et al., 2020;
Li et al., 2020b; Zhao et al., 2018): F ED A VG simply drifts away from the ideal model.
Moreover, by only taking weight average, F ED A VG does not fully utilize the information among clients (e.g., variances), and may have negative effects on over-parameterized models like neural networks due to their permutation-invariant property in the weight space (Wang et al., 2020; Yurochkin et al., 2019).
To address these issues, we propose a novel aggregation approach using Bayesian inference , inspired by (Maddox et al., 2019).
Treating each client’s model as a possible global model, we construct a distribution of global models, from which weight average (i.e., F ED A VG ) is one particular sample and many other global models can be sampled.
This distribution enables Bayesian model ensemble — aggregating the outputs of a wide spectrum of global models for a more robust prediction.
We show that Bayesian model ensemble can make more accurate predictions than weight average at a single round of communication, especially under the non i.i.d.
client condition.
Nevertheless, lacking a single global model that represents Bayesian model ensemble and can be sent back to clients,
Bayesian model ensemble cannot directly beneﬁt federated learning in a multi-round setting.
We therefore present F ED BE, a learning algorithm that effectively incorporates B ayesian model
E nsemble into federated learning.
Following (Guha et al., 2019), we assume that the server has access to a set of unlabeled data, on which we can make predictions by model ensemble.
This assumption can easily be satisﬁed: the server usually collects its own data for model validation, and collecting unlabeled data is simpler than labeled ones.
(See section 6 for more discussion, including the privacy concern.)
Treating the ensemble predictions as the “pseudo-labels” of the unlabeled data, we can then summarize model ensemble into a single global model by knowledge distillation (Hinton et al., 2015) — using the predicted labels (or probabilities or logits) as the teacher to train a student global model.
The student global model can then be sent back to the clients to begin their next round of training 1 .
We identify one key detail of knowledge distillation in F ED BE.
In contrast to its common practice where the teacher is highly accurate and labeled data are accessible, the ensemble predictions in federated learning can be relatively noisy 2 .
To prevent the student from over-ﬁtting the noise, we apply stochastic weight average (SWA) (Izmailov et al., 2018) in distillation.
SWA runs stochastic gradient descent (SGD) with a cyclical learning rate and averages the weights of the traversed models, allowing the traversed models to jump out of noisy local minimums, leading to a more robust student.
We validate F ED BE on CIFAR-10/100 (Krizhevsky et al., 2009) and Tiny-ImageNet (Le & Yang, 2015) under different client conditions (i.e., i.i.d. and non-i.i.d. ones), using ConvNet (TensorFlow team, 2016), ResNet (He et al., 2016), and MobileNetV2 (Howard et al., 2017; Sandler et al., 2018).
F ED BE consistently outperforms F ED A VG , especially when the neural network architecture goes deeper.
Moreover, F ED BE can be compatible with existing FL algorithms that regularize clients’ learning or leverage server momentum (Li et al., 2020a;
Sahu et al., 2018; Karimireddy et al., 2020;
Hsu et al., 2019) and further improves upon them.
Interestingly, even if the unlabeled server data have a different distribution or domain from the test data (e.g., taken from a different dataset), F ED BE can still maintain its accuracy, making it highly applicable in practice.
R ELATED W ORK ( MORE IN A PPENDIX B)
Federated learning (FL).
In the multi-round setting, F ED A VG (McMahan et al., 2017) is the standard approach.
Many works have studied its effectiveness and limitation regarding convergence, robustness, and communication cost, especially in the situations of non-i.i.d.
clients.
Please see Appendix B for a list of works.
Many works proposed to improve F ED A VG .
F ED P ROX (Li et al., 2020a;
Sahu et al., 2018), F ED DANE (Li et al., 2019), Yao et al.
(2019), and SCAFFOLD (Karimireddy et al., 2020) designed better local training strategies to prevent clients’ model drifts.
Zhao et al.
(2018) studied the use of shared data between the server and clients to reduce model drifts.
Reddi et al.
(2020) and Hsu et al.
(2019) designed better update rules for the global model by server momentum and adaptive optimization.
Our F ED BE is complementary to and can be compatible with these efforts.
In terms of model aggregation.
Yurochkin et al.
(2019) developed a Bayesian non-parametric approach to match clients’ weights before average, and F ED MA (Wang et al., 2020) improved upon it by iterative layer-wise matching.
One drawback of F ED MA is its linear dependence of computation and communication on the network’s depth, not suitable for deeper models.
Also, both methods are not yet applicable to networks with residual links and batch normalization (Ioffe & Szegedy, 2015).
We improve aggregation via Bayesian ensemble and knowledge distillation, bypassing weight matching.
Ensemble learning and knowledge distillation.
Model ensemble is known to be more robust and accurate than individual base models (Zhou, 2012;
Dietterich, 2000; Breiman, 1996).
Several recent works (Anil et al., 2018; Guo et al., 2020; Chen et al., 2020) investigated the use of model ensemble and knowledge distillation (Hinton et al., 2015) in an online fashion to jointly learn multiple models, where the base models and distillation have access to the centralized labeled data or decentralized data of the same distribution.
In contrast, client models in FL are learned with isolated and likely non-i.i.d.
and limited data; our distillation is performed without labeled data.
We thus propose to sample base models of higher quality for Bayesian ensemble and employ SWA for robust distillation.
Knowledge distillation in FL.
Guha et al.
(2019) considered one-round FL and applied distillation to obtain a global model from the direct ensemble of clients’ models .
A similar idea was used in (Papernot et al., 2017) in a different context.
Our method can be viewed as an extension of (Guha et al., 2019) to multi-round FL, with higher-quality base models being sampled from a global distribution for more robust ensemble.
Knowledge distillation was also used in (Li & Wang, 2019) and (Jeong et al., 2018) but for different purposes.
Li & Wang (2019) performed ensemble distillation for each client, aiming to learn strong personalized models but not the global model.
Jeong et al.
(2018) aimed to speed up communication by sending averaged logits of clients’ data, not models, between clients and the server.
The clients then use the aggregated logits to regularize local training via distillation.
The accuracy, however, drops drastically compared to F ED A VG in exchange for faster communication.
In contrast, we distill on the server using unlabeled data collected at the server, aiming to build a stronger global model.
The most similar work to ours is a concurrent work by Lin et al.
(2020), which also employs ensemble distillation on the server in a multi-round setting.
Our work is notably different from all the above methods by taking the Bayesian perspective to sample better base models and investigating SWA for distillation, signiﬁcantly improving the performance on multi-round FL.
B AYESIAN M ODEL E NSEMBLE FOR F EDERATED L EARNING 3. B ACKGROUND : F ED A VG
Federated learning (FL) usually involves a server coordinating with many clients to jointly learn a global model without data sharing, in which F ED A VG (McMahan et al., 2017) in a standard approach.
Denote by S the set of clients, D i = { ( x n , y n ) } N i n =1 the labeled data of client i , and ¯ w the weights of the current global model, F ED A VG starts with client training of all the clients in parallel, initializing each clients’ model w i with ¯ w and performing SGD for K steps with a step size η l
Client training: w i ← w
[Equation]
B k
[Equation]
i ) , for k = 1 , 2 , · · · , K, (1) where (cid:96) is a loss function and B k is the mini-batch sampled from D i at the k th step.
After receiving all the clients’ models { w i ; i ∈ S} , given |D| = (cid:80) i |D i | , F ED A VG performs weight average to update the global model ¯ w
Model aggregation (by weight average):
[Equation]
With the updated global model ¯ w , F ED A VG then starts the next round of client training .
The whole procedure of F ED A VG therefore iterates between Equation 1 and Equation 2, for R rounds.
In the case that D i is i.i.d.
sampled from the aggregated data D =
(cid:83) i ∈S D i , F ED A VG has been shown convergent to the ideal model w (cid:63) learned directly from D in a centralized manner (Stich, 2019; Haddadpour & Mahdavi, 2019; Khaled et al., 2020).
In reality, however, the server has little control and knowledge about the clients.
Each client may have different data distributions in the input (e.g., image distribution) or output (e.g., label distribution).
Some clients may disconnect at certain rounds.
All of these factors suggest the non-i.i.d.
nature of federated learning in practice, under which the effectiveness of F ED A VG can largely degrade (Zhao et al., 2018; Li et al., 2020b; Hsu et al., 2019).
For example, Karimireddy et al.
(2020) show that ¯ w in Equation 2 can drift away from w (cid:63) .
3. A B AYESIAN PERSPECTIVE
We propose to view the problem of model drift from a Bayesian perspective.
In Bayesian learning, it is the posterior distribution p ( w |D ) of the global model being learned, from which ¯ w and w (cid:63) can be regarded as two particular samples (i.e., point estimates).
Denote by p ( y | x ; w ) the output probability of a global model w , one approach to mitigate model drift is to perform Bayesian inference (Neal, 2012; Barber, 2012) for prediction, integrating the outputs of all possible models w.r.t.
the posterior
[Equation]
rather than relying on a single point estimate.
While Equation 3 is intractable in general, we can approximate it by the Monte Carlo method, sampling M models for model ensemble
Bayesian model ensemble:
[Equation]
m
[Equation]
∼ p
[Equation]
w
[Equation]
D
[Equation] [Equation] The question is: how to estimate p ( w |D ) in federated learning, given merely client models { w i } ?
3. B AYESIAN MODEL ENSEMBLE WITH APPROXIMATED POSTERIORS
We resort to a recently proposed idea, named stochastic weight average-Gaussian (SWAG)
(Maddox et al., 2019), for estimating the posterior.
SWAG employed a cyclical or constant learning rate in
SGD, following SWA (Izmailov et al., 2018).
SWAG then constructs a Gaussian distribution p ( w |D ) by ﬁtting the parameters to the model weights it traverses in SGD.
In federated learning, by rewriting w i as ¯ w − g i , where g i = − ( w i − ¯ w ) denotes the K -step stochastic gradient on a mini-batch D i ⊂ D
(McMahan et al., 2017), we can indeed view each client’s model w i as taking K -step SGD to traverse the weight space of global models.
Gaussian.
To this end, we propose to ﬁt a diagonal Gaussian distribution N ( µ , Σ diag ) to the clients’ models { w i } following (Maddox et al., 2019),
[Equation]
from which we can sample { w ( m ) ∼ N ( µ , Σ diag ) } Mm =1 for model ensemble (cf. Equation 4).
Here ( · ) 2 means taking element-wise square.
We note that, both the clients’ models { w i } and F ED A VG ¯ w are possible samples from N ( µ , Σ diag ) .
Dirichlet.
We investigate another way to construct p ( w |D ) , inspired by the fact that an averaged stochastic gradient is in general closer to the true gradient than individual stochastic gradients (Haddadpour & Mahdavi, 2019; Izmailov et al., 2018; Liang et al., 2019; Stich, 2019; Zhou & Cong, 2017).
By viewing each client’s model as w i = ¯ w − g i , such a fact suggests that a convex combination (i.e., weighted average) of clients’ models can lead to a better model than each client alone:
[Equation]
where γ =
[ γ 1 , · · · , γ |S| ] (cid:62) ∈ ∆ |S|− 1 is a vector on the ( |S| − 1) -simplex.
To this end, we use a
Dirichlet distribution Dir ( α ) to model the distribution of γ , from which we can then sample w ( m ) by w ( m ) = (cid:88)
[Equation]
where α =
[ α 1 , · · · , α |S| ] (cid:62) (cid:31) 0 is the parameter of a Dirichlet distribution, and B ( α ) is the multivariate beta function for normalization.
We study different α in subsection D.1.
To sum up, Bayesian model ensemble in federated learning takes the following two steps:
• Construct p ( w |D ) from the clients’ models { w i } (cf.
Equation 5 or Equation 7) • Sample { w ( m ) ∼ p ( w |D ) } Mm =1 and perform ensemble (cf.
Equation 4)
Analysis.
We validate Bayesian model ensemble with a three-class classiﬁcation problem on the
Swiss roll data in Figure 1 (a).
We consider three clients with the same amount of training data: each has 80% data from one class and 20% from the other two classes, essentially a non-i.i.d.
case.
We apply F ED A VG to train a two-layer MLP for 10 rounds (each round with 2 epochs).
We then show the test accuracy of models sampled from Equation 7 (with α = 0 .
5 × 1 ) — the corners of the triangle (i.e., ∆ 2 ) in Figure 1 (b) correspond to the clients; the position inside the triangle corresponds to the γ coefﬁcients.
We see that, the sampled models within the triangle usually have higher accuracy than the clients’ models.
Surprisingly, the best performing model that can be sampled from a Dirichlet distribution is not F ED A VG (the center of the triangle), but the one drifting to the bottom right.
This suggests that Bayesian model ensemble can lead to higher accuracy (by averaging over sampled [Figure] models) than F ED A VG alone.
Indeed, by combining 10 randomly sampled models via Equation 4,
Bayesian model ensemble attains a 69% test accuracy, higher than 64% by F ED A VG .
Figure 1 (c) further shows that the sampled models have a better alignment between the prediction conﬁdence and accuracy than the clients’ (mean results of 3 clients or samples).
See subsection D.1 for details.
To further compare F ED A VG and ensemble, we linearize p ( y | x ; · ) at ¯ w (Izmailov et al., 2018),
[Equation]
where Ω ( m ) = w ( m ) − ¯ w and (cid:104)· , ·(cid:105) is the dot product.
By averaging the sampled models, we arrive at
[Equation]
where Ω = max m (cid:107) Ω ( m ) (cid:107) .
In federated learning, especially in the non-i.i.d.
cases, Ω can be quite large.
Bayesian ensemble thus can have a notable difference (improvement) compared to F ED A VG .
F ED BE
Server input : initial global model w , SWA scheduler η
SWA , unlabeled data U = { x j } Jj =1 ; Client i ’s input: local step size η l , local labeled data
D i ; for r ← 1 to R do Sample clients S ⊆ { 1 , · · · , N } ;
Communicate w to all clients i ∈ S ; for each client i ∈ S in parallel do
Initialize local model w i ← w ; w i ← Client training ( w i , D i , η l ) ; [Equation 1] Communicate w i to the server; end Construct ¯ w = (cid:80) i ∈S |D i | (cid:80) i (cid:48)∈S |D (cid:48) i | w i ; Construct global model distribution p ( w |D ) from { w i ; i ∈ S} ; [Equation 5 or Equation 7]
Sample M global models { w ( m ) ∼ p ( w |D ) }
Mm =1 ;
Construct { w ( m (cid:48) ) } M (cid:48) m (cid:48) = 1 = { ¯ w } ∪ { w i ; i ∈ S} ∪ { w ( m ) } Mm =1 ;
Construct T = { x j , ˆ p j } Jj =1 , where ˆ p j = 1 M (cid:48) (cid:80) m (cid:48) p ( y | x j ; w ( m (cid:48) ) ) ; [Equation 4] Knowledge distillation: w ← SWA ( ¯ w , T , η SWA ); endServer output : w .
Bayesian model ensemble, however, cannot directly beneﬁt multi-round federated learning, in which a single global model must be sent back to the clients to continue client training .
We must translate the prediction rule of Bayesian model ensemble into a single global model.
To this end, we make an assumption that we can access a set of unlabeled data
U = { x j } Jj =1 at the server.
This can easily be satisﬁed since collecting unlabeled data is simpler than labeled ones.
We use
U for two purposes.
On one hand, we use U to memorize the prediction rule of
Bayesian model ensemble, turning U into a pseudo-labeled set T = { ( x j , ˆ p j ) }
Jj =1 , where ˆ p j = 1 M (cid:80) Mm =1 p
y | x j ; w ( m ) ) is a probability vector.
On the other hand, we use T as supervision to train a global model w , aiming to mimic the prediction rule of Bayesian model ensemble on U .
This process is reminiscent of knowledge distillation (Hinton et al., 2015) to transfer knowledge from a teacher model (in our case, the Bayesian model ensemble) to a student model (a single global model).
Here we apply a cross entropy loss to learn w : − 1 J (cid:80) j ˆ p (cid:62) j log( p ( y | x j ; w )) .
SWA for knowledge distillation.
Optimizing w using standard SGD, however, may arrive at a suboptimal solution: the resulting w can have much worse test accuracy than ensemble.
We identify one major reason: the ensemble prediction ˆ p j can be noisy (e.g., arg max c
ˆ p j [ c ] is not the true label of x j ), especially in the early rounds of FL.
The student model w thus may over-ﬁt the noise.
We note that, this ﬁnding does not contradict our observations in subsection 3.3: Bayesian model ensemble has higher test accuracy than F ED A VG but is still far from being perfect (i.e., 100% accuracy).
To address this issue, we apply SWA (Izmailov et al., 2018) to train w .
SWA employs a cyclical learning rate schedule in SGD by periodically imposing a sharp increase in step sizes and averages the weights of models it traverses, enabling w to jump out of noisy local minimums.
As will be shown in section 5,
SWA consistently outperforms SGD in distilling the ensemble predictions into the global model.
We name our algorithm F ED BE ( Fed erated B ayesian E nsemble) and summarize it in algorithm 1.
While knowledge distillation needs extra computation at the server, it is hardly a concern as the server is likely computationally rich.
(See subsection E.1 for details.)
We also empirically show that a small number of sampled models (e.g., M = 10 ∼ 20 ) are already sufﬁcient for F ED BE to be effective.
E XPERIMENT 5. S ETUP ( MORE DETAILS IN A PPENDIX C)
Datasets, models, and settings.
We use CIFAR-10/100 (Krizhevsky et al., 2009), both contain 50 K training and 10 K test images, from 10 and 100 classes.
We also use Tiny-ImageNet (Le & Yang, 2015), which has 500 training and 50 test images per class for 200 classes.
We follow (McMahan et al., 2017) to use a ConvNet (LeCun et al., 1998) with 3 convolutional and 2 fully-connected layers.
We also use ResNet- { 20, 32, 44, 56 }
(He et al., 2016) and MobileNetV2 (Sandler et al., 2018).
We split part of the training data to the server as the unlabeled data, distribute the rest to the clients, and evaluate on the test set.
We report mean ± standard deviation (std) over ﬁve times of experiments.
Implementation details.
As mentioned in (McMahan et al., 2017; Wang et al., 2020; Li et al., 2020b), F ED A VG is sensitive to the local training epochs E per round ( E = (cid:100) K
| B K | |D i | (cid:101) in Equation 1).
Thus, in each experiment, we ﬁrst tune E from [1 , 5 , 10 , 20 , 30 , 40] for F ED A VG and adopt the same E to F ED BE.
Li et al.
(2020b);
Reddi et al.
(2020) suggested that the local step size η l (see
Equation 1) must decay along the communication rounds in non-i.i.d.
settings for convergence.
We set the initial η l as 0 . 01 and decay it by 0 .
1 at 30 % and 60 % of total rounds, respectively.
Within each round of local training, we use SGD optimizer with weight decay and a 0 . 9 momentum and impose no further decay on local step sizes.
Weight decay is crucial in local training (cf. subsection C.3).
For
ResNet and MobileNetV2, we use batch normalization (BN).
See subsection D.5 for a discussion on using group normalization (GN) (Wu & He, 2018; Hsieh et al., 2020), which converges much slower.
Baselines.
Besides F ED A VG , we compare to one-round training with 200 local epochs followed by model ensemble at the end ( 1-Ensemble ).
We also compare to vanilla knowledge distillation ( v-Distillation ), which performs ensemble directly over clients’ models and uses a SGD momentum optimizer (with a batch size of 128 for 20 epochs) for distillation in each round.
For fast convergence, we initialize distillation with the weight average of clients’ models and sharpen the pseudo label as ˆ p j [ c ] ← ˆ p j [ c ] 2 / (cid:80) c (cid:48)
ˆ p j [ c (cid:48) ] 2 , similar to (Berthelot et al., 2019).
We note that, v-Distillation is highly similar to (Lin et al., 2020) except for different hyper-parameters.
We also compare to F ED P ROX (Li et al., 2020a) and F ED A VG M (Hsu et al., 2019) on better local training and using server momentum.
F ED BE.
We focus on Gaussian (cf.
Equation 5).
Results with Dirichlet distributions are in subsection D.1.
We sample M =10 models and combine them with the weight average of clients and individual clients for ensemble.
For distillation, we apply SWA (Izmailov et al., 2018), which uses a cyclical schedule with the step size η SWA decaying from 1e − 3 to 4e − 4 , and collect models at the end of every cycle (every 25 steps) after the 250 th step.
We follow other settings of v-Distillation (e.g., distill for 20 epochs per round).
We average the collected models to obtain the global model.
5. M AIN STUDIES : CIFAR-10 WITH NON - I . I . D . CLIENTS USING DEEP NEURAL NETWORKS
Setup.
We focus on CIFAR-10.
We randomly split 10 K training images to be the unlabeled data at the server.
We distribute the remaining images to 10 clients with two non-i.i.d.
cases.
Step: Each client has 8 minor classes with 10 images per class, and 2 major classes with 1,960 images per class, inspired by (Cao et al., 2019).
Dirichlet: We follow (Hsu et al., 2019) to simulate a heterogeneous [Table] [Table] partition for N clients on C classes.
For class c , we draw a N -dim vector q c from Dir (0 . 1) and assign data to client n proportionally to q c [ n ] .
The clients have different numbers of total images.
Results.
We implement all methods with 40 rounds 3 , except for the one-round Ensemble.
We assume that all clients are connected at every round.
We set the local batch size as 40 .
Table 1 summarizes the results.
F ED BE outperforms the baselines by a notable margin.
Compared to F ED A VG , F ED BE consistently leads to a 2 ∼ 9% gain, which becomes larger as the network goes deeper.
By comparing
F ED BE to F ED BE (w/o SWA) and v-Distillation, we see the consistent improvement by SWA for distillation and Bayesian ensemble with sampled models.
We note that, F ED A VG outperforms 1-Ensemble and is on a par with v-Distillation 4 , justifying (a) the importance of multi-round training; (b) the challenge of ensemble distillation.
Please see subsection D.2 for an insightful analysis.
Compatibility with existing efforts.
Our improvement in model aggregation is compatible with recent efforts in better local training (Li et al., 2020a; Karimireddy et al., 2020) and using server momentum (Reddi et al., 2020; Hsu et al., 2019).
Speciﬁcally, Reddi et al.
Hsu et al.
(2019) applied the server momentum to F ED A VG by treating F ED A VG in each round as a step of adaptive optimization.
F ED BE can incorporate this idea by initializing distillation with their F ED A VG .
Tableshows the results of F ED P ROX (Li et al., 2020a) and F ED A VG M (Hsu et al., 2019), w/ or w/o F ED BE.
F ED BE can largely improve them.
The combination even outperforms F ED BE alone in many cases.
[Table]
Effects of Bayesian Ensemble.
We focus on the Step setting. We compare different combinations of client models
C : { w i } , client weight average A : ¯ w , and M samples from Gaussian S : { w ( m ) } Mm =1 to construct the distillation targets T for F ED BE in algorithm 1.
As in Table 3, sampling global models for Bayesian ensemble improves the accuracy.
Sampling 10 ∼ 20 samples (plus weight average and clients to form ensemble) is sufﬁcient to make F ED BE effective (see Figure 2).
Effects of unlabeled data.
F ED BE utilizes unlabeled data U to enable knowledge distillation.
Figure 3 studies the effect of |U| : we redo the same Step experiments but keep 25 K training images away from clients and vary |U| in the server.
F ED BE outperforms F ED A VG even with 1 K unlabeled dataset (merely 4% of the total client data).
We note that, F ED A VG (ResNet20) trained with the full 50 K images only [Table] reaches 72 .
5% , worse than F ED BE, justifying that the gain by F ED BE is not simply from seeing more data.
Adding more unlabeled data consistently but slightly improve F ED BE.
We further investigate the situation that the unlabeled data come from a different domain or task.
This is to simulate the cases that (a) the server has little knowledge about clients’ data and (b) the server cannot collect unlabeled data that accurately reﬂect the test data.
In Table 4, we replace the unlabeled data to CIFAR-100 and Tiny-ImageNet.
The accuracy matches or even outperforms using CIFAR-10, suggesting that out-of-domain unlabeled data are sufﬁcient for F ED BE .
The results also verify that
F ED BE uses unlabeled data mainly as a medium for distillation, not a peep at future test data.
Network depth.
Unlike in centralized training that deeper models usually lead to higher accuracy (bottom row in Table 1, trained with 200 epochs), we observe an opposite trend in FL: all methods suffer accuracy drop when ResNets go deeper.
This can be attributed to (a) local training over-ﬁtting to small and non-i.i.d.
data or (b) local models drifting away from each other.
F ED BE suffers the least among all methods, suggesting it as a promising direction to resolve the problem.
To understand the current limit, we conduct a study in Figure 4 by injecting more convolutional layers into ConvNet ( Step setting).
F ED A VG again degrades rapidly, while F ED BE is more robust.
If we replace Bayesian ensemble by the CIFAR-10 ground truth labels as the distillation target, F ED BE improves with more layers added, suggesting that how to distill with noisy labeled targets is the key to improve F ED BE.
5. P RACTICAL FEDERATED SYSTEMS
Partial participation.
We examine F ED BE in a more practical environment: (a) more clients are involved, (b) each client has fewer data, and (c) not all clients participate in every round.
We consider a setting with 100 clients, in which 10 clients are randomly sampled at each round and iterates for 100 rounds, similar to (McMahan et al., 2017).
We study both i.i.d.
and non-i.i.d (Step) cases on
Tiny-ImageNet, split 10 K training images to the server, and distribute the rest to the clients.
For the non-i.i.d case, each client has 2 major classes (351 images each) and 198 minor classes (1 image each).
F ED BE outperforms F ED A VG (see Table 5).
See subsection D.7 for results on CIFAR-100.
Systems heterogeneity.
In real-world FL, clients may have different computation resources, leading to systems heterogeneity (Li et al., 2020a).
Speciﬁcally, some clients may not complete local training upon the time of scheduled aggregation, which might hurt the overall aggregation performance.
We follow (Li et al., 2020a) to simulate the situation by assigning each client a local training epoch
E i , sampled uniformly from (0 , 20] , and aggregate their partially-trained models.
Table 6 summarizes the results on non-i.i.d (Step) CIFAR-10.
F ED BE outperforms F ED A VG and F ED P ROX (Li et al., 2020a).
5. F URTHER ANALYSIS
Effects of unlabeled data. In Figure 5 and Figure 6, we investigate different sizes of CIFAR-100 or Tiny-ImageNet as the unlabeled data (cf.
Table 4).
We found that even with merely 2K unlabeled data,
[Table]
[Table]
which is 5% of the total 40K CIFAR-10 labeled data and 2 ∼ 4% of the original 50K-100K unlabeled data, F ED BE can already outperform FedAvg by a margin.
This ﬁnding is aligned with what we have included in Figure
[Table]
where we showed that a small amount of unlabeled data is sufﬁcient for F ED BE to be effective.
Adding more unlabeled data can improve the accuracy but the gain is diminishing.
Bayesian ensemble vs. weight average.
In
Figure 7, we perform F ED A VG and show the test accuracy at every round, together with the accuracy by Bayesian ensemble.
That is, we take the clients’
models learned with F ED A VG to construct the distribution, sample models from it, and perform ensemble for the predictions
Bayesian
model ensemble outperforms
weight
average at nearly all the rounds, even though it is noisy (i.e., not with 100% accuracy)
D ISCUSSION AND C ONCLUSION
Privacy.
Federated learning offers data privacy since the server has no access to clients’ data.
It is worth noting that having unlabeled data not collected from the clients does not weaken the privacy if the server is benign, which is a general premise in the federated setting (McMahan et al., 2017).
For instance, if the collected data are de-identiﬁed and the server does not intend to match them to clients, clients’ privacy is preserved.
In contrast, if the server is adversarial and tries to infer clients’ information, federated learning can be vulnerable even without the unlabeled data: e.g., federated learning may not satisfy the requirement of differential privacy or robustness to membership attacks.
Unlabeled data.
Our assumption that the server has data is valid in many cases: e.g., a self-driving car company may collect its own data but also collaborate with customers to improve the system.
Bassily et al.
(2020a;b) also showed real cases where public data is available in differential privacy.
Conclusion.
Model aggregation is one major challenge in federated learning.
We propose to use
Bayesian model ensemble for model aggregation, enjoying a much robust prediction at a very low cost of collecting unlabeled data.
With the proposed F ED BE, we demonstrate the applicability of federated learning to deeper networks (i.e., ResNet20) and many challenging conditions.
S UPPLEMENTARY M ATERIAL
We provide details omitted in the main paper.
• Appendix A: full formulations with unequal data size at clients (cf.
section 3 of the main paper).
• Appendix B: additional related work (cf.
section 2 of the main paper).
• Appendix C: details of experimental setups (cf. subsection 5.1 of the main paper).
• Appendix D: additional experimental results and analysis (cf. subsection 5.2 of the main paper).
• Appendix E: additional discussions (cf.
section 4 and subsection 5.2 of the main paper).
• Appendix F: additional analysis to address reviewers’ comments.
A F ULL F ORMULATIONS
We have followed the reviewers’ suggestions to incorporate the full formulations directly into the main paper.
B A DDITIONAL R ELATED W ORK
Federated leatning (FL).
In the multi-round federated setting, F ED A VG (McMahan et al., 2017) is the standard approach.
Many works have studied its effectiveness and limitation regarding convergence (Khaled et al., 2020;
Li et al., 2020b; Karimireddy et al., 2020; Li et al., 2020b; Liang et al., 2019; Stich, 2019;
Zhao et al., 2018; Zhou & Cong, 2017; Haddadpour & Mahdavi, 2019), system robustness (Li et al., 2020a; Smith et al., 2017; Bonawitz et al., 2019), and communication cost (Kone ˇ cn ` y et al., 2016; Reisizadeh et al., 2019), especially for the situations that clients are not i.i.d.
(Li et al., 2020b; Zhao et al., 2018;
Li et al., 2020a; Sahu et al., 2018) and have different data distributions, stability, etc.
Ensemble learning and stochastic weight average.
Recent works (Huang et al., 2017; Draxler et al., 2018; Garipov et al., 2018) have developed efﬁcient ways to obtain the base models for ensemble; e.g., by employing a dedicated learning rate schedule to sample models along a single pass of SGD training (Hsu et al., 2019).
SWA (Maddox et al., 2019) applied the same learning rate schedule but simply took weight average over the base models to obtain a single strong model.
We apply SWA, but for the purpose of learning with noisy labels in knowledge distillation.
Bayesian deep learning.
Bayesian approaches (Neal, 2012; Barber, 2012; Brochu et al., 2010) incorporate uncertainty in decision making by placing a distribution over model weights and marginalizing these models to form a whole predictive distribution.
Our work is inspired by (Maddox et al., 2019), which constructs the distribution by ﬁtting the parameters to traversed models along SGD training.
Others.
Our work is also related to semi-supervised learning (SSL) and unsupervised domain adaptation (UDA).
SSL leverages unlabeled data to train a better model when limited labeled data are provided (Grandvalet & Bengio, 2005; Kingma et al., 2014; Tarvainen & Valpola, 2017; Berthelot et al., 2019; Zhu, 2005); UDA leverages unlabeled data to adapt a model trained from a source domain to a different but related target domain (Gong et al., 2012; 2014; Ganin et al., 2016;
Saito et al., 2018; Ben-David et al., 2010).
We also leverage unlabeled data, but for model aggregation.
We note that, UDA and SLL generally assume the access to labeled (source) data, which is not the case in federated learning: the server cannot access clients’ labeled data.
C E XPERIMENTAL S ETUPS C. I MPLEMENTATION DETAILS
As mentioned in the main paper (subsection 5.1), we select the number of local epochs, used in training a client model within one round of communication, according to the performance of F ED A VG .
Other algorithms, like F ED BE and v-Distillation, then follow the same numbers.
For ConvNet and
ResNet experiments, we ﬁxed E = 20 .
We use E = 10 for MobileNet experiments.
For all 1-Ensemble baselines, we tuned E from [10 , 20 , ..., 200] .
We observed that applying weight decay in local client training improves all FL methods, but the suitable hyper-parameter can be different for different methods on different network architectures.
Tuning it speciﬁcally for each method is thus essential for fair comparisons.
We search the weight decay hyper-parameter for each network and each method in [1e − 3 , 1e − 4] with a validation set.
For methods with distillation (F ED BE and v-Distillation), We tune the epochs for v-Distillation from [1 , 5 , 10 , 20 , 30 , 40] and ﬁnd 20 to be stable across different setups.
We apply 20 to F ED BE as well.
In constructing the pseudo-labeled data T , we perform inference on the unlabeled data U in the server without data augmentation.
We perform data augmentation in both local training on D i and knowledge distillation on T .
The 32 × 32 CIFAR images are padded 2 pixels each side, randomly ﬂipped horizontally, and then randomly cropped back to 32 × 32 .
The 64 × 64 Tiny-ImageNet images are padded 4 pixels each side, randomly ﬂipped horizontally, and then randomly cropped back to 64 × 64 .
In Table 4 of the main paper, we resize images of Tiny-ImageNet to 32 × 32 .
For neural networks that contain batch normalization layers (Ioffe & Szegedy, 2015), we apply the same way as in section 3 to construct the global distribution for the layers and we observe no issues in our experiments.
SWAG (Maddox et al., 2019) also reported that it performs stably even on very deep networks.
C. T RAINING F ED A VG
For the local learning rate η l , we observed that an appropriate value of η l is important when training on the non-i.i.d local data.
The local models cannot converge if the learning rate is set to a too large value (also shown in (Reddi et al., 2020)), and the models cannot reach satisfying performance within the local epochs E with a too-small value as shown in Figure 8.
Also, unlike the common practice of training a neural network with learning rate decay in the centralized setting, we observed that applying it within each round of local training (decay by 0 .
99 every step) results in much worse client models.
The local models would need a large enough learning rate to converge with a ﬁxed E and we use 0 .
as the base learning rate for local training in all our experiments.
Although decaying η l within each round of local training is not helpful, decaying η l along the rounds of communication could improve the performance.
Wang et al.
(2020) and Reddi et al.
(2020) provided both theoretical and empirical studies suggesting that the local learning rate must decay along the communication rounds to alleviate client shifts in non-i.i.d setting.
In our experiments, at the r th round of communication, the local client training starts with a learning rate η l , which is 0 .
01 if r < 0 .
3 R , 0 .
001 if 0 .
3 R ≤ r < 0 .
6 R , and 0 .
otherwise, where R is the total rounds of communication.
In Figure 9, we examined this schedule with different degrees of α in the
Dirichlet-non-i.i.d setting.
We observed consistent improvements and applied it to all our experiments in section 5. [Table] [Figure]
E FFECTS OF WEIGHT DECAY IN LOCAL CLIENT TRAINING
Federated learning on non-i.i.d data of clients is prone to model drift due to the deviation of local data distributions and is sensitive to the number of local epochs E (Wang et al., 2020;
Li et al., 2020b;
McMahan et al., 2017).
To prevent local training from over-ﬁtting the local distribution, we apply (cid:96) 2 regularization as weight decay.
In a different context of distributed deep learning, Sagawa et al.
(2020) also showed that (cid:96) 2 regularization can improve the generalization by preventing the local model from perfectly ﬁtting the non-i.i.d training data.
As shown in Figure 10 where we compared F ED A VG and F ED BE with or without weight decay in local training, we found that weight decay not only leads to a higher test accuracy but also makes both algorithms more robust to the choice of local epochs E .
D E XPERIMENTAL R ESULTS AND A NALYSIS D. G LOBAL MODEL SAMPLING IN F ED BE
In the main paper, we mainly report accuracy by F ED BE with models sampled from a Gaussian distribution (cf.
Equation 5 of the main paper).
Here we report results using a Dirichlet distribution for model sampling (cf.
Equation 7 of the main paper) in Table 7.
We compare different α =
α ×in setting the parameter of a Dirichlet distribution.
We see that the accuracy is not sensitive to the change of α .
Compared to Table 1 of the main paper, F ED BE with Dirichlet is slightly worse than
F ED BE with Gaussian (by ≤ 0 .
5% ) but much better than F ED A VG .
To further study the models sampled from the global model distribution constructed in F ED BE, we compare the prediction accuracy and conﬁdences (the maximum values of the predicted probabilities) of clients’ models and sampled models.
We show the histogram of correctly and incorrectly predicted test examples at different prediction conﬁdences.
As shown in Figure 11, we observe that clients’ models tend to be over-conﬁdent by assigning high conﬁdences to wrong predictions.
We hypothesize that it is because clients’ local training data are scarce and class-imbalanced.
On the other hand, sampled models have much better alignment between conﬁdences and accuracy (i.e., higher conﬁdences, higher accuracy). [Figure]
[Table]
D. A NALYSIS ON WEIGHT AVERAGE , (B AYESIAN ) MODEL ENSEMBLE , AND DISTILLATION
To investigate the difference of weight average
[Table] (Bayesian) model ensemble [Table] and distillation in making predictions
[Table] we focus on one-round federated learning [Table] in which the client models are trained in the same way regardless of what aggregation approach to be used.
We experiment with Step-non-i.i [Table] d.
CIFAR-10 using ConvNet [Table] and train the 10 local client models for 200 epochs.
We then compare (a) weight average to combine the models, (b) model ensemble [Table] and (c) Bayesian model ensemble with M = 10 extra samples beyond weight average and individual clients.
For (b) and (c), we further apply knowledge distillation using the unlabeled server data to summarize the ensemble predictions into a single global model using SGD or SWA.
We note that, method (a) is equivalent to one-round F ED A VG ; method (b) without distillation is the same as 1-Ensemble; method (b) with SGD distillation is equivalent to one-round v-Distillation; method (c) with SWA is equivalent to one-round
F ED BE.
Table 8 shows the results with several interesting ﬁndings.
First, without distillation, model ensemble clearly outperforms weight average and Bayesian model ensemble further adds a 2% gain, supporting our claims in section 3.
Second, summarizing model ensemble into one global model largely degrades the accuracy, showing the challenges of applying ensemble distillation in federated learning.
The 60 . 5% and 62 .
5% accuracy by ensemble, although relatively higher than others, may [Figure] still be far from perfect to be used as distillation targets.
Third, distillation with SWA outperforms
SGD for both model ensemble and Bayesian model ensemble, justifying our proposed usage of SWA.
Fourth, with or without distillation, Bayesian model ensemble always outperforms model ensemble, with very little cost of estimating the global model distribution and performing sampling.
Fifth, even with the degraded accuracy after distillation, model ensemble and Bayesian model ensemble, after distilled into a single model, still outperforms weight average notably.
Finally, although in the one-round setting we hardly see the advantage of distilling the model ensemble into a single model, with multiple rounds of communication as in the main paper (cf. subsection 5.2), its advantage becomes much clear—it allows the next-round local training to start from a better initialization (in comparison to weight average) and eventually leads to much higher accuracy than 1-Ensemble.
D. F ED BE VS . F ED A VG
We provide further comparisons between F ED BE and F ED A VG .
First, we perform Bayesian model ensemble at the end of F ED A VG training (Step-non-i.i.d.
CIFAR-10).
We achieve 72 .
5% with
ResNet20, better than F ED A VG ( 70 . 2% in Table 1 of the main paper) but still worse than F ED BE ( 77 . 5% ), demonstrating the importance of incorporating Bayesian model ensemble into multi-round federated learning.
To further analyze why F ED BE improves over F ED A VG , we train models on Step-non-i.i.d CIFAR-10, inference on the test sets, and visualize the features.
We trained a F ED BE ResNet20 model for only 15 rounds such that the test accuracy is similar to a F ED A VG ResNet20 model trained for 40 rounds.
In Figure 12, we plot their features using t-SNE (Maaten & Hinton, 2008) on the CIFAR-10/ testing sets (consider 3 semantically different classes: automobile, cat, and frog) and color the features with the ground-truth labels of CIFAR-10 test set or the predictions of the models on CIFAR-100 test set.
Interestingly, we observe that the features of F ED BE are more discriminative (separated) than the features of F ED A VG , especially on CIFAR-100, even if F ED BE and F ED A VG have similar test accuracy on CIFAR-10.
We further discuss Table 3 of the main paper.
We perform data augmentation on T in knowledge distillation.
This explains why we obtain improvement over F ED A VG when using the F ED A VG predictions as the target labels ( 72 . 6% / 73 .
4% vs. 72 . 0% / 70 .
2% in Table 1 of the main text, using
ConvNet/ResNet20).
We note that without data augmentation, using F ED A VG predictions as the target leads to zero gradients in knowledge distillation since we initialize the student model with
F ED A VG .
The results suggest the slight beneﬁt of collecting unlabeled data for knowledge distillation in model aggregation.
D. F ED BE WITH SWA AND SGD
We found that distillation with SGD is more sensitive to noisy labels and the number of epochs.
For
ResNet20 (Table 1), F ED BE with F ED A VG + C + S w/o SWA (i.e., using SGD) achieves 74 .
9% with 20 epochs but 74 . 0% with 40 epoch.
In contrast, F ED BE with SWA is much stable.
As shown in Figure 13, the accuracy stays stable with more than 10 epochs being used, achieving 77 .
5% with 20 epochs and 77 .
3% with 40 epochs.
D. B ATCH NORMALIZATION VS . GROUP NORMALIZATION
Hsieh et al.
(2020) showed that F ED A VG in non-i.i.d cases can be improved by replacing the batch normalization (BN) layers with group normalization (GN) layers (Wu & He, 2018).
However, we observe that ResNets with GN converge much slower, which is consistent with the observations in (Zhang et al., 2020).
In our CIFAR-10 (Step) experiments, F ED A VG using ResNet20 with GN can outperform that with BN slightly if both are trained with 200 rounds ( 76 . 4% vs. 74 . 6% ).
F ED BE can further improve the performance: F ED BE with GN/BN achieves 79 .
D. C OMPATIBILITY WITH SCAFFOLD
SCAFFOLD (Karimireddy et al., 2020) is a recently proposed FL method to regularize local training.
We experiment with SCAFFOLD on non-i.i.d.
(Step) CIFAR-10.
We ﬁnd that SCAFFOLD cannot directly perform well with deeper networks (ResNet20: 59 .
4% ; ResNet32: 55 .
Nevertheless,
F ED BE +SCAFFOLD can improve upon it, achieving 76 .
4% and 72 .
7% , respectively.
To further analyze why F ED BE improves SCAFFOLD, we plot the test accuracy of SCAFFOLD vs. F ED BE +SCAFFOLD at every communication round.
We see that both methods perform similarly in the early rounds.
SCAFFOLD with weight average could not improve the accuracy after roughly 10 rounds.
F ED BE +SCAFFOLD, in contrast, performs Bayesian ensemble and distillation to obtain the global model, bypassing weight average and gradually improving the test accuracy.
We therefore argue that, as long as F ED BE can improve SCAFFOLD slightly at every later round, the ultimate gain can be large. We also attribute the gain brought by F ED BE to the robustness of Bayesian ensemble for model aggregation. D. P ARTIAL PARTICIPATION ON CIFAR-100 ( CF . SUBSECTION 5.3)
We also conduct the experiments on CIFAR-100 with the non-i.i.d.
Step setting.
We consider a setting with 100 clients, in which 10 clients are randomly sampled at each round and iterates for [Table] 100 rounds, similar to (McMahan et al., 2017).
We split 10 K images from the 50 K training images to the server, and distribute the remaining ones to the clients.
Each client has 5 major classes ( images each) and 95 minor classes (1 image each).
Table 9 shows the results: F ED BE consistently outperforms F ED A VG .
E D ISCUSSION E. E XTRA COMPUTATION COST
F ED BE involves more computation compared to F ED A VG .
The extra cost is on the server and no extra burden is on the clients.
In practice, the server is assumed to be computationally rich so the extra training time is negligible w.r.t.
communication time.
Using a 2080 Ti GPU on CIFAR10 (ConvNet), building distributions and sampling takes 0.2s, inference of a model takes 2.4s, and distillation takes 10.4s.
Constructing the ensemble predictions T = { ( x j , ˆ p j ) } Jj =1 , where ˆ p j = 1 M (cid:80) Mm =1 p ( y | x j ; w ( m ) ) , requires each w ( m ) to be evaluated on U , which can be easily parallelized in modern GPU machines.
The convergence speed of the Monte Carlo approximation in Equation 4 is 1 / √ M , yet we observe that M = 10 ∼ 20 is sufﬁcient for Bayesian model ensemble to be effective.
E. F ED A VG ON DEEPER NETWORKS
Deeper models are known to be poorly calibrated (Guo et al., 2017), especially when trained on limited and imbalanced data.
The loss surfaces can be non-convex (Garipov et al.,
; Draxler et al., 2018).
F ED A VG thus may not fuse clients well and may need signiﬁcantly more rounds of communication with local training of small step sizes to prevent client’s model drifting.
F F URTHER ANALYSIS F. T EST ACCURACY AT DIFFERENT ROUNDS
We follow the experimental setup in section 5 and further show the test accuracy of the compared methods at different communication rounds (in total 40 rounds) in Figure 15.
Speciﬁcally, we experiment with ResNet20 and ResNet32 for both the Step-non-i.i.d.
and Dirichlet-non-i.i.d.
settings on CIFAR-10 (the results at 40 rounds are the same as those listed in Table 1).
F ED BE obtains the highest accuracy after roughly 10 rounds, and could gradually improve as more rounds are involved.
[Figure]
Interestingly, v-Distillation, which performs ensemble directly over clients’ models without other sampled models, normally obtains the highest accuracy in the ﬁrst 10 rounds, but is surpassed by
F ED BE after that.
We hypothesize that in the ﬁrst 10 rounds, as the clients models are still not well trained, the constructed distributions may not be stable.
We also note that except 1-Ensemble, the other methods with ensemble mostly outperform F ED A VG in the ﬁrst 10 rounds, showing their robustness in aggregation.