Search papers, labs, and topics across Lattice.
This research addresses the critical issue of data privacy in financial fraud detection systems that utilize centralized machine learning models, which are vulnerable to Membership Inference Attacks when employing Explainable AI tools like TreeSHAP. The authors propose DP-FedSHAP, an innovative architecture that applies client-level differential privacy to post-hoc TreeSHAP vectors, thereby enhancing privacy without significantly compromising explanation fidelity. Evaluating this method against a Weight-Level DP baseline on the imbalanced IEEE-CIS Fraud Detection dataset reveals a promising balance between privacy preservation and model performance, as measured by Area Under the Precision-Recall Curve (AUPRC).
Sharing high-fidelity explanations in fraud detection can expose systems to serious privacy risks, but DP-FedSHAP offers a way to maintain transparency without compromising security.
Financial fraud detection relies heavily on centralized machine learning models. This creates serious data privacy risks. Federated Learning (FL) decentralizes data processing, but financial regulations still require models to be transparent. This means using Explainable AI (XAI) tools such as TreeSHAP. Recent cybersecurity research shows a problem with this approach. Sharing high-fidelity SHAP explanations exposes the federated network to Membership Inference Attacks (MIAs). This dissertation proposes and evaluates DP-FedSHAP. It is a new architecture that applies client-level differential privacy only to post-hoc TreeSHAP vectors. It is compared against a Weight-Level DP baseline, which perturbs the trained model directly instead. Using the highly imbalanced IEEE-CIS Fraud Detection dataset, this study measures the trade-off between explanation fidelity, privacy preservation, and the model's Area Under the Precision-Recall Curve (AUPRC).
