Cybersecurity 101back-iconWhat is Federated learning?

What is Federated learning?

Federated machine learning is a method for training a shared machine learning model across multiple devices, servers, or organizations without collecting their raw data in one central location. Each participant trains the model locally and sends selected model updates, rather than the underlying records, to a coordinating system.

This approach supports data minimization because sensitive information can remain closer to where it was created. It is particularly relevant when privacy obligations, security policies, data residency requirements, or operational constraints make centralized data collection undesirable.

How does federated machine learning work?

A typical federated learning process follows a repeating cycle:

  • A coordinating server distributes an initial model to participating systems.
  • Each participant trains the model using its local dataset.
  • The participants return model parameters or calculated updates.
  • The server aggregates those updates into an improved shared model.
  • The updated model is redistributed for another training round.

Federated averaging is a common aggregation technique. It combines local updates, often accounting for the amount of training data available to each participant. The process continues until the model reaches an acceptable performance level or another stopping condition.

Federated learning versus centralized learning

Centralized learning Federated learning
Raw training data is transferred to a central repository. Raw data generally remains with each participant.
Training occurs primarily in one controlled environment. Training is distributed across multiple environments.
Data concentration can increase the impact of a repository breach. Model updates create different security and privacy risks that require protection.

Does federated learning guarantee privacy?

No. Keeping raw data local reduces unnecessary data movement, but model updates may still reveal information under some attack conditions. Participants can also submit manipulated updates that damage the shared model.

Organizations may combine federated learning with secure aggregation, differential privacy, encryption, access controls, participant authentication, and anomaly detection. Endpoint governance also matters because compromised or poorly managed training devices can undermine the system. Unified endpoint management platforms such as Hexnode can help organizations enforce security configurations and monitor participating corporate devices without becoming part of the learning process itself.

Where is federated learning used?

Federated learning can support predictive text, fraud detection, healthcare research, connected-device analytics, and cross-organization threat intelligence. It is most useful when participants benefit from a shared model but cannot freely pool their datasets.

However, it introduces practical challenges. Devices may have unequal computing resources, unreliable connectivity, or significantly different datasets. Teams must also address update integrity, model accuracy, governance, and the additional communication required between participants and the coordinator.

FAQs

It can help keep raw data within a required region, but organizations must still evaluate whether model updates, metadata, backups, and coordinator locations fall under applicable rules.

Cross-silo federated learning trains a shared model across a relatively small number of organizations or institutional data stores, rather than across large populations of individual devices.