Differentially Private Federated Learning
Overview
Differentially private federated learning studies how to train shared models across organizations or devices without exposing sensitive training data, using formal privacy guarantees to limit information revealed by the model or its updates. Common approaches clip and perturb gradients or client updates with calibrated noise, often alongside secure aggregation, privacy accounting, adaptive clipping, client selection, or parameter-efficient tuning such as LoRA. Work spans medical imaging, language models, intrusion detection, and other tasks with non-IID client data, where utility is assessed against privacy budgets and sometimes membership-inference or poisoning attacks. The central tension is that stronger privacy can reduce accuracy—especially for heterogeneous or rare data—while robustness, fairness, communication costs, and the precise scope of each privacy guarantee also need to be addressed together.
Latest papers
65 papers5 papers in the last four weeks, down 55% on the four weeks before. 0.0% of all new papers.