Hear No Evil: Detecting Gradient Leakage by Malicious Servers in Federated Learning
Updated
Updated · arxiv.org · Oct 30
Hear No Evil: Detecting Gradient Leakage by Malicious Servers in Federated Learning
1 articles · Updated · arxiv.org · Oct 30
Summary
Researchers have found that malicious servers in federated learning can attempt to leak client data by manipulating model updates.
A new analysis shows these gradient leakage attacks are often detectable or ineffective, especially with modern normalization techniques and federated averaging.
The study proposes a lightweight, client-side anomaly detection mechanism, suggesting that practical federated learning systems can effectively defend against such privacy threats.