Zhiwei Chang

Breaking Secure Aggregation: Label Leakage from Aggregated Gradients in Federated Learning

2024 · arXiv (Cornell University)

Federated Learning (FL) exhibits privacy vulnerabilities under gradient inversion attacks (GIAs), which can extract private information from individual gradients. To enhance privacy, FL incorporates Secure Aggregation (SA) to prevent the server from obtaining individual gradients, …