Leyu Shi

Research on Security Risk Identification and Evaluation in Open-Source Software Supply Chain

2025

This article provides an inclusive investigation on the present research exploration in identifying the security risks in open source software supply chains. Additionally, it emphasizes on threat classification techniques involving machine learning and graph neural …

Privacy-Preserving Rényi Layer-Wise Budget Allocation Against Gradient Leakage for Federated Learning

2025 · IEEE Transactions on Mobile Computing

Federated learning (FL) is vulnerable to gradient-based privacy attacks, where malicious attackers reconstruct training data from exchanged gradients. While existing differential privacy (DP) defenses mitigate this, they often cause excessive additive noise due to the …