The paper investigates how federated learning (FL) updates in vehicular edge networks can reveal client identities through gradient-based attacks on inertial sensor data, using the UCI Human Activity Recognition benchmark as a proxy. Experiments show that an honest-but-curious server can identify clients with near-perfect accuracy from unprotected updates. The authors evaluate lightweight defenses—clipping followed by Gaussian noise and ensemble FL—to mitigate this privacy risk while preserving model utility, reporting differential‑privacy budgets and empirical results across multiple attack classifiers and data partitions.
arXiv:2606. 02563v1 Announce Type: new Abstract: Heterogeneous Differential Privacy (HDP) in Federated Learning (FL) allows clients to select individual privacy budgets ($\varepsilon_i$) according to institutional policies and data sensitivity.
The paper introduces GASHE, a gradient‑aware selective homomorphic encryption scheme that encrypts only those gradient components exceeding a differential‑privacy‑calibrated sensitivity threshold, rather than encrypting all parameters. Building on GASHE, SecureDrive‑FL combines DP‑SGD with this selective encryption to form a closed‑loop DP+HE privacy pipeline for federated driver monitoring. Experiments on a ten‑class distracted driver classification task show that SecureDrive‑FL retains the poisoning resistance of DP‑SGD while also defending against Man‑in‑the‑Middle interception, with only an 8–10% runtime overhead.
Heterogeneous Differential Privacy (HDP) in Federated Learning (FL) allows clients to select individual privacy budgets ($\varepsilon_i$) according to institutional policies and data sensitivity. In practice, many HDP-FL systems employ $\varepsilon$-aware server aggregation to improve model utility by re-weighting client updates according to their declared privacy budgets.
SecureDrive‑FL combines differential privacy (DP‑SGD) with a novel Gradient‑Aware Selective Homomorphic Encryption (GASHE) scheme to protect federated driver‑monitoring models. GASHE encrypts only gradient components that exceed a DP‑calibrated sensitivity threshold, avoiding full‑parameter encryption. In experiments on a ten‑class distracted driver task, SecureDrive‑FL matches DP‑SGD’s poisoning resistance while also defending against Man‑in‑the‑Middle attacks, adding only 8–10% runtime overhead.
The paper proposes a communication‑efficient private federated reinforcement learning scheme for vehicular networks that uses correlated private quantization and post‑quantum authentication. By sharing complementary randomness between paired vehicles, the method reduces aggregation mean‑squared error while maintaining one‑bit communication and local differential privacy. Experiments show significant uplink savings, improved routing performance, and reduced privacy leakage compared to independent quantization.
The paper investigates how privacy guarantees, robustness to Byzantine attacks, and detection coverage for rare intrusion types interact in federated network intrusion detection systems. It introduces geometric indistinguishability to explain how privacy noise can obscure minority-class signals, and demonstrates through experiments on UNSW‑NB15 that combining differential privacy with robust aggregation can disproportionately harm detection of rare attacks. The study highlights that these properties cannot be treated as independently composable and calls for aggregation‑aware modeling and sample‑aware evaluation to build trustworthy federated NIDS.
The paper investigates privacy and integrity risks in federated fine‑tuning of a pretrained MobileNetV4 model on Quick, Draw! data. It shows that a single client update can reveal private labels, that label‑count recovery degrades with more clients, and that backdoor and label‑flipping attacks can succeed under FedAvg but are mitigated by FLTrust. The study also demonstrates a live poisoning session using Indigma’s FedMaestro orchestrator.
arXiv:2606. 00986v1 Announce Type: new Abstract: Federated learning (FL) enables multiple data holders to train machine learning models collaboratively without centralizing raw data, making it useful in privacy sensitive domains such as healthcare and institutional data sharing.
arXiv:2412. 12640v2 Announce Type: replace Abstract: The increasing demand for data privacy, alongside the benefits of aggregating data from networked devices, has catalyzed the emergence of federated learning (FL).
arXiv:2502. 17748v4 Announce Type: replace Abstract: Federated Learning (FL) inherently mitigates mass data centralization risks; however, its privacy protections are not equally distributed - leaving vulnerable individuals disproportionately exposed to sophisticated privacy attacks.
arXiv:2609.12771v1 Announce Type: cross Abstract: Cross-vehicle federated learning enables vehicles to collaboratively improve perception models while keeping locally collected driving data private....
arXiv:2509. 10691v3 Announce Type: replace-cross Abstract: Decentralized federated learning enables collaborative model training without a central server, but shared model updates can still leak sensitive information through inversion, reconstruction, and membership inference attacks.