The paper investigates federated learning over multiple‑access fading channels with a multi‑antenna base station, focusing on user‑level differential privacy (DP). It shows that DP can be achieved as a natural benefit of channel noise without adding artificial noise, deriving new DP and convergence bounds for general bounded‑domain models and non‑convex loss functions. The authors further optimize beamforming and power allocation to characterize the trade‑off between privacy and convergence, providing theoretical insights and numerical validation.
By Hao Liang, Haifeng Wen, Kaishun Wu, Khaled B. Letaief, Hong Xing
arXiv:2603. 19040v2 Announce Type: replace Abstract: Differentially private wireless federated learning (DPWFL) is a promising framework for protecting sensitive user data.
By Chen Yaoling, Liang Hao, Tu Xiaotong
The paper investigates how federated learning (FL) updates in vehicular edge networks can reveal client identities through gradient-based attacks on inertial sensor data, using the UCI Human Activity Recognition benchmark as a proxy. Experiments show that an honest-but-curious server can identify clients with near-perfect accuracy from unprotected updates. The authors evaluate lightweight defenses—clipping followed by Gaussian noise and ensemble FL—to mitigate this privacy risk while preserving model utility, reporting differential‑privacy budgets and empirical results across multiple attack classifiers and data partitions.
By Ali Akarma (Islamic University of Madinah, Madinah, Saudi Arabia, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia), Toqeer Ali Syed (Islamic University of Madinah, Madinah, Saudi Arabia), Muhammad Khan (University of the West of England, Bristol, U.K), Qurat-ul-ain Mastoi (University of the West of England, Bristol, U.K), Adeel Ahmad (Islamic University of Madinah, Madinah, Saudi Arabia)
arXiv:2509. 10691v3 Announce Type: replace-cross Abstract: Decentralized federated learning enables collaborative model training without a central server, but shared model updates can still leak sensitive information through inversion, reconstruction, and membership inference attacks.
By Fardin Jalil Piran, Zhiling Chen, Yang Zhang, Qianyu Zhou, Jiong Tang, Farhad Imani
arXiv:2607. 28342v1 Announce Type: cross Abstract: Bayesian persuasion studies how an informed sender can influence the behavior of a receiver through strategic information disclosure.
By I. Arda Vurankaya, Ufuk Topcu
arXiv:2609.07428v1 Announce Type: cross
Abstract: In this article, we propose an online electronic counter-countermeasure (ECCM) framework designed to conceal the strategic decision-making processes...
By Sreedevi K, Nandhini K, Anup Aprem, Deepthi P P
The paper introduces RoCo-FL, a robust and convergent framework for Over-the-Air Federated Learning that addresses channel noise, fading, and data/system heterogeneity. RoCo-FL models local updates with inexact optimization and a proximal constraint to stabilize updates under wireless impairments and stragglers. The authors provide convergence guarantees for non-convex objectives and demonstrate improved stability and accuracy on CIFAR10, CIFAR100, and FEMNIST compared to existing baselines.
By Zubair Shaban, Nazreen Shah, Ranjitha Prasad
arXiv:2506. 19260v2 Announce Type: replace-cross Abstract: Federated learning transmits only model updates to protect client data, and differentially private SGD (DP-SGD) bounds content-level leakage through those updates.
By Murtaza Rangwala, Richard O. Sinnott, Rajkumar Buyya
The paper proposes a privacy‑aligned personalized federated learning method that releases a private client context once and limits repeated adaptation to a fixed coefficient space, thereby reducing dimensionality misalignment. A factorized generator creates an adaptive optimization geometry that reshapes noisy updates, and most of the private‑training benefit is preserved by radial evolution. Variable‑length Gaussian quantization is used for coefficient updates, allowing the quantization error to act as the privacy perturbation and cutting protected uplink communication by a factor of 2.67 on CIFAR‑10 at ε=16 while maintaining comparable future‑client accuracy.
By Yilin Xu, Chun Hei Michael Shiu, Chih Wei Ling, Linqi Song
The paper introduces a general learning framework that protects privacy in federated learning by distorting model parameters, enabling a trade‑off between privacy and utility. The algorithm supports arbitrary privacy measurements and delivers personalized utility‑privacy balances for each parameter, client, and communication round. The authors prove that the gap between their algorithm’s utility loss and the optimal loss is sub‑linear in iterations, provide a convergence rate, and demonstrate empirically that their method outperforms baselines under the same privacy budget.
By Xiaojin Zhang, Wenjie Li, Yiming Li, Wei Chen, Shutao Xia, Qiang Yang
arXiv:2605. 30123v2 Announce Type: replace-cross Abstract: Homomorphic encryption (HE) enables privacy-preserving aggregation in federated learning (FL) by allowing the server to operate on encrypted data without decryption.
By Anthony Ayli, Khalil Harris, Jihad Fahs, Mohamad Assaad
Record-level differential privacy exposes a structural misalignment in personalized federated learning when client-specific variation is low-dimensional while training repeatedly releases high-dimensi...