The Capacity of Information-Theoretic Secure Aggregation in Federated Learning
arXiv:2606. 07277v1 Announce Type: cross Abstract: Secure aggregation allows a server to aggregate users' local updates while preserving update privacy.
arXiv:2610. 35833v1 Announce Type: cross Abstract: In federated learning (FL), secure aggregation enables a server to compute the sum of local model updates of $N$ clients, without revealing any information on the individual model updates to the server, beyond their sum.
arXiv:2606. 07277v1 Announce Type: cross Abstract: Secure aggregation allows a server to aggregate users' local updates while preserving update privacy.
arXiv:2606. 10780v1 Announce Type: cross Abstract: Secure aggregation is a vital component for mitigating gradient leakage in federated learning, but its communication cost conventionally scales with the gradient dimension.
arXiv:2607. 06612v1 Announce Type: cross Abstract: Federated Learning (FL) enables multiple clients to collaboratively train machine learning models while retaining data locality, thereby enhancing user privacy.
arXiv:2609. 01945v1 Announce Type: cross Abstract: Federated Learning enables multiple clients to train a shared model while keeping their local datasets isolated.
Federated Learning (FL) enables multiple clients to collaboratively train machine learning models while retaining data locality, thereby enhancing user privacy. However, traditional FL frameworks rely on a centralized aggregation server and assume honest-but-curious clients, making them susceptible to both server-side inference and client-side poisoning attacks.
Giskard is a scalable protocol for private and Byzantine‑robust decentralized aggregation in large‑scale learning. It organizes participants into a tree of committees of size O(log n) and computes a differentially private coordinate‑wise approximate median using secure multi‑party computation within each committee. Experiments with up to one million participants show that Giskard reduces per‑party communication by nearly three orders of magnitude compared to its closest competitors while maintaining robustness against up to n/4 Byzantine parties.
arXiv:2604. 07125v2 Announce Type: replace-cross Abstract: This article presents DDP-SA, a scalable privacy-preserving federated learning framework that jointly leverages client-side local differential privacy (LDP) and full-threshold additive secret sharing (ASS) for secure aggregation.
ERIS is a federated learning framework that introduces Federated Shard Aggregation (FSA), partitioning client updates into shards aggregated by multiple client-side aggregators to eliminate a central bottleneck and limit data exposure. The framework can integrate Distributed Shifted Compression (DSC) to further reduce communication payloads and exposed coordinates. Experiments on image, text, and large language model tasks demonstrate that ERIS maintains FedAvg-level utility while significantly cutting communication overhead and enhancing robustness against membership inference and reconstruction attacks, all without heavy cryptography or utility‑degrading perturbations.
arXiv:2606. 19129v1 Announce Type: cross Abstract: Dealing simultaneously with confidentiality and Byzantine behaviors in decentralized learning is a challenging problem.
The paper demonstrates that in decentralized federated learning, secure aggregation implemented through local neighborhood aggregation can leak private model updates. By exploiting the asymmetric aggregate views available to colluding semi‑honest nodes, the authors formulate the problem as a Hidden Subset Sum Problem and develop a lattice‑based reconstruction attack. Experiments on image, tabular, and text datasets show that attackers can recover honest participants’ updates and reconstruct private training data.
arXiv:2607. 20890v1 Announce Type: new Abstract: On-device federated learning (FL) enables privacy-preserving and personalized model training on resource-constrained devices such as smartphones and IoT nodes.
Dealing simultaneously with confidentiality and Byzantine behaviors in decentralized learning is a challenging problem. Indeed, in decentralized learning, clients train a machine learning model while keeping their data locally and share their model parameters or gradients with a set of neighbors.