Differential Privacy: Gradient Leakage Attacks in Federated Learning Environments
Fuente:
arXiv
Enregistré dans:
| Auteurs principaux: | , , , |
|---|---|
| Format: | Preprint |
| Publié: |
2025
|
| Sujets: | |
| Accès en ligne: | |
| Tags: |
Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
|
| _version_ | 1866911236368629760 |
|---|---|
| author | Fernandez-de-Retana, Miguel Zulaika, Unai Sánchez-Corcuera, Rubén Almeida, Aitor |
| author_facet | Fernandez-de-Retana, Miguel Zulaika, Unai Sánchez-Corcuera, Rubén Almeida, Aitor |
| contents | Federated Learning (FL) allows for the training of Machine Learning models in a collaborative manner without the need to share sensitive data. However, it remains vulnerable to Gradient Leakage Attacks (GLAs), which can reveal private information from the shared model updates. In this work, we investigate the effectiveness of Differential Privacy (DP) mechanisms - specifically, DP-SGD and a variant based on explicit regularization (PDP-SGD) - as defenses against GLAs. To this end, we evaluate the performance of several computer vision models trained under varying privacy levels on a simple classification task, and then analyze the quality of private data reconstructions obtained from the intercepted gradients in a simulated FL environment. Our results demonstrate that DP-SGD significantly mitigates the risk of gradient leakage attacks, albeit with a moderate trade-off in model utility. In contrast, PDP-SGD maintains strong classification performance but proves ineffective as a practical defense against reconstruction attacks. These findings highlight the importance of empirically evaluating privacy mechanisms beyond their theoretical guarantees, particularly in distributed learning scenarios where information leakage may represent an unassumable critical threat to data security and privacy. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2510_23931 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | Differential Privacy: Gradient Leakage Attacks in Federated Learning Environments Fernandez-de-Retana, Miguel Zulaika, Unai Sánchez-Corcuera, Rubén Almeida, Aitor Machine Learning Cryptography and Security Distributed, Parallel, and Cluster Computing 68T07 (Primary) 68M14, 68P27, 68Q32, 94A16, 62H35 (Secondary) I.2.11; I.2.6; C.2.4; D.4.6; K.4.1 Federated Learning (FL) allows for the training of Machine Learning models in a collaborative manner without the need to share sensitive data. However, it remains vulnerable to Gradient Leakage Attacks (GLAs), which can reveal private information from the shared model updates. In this work, we investigate the effectiveness of Differential Privacy (DP) mechanisms - specifically, DP-SGD and a variant based on explicit regularization (PDP-SGD) - as defenses against GLAs. To this end, we evaluate the performance of several computer vision models trained under varying privacy levels on a simple classification task, and then analyze the quality of private data reconstructions obtained from the intercepted gradients in a simulated FL environment. Our results demonstrate that DP-SGD significantly mitigates the risk of gradient leakage attacks, albeit with a moderate trade-off in model utility. In contrast, PDP-SGD maintains strong classification performance but proves ineffective as a practical defense against reconstruction attacks. These findings highlight the importance of empirically evaluating privacy mechanisms beyond their theoretical guarantees, particularly in distributed learning scenarios where information leakage may represent an unassumable critical threat to data security and privacy. |
| title | Differential Privacy: Gradient Leakage Attacks in Federated Learning Environments |
| topic | Machine Learning Cryptography and Security Distributed, Parallel, and Cluster Computing 68T07 (Primary) 68M14, 68P27, 68Q32, 94A16, 62H35 (Secondary) I.2.11; I.2.6; C.2.4; D.4.6; K.4.1 |
| url | https://arxiv.org/abs/2510.23931 |