Affine subspace constraints improve federated gradient inversion
The authors report better reconstruction than chosen baselines, including when batch size is moderately overestimated.
4 stories, newest first · one card per story
The authors report better reconstruction than chosen baselines, including when batch size is moderately overestimated.
Eight attacks across six quantization methods find privacy gains mainly at 2 bits, with large utility loss.
Gray-box and black-box signals use sparse correction imprints, while the authors say baseline attacks stay near chance.
EIFL lets federated-learning clients keep a global model private and verify it against an untrusted server.
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views