Aydin Aysu

VAHANA: Hardware-Aware Noise Addition Against Gradient Inversion Attacks

Federated learning (FL) enables clients to collaboratively train a global model by sharing gradient updates instead of raw data. However, recent studies show that these shared gradients can be exploited to reconstruct private training data through gradient inversion attacks, posing a serious threat to client privacy. A...