Kai-Hong Lei

SI-DLG: Scale-Invariant Gradient Matching for Robust Privacy Leakage in Federated Learning

Gradient leakage attacks have shown that an honest-but-curious server in federated learning (FL) can reconstruct private training samples directly from the gradients transmitted by clients. The original Deep Leakage from Gradients (DLG) attack, however, suffers from several optimization pathologies: the layer-wise magn...