Vivek Kumar Verma

Architectural Overhead of Differential Privacy in Federated Intrusion Detection Systems

Differential privacy (DP) is widely adopted to protect training data in federated intrusion detection systems (IDS), but the reported accuracy penalties conflate two distinct costs: the architectural cost of making models DP-compatible and the noise cost of gradient perturbation. We decompose the DP penalty on two hete...