Tagged:
federated-learning2 posts
-
Gradient Inversion Attacks: Reconstructing Private Training Data from Model Updates
Gradients are not safe summaries of training data. In federated learning and fine-tuning pipelines where model updates are shared, a malicious aggregator can run gradient inversion to recover original training samples with alarming fidelity — and the defenses have hard limits.
-
Federated Learning Poisoning: The Aggregation Attack Surface
FL aggregation is blind to participant intent. Malicious clients can embed backdoors or reconstruct private training data from gradients.