{"id":"W4393032351","doi":"10.1109/tnet.2024.3377655","title":"More Than Enough is Too Much: Adaptive Defenses Against Gradient Leakage in Production Federated Learning","year":2024,"lang":"en","type":"article","venue":"IEEE/ACM Transactions on Networking","topic":"Privacy-Preserving Technologies in Data","field":"Computer Science","cited_by":27,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Toronto","funders":"","keywords":"Computer science; Leakage (economics); Computation; Information leakage; Gradient descent; Artificial intelligence; Computer security; Machine learning; Algorithm; Artificial neural network","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.0005225727,0.0003569057,0.000282296,0.0005759991,0.000604897,0.000530582,0.005189684,0.0002209473,0.000007044337],"category_scores_gemma":[0.0004772252,0.0003667559,0.0001344025,0.002279352,0.0001206545,0.000974698,0.0007919868,0.001399554,0.00004738869],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0004029399,"about_ca_system_score_gemma":0.00009783596,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0001003912,"about_ca_topic_score_gemma":0.0001483245,"domain_scores_codex":[0.9970566,0.000178701,0.0004273239,0.001209992,0.000434465,0.0006929166],"domain_scores_gemma":[0.9964162,0.000299308,0.00009481977,0.003045922,0.00006914199,0.00007465402],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00006967248,0.0002795781,0.0002366779,0.00009430331,0.0002203879,0.0003556024,0.004120068,0.09578963,0.001939546,0.0003152557,0.02080214,0.8757771],"study_design_scores_gemma":[0.0003126767,0.0002553689,0.0002239119,0.001196709,0.00003379219,0.00008099075,0.000740202,0.9490164,0.01956031,0.01325766,0.01455207,0.0007699328],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.08880569,0.001166288,0.8791706,0.02119679,0.005318349,0.0005440463,0.00001321014,0.003311433,0.000473596],"genre_scores_gemma":[0.9655968,0.0006922531,0.03285331,0.000220449,0.0002271807,0.00009609673,0.000009514178,0.00004828217,0.0002561104],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.8767911,"threshold_uncertainty_score":0.9998785,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.04892456912357768,"score_gpt":0.2758356218799289,"score_spread":0.2269110527563513,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}