Federated Learning with Differential Privacy: Algorithms and Performance Analysis
Not on the map. Why?
Abstract (arXiv)
In this paper, to effectively prevent information leakage, we propose a novel framework based on the concept of differential privacy (DP), in which artificial noises are added to the parameters at the clients side before aggregating, namely, noising before model aggregation FL (NbAFL). First, we prove that the NbAFL can satisfy DP under distinct protection levels by properly adapting different variances of artificial noises. Then we develop a theoretical convergence bound of the loss function of the trained FL model in the NbAFL. Specifically, the theoretical bound reveals the following three key properties: 1) There is a tradeoff between the convergence performance and privacy protection levels, i.e., a better convergence performance leads to a lower protection level; 2) Given a fixed privacy protection level, increasing the number N of overall clients participating in FL can improve the convergence performance; 3) There is an optimal number of maximum aggregation times (communication rounds) in terms of convergence performance for a given protection level. Furthermore, we propose a K-random scheduling strategy, where K (1<K<N) clients are randomly selected from the N overall clients to participate in each aggregation. We also develop the corresponding convergence bound of the loss function in this case and the K-random scheduling strategy can also retain the above three properties. Moreover, we find that there is an optimal K that achieves the best convergence performance at a fixed privacy level. Evaluations demonstrate that our theoretical results are consistent with simulations, thereby facilitating the designs on various privacy-preserving FL algorithms with different tradeoff requirements on convergence performance and privacy levels.
Key facts. Cited by 536 papers in the map (data through 14 Oct 2026). First posted on arXiv 1 Nov 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 72; 2022: 86; 2023: 128; 2024: 108; 2025: 97; 2026: 45.
536 papers.
Sort:
By area:
- 2021Federated Learning on Non-IID Data: A Surveycited by 346
- 2021Trustworthy AI: From Principles to Practicescited by 207
- 2021Federated Learning for Smart Healthcare: A Surveycited by 184
- 2023Large Language Models in Law: A Surveycited by 128
- 2024OpenFedLLM: Training Large Language Models on Decentralized Private Data via Federated Learningcited by 128
- 2021When the Curious Abandon Honesty: Federated Learning Is Not Privatecited by 127
- 2021Trustworthy AI: A Computational Perspectivecited by 93
- 2023Decentralized Federated Learning: A Survey and Perspectivecited by 86
- 2022Federated Learning Enables Big Data for Rare Cancer Boundary Detectioncited by 84
- 2021FedProc: Prototypical Contrastive Federated Learning on Non-IID datacited by 81
- 2021Differentially Private Federated Learning on Heterogeneous Datacited by 74
- 2021Understanding Clipping for Federated Learning: Convergence and Client-Level Differential Privacycited by 69
38 more
- 2021From Distributed Machine Learning to Federated Learning: A Surveycited by 66
- 2022Black-box Dataset Ownership Verification via Backdoor Watermarkingcited by 65
- 2021Towards Fair Federated Learning with Zero-Shot Data Augmentationcited by 64
- 2024AdaptSFL: Adaptive Split Federated Learning in Resource-constrained Edge Networkscited by 64
- 2024SplitLoRA: A Split Parameter-Efficient Fine-Tuning Framework for Large Language Modelscited by 62
- 2021Distributed Deep Learning in Open Collaborationscited by 58
- 2021Personalized Federated Learning through Local Memorizationcited by 57
- 2021Blockchain Assisted Decentralized Federated Learning (BLADE-FL): Performance Analysis and Resource Allocationcited by 56
- 2021Collaborative Federated Learning For Healthcare: Multi-Modal COVID-19 Diagnosis at the Edgecited by 56
- 2022Vertical Federated Learning: Challenges, Methodologies and Experimentscited by 55
- 2022Personalized Subgraph Federated Learningcited by 54
- 2023FedFed: Feature Distillation against Data Heterogeneity in Federated Learningcited by 54
- 2022FederatedScope: A Flexible Federated Learning Platform for Heterogeneitycited by 53
- 2023FedMultimodal: A Benchmark For Multimodal Federated Learningcited by 51
- 2021Federated Learning: A Signal Processing Perspectivecited by 49
- 2022FedBalancer: Data and Pace Control for Efficient Federated Learning on Heterogeneous Clientscited by 46
- 2022pFL-Bench: A Comprehensive Benchmark for Personalized Federated Learningcited by 44
- 2021Federated Learning Meets Natural Language Processing: A Surveycited by 43
- 2023Recent Advances on Federated Learning: A Systematic Surveycited by 41
- 2023A Data-Free Approach to Mitigate Catastrophic Forgetting in Federated Class Incremental Learning for Vision Taskscited by 41
- 2023Differentially Private Low-Rank Adaptation of Large Language Model Using Federated Learningcited by 41
- 2022A Survey on Gradient Inversion: Attacks, Defenses and Future Directionscited by 40
- 2023Federated Learning for Computationally-Constrained Heterogeneous Devices: A Surveycited by 40
- 2021Federated Learning with Local Differential Privacy: Trade-offs between Privacy, Utility, and Communicationcited by 39
- 2021Securing Secure Aggregation: Mitigating Multi-Round Privacy Leakage in Federated Learningcited by 39
- 2021FedCG: Leverage Conditional GAN for Protecting Privacy and Maintaining Competitive Performance in Federated Learningcited by 39
- 2021FedIPR: Ownership Verification for Federated Deep Neural Network Modelscited by 36
- 2021Non-IID data and Continual Learning processes in Federated Learning: A long road aheadcited by 36
- 2023LOKI: Large-scale Data Reconstruction Attack against Federated Learning through Model Manipulationcited by 36
- 2022Joint Privacy Enhancement and Quantization in Federated Learningcited by 35
- 2021Differentially Private Federated Bayesian Optimization with Distributed Explorationcited by 32
- 2021Federated Neural Collaborative Filteringcited by 30
- 2021Private Federated Learning Without a Trusted Server: Optimal Algorithms for Convex Lossescited by 30
- 2023A Survey on Vertical Federated Learning: From a Layered Perspectivecited by 30
- 2023Conformal Prediction for Federated Uncertainty Quantification Under Label Shiftcited by 29
- 2023Towards Federated Foundation Models: Scalable Dataset Pipelines for Group-Structured Learningcited by 29
- 2022FLUTE: A Scalable, Extensible Framework for High-Performance Federated Learning Simulationscited by 27
- 2021FedFace: Collaborative Learning of Face Recognition Modelcited by 26
50 most cited of 536 All 536 (JSON)
- 2026Decentralized Gossip Learning and Federated Averaging for Histopathology Image Classification15 Sep 2026
- 2026Privacy-Preserving Heterogeneous Multi-LLM Federated Inference for Cognitive Diagnosis1 Sep 2026
- 2026Pushing Forward Multi-Secret-Key Homomorphic Encryption for Private Average Aggregation1 Sep 2026
- 2026Rethinking the Transferable Adversarial Attacks and Robust Defense in Federated Learning25 Aug 2026
- 2026An Adaptive Gradient Clipping and Noise Injection Mechanism for Differentially Private Federated Learning15 Aug 2026
- 2026Understanding the Robustness of Distributed Self-Supervised Learning Frameworks Against Non-IID Data2 Jul 2026
- 2026Privacy-Preserving and Verifiable Approximate Distributed Coded Computing2 Jul 2026
- 2026FedUP: One-Shot Federated Unlearning via Centroid-Guided Plug-in Filters23 Jun 2026
- 2026Development and Design of FLKit: A Structured Onboarding Toolkit for Federated Learning in Health and Life Sciences22 Jun 2026
- 2026AI-Native Closed-Loop Security for 6G-Enabled Cyber-Physical Systems: From Edge Detection to Network-Wide Mitigation6 Jun 2026
- 2026DPDL: Towards Differential Privacy Preservation in Decentralized Stochastic Learning on Non-IID Data3 Jun 2026
- 2026IntraShuffler: A Privacy Preserving Framework for Heterogeneous DP Federated Learning1 Jun 2026
38 more
- 2026Provably Communication-Efficient and Privacy-Preserving Federated Graph Neural Networks25 May 2026
- 2026FedMental: Evaluating Federated Learning for Mental Health Detection from Social Media Data18 May 2026
- 2026MetaMoE: Diversity-Aware Proxy Selection for Privacy-Preserving Mixture-of-Experts Unification14 May 2026
- 2026DisAgg: Distributed Aggregators for Efficient Secure Aggregation in Federated Learning13 May 2026
- 2026Function-Space ADMM for Decentralized Federated Learning: A Control Theoretic Perspective10 May 2026
- 2026Enhanced Privacy and Communication Efficiency in Non-IID Federated Learning with Adaptive Quantization and Differential Privacy25 Apr 2026
- 2026Differentially Private Clustered Federated Learning with Privacy-Preserving Initialization and Normality-Driven Aggregation22 Apr 2026
- 2026FedFG: Privacy-Preserving and Robust Federated Learning via Flow-Matching Generation30 Mar 2026
- 2026Privacy-Preserving Machine Learning for IoT: A Cross-Paradigm Survey and Future Roadmap13 Mar 2026
- 2026Federated Hierarchical Clustering with Automatic Selection of Optimal Cluster Numbers13 Mar 2026
- 2026Resource-Adaptive Federated Text Generation with Differential Privacy7 Mar 2026
- 2026PTOPOFL: Privacy-Preserving Personalised Federated Learning via Persistent Homology4 Mar 2026
- 2026Bayesian Adversarial Privacy4 Mar 2026
- 2026Integrating Homomorphic Encryption and Synthetic Data in FL for Privacy and Learning Quality3 Mar 2026
- 2026CQSA: Byzantine-robust Clustered Quantum Secure Aggregation in Federated Learning25 Feb 2026
- 2026A Secure and Private Distributed Bayesian Federated Learning Design23 Feb 2026
- 2026PrivacyBench: Privacy Isn't Free in Hybrid Privacy-Preserving Vision Systems21 Feb 2026
- 2026Guarding the Middle: Protecting Intermediate Representations in Federated Split Learning19 Feb 2026
- 2026Towards Secure and Scalable Energy Theft Detection: A Federated Learning Approach for Resource-Constrained Smart Meters18 Feb 2026
- 2026Floe: Federated Specialization for Real-Time LLM-SLM Inference15 Feb 2026
- 2026TIP: Resisting Gradient Inversion via Targeted Interpretable Perturbation in Federated Learning12 Feb 2026
- 2026Towards Explainable Federated Learning: Understanding the Impact of Differential Privacy10 Feb 2026
- 2026Safeguarding Privacy: Privacy-Preserving Detection of Mind Wandering and Disengagement Using Federated Learning in Online Education10 Feb 2026
- 2026Federated Inference: Toward Privacy-Preserving Collaborative and Incentivized Model Serving9 Feb 2026
- 2026Blockchain Federated Learning for Sustainable Retail: Reducing Waste through Collaborative Demand Forecasting4 Feb 2026
- 2026WinFLoRA: Incentivizing Client-Adaptive Aggregation in Federated LoRA under Privacy Heterogeneity1 Feb 2026
- 2026One-Shot Federated Clustering of Non-Independent Completely Distributed Data24 Jan 2026
- 2026A Unified Masked Jigsaw Puzzle Framework for Vision and Language Models17 Jan 2026
- 2026FSL-BDP: Federated Survival Learning with Bayesian Differential Privacy for Credit Risk Modeling16 Jan 2026
- 2026Tackling Heterogeneity in Quantum Federated Learning: An Integrated Sporadic-Personalized Approach11 Jan 2026
- 2026Local Layer-wise Differential Privacy in Federated Learning5 Jan 2026
- 2026Communication-Efficient Federated AUC Maximization with Cyclic Client Participation4 Jan 2026
- 2026Secure, Verifiable, and Scalable Multi-Client Data Sharing via Consensus-Based Privacy-Preserving Data Distribution1 Jan 2026
- 2025FedMPDD: Communication-Efficient Federated Learning with Privacy Preservation Attributes via Projected Directional Derivative23 Dec 2025
- 2025DP-CSGP: Differentially Private Stochastic Gradient Push with Compressed Communication15 Dec 2025
- 2025Evaluating Adversarial Attacks on Federated Learning for Temperature Forecasting15 Dec 2025
- 2025Semantic-Constrained Federated Aggregation: Convergence Theory and Privacy-Utility Bounds for Knowledge-Enhanced Distributed Learning12 Dec 2025
- 2025Decentralized Trust for Space AI: Blockchain-Based Federated Learning Across Multi-Vendor LEO Satellite Networks9 Dec 2025
50 newest of 536 All 536 (JSON)
- 2021FedIPR: Ownership Verification for Federated Deep Neural Network Modelscited by 36
- 2024Inf2Guard: An Information-Theoretic Framework for Learning Privacy-Preserving Representations against Inference Attackscited by 13
- 2023FedCIP: Federated Client Intellectual Property Protection with Traitor Trackingcited by 12
- 2023Source Inference Attacks: Beyond Membership Inference Attacks in Federated Learningcited by 11
- 2025Atlas: A Framework for ML Lifecycle Provenance & Transparencycited by 8
- 2025Exploring Potential Prompt Injection Attacks in Federated Military LLMs and Their Mitigationcited by 5
- 2024Efficient Federated Unlearning with Adaptive Differential Privacy Preservationcited by 4
- 2021Regulating Ownership Verification for Deep Neural Networks: Scenarios, Protocols, and Prospectscited by 2
- 2024Machine unlearning through fine-grained model parameters perturbationcited by 2
- 2023FLoW3 -- Web3 Empowered Federated Learningcited by 0
- 2025FedSGT: Exact Federated Unlearning via Sequential Group-based Trainingcited by 0
- 2026Local Layer-wise Differential Privacy in Federated Learningcited by 0
12 most cited of 13 All 13 (JSON)
- 2026FedUP: One-Shot Federated Unlearning via Centroid-Guided Plug-in Filters23 Jun 2026
- 2026Local Layer-wise Differential Privacy in Federated Learning5 Jan 2026
- 2025FedSGT: Exact Federated Unlearning via Sequential Group-based Training28 Nov 2025
- 2025Atlas: A Framework for ML Lifecycle Provenance & Transparency26 Feb 2025
- 2025Exploring Potential Prompt Injection Attacks in Federated Military LLMs and Their Mitigation30 Jan 2025
- 2024Efficient Federated Unlearning with Adaptive Differential Privacy Preservation17 Nov 2024
- 2024Inf2Guard: An Information-Theoretic Framework for Learning Privacy-Preserving Representations against Inference Attacks4 Mar 2024
- 2024Machine unlearning through fine-grained model parameters perturbation9 Jan 2024
- 2023FLoW3 -- Web3 Empowered Federated Learning9 Dec 2023
- 2023Source Inference Attacks: Beyond Membership Inference Attacks in Federated Learning30 Sep 2023
- 2023FedCIP: Federated Client Intellectual Property Protection with Traitor Tracking2 Jun 2023
- 2021FedIPR: Ownership Verification for Federated Deep Neural Network Models27 Sep 2021
12 newest of 13 All 13 (JSON)
- 2025FlexOlmo: Open Language Models for Flexible Data Usecited by 15
- 2025Mosaic: Data-Free Knowledge Distillation via Mixture-of-Experts for Heterogeneous Distributed Environmentscited by 2
- 2025PC-MoE: Memory-Efficient and Privacy-Preserving Collaborative Training for Mixture-of-Experts LLMscited by 1
- 2026MetaMoE: Diversity-Aware Proxy Selection for Privacy-Preserving Mixture-of-Experts Unificationcited by 0
- 2026MetaMoE: Diversity-Aware Proxy Selection for Privacy-Preserving Mixture-of-Experts Unification14 May 2026
- 2025FlexOlmo: Open Language Models for Flexible Data Use9 Jul 2025
- 2025PC-MoE: Memory-Efficient and Privacy-Preserving Collaborative Training for Mixture-of-Experts LLMs3 Jun 2025
- 2025Mosaic: Data-Free Knowledge Distillation via Mixture-of-Experts for Heterogeneous Distributed Environments26 May 2025
- 2024Diffusion-Driven Data Replay: A Novel Approach to Combat Forgetting in Federated Class Continual Learningcited by 23
- 2024Data-Free Federated Class Incremental Learning with Diffusion-Based Generative Memorycited by 3
- 2025Responsible Diffusion: A Comprehensive Survey on Safety, Ethics, and Trust in Diffusion Modelscited by 3
- 2025Responsible Diffusion: A Comprehensive Survey on Safety, Ethics, and Trust in Diffusion Models25 Sep 2025
- 2024Diffusion-Driven Data Replay: A Novel Approach to Combat Forgetting in Federated Class Continual Learning2 Sep 2024
- 2024Data-Free Federated Class Incremental Learning with Diffusion-Based Generative Memory22 May 2024
- 2023FedFed: Feature Distillation against Data Heterogeneity in Federated Learningcited by 54
- 2024KnowledgeSG: Privacy-Preserving Synthetic Text Generation with Knowledge Distillation from Servercited by 11
- 2023When does the student surpass the teacher? Federated Semi-supervised Learning with Teacher-Student EMAcited by 4
- 2024KnowledgeSG: Privacy-Preserving Synthetic Text Generation with Knowledge Distillation from Server8 Oct 2024
- 2023FedFed: Feature Distillation against Data Heterogeneity in Federated Learning8 Oct 2023
- 2023When does the student surpass the teacher? Federated Semi-supervised Learning with Teacher-Student EMA24 Jan 2023
- 2021Federated Learning on Non-IID Data: A Surveycited by 346
- 2021Trustworthy AI: From Principles to Practicescited by 207
- 2021Federated Learning for Smart Healthcare: A Surveycited by 184
- 2023Large Language Models in Law: A Surveycited by 128
- 2024OpenFedLLM: Training Large Language Models on Decentralized Private Data via Federated Learningcited by 128
- 2021When the Curious Abandon Honesty: Federated Learning Is Not Privatecited by 127
- 2021Trustworthy AI: A Computational Perspectivecited by 93
- 2023Decentralized Federated Learning: A Survey and Perspectivecited by 86
- 2022Federated Learning Enables Big Data for Rare Cancer Boundary Detectioncited by 84
- 2021FedProc: Prototypical Contrastive Federated Learning on Non-IID datacited by 81
- 2021Differentially Private Federated Learning on Heterogeneous Datacited by 74
- 2021Understanding Clipping for Federated Learning: Convergence and Client-Level Differential Privacycited by 69
12 most cited of 510 All 510 (JSON)
- 2026Decentralized Gossip Learning and Federated Averaging for Histopathology Image Classification15 Sep 2026
- 2026Privacy-Preserving Heterogeneous Multi-LLM Federated Inference for Cognitive Diagnosis1 Sep 2026
- 2026Pushing Forward Multi-Secret-Key Homomorphic Encryption for Private Average Aggregation1 Sep 2026
- 2026Rethinking the Transferable Adversarial Attacks and Robust Defense in Federated Learning25 Aug 2026
- 2026An Adaptive Gradient Clipping and Noise Injection Mechanism for Differentially Private Federated Learning15 Aug 2026
- 2026Understanding the Robustness of Distributed Self-Supervised Learning Frameworks Against Non-IID Data2 Jul 2026
- 2026Privacy-Preserving and Verifiable Approximate Distributed Coded Computing2 Jul 2026
- 2026Development and Design of FLKit: A Structured Onboarding Toolkit for Federated Learning in Health and Life Sciences22 Jun 2026
- 2026AI-Native Closed-Loop Security for 6G-Enabled Cyber-Physical Systems: From Edge Detection to Network-Wide Mitigation6 Jun 2026
- 2026DPDL: Towards Differential Privacy Preservation in Decentralized Stochastic Learning on Non-IID Data3 Jun 2026
- 2026IntraShuffler: A Privacy Preserving Framework for Heterogeneous DP Federated Learning1 Jun 2026
- 2026Provably Communication-Efficient and Privacy-Preserving Federated Graph Neural Networks25 May 2026
12 newest of 510 All 510 (JSON)