Privacy-Enhancing Paradigms within Federated Multi-Agent Systems
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
LLM-based Multi-Agent Systems (MAS) have proven highly effective in solving complex problems by integrating multiple agents, each performing different roles. However, in sensitive domains, they face emerging privacy protection challenges. In this paper, we introduce the concept of Federated MAS, highlighting the fundamental differences between Federated MAS and traditional FL. We then identify key challenges in developing Federated MAS, including: 1) heterogeneous privacy protocols among agents, 2) structural differences in multi-party conversations, and 3) dynamic conversational network structures. To address these challenges, we propose Embedded Privacy-Enhancing Agents (EPEAgent), an innovative solution that integrates seamlessly into the Retrieval-Augmented Generation (RAG) phase and the context retrieval stage. This solution minimizes data flows, ensuring that only task-relevant, agent-specific information is shared. Additionally, we design and generate a comprehensive dataset to evaluate the proposed paradigm. Extensive experiments demonstrate that EPEAgent effectively enhances privacy protection while maintaining strong system performance. The code will be availiable at https://github.com/ZitongShi/EPEAgent
Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 16 of its 34 references that are in the map. First posted on arXiv 11 Mar 2025.
Builds on
16 of 34 references.
Closest ancestors · 1
Same direction, newest first
Other references · 15
- 2017Attention Is All You Needcited by 59,932
- 2019A Comprehensive Survey on Graph Neural Networkscited by 2,906
- 2023MetaGPT: Meta Programming for A Multi-Agent Collaborative Frameworkcited by 1,761
- 2023Improving Factuality and Reasoning in Language Models through Multiagent Debatecited by 1,739
- 2023ChatEval: Towards Better LLM-based Evaluators through Multi-Agent Debatecited by 724
- 2024TradingAgents: Multi-Agents LLM Financial Trading Frameworkcited by 182
- 2024Exploring Large Language Model based Intelligent Agents: Definitions, Methods, and Prospectscited by 130
- 2024MMedAgent: Learning to Use Medical Tools with Multi-modal Agentcited by 108
- 2024Guardrail Baselines for Unlearning in LLMscited by 90
- 2023Knowledge Card: Filling LLMs' Knowledge Gaps with Plug-in Specialized Language Modelscited by 46
- 2023Learning to Break: Knowledge-Enhanced Reasoning in Multi-Agent Debate Systemcited by 26
- 2022Improving Federated Learning Face Recognition via Privacy-Agnostic Clusterscited by 18
Built on by
Citing papers per year: 2025: 3; 2026: 2.
5 papers.
- 2025Memory in the Age of AI Agentscited by 285
- 2025AgentNet: Decentralized Evolutionary Coordination for LLM-based Multi-Agent Systemscited by 86
- 2026PrivAct: Internalizing Contextual Privacy Preservation via Multi-Agent Preference Trainingcited by 6
- 2026Towards Secure Retrieval-Augmented Generation: A Comprehensive Review of Threats, Defenses and Benchmarkscited by 3
- 2025SRPG: Semantically Reconstructed Privacy Guard for Zero-Trust Privacy in Educational Multi-Agent Systemscited by 0
- 2026Towards Secure Retrieval-Augmented Generation: A Comprehensive Review of Threats, Defenses and Benchmarks23 Mar 2026
- 2026PrivAct: Internalizing Contextual Privacy Preservation via Multi-Agent Preference Training14 Feb 2026
- 2025Memory in the Age of AI Agents15 Dec 2025
- 2025SRPG: Semantically Reconstructed Privacy Guard for Zero-Trust Privacy in Educational Multi-Agent Systems3 Dec 2025
- 2025AgentNet: Decentralized Evolutionary Coordination for LLM-based Multi-Agent Systems1 Apr 2025
Similar, not cited
Close in wording, no citation either way
- 20251-2-3 Check: Enhancing Contextual Privacy in LLM via Multi-Agent Reasoning
- 2025MAGPIE: A dataset for Multi-AGent contextual PrIvacy Evaluation
- 2024Federated In-Context LLM Agent Learning
- 2025GAMA: A General Anonymizing Multi-Agent System for Privacy Preservation Enhanced by Domain Rules and Disproof Mechanism
- 2025Privacy in Action: Towards Realistic Privacy Mitigation and Evaluation for LLM-Powered Agents
- 2025Maris: A Formally Verifiable Privacy Policy Enforcement Paradigm for Multi-Agent Collaboration Systems
- 2026Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agents
- 2026EP-Mem: Elastic Privacy Memory for Social Relationship-Aware LLM Agents