mlsanityData to 14 Oct 2026

Privacy-Preserving Decentralized Federated Learning via Explainable Adaptive Differential Privacy

arXiv 2509.10691 ↗First posted 12 Sep 2025cs.CR cs.AIcited by 1

On the map: LLM safety and security → Federated unlearning and poisoning

Abstract (arXiv)

Decentralized federated learning enables collaborative model training without a central server, but shared model updates can still leak sensitive information through inversion, reconstruction, and membership inference attacks. Differential privacy offers formal protection, yet existing decentralized methods operate without visibility into the noise already injected by previous participants. Each client therefore adds a full, worst-case perturbation at every step, and the accumulated noise degrades accuracy well below what the privacy requirement actually demands. We present PrivateDFL, a decentralized and privacy-preserving framework that pairs hyperdimensional computing with a transparent noise accountant. The accountant tracks the cumulative perturbation present in the shared model and lets each client add only the minimal incremental noise needed to satisfy its privacy budget. We prove that every transmitted model satisfies the target privacy guarantee, and that under this accounting the cumulative noise grows only logarithmically in the number of clients and rounds, rather than the far faster super-linear growth incurred without accounting. This yields a substantially tighter balance between privacy and accuracy than prior approaches. Across image, speech, and wearable-sensor benchmarks, and under both identically and non-identically distributed data, PrivateDFL surpasses centrally trained Transformer-based and deep neural network baselines, improving accuracy by 16 percent on images, 62 percent on speech, and 14 percent on wearable sensing over the strongest baseline in each case, while reducing inference latency by up to 119 times and energy consumption by up to 143 times. These properties make PrivateDFL a practical solution for privacy-preserving collaborative learning in settings where sensitive data cannot be centralized, such as healthcare and human-activity monitoring.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Federated unlearning and poisoning, one of 12 directions in LLM safety and security. First posted on arXiv 12 Sep 2025.

Builds on

0 of 0 references.

No references here yet.

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2024CorBin-FL: A Differentially Private Federated Learning Mechanism using Common Randomness
  2. 2026Local Layer-wise Differential Privacy in Federated Learning
  3. 2023Binary Federated Learning with Client-Level Differential Privacy
  4. 2026Enhanced Privacy and Communication Efficiency in Non-IID Federated Learning with Adaptive Quantization and Differential Privacy
  5. 2022Preserving Privacy in Federated Learning with Ensemble Cross-Domain Knowledge Distillation
  6. 2024Federated Learning Nodes Can Reconstruct Peers' Image Data
  7. 2026PrivEraserVerify: Efficient, Private, and Verifiable Federated Unlearning
  8. 2025Theoretically Unmasking Inference Attacks Against LDP-Protected Clients in Federated Vision Models