ERIS: Enhancing Privacy and Scalability in Federated Learning via Federated Shard Aggregation
Not on the map. Why?
Abstract (arXiv)
Scaling Federated Learning (FL) to billion-parameter models forces a challenging trade-off between privacy, scalability, and model utility. Existing solutions often tackle these challenges in isolation, sacrificing accuracy, relying on costly cryptographic tools, or introducing communication and optimization inefficiencies that affect convergence. We introduce ERIS, an FL framework centered on Federated Shard Aggregation (FSA), a novel mechanism that partitions each client update into non-overlapping shards whose aggregation is distributed across multiple client-side aggregators. FSA removes the central aggregation bottleneck, limits the information visible to any single observer, and preserves the centralized FL update after reassembly. ERIS can further readily integrate Distributed Shifted Compression (DSC) to reduce transmitted payloads and exposed coordinates. We prove that ERIS preserves convergence under standard assumptions and bounds mutual information leakage by the observable fraction of each update, decreasing with the number of client-side aggregators, and with the compression level when DSC is enabled. Experiments across image and text tasks, including large language models, show that ERIS achieves FedAvg-level utility while substantially reducing communication bottlenecks and improving robustness to membership inference and reconstruction attacks, without relying on heavy cryptography or utility-degrading perturbations.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 83 of its 124 references that are in the map. First posted on arXiv 9 Feb 2026.
Builds on
83 of 124 references.
References · 83
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,160
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,592
- 2019DistilBERT, a distilled version of BERT: smaller, faster, cheaper and lightercited by 4,243
- 2016Deep Learning with Differential Privacycited by 2,682
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2017Get To The Point: Summarization with Pointer-Generator Networkscited by 1,281
- 2019On the Convergence of FedAvg on Non-IID Datacited by 1,220
- 2020Adaptive Federated Optimizationcited by 1,036
- 2019Deep Leakage from Gradientscited by 1,004
38 more
- 2020Tackling the Objective Inconsistency Problem in Heterogeneous Federated Optimizationcited by 897
- 2019Towards Federated Learning at Scale: System Designcited by 826
- 2020Inverting Gradients -- How easy is it to break privacy in federated learning?cited by 707
- 2018Exploiting Unintended Feature Leakage in Collaborative Learningcited by 509
- 2017Differentially Private Federated Learning: A Client Level Perspectivecited by 451
- 2020Flower: A Friendly Federated Learning Research Frameworkcited by 449
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 405
- 2014SAGA: A Fast Incremental Gradient Method With Support for Non-Strongly Convex Composite Objectivescited by 401
- 2021Opacus: User-Friendly Differential Privacy Library in PyTorchcited by 375
- 2020iDLG: Improved Deep Leakage from Gradientscited by 367
- 2019FedPAQ: A Communication-Efficient Federated Learning Method with Periodic Averaging and Quantizationcited by 349
- 2017Deep Models Under the GAN: Information Leakage from Collaborative Deep Learningcited by 326
- 2021See through Gradients: Image Batch Recovery via GradInversioncited by 320
- 2019Error Feedback Fixes SignSGD and other Gradient Compression Schemescited by 306
- 2021Membership Inference Attacks on Machine Learning: A Surveycited by 306
- 2019The Secret Revealer: Generative Model-Inversion Attacks Against Deep Neural Networkscited by 241
- 2018The Convergence of Sparsified Gradient Methodscited by 228
- 2019Model Pruning Enables Efficient Federated Learning on Edge Devicescited by 219
- 2021Evaluating Gradient Inversion Attacks and Defenses in Federated Learningcited by 196
- 2020Federated Learning with Compression: Unified Analysis and Sharp Guaranteescited by 159
- 2024Improving LoRA in Privacy-preserving Federated Learningcited by 158
- 2018cpSGD: Communication-efficient and differentially-private distributed SGDcited by 157
- 2018ATOMO: Communication-efficient Learning via Atomic Sparsificationcited by 135
- 2021The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregationcited by 127
- 2023Privacy Auditing with One (1) Training Runcited by 119
- 2019BrainTorrent: A Peer-to-Peer Environment for Decentralized Federated Learningcited by 115
- 2019Distributed Learning with Compressed Gradient Differencescited by 110
- 2020Provable Defense against Privacy Leakage in Federated Learning from Representation Perspectivecited by 94
- 2020Acceleration for Compressed Gradient Descent in Distributed and Federated Optimizationcited by 90
- 2023Practical Membership Inference Attacks against Fine-tuned Large Language Models via Self-prompt Calibrationcited by 90
- 2019Communication-efficient distributed SGD with Sketchingcited by 81
- 2021MARINA: Faster Non-Convex Distributed Learning with Compressioncited by 77
- 2022Auditing Privacy Defenses in Federated Learning via Generative Gradient Leakagecited by 72
- 2022Recovering Private Text in Federated Learning of Language Modelscited by 67
- 2020LDP-FL: Practical Private Aggregation in Federated Learning with Local Differential Privacycited by 63
- 2021Decentralized Federated Learning through Proxy Model Sharingcited by 56
- 2021Decentralized Federated Learning: Balancing Communication and Computing Costscited by 54
- 2021Federated Dynamic Sparse Training: Computing Less, Communicating Less, Yet Learning Bettercited by 54
50 most cited of 83 All 83 (JSON)
Built on by
Not cited yet.