Stabilizing Gradient Inversion in Federated Learning
Bachelor thesis at DTU Compute investigating whether failed gradient inversion attacks mean the information is absent from shared gradients, or just hard to extract. By selectively masking gradient components before inversion, VGG-13 reconstructions improved from 15.81 to 23.14 dB PSNR on CIFAR-100 and from 14.14 to 22.50 dB on LFW faces, showing that baseline attacks can underestimate privacy risks in federated learning.
View Project →