Noise Placement, Privacy Accounting, and Structured Clipping in Client-Level Differentially Private Federated Learning An Empirical Study
This paper presents a controlled empirical study of three implementation choices in client-level differentially private federated learning: noise placement, privacy accounting, and structured clipping. Experiments are conducted under a trusted-server threat model with client-level add/remove adjacency across CIFAR-10,...