Problem statement
Keeping patient data local does not fully prevent private information from leaking through model updates in federated learning.
Objective
Implement one privacy attack and one defense, then measure attack success, model accuracy and the privacy–utility trade-off.
Student focus
- Federated learning
- Attacks/defenses
- Healthcare simulation