Abstract: Recent studies have indicated that the private client images in federated learning can be restored through the shared global model by gradient based inversion attacks. These attacks often ...