Table 3 Defense methods against privacy inference attacks in the training phase

Compression gradients

 Pruning

Worker

Y

N

Y

Failintext inferringtask

 Dropout

Worker

Y

N

Y

Slightlydecrease modelaccuracy

Cryptology gradients

 SMC

Worker

N

Y

Y

Computationand communicationconsuming

 HE

Worker

N

Y

Y

Perturbation gradients

 CDP

Server

N

Y

N

Requirea trustaggregator

 LDP

Worker

N

N

Y

Needenough calibrationnoise

 DDP

Worker

N

N

Y

Computation consuming