Unified privacy and defense mechanisms

Establish unified frameworks that combine privacy mechanisms with defenses against Byzantine and other malicious agents while preserving sufficient signals to detect graph-structure and embedding attacks.

Background

Current anonymization methods primarily protect against honest-but-curious participants, whereas malicious agents may manipulate graph structures or node features. Privacy mechanisms can conceal the signals needed for detecting such attacks, creating a tension between privacy and integrity protection. The survey identifies the combination of these defenses as unresolved.

References

However, how privacy mechanisms can be combined with additional defenses (e.g., embedding filtering~\citep{he2024privacy}) against sophisticated adversaries remains unclear, since privacy guarantees often hide the very signals needed for detecting these adversarial threats, calling for unified frameworks that jointly address honest-but-curious and malicious threat models.

— From Euclidean to Graph-Structured Data: A Survey of Collaborative Learning  (2609.02984 - Bourgerie et al., 2 Sep 2026) in Section 7, paragraph “Open challenges”