“…Additive perturbation-based PPFL methods. Additive perturbation-based FL methods aim to preserve privacy by adding random noise to weight updates or gradient updates [19,52,63,69,70,78,110,172,193,198]. In some methods [52,78,193], random noise was added to weight updates to achieve privacy-preserving in the training process, whereas in other methods [69,70,172,198], random noise was added to the gradient updates.…”