arrow
返回

CGIR: Conditional Generative Instance Reconstruction Attacks Against Federated Learning

delete2023-11-01
delete15
PRE
AI
X
Xiangrui Xu
P
Pengrui Liu
王
王伟 (Wei Wang) *
H
Hongliang Ma
B
Bin Wang *
Z
Zhen Han
Y
Yufei Han
DOI:10.1109/TDSC.2022.3228302delete
delete原文链接
delete分享
delete收藏
摘要

摘要

En 中文
Data reconstruction attack has become an emerging privacy threat to Federal Learning (FL), inspiring a rethinking of FL's ability to protect privacy. While existing data reconstruction attacks have shown some effective performance, prior arts rely on different strong assumptions to guide the reconstruction process. In this work, we propose a novel Conditional Generative Instance Reconstruction Attack (CGIR attack) that drops all these assumptions. Specifically, we propose a batch label inference attack in non-IID FL scenarios, where multiple images can share the same labels. Based on the inferred labels, we conduct a coarse-to-fine image reconstruction process that provides a stable and effective data reconstruction. In addition, we equip the generator with a label condition restriction so that the contents and the labels of the reconstructed images are consistent. Our extensive evaluation results on two model architectures and five image datasets show that without the auxiliary assumptions, the CGIR attack outperforms the prior arts, even for complex datasets, deep models, and large batch sizes. Furthermore, we evaluate several existing defense methods. The experimental results suggest that pruning gradients can be used as a strategy to mitigate privacy risks in FL if a model tolerates a slight accuracy loss.
Keyword:
Data reconstruction attacks
privacy
federated learning

期刊

IEEE Transactions on Dependable and Secure Computing 封面图
IEEE Transactions on Dependable and Secure Computing
IF:
7.5
论文数:
2.6K
被引数:
9.6K

机构

Z
zhe jiang university
学者数:
3
论文数: 2
被引数: 0
U
université de rennes
学者数:
223
论文数: 98
被引数: 0
B
Beijing Jiaotong University
学者数:
2.0K
论文数: 625
被引数: 0
S
Shihezi University
学者数:
1.2K
论文数: 265
被引数: 0
学者 查看更多机构
引用论文

引用论文

Heterocyclic chelating agents. Part I. Metal complexes of 4-2′-pyridylimidazole
err1967-01-01
err0
PREAI
errW. J. Eilbeck; F. Holmes; G. G. Phillips; A. E. Underhill
err分享
err收藏
Parkinson's disease: Nigral receptor changes support peptidergic role in nigrostriatal modulation
err2004-10-08
err0
PREAI
errGeorge R. Uhl; Gail O. Hackney; Mary Torchia; Victoria Stranov; Wallace W. Tourtellotte; Peter J. Whitehouse; Vinh Tran; Steven Strittmatter
err分享
err收藏
Privacy and Robustness in Federated Learning: Attacks and Defenses联邦学习中的隐私和鲁棒性: 攻击和防御
err2024-07-01
err123
errOAAI
errLyu, Lingjuan; Yu, Han; Ma, Xingjun; Chen, Chen; Sun, Lichao; Zhao, Jun; Yang, Qiang; Yu, Philip S.
err分享
err收藏
How high is a MoSe2 monolayer?
err2021-12-28
err0
PREAI
errMegan Cowie; Rikke Plougmann; Yacine Benkirane; Léonard Schué; Zeno Schumacher; Peter Grütter
err分享
err收藏
err分享
err收藏
学者 查看更多内容