.png){kind=icon}
返回
Decaf: Data Distribution Decompose Attack Against Federated Learning
.png){kind=icon}
OA
AI
DOI：10.1109/TIFS.2024.3516545.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
In contrast to prevalent Federated Learning (FL) privacy inference techniques such as generative adversarial networks attacks, membership inference attacks, property inference attacks, and model inversion attacks, we devise an innovative privacy threat: the Data Distribution Decompose Attack on FL, termed Decaf. This attack enables an honest-but-curious FL server to meticulously profile the proportion of each class owned by the victim FL user, divulging sensitive information like local market item distribution and business competitiveness. The crux of Decaf lies in the profound observation that the magnitude of local model gradient changes closely mirrors the underlying data distribution, including the proportion of each class. Decaf addresses two crucial challenges: accurately identify the missing/null class(es) given by any victim user as a premise and then quantify the precise relationship between gradient changes and each remaining non-null class. Notably, Decaf operates stealthily, rendering it entirely passive and undetectable to victim users regarding the infringement of their data distribution privacy. Experimental validation on five benchmark datasets (MNIST, FASHION-MNIST, CIFAR-10, FER-2013, and SkinCancer) employing diverse model architectures, including customized convolutional networks, standardized VGG16, and ResNet18, demonstrates Decaf's efficacy. Results indicate its ability to accurately decompose local user data distribution, regardless of whether it is IID or non-IID distributed. Specifically, the dissimilarity measured using $L_{\infty }$ distance between the distribution decomposed by Decaf and ground truth is consistently below 5% when no null classes exist. Moreover, Decaf achieves 100% accuracy in determining any victim user's null classes, validated through formal proof.
Keyword:
Data models
Training
Data privacy
Servers
Privacy
Generative adversarial networks
Distributed databases
Load modeling
Federated learning
Training data
privacy attack
data distribution decompose
期刊
IF:
8
论文数:
5.2K
被引数:
2.3W
机构
引用论文
.png){kind=icon}
Current controlled voltage source inverter using Hysteresis controller and PI controller采用滞环控制器和PI控制器的电流控制电压源逆变器
PREAI
分享收藏Modeling and Simulation of Main Control Valve Mechanism of LNG Ship Steam TurbineLNG船舶汽轮机主控阀机构建模与仿真OAAI
OAAI分享收藏Model Inversion Attack by Integration of Deep Generative Models: Privacy-Sensitive Face Generation From a Face Recognition System通过深度生成模型的集成进行模型反转攻击: 从人脸识别系统生成隐私敏感的人脸
PREAI
分享收藏
分享收藏
查看更多内容