.png){kind=icon}
返回
Do Gradient Inversion Attacks Make Federated Learning Unsafe?
.png){kind=icon}
OA
AI
DOI：10.1109/TMI.2023.3239391.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Federated learning (FL) allows the collaborative training of AI models without needing to share raw data. This capability makes it especially interesting for healthcare applications where patient and data privacy is of utmost concern. However, recent works on the inversion of deep neural networks from model gradients raised concerns about the security of FL in preventing the leakage of training data. In this work, we show that these attacks presented in the literature are impractical in FL use-cases where the clients' training involves updating the Batch Normalization (BN) statistics and provide a new baseline attack that works for such scenarios. Furthermore, we present new ways to measure and visualize potential data leakage in FL. Our work is a step towards establishing reproducible methods of measuring data leakage in FL and could help determine the optimal tradeoffs between privacy-preserving techniques, such as differential privacy, and model accuracy based on quantifiable metrics.
Keyword:
Deep Learning
gradient inversion
federated learning
patient privacy
security
期刊
IF:
9.8
论文数:
6.3K
被引数:
3.7W
机构
引用论文
Parkinson's disease: Nigral receptor changes support peptidergic role in nigrostriatal modulation
PREAI
分享收藏分享收藏Do Perceptions of Competence Mediate The Relationship Between Fundamental Motor Skill Proficiency and Physical Activity Levels of Children in Kindergarten?能力的感知是否可以介导幼儿园儿童的基本运动技能熟练程度与身体活动水平之间的关系？
PREAI
分享收藏Federated learning in medicine: facilitating multi-institutional collaborations without sharing patient data医学联合学习: 在不共享患者数据的情况下促进多机构合作.png)
SCIENTIFIC REPORTS
OAAI
SCIENTIFIC REPORTSIF3.9
OAAI分享收藏分享收藏
查看更多内容