.png){kind=icon}
Return
An effective and practical gradient inversion attack
.png){kind=icon}
OA
AI
DOI：10.1002/int.22997.png)
.png){kind=icon}
Original request for help.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
While gradient aggregation playing a vital role in federated or collaborative learning, recent studies have revealed that gradient aggregation may suffer from some attacks, such as gradient inversion, where the private training data can be recovered from the shared gradients. However, the performance of the existing attack methods is limited because they usually require prior knowledge in Batch Normalization and could only reconstruct a single image or a small batch one. To make the attacks less restrictive and more applicable, we propose an effective and practical gradient inversion method in this paper. Specifically, we use cosine similarity to measure the difference of gradients between the synthesized and ground-truth images, and then construct an input regularization for the fully connected layer to ensure the fidelity of the image. Moreover, we apply the total variation denoising strategy to the convolution feature map for further improving the smoothness of the reconstructed image. Experimental results demonstrate that our method can reconstruct high fidelity training data on a large batch size for complex data sets, such as ImageNet.
Keywords:
federated learning
gradient sharing
machine learning
privacy protection
Journal
IF:
3.7
Papers:
3.1K
Citations:
8.1K
Organization
Cited Papers
.png){kind=icon}
Parkinson's disease: Nigral receptor changes support peptidergic role in nigrostriatal modulation
PREAI
ShareSave
ShareSaveShareSave
View more