中文
相关论文

相关论文: SoK: On Gradient Leakage in Federated Learning

200 篇论文

Federated Learning (FL) is an emerging solution to the data scarcity problem for training deep learning models in hardware assurance. While FL is designed to enhance privacy by not sharing raw data, it remains vulnerable to Membership…

Recent works show that sensitive user data can be reconstructed from gradient updates, breaking the key privacy promise of federated learning. While success was demonstrated primarily on image data, these methods do not directly transfer to…

机器学习 · 计算机科学 2024-10-22 Lele Zheng , Yang Cao , Renhe Jiang , Kenjiro Taura , Yulong Shen , Sheng Li , Masatoshi Yoshikawa

Federated Learning (FL) is a distributed learning framework, in which the local data never leaves clients devices to preserve privacy, and the server trains models on the data via accessing only the gradients of those local data. Without…

机器学习 · 计算机科学 2021-10-29 Jinwoo Jeon , Jaechang Kim , Kangwook Lee , Sewoong Oh , Jungseul Ok

Federated Learning (FL) has emerged as a machine learning approach able to preserve the privacy of user's data. Applying FL, clients train machine learning models on a local dataset and a central server aggregates the learned parameters…

密码学与安全 · 计算机科学 2024-09-27 Luiz Leite , Yuri Santo , Bruno L. Dalmazo , André Riker

Gradient inversion attacks threaten client privacy in federated learning by reconstructing training samples from clients' shared gradients. Gradients aggregate contributions from multiple records and existing attacks may fail to disentangle…

机器学习 · 计算机科学 2026-04-17 Francesco Diana , Chuan Xu , André Nusser , Giovanni Neglia

Foundation models that bridge vision and language have made significant progress. While they have inspired many life-enriching applications, their potential for abuse in creating new threats remains largely unexplored. In this paper, we…

机器学习 · 计算机科学 2025-08-05 Junjie Shan , Ziqi Zhao , Jialin Lu , Rui Zhang , Siu Ming Yiu , Ka-Ho Chow

Federated learning (FL) allows multiple entities to train a shared model collaboratively. Its core, privacy-preserving principle is that participants only exchange model updates, such as gradients, and never their raw, sensitive data. This…

计算机视觉与模式识别 · 计算机科学 2025-09-15 Md Fazle Rasul , Alanood Alqobaisi , Bruhadeshwar Bezawada , Indrakshi Ray

Federated Learning (FL) is a distributed learning paradigm that enhances users privacy by eliminating the need for clients to share raw, private data with the server. Despite the success, recent studies expose the vulnerability of FL to…

机器学习 · 计算机科学 2023-12-15 Jing Wu , Munawar Hayat , Mingyi Zhou , Mehrtash Harandi

Federated Learning (FL) framework brings privacy benefits to distributed learning systems by allowing multiple clients to participate in a learning task under the coordination of a central server without exchanging their private data.…

计算机视觉与模式识别 · 计算机科学 2022-03-30 Zhuohang Li , Jiaxin Zhang , Luyang Liu , Jian Liu

Federated learning (FL) enables collaborative model training without sharing raw data but is vulnerable to gradient inversion attacks (GIAs), where adversaries reconstruct private data from shared gradients. Existing defenses either incur…

密码学与安全 · 计算机科学 2025-10-07 Chenxiang Luo , David K. Y. Yau , Qun Song

Federated Learning (FL) is a promising approach for multiparty collaboration as a privacy-preserving technique in hardware assurance, but its security against adversaries with domain-specific knowledge is underexplored. This paper…

Federated Learning (FL) has emerged as a compelling paradigm for privacy-preserving distributed machine learning, allowing multiple clients to collaboratively train a global model by transmitting locally computed gradients to a central…

计算机视觉与模式识别 · 计算机科学 2026-04-02 Hao Fang , Wenbo Yu , Bin Chen , Xuan Wang , Shu-Tao Xia , Qing Liao , Ke Xu

Federated Learning (FL) allows for the training of Machine Learning models in a collaborative manner without the need to share sensitive data. However, it remains vulnerable to Gradient Leakage Attacks (GLAs), which can reveal private…

机器学习 · 计算机科学 2025-10-29 Miguel Fernandez-de-Retana , Unai Zulaika , Rubén Sánchez-Corcuera , Aitor Almeida

Gradient inversion attack enables recovery of training samples from model gradients in federated learning (FL), and constitutes a serious threat to data privacy. To mitigate this vulnerability, prior work proposed both principled defenses…

机器学习 · 计算机科学 2023-06-13 Ruihan Wu , Xiangyu Chen , Chuan Guo , Kilian Q. Weinberger

Federated Learning (FL) has recently emerged as a promising distributed machine learning framework to preserve clients' privacy, by allowing multiple clients to upload the gradients calculated from their local data to a central server.…

计算机视觉与模式识别 · 计算机科学 2023-09-12 Hao Fang , Bin Chen , Xuan Wang , Zhi Wang , Shu-Tao Xia

Gradient inversion attack (or input recovery from gradient) is an emerging threat to the security and privacy preservation of Federated learning, whereby malicious eavesdroppers or participants in the protocol can recover (partially) the…

密码学与安全 · 计算机科学 2021-12-02 Yangsibo Huang , Samyak Gupta , Zhao Song , Kai Li , Sanjeev Arora

Federated Learning (FL) enables collaborative training while preserving privacy, yet Gradient Inversion Attacks (GIAs) pose severe threats by reconstructing private data from shared gradients. In realistic FedAvg scenarios with multi-step…

机器学习 · 计算机科学 2025-12-16 Li Xia , Jing Yu , Zheng Liu , Sili Huang , Wei Tang , Xuan Liu

Federated learning is an established method for training machine learning models without sharing training data. However, recent work has shown that it cannot guarantee data privacy as shared gradients can still leak sensitive information.…

机器学习 · 计算机科学 2022-03-18 Mislav Balunović , Dimitar I. Dimitrov , Robin Staab , Martin Vechev

Recent work has shown that gradient updates in federated learning (FL) can unintentionally reveal sensitive information about a client's local data. This risk becomes significantly greater when a malicious server manipulates the global…

机器学习 · 计算机科学 2025-06-26 Fei Wang , Baochun Li

Federated learning (FL) empowers privacypreservation in model training by only exposing users' model gradients. Yet, FL users are susceptible to gradient inversion attacks (GIAs) which can reconstruct ground-truth training data such as…

计算机视觉与模式识别 · 计算机科学 2024-08-01 Can Liu , Jin Wang , and Yipeng Zhou , Yachao Yuan , Quanzheng Sheng , Kejie Lu