Abstract:Federated learning has emerged as an advanced privacy-preserving learning technique for mobile edge computing, where the model is trained in a decentralized manner by the clients, preventing the server from directly accessing those private data from the clients. This learning mechanism significantly challenges the attack from the server side. Although the state-of-the-art attacking techniques that incorporated the advance of Generative adversarial networks (GANs) could construct class representatives of the global data distribution among all clients, it is still challenging to distinguishably attack a specific client (i.e., user-level privacy leakage), which is a stronger privacy threat to precisely recover the private data from a specific client. To analyze the privacy leakage of federated learning, this paper gives the first attempt to explore user-level privacy leakage by the attack from a malicious server. We propose a framework incorporating GAN with a multi-task discriminator, called multi-task GAN – Auxiliary Identification (mGAN-AI), which simultaneously discriminates category, reality, and client identity of input samples. The novel discrimination on client identity enables the generator to recover user specified private data. Unlike existing works interfering the federated learning process, the proposed method works "invisibly" on the server side. Furthermore, considering the anonymization strategy for mitigating mGAN-AI, we propose a beforehand linkability attack which re-identifies the anonymized updates by associating the client representatives. A novel siamese network fusing the identification and verification models is developed for measuring the similarity of representatives. The experimental results demonstrate the effectiveness of the proposed approaches and the superior to the state-of-the-art.

Exploiting Defenses against GAN-Based Feature Inference Attacks in Federated Learning

Backdoor Attacks and Defenses in Federated Learning: State-of-the-Art, Taxonomy, and Future Directions

A GAN-Based Defense Framework Against Model Inversion Attacks.

Prevention of GAN-Based Privacy Inferring Attacks Towards Federated Learning.

Mitigating Cross-client GANs-based Attack in Federated Learning

Research and Application of Generative-Adversarial-Network Attacks Defense Method Based on Federated Learning

Analyzing User-Level Privacy Attack Against Federated Learning

GAN-Based Information Leakage Attack Detection in Federated Learning

Membership Inference Attack and Defense Method in Federated Learning Based on GAN

GAN-Based Privacy Abuse Attack on Federated Learning in IoT Networks

Backdoor attack and defense in federated generative adversarial network-based medical image synthesis

A GAN-Based Data Poisoning Attack Against Federated Learning Systems and Its Countermeasure

GANFed: GAN-Based Federated Learning with Non-IID Datasets in Edge IoTs

GANcrop: A Contrastive Defense Against Backdoor Attacks in Federated Learning

Private FL-GAN: Differential Privacy Synthetic Data Generation Based on Federated Learning.

PPIDSG: A Privacy-Preserving Image Distribution Sharing Scheme with GAN in Federated Learning

FLGAN: GAN-Based Unbiased FederatedLearning under Non-IID Settings

Beyond Inferring Class Representatives: User-Level Privacy Leakage From Federated Learning

VagueGAN: A GAN-Based Data Poisoning Attack Against Federated Learning Systems.

Inverting Gradient Attack Combined with GAN Network in Federated Learning of Face Recognition

Federated Learning for Tabular Data: Exploring Potential Risk to Privacy