Abstract:Federated Learning (FL) emerged as a paradigm for conducting machine learning across broad and decentralized datasets, promising enhanced privacy by obviating the need for direct data sharing. However, recent studies show that attackers can steal private data through model manipulation or gradient analysis. Existing attacks are constrained by low theft quantity or low-resolution data, and they are often detected through anomaly monitoring in gradients or weights. In this paper, we propose a novel data-reconstruction attack leveraging malicious code injection, supported by two key techniques, i.e., distinctive and sparse encoding design and block partitioning. Unlike conventional methods that require detectable changes to the model, our method stealthily embeds a hidden model using parameter sharing to systematically extract sensitive data. The Fibonacci-based index design ensures efficient, structured retrieval of memorized data, while the block partitioning method enhances our method's capability to handle high-resolution images by dividing them into smaller, manageable units. Extensive experiments on 4 datasets confirmed that our method is superior to the five state-of-the-art data-reconstruction attacks under the five respective detection methods. Our method can handle large-scale and high-resolution data without being detected or mitigated by state-of-the-art data reconstruction defense methods. In contrast to baselines, our method can be directly applied to both FedAVG and FedSGD scenarios, underscoring the need for developers to devise new defenses against such vulnerabilities. We will open-source our code upon acceptance.

Towards General Deep Leakage in Federated Learning

Hidden Data Privacy Breaches in Federated Learning

Breaking Secure Aggregation: Label Leakage from Aggregated Gradients in Federated Learning

Recover User's Private Training Image Data by Gradient in Federated Learning

Federated Learning under Attack: Improving Gradient Inversion for Batch of Images

Improved Gradient Leakage Attack Against Compressed Gradients in Federated Learning

AFGI: Towards Accurate and Fast-convergent Gradient Inversion Attack in Federated Learning

Protect Privacy from Gradient Leakage Attack in Federated Learning

Gradient leakage attacks in federated learning

Building Gradient Bridges: Label Leakage from Restricted Gradient Sharing in Federated Learning

Recovering Labels from Local Updates in Federated Learning

Provable Defense against Privacy Leakage in Federated Learning from Representation Perspective

Using Highly Compressed Gradients in Federated Learning for Data Reconstruction Attacks

CGIR: Conditional Generative Instance Reconstruction Attacks Against Federated Learning

Gradient Leakage Attacks in Federated Learning: Research Frontiers, Taxonomy, and Future Directions

Fast Generation-Based Gradient Leakage Attacks against Highly Compressed Gradients.

Batch data recovery from gradients based on generative adversarial networks

Instance-wise Batch Label Restoration via Gradients in Federated Learning

E2EGI: End-to-End Gradient Inversion in Federated Learning

Gradients Stand-in for Defending Deep Leakage in Federated Learning

Towards Eliminating Hard Label Constraints in Gradient Inversion Attacks