Abstract:Vertical federated learning (VFL) is an emerging privacy-preserving paradigm that enables collaboration between companies. These companies have the same set of users but different features. One of them is interested in expanding new business or improving its current service with others’ features. For instance, an e-commerce company, who wants to improve its recommendation performance, can incorporate users’ preferences from another corporation such as a social media company through VFL. On the other hand, graph data is a powerful and sensitive type of data widely used in industry. Their leakage, e.g., the node leakage and/or the relation leakage, can cause severe privacy issues and financial loss. Therefore, protecting the security of graph data is important in practice. Though a line of work has studied how to learn with graph data in VFL, the privacy risks remain underexplored. In this paper, we perform the first systematic study on relation inference attacks to reveal VFL's risk of leaking samples’ relations. Specifically, we assume the adversary to be a semi-honest participant. Then, according to the adversary's knowledge level, we formulate three kinds of attacks based on different intermediate representations. Particularly, we design a novel numerical approximation method to handle VFL's encryption mechanism on the participant's representations. Extensive evaluations with four real-world datasets demonstrate the effectiveness of our attacks. For instance, the area under curve of relation inference can reach more than 90%, implying an impressive relation inference capability. Furthermore, we evaluate possible defenses to examine our attacks’ robustness. The results show that their impacts are limited. Our work highlights the need for advanced defenses to protect private relations and calls for more exploration of VFL's privacy and security issues.

Privacy-preserving design of graph neural networks with applications to vertical federated learning

OpenVFL: A Vertical Federated Learning Framework With Stronger Privacy-Preserving

FedV: Privacy-Preserving Federated Learning over Vertically Partitioned Data

A Vertical Federated Learning Framework for Graph Convolutional Network

Training Encrypted Models with Privacy-preserved Data on Blockchain

VFLR: An Efficient and Privacy-Preserving Vertical Federated Framework for Logistic Regression

BlindFL: Vertical Federated Machine Learning Without Peeking into Your Data

Vertically Federated Graph Neural Network for Privacy-Preserving Node Classification.

Your Labels Are Selling You Out: Relation Leaks in Vertical Federated Learning

Secure Vertical Federated Learning Under Unreliable Connectivity

A Robust Detection and Correction Framework for GNN-Based Vertical Federated Learning.

LF3PFL: A Practical Privacy-Preserving Federated Learning Algorithm Based on Local Federalization Scheme

Efficient Vertical Federated Learning with Secure Aggregation

SecureVFL: privacy-preserving multi-party vertical federated learning based on blockchain and RSS

Vertical Federated Learning: Concepts, Advances, and Challenges

Vertical Federated Learning: Concepts, Advances and Challenges

FLSG: A Novel Defense Strategy Against Inference Attacks in Vertical Federated Learning

Efficient and Privacy-Preserving Feature Importance-based Vertical Federated Learning

Vertical Federated Learning: Challenges, Methodologies and Experiments

Federated Graph Learning -- A Position Paper