Abstract:Federated learning (FL), celebrated for its privacy‐preserving features, has been revealed by recent studies to harbour security vulnerabilities that jeopardize client privacy, particularly through data reconstruction attacks that enable adversaries to recover original client data. This study introduces a client‐level handwriting forgery attack method for FL based on generative adversarial networks (GANs), which reveals security vulnerabilities existing in FL systems. It should be stressed that this research is purely for academic purposes, aiming to raise concerns about privacy protection and data security, and does not encourage illegal activities. Our novel methodology assumes an adversarial scenario wherein adversaries intercept a fraction of parameter updates via victim clients' wireless communication channels, then use this information to train GAN for data recovery. Finally, the purpose of handwriting imitation is achieved. To rigorously assess and validate our methodology, experiments were conducted using a bespoke Chinese digit dataset, facilitating in‐depth analysis and robust verification of results. Our experimental findings demonstrated enhanced data recovery effectiveness, a client‐level attack and greater versatility compared to prior art. Notably, our method maintained high attack performance even with a streamlined GAN design, yielding increased precision and significantly faster execution times compared to standard methods. Specifically, our experimental numerical results revealed a substantial boost in reconstruction accuracy by 16.7%, coupled with a 51.9% decrease in computational time compared to the latest similar techniques. Furthermore, tests on a simplified version of our GAN exhibited an average 10% enhancement in accuracy, alongside a remarkable 70% reduction in time consumption. By surmounting the limitations of previous work, this study fills crucial gaps and affirms the effectiveness of our approach in achieving high‐accuracy client‐level data reconstruction within the FL context, thereby stimulating further exploration into FL security measures.

Generative‐adversarial network for falsification of handwritten signatures

No One Can Escape: A General Approach to Detect Tampered and Generated Image

A generative adversarial network‐based client‐level handwriting forgery attack in federated learning scenario

Block Induced Signature Generative Adversarial Network (BISGAN): Signature Spoofing Using GANs and Their Evaluation

Misleading Deep-Fake Detection with GAN Fingerprints

Handwriting Profiling using Generative Adversarial Networks

Anti-Forensics for Face Swapping Videos via Adversarial Training

Forgery-free Signature Verification with Stroke-Aware Cycle-Consistent Generative Adversarial Network

Counterfactual Explanations for Face Forgery Detection via Adversarial Removal of Artifacts

RFDforFin: Robust Deep Forgery Detection for GAN-generated Fingerprint Images

FD-GAN: Generalizable and Robust Forgery Detection via Generative Adversarial Networks

Fighting Deepfake by Exposing the Convolutional Traces on Images

MCS-GAN: A Different Understanding for Generalization of Deep Forgery Detection

Exploring Generalization Capability for Video Forgery and Detection Based on Generative Adversarial Network

Top interpretable neural network for handwriting identification

Detecting fake images by identifying potential texture difference

Fighting deepfakes by detecting GAN DCT anomalies

Attributing Fake Images to GANs: Learning and Analyzing GAN Fingerprints

LatentForensics: Towards frugal deepfake detection in the StyleGAN latent space

SynSig2Vec: Forgery-Free Learning of Dynamic Signature Representations by Sigma Lognormal-Based Synthesis and 1D CNN

Forgery Detection by Weighted Complementarity Between Significant Invariance and Detail Enhancement