Abstract:Federated learning, as an emerging machine-learning method, has received widespread attention because it allows users to train locally during the training process and uses relevant cryptographic knowledge to safeguard the privacy of data during model aggregation. However, existing federated learning is also susceptible to privacy breaches, e.g., label inference attacks against vertical federated learning scenarios, where an adversary is able to reason about the labels of other participants based on the trained model, leading to serious privacy breaches. In this paper, we design a detection method for label inference attacks in vertical federated learning scenarios, which is able to detect the attacks based on the principles of the attacks. We design a threshold-filtering detection method based on the principle of attack to determine that the model is under attack when the threshold value is greater than a set parameter. Furthermore, we have created six threat model classifications based on different a priori conditions of the adversary to comprehensively analyze the adversary's attacks. In addition to the detection method of attacks, the extent of attacks on the model and the effectiveness of the defense can also be evaluated. The evaluation module will experimentally measure the changes in the relevant metrics such as the accuracy of the attack, the F1 score, and the change in the accuracy after the defense method. For example, detection in the full connected neural network model assesses the attack and defense effectiveness of the model with an attack accuracy of 86.72% in the breast cancer Wisconsin dataset and an F1 score of 0.743, which is reduced to 36.36% after dispersed training. This ensures that users have an overall grasp of the extent to which the training model is under attack before deploying the model.

Defending Batch-Level Label Inference and Replacement Attacks in Vertical Federated Learning

Defending Label Inference and Backdoor Attacks in Vertical Federated Learning.

VILLAIN: Backdoor Attacks Against Vertical Split Learning

Label Inference Attacks Against Vertical Federated Learning

Vulnerabilities of Data Protection in Vertical Federated Learning Training and Countermeasures

Breaking Secure Aggregation: Label Leakage from Aggregated Gradients in Federated Learning

Practical and General Backdoor Attacks against Vertical Federated Learning

Defending Label Inference Attacks in Split Learning under Regression Setting.

Label Leakage in Vertical Federated Learning: A Survey

Beyond Model Splitting: Preventing Label Inference Attacks in Vertical Federated Learning with Dispersed Training

Threshold Filtering for Detecting Label Inference Attacks in Vertical Federated Learning

KDk: A Defense Mechanism Against Label Inference Attacks in Vertical Federated Learning

A Practical Clean -Label Backdoor Attack with Limited Information in Vertical Federated Learning

Privacy-Preserving Federated Learning Against Label-Flipping Attacks on Non-IID Data

BadVFL: Backdoor Attacks in Vertical Federated Learning

LR-BA: Backdoor attack against vertical federated learning using local latent representations

Training on Fake Labels: Mitigating Label Leakage in Split Learning via Secure Dimension Transformation

Towards General Deep Leakage in Federated Learning

Secure Vertical Federated Learning Based on Feature Disentanglement

CAFE: Catastrophic Data Leakage in Vertical Federated Learning

Eliminating Label Leakage in Tree-Based Vertical Federated Learning