Abstract:Abstract Vertical federated learning (VFL), a variant of federated learning, has recently attracted increasing attention. An active party having the true labels jointly trains a model with other parties (referred to as passive parties ) in order to use more features to achieve higher model accuracy. During the prediction phase, all the parties collaboratively compute the predicted confidence scores of each target record and the results will be finally returned to the active party. However, a recent study by Luo et al . [28] pointed out that the active party can use these confidence scores to reconstruct passive-party features and cause severe privacy leakage. In this paper, we conduct a comprehensive analysis of privacy leakage in VFL frameworks during the prediction phase. Our study improves on previous work [28] regarding two aspects. We first design a general gradient-based reconstruction attack framework that can be flexibly applied to simple logistic regression models as well as multi-layer neural networks. Moreover, besides performing the attack under the white-box setting, we give the first attempt to conduct the attack under the black-box setting. Extensive experiments on a number of real-world datasets show that our proposed attack is effective under different settings and can achieve at best twice or thrice of a reduction of attack error compared to previous work [28]. We further analyze a list of potential mitigation approaches and compare their privacy-utility performances. Experimental results demonstrate that privacy leakage from the confidence scores is a substantial privacy risk in VFL frameworks during the prediction phase, which cannot be simply solved by crypto-based confidentiality approaches. On the other hand, processing the confidence scores with information compression and randomization approaches can provide strengthened privacy protection.

Full Data-Processing Power Load Forecasting Based on Vertical Federated Learning

Privacy-Preserving and Hierarchically Federated Framework for Short-Term Residential Load Forecasting

HQsFL: A Novel Training Strategy for Constructing High-performance and Quantum-safe Federated Learning

FedV: Privacy-Preserving Federated Learning over Vertically Partitioned Data

Federated Learning for Short-term Residential Load Forecasting

LF3PFL: A Practical Privacy-Preserving Federated Learning Algorithm Based on Local Federalization Scheme

Secure and Efficient Decentralized Federated Learning with Data Representation Protection

Privacy-preserving household load forecasting based on non-intrusive load monitoring: A federated deep learning approach

Privacy-Preserving Power Consumption Prediction Based on Federated Learning with Cross-Entity Data

Efficient Vertical Federated Learning with Secure Aggregation

PVFL: Verifiable Federated Learning and Prediction with Privacy-Preserving

OpenVFL: A Vertical Federated Learning Framework With Stronger Privacy-Preserving

Privacy-Preserving Distributed Learning for Residential Short-Term Load Forecasting

A Fair and Efficient Hybrid Federated Learning Framework based on XGBoost for Distributed Power Prediction

Distributed and Deep Vertical Federated Learning with Big Data

Federated Short-Term Load Forecasting with Personalization Layers for Heterogeneous Clients

PBFL: Privacy-Preserving and Byzantine-Robust Federated Learning Empowered Industry 4.0

FedForecast: A federated learning framework for short-term probabilistic individual load forecasting in smart grid

Privacy-preserving Data Selection for Horizontal and Vertical Federated Learning

Comprehensive Analysis of Privacy Leakage in Vertical Federated Learning During Prediction