Abstract:With the rise of privacy concerns in traditional centralized machine learning services, federated learning, which incorporates multiple participants to train a global model across their localized training data, has lately received significant attention in both industry and academia. Bringing federated learning into a wireless network scenario is a great move. The combination of them inspires tremendous power and spawns a number of promising applications. Recent researches reveal the inherent vulnerabilities of the various learning modes for the membership inference attacks that the adversary could infer whether a given data record belongs to the model’s training set. Although the state-of-the-art techniques could successfully deduce the membership information from the centralized machine learning models, it is still challenging to infer the member data at a more confined level, the user level. It is exciting that the common wireless monitor technique in the wireless network environment just provides a good ground for fine-grained membership inference. In this paper, we novelly propose and define a concept of user-level inference attack in federated learning. Specifically, we first give a comprehensive analysis of active and targeted membership inference attacks in the context of federated learning. Then, by considering a more complicated scenario that the adversary can only passively observe the updating models from different iterations, we incorporate the generative adversarial networks into our method, which can enrich the training set for the final membership inference model. In the end, we comprehensively research and implement inferences launched by adversaries of different roles, which makes the attack scenario complete and realistic. The extensive experimental results demonstrate the effectiveness of our proposed attacking approach in the case of single label and multilabel.

MIA-FedDL: A Membership Inference Attack Against Federated Distillation Learning.

FedMIA: An Effective Membership Inference Attack Exploiting "All for One" Principle in Federated Learning

MIA-BAD: An Approach for Enhancing Membership Inference Attack and its Mitigation with Federated Learning

MIA-Leak: Exploring Membership Inference Attacks in Federated Learning Systems

Membership Inference Defense in Distributed Federated Learning Based on Gradient Differential Privacy and Trust Domain Division Mechanisms

Privacy-Preserving Federated Learning Against Label-Flipping Attacks on Non-IID Data

User-Level Membership Inference for Federated Learning in Wireless Network Environment

Practical Membership Inference Attack Against Collaborative Inference in Industrial IoT

Membership Inference Attacks and Defenses in Federated Learning: A Survey

Federated Regularization Learning: an Accurate and Safe Method for Federated Learning

LDIA: Label distribution inference attack against federated learning in edge computing.

Defending Against Data Reconstruction Attacks in Federated Learning: An Information Theory Approach

CS-MIA: Membership Inference Attack Based on Prediction Confidence Series in Federated Learning

Privacy-Preserving Federated Learning via Dataset Distillation

Source Inference Attacks in Federated Learning

Practical Private Aggregation in Federated Learning Against Inference Attack

Subject-Level Membership Inference Attack via Data Augmentation and Model Discrepancy

Active Membership Inference Attack under Local Differential Privacy in Federated Learning

MemberShield: A framework for federated learning with membership privacy

Efficient Membership Inference Attacks against Federated Learning via Bias Differences

Privacy Leakage of Real-World Vertical Federated Learning