Abstract:Federated learning, as an emerging machine-learning method, has received widespread attention because it allows users to train locally during the training process and uses relevant cryptographic knowledge to safeguard the privacy of data during model aggregation. However, existing federated learning is also susceptible to privacy breaches, e.g., label inference attacks against vertical federated learning scenarios, where an adversary is able to reason about the labels of other participants based on the trained model, leading to serious privacy breaches. In this paper, we design a detection method for label inference attacks in vertical federated learning scenarios, which is able to detect the attacks based on the principles of the attacks. We design a threshold-filtering detection method based on the principle of attack to determine that the model is under attack when the threshold value is greater than a set parameter. Furthermore, we have created six threat model classifications based on different a priori conditions of the adversary to comprehensively analyze the adversary's attacks. In addition to the detection method of attacks, the extent of attacks on the model and the effectiveness of the defense can also be evaluated. The evaluation module will experimentally measure the changes in the relevant metrics such as the accuracy of the attack, the F1 score, and the change in the accuracy after the defense method. For example, detection in the full connected neural network model assesses the attack and defense effectiveness of the model with an attack accuracy of 86.72% in the breast cancer Wisconsin dataset and an F1 score of 0.743, which is reduced to 36.36% after dispersed training. This ensures that users have an overall grasp of the extent to which the training model is under attack before deploying the model.

GAN-Based Information Leakage Attack Detection in Federated Learning

Backdoor Attacks and Defenses in Federated Learning: State-of-the-Art, Taxonomy, and Future Directions

Prevention of GAN-Based Privacy Inferring Attacks Towards Federated Learning.

Exploiting Defenses against GAN-Based Feature Inference Attacks in Federated Learning

Privacy-Preserving Federated Learning Against Label-Flipping Attacks on Non-IID Data

Hidden Data Privacy Breaches in Federated Learning

Analyzing User-Level Privacy Attack Against Federated Learning

A Framework for Evaluating Gradient Leakage Attacks in Federated Learning

Securing Federated Learning: A Covert Communication-based Approach

Mitigating Backdoors in Federated Learning with FLD

BADFL: Backdoor Attack Defense in Federated Learning from Local Model Perspective

GAN-Based Privacy Abuse Attack on Federated Learning in IoT Networks

Efficient and Secure Federated Learning Against Backdoor Attacks

Towards Practical Backdoor Attacks on Federated Learning Systems

Gradient Leakage Attacks in Federated Learning: Research Frontiers, Taxonomy, and Future Directions

Never Too Late: Tracing and Mitigating Backdoor Attacks in Federated Learning

Federated Learning Attacks Revisited: A Critical Discussion of Gaps, Assumptions, and Evaluation Setups

Threshold Filtering for Detecting Label Inference Attacks in Vertical Federated Learning

Privacy Leakage of Real-World Vertical Federated Learning

Provable Defense against Privacy Leakage in Federated Learning from Representation Perspective

FLSG: A Novel Defense Strategy Against Inference Attacks in Vertical Federated Learning