Abstract:Split learning, a distributed learning framework, has garnered significant attention from academic and industrial communities. In contrast to federated learning, split learning offers a more flexible architecture for participants with limited computing resources. However, the security of split learning has been questioned due to the separation of data and model control rights from usage rights. Currently, most research work focuses on inference attacks in split learning. In this paper, we first reveal the vulnerability of split learning to backdoor attacks and present two backdoor attack frameworks from both the server and client perspectives. Regarding the client-side attacker, we insert backdoor samples into the training data by utilizing the client's direct control over local data, and propose two methods for labeling backdoor samples that can be adapted to various application scenarios. Due to the server's lack of control over the client in split learning, it is infeasible for server-side attackers to inject backdoor samples into training data. Our strategy involves leveraging the server's control over the training process to shape the optimization direction of the client model, thereby enabling it to encode backdoor samples. Moreover, we introduce an auxiliary model into the attack framework to enhance the effectiveness of the backdoor attack. The auxiliary model can increase the distinction between backdoor samples and clean samples in the feature space to improve the sensitivity of the client model to backdoor samples. Extensive evaluations demonstrate the high attack accuracy of both proposed attack frameworks without causing any compromise to the performance of the main task. Our research uncovers the potential security risks and rings the alarm for the application of split learning.

Similarity-Based Label Inference Attack Against Training and Inference of Split Learning

Similarity-based Label Inference Attack against Training and Inference of Split Learning

Training on Fake Labels: Mitigating Label Leakage in Split Learning via Secure Dimension Transformation

VILLAIN: Backdoor Attacks Against Vertical Split Learning

Defending Label Inference Attacks in Split Learning under Regression Setting.

Label Inference Attack against Split Learning under Regression Setting

Dullahan: Stealthy Backdoor Attack against Without-Label-Sharing Split Learning

Privacy-Preserving Federated Learning Against Label-Flipping Attacks on Non-IID Data

A Stealthy Backdoor Attack for Without-Label-Sharing Split Learning.

Evaluating Privacy Leakage in Split Learning

Passive Inference Attacks on Split Learning via Adversarial Regularization

Attackers Are Not the Same! Unveiling the Impact of Feature Distribution on Label Inference Attacks

Breaking Secure Aggregation: Label Leakage from Aggregated Gradients in Federated Learning

Secure Split Learning Against Property Inference, Data Reconstruction, and Feature Space Hijacking Attacks

Eavesdrop the Composition Proportion of Training Labels in Federated Learning

Towards General Deep Leakage in Federated Learning

Does Label Differential Privacy Prevent Label Inference Attacks?

How to backdoor split learning

Privacy Leakage of Real-World Vertical Federated Learning

Privacy-Preserving Split Learning with Vision Transformers using Patch-Wise Random and Noisy CutMix

Label Inference Attacks Against Vertical Federated Learning