{"id":"https://openalex.org/W4282018586","doi":"https://doi.org/10.48550/arxiv.2206.00769","title":"Defense Against Gradient Leakage Attacks via Learning to Obscure Data","display_name":"Defense Against Gradient Leakage Attacks via Learning to Obscure Data","publication_year":2022,"publication_date":"2022-06-01","ids":{"openalex":"https://openalex.org/W4282018586","doi":"https://doi.org/10.48550/arxiv.2206.00769"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2206.00769","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2206.00769","pdf_url":"https://arxiv.org/pdf/2206.00769","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2206.00769","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5106744443","display_name":"Yuxuan Wan","orcid":"https://orcid.org/0009-0006-6739-4675","observed_orcids":["https://orcid.org/0009-0006-6739-4675"]},"institutions":[{"id":"https://openalex.org/I87216513","display_name":"Michigan State University","ror":"https://ror.org/05hs6h993","country_code":"US","type":"education","lineage":["https://openalex.org/I87216513"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Wan, Yuxuan","raw_affiliation_strings":["Michigan State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Michigan State University","institution_ids":["https://openalex.org/I87216513"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102012658","display_name":"Han Xu","orcid":"https://orcid.org/0000-0002-3157-5830","observed_orcids":["https://orcid.org/0000-0002-3157-5830"]},"institutions":[{"id":"https://openalex.org/I87216513","display_name":"Michigan State University","ror":"https://ror.org/05hs6h993","country_code":"US","type":"education","lineage":["https://openalex.org/I87216513"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xu, Han","raw_affiliation_strings":["Michigan State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Michigan State University","institution_ids":["https://openalex.org/I87216513"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100621795","display_name":"Xiaorui Liu","orcid":"https://orcid.org/0000-0001-8217-5688","observed_orcids":["https://orcid.org/0000-0001-8217-5688"]},"institutions":[{"id":"https://openalex.org/I87216513","display_name":"Michigan State University","ror":"https://ror.org/05hs6h993","country_code":"US","type":"education","lineage":["https://openalex.org/I87216513"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Liu, Xiaorui","raw_affiliation_strings":["Michigan State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Michigan State University","institution_ids":["https://openalex.org/I87216513"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100720534","display_name":"Jie Ren","orcid":"https://orcid.org/0000-0002-9229-8814","observed_orcids":["https://orcid.org/0000-0002-9229-8814","https://orcid.org/0000-0001-9918-3000"]},"institutions":[{"id":"https://openalex.org/I87216513","display_name":"Michigan State University","ror":"https://ror.org/05hs6h993","country_code":"US","type":"education","lineage":["https://openalex.org/I87216513"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ren, Jie","raw_affiliation_strings":["Michigan State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Michigan State University","institution_ids":["https://openalex.org/I87216513"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100583858","display_name":"Wenqi Fan","orcid":"https://orcid.org/0000-0002-4049-1233","observed_orcids":["https://orcid.org/0000-0002-4049-1233"]},"institutions":[{"id":"https://openalex.org/I14243506","display_name":"Hong Kong Polytechnic University","ror":"https://ror.org/0030zas98","country_code":"HK","type":"education","lineage":["https://openalex.org/I14243506"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Fan, Wenqi","raw_affiliation_strings":["The Hong Kong Polytechnic University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Hong Kong Polytechnic University","institution_ids":["https://openalex.org/I14243506"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5040639891","display_name":"Jiliang Tang","orcid":"https://orcid.org/0000-0001-7125-3898","observed_orcids":["https://orcid.org/0000-0001-7125-3898"]},"institutions":[{"id":"https://openalex.org/I87216513","display_name":"Michigan State University","ror":"https://ror.org/05hs6h993","country_code":"US","type":"education","lineage":["https://openalex.org/I87216513"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tang, Jiliang","raw_affiliation_strings":["Michigan State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Michigan State University","institution_ids":["https://openalex.org/I87216513"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":4,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/gradient-leakage-attacks","display_name":"gradient leakage attacks","score":0.8799999952316284},{"id":"https://openalex.org/keywords/federated-learning-privacy","display_name":"federated learning privacy","score":0.8849999904632568},{"id":"https://openalex.org/keywords/data-reconstruction-attacks","display_name":"data reconstruction attacks","score":0.5929999947547913},{"id":"https://openalex.org/keywords/synthetic-data-generation","display_name":"synthetic data generation","score":0.6930000185966492},{"id":"https://openalex.org/keywords/privacy-preserving-machine-learning","display_name":"privacy-preserving machine learning","score":0.6980000138282776},{"id":"https://openalex.org/keywords/gradient-perturbation","display_name":"gradient perturbation","score":0.6399999856948853}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7377480864524841},{"id":"https://openalex.org/C2777042071","wikidata":"https://www.wikidata.org/wiki/Q6509304","display_name":"Leakage (economics)","level":2,"score":0.6912100315093994},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.5456098914146423},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.45868515968322754},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.37142735719680786},{"id":"https://openalex.org/C139719470","wikidata":"https://www.wikidata.org/wiki/Q39680","display_name":"Macroeconomics","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2206.00769","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2206.00769","pdf_url":"https://arxiv.org/pdf/2206.00769","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2206.00769","doi":"https://doi.org/10.48550/arxiv.2206.00769","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2206.00769","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2206.00769","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2206.00769","pdf_url":"https://arxiv.org/pdf/2206.00769","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"sustainable_development_goals_aurora":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, justice, and strong institutions","score":0.8100000023841858}],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4392384644","https://openalex.org/W4391424621","https://openalex.org/W4283204848","https://openalex.org/W7128600971","https://openalex.org/W4416854245","https://openalex.org/W4375957747","https://openalex.org/W4310827164","https://openalex.org/W4393032351","https://openalex.org/W4281609047","https://openalex.org/W6947940728"],"abstract_inverted_index":{"Federated":[0],"learning":[1,8,21,102],"is":[2,22],"considered":[3],"as":[4,51],"an":[5],"effective":[6],"privacy-preserving":[7],"mechanism":[9],"that":[10,113,159],"separates":[11],"the":[12,25,32,44,75,96,118,132,140,151],"client's":[13],"data":[14,100],"and":[15,55,130,144],"model":[16,76,133],"training":[17],"process.":[18],"However,":[19],"federated":[20],"still":[23],"under":[24],"risk":[26],"of":[27,31,34,98],"privacy":[28,97,166],"leakage":[29,40,66,142],"because":[30],"existence":[33],"attackers":[35],"who":[36],"deliberately":[37],"conduct":[38],"gradient":[39,52,65,141],"attacks":[41],"to":[42,62,94,103,149],"reconstruct":[43,150],"client":[45,152],"data.":[46,105,153],"Recently,":[47],"popular":[48],"strategies":[49],"such":[50],"perturbation":[53],"methods":[54,58],"input":[56],"encryption":[57],"have":[59],"been":[60],"proposed":[61,161],"defend":[63],"against":[64],"attacks.":[67,84],"Nevertheless,":[68],"these":[69],"defenses":[70],"can":[71,109,123],"either":[72],"greatly":[73],"sacrifice":[74],"performance,":[77],"or":[78],"be":[79],"evaded":[80],"by":[81,101],"more":[82],"advanced":[83],"In":[85],"this":[86],"paper,":[87],"we":[88,157],"propose":[89],"a":[90],"new":[91],"defense":[92,107,137,162],"method":[93,108,163],"protect":[95],"clients'":[99],"obscure":[104],"Our":[106],"generate":[110],"synthetic":[111],"samples":[112],"are":[114],"totally":[115],"distinct":[116],"from":[117],"original":[119],"samples,":[120],"but":[121],"they":[122],"also":[124],"maximally":[125],"preserve":[126],"their":[127],"predictive":[128],"features":[129],"guarantee":[131],"performance.":[134],"Furthermore,":[135],"our":[136,160],"strategy":[138],"makes":[139],"attack":[143],"its":[145],"variants":[146],"extremely":[147],"difficult":[148],"Through":[154],"extensive":[155],"experiments,":[156],"show":[158],"obtains":[164],"better":[165],"protection":[167],"while":[168],"preserving":[169],"high":[170],"accuracy":[171],"compared":[172],"with":[173],"state-of-the-art":[174],"methods.":[175]},"counts_by_year":[{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":1}],"updated_date":"2026-10-16T09:59:22.235173","created_date":"2022-06-13T00:00:00"}