{"id":"https://openalex.org/W4399993634","doi":"https://doi.org/10.1145/3649158.3657039","title":"Make Split, not Hijack: Preventing Feature-Space Hijacking Attacks in Split Learning","display_name":"Make Split, not Hijack: Preventing Feature-Space Hijacking Attacks in Split Learning","publication_year":2024,"publication_date":"2024-06-24","ids":{"openalex":"https://openalex.org/W4399993634","doi":"https://doi.org/10.1145/3649158.3657039"},"language":"en","primary_location":{"id":"doi:10.1145/3649158.3657039","doi":"https://doi.org/10.1145/3649158.3657039","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3649158.3657039","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3649158.3657039","source":{"id":"https://openalex.org/S7407087914","display_name":"ACM Symposium on Access Control Models and Technologies (SACMAT)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 29th ACM Symposium on Access Control Models and Technologies","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3649158.3657039","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102925907","display_name":"Tanveer Khan","orcid":"https://orcid.org/0000-0001-7296-2178","observed_orcids":["https://orcid.org/0000-0001-7296-2178"]},"institutions":[{"id":"https://openalex.org/I166825849","display_name":"Tampere University","ror":"https://ror.org/033003e23","country_code":"FI","type":"education","lineage":["https://openalex.org/I166825849"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Tanveer Khan","raw_affiliation_strings":["Tampere University, Tampere, Finland"],"raw_orcid":"https://orcid.org/0000-0001-7296-2178","affiliations":[{"raw_affiliation_string":"Tampere University, Tampere, Finland","institution_ids":["https://openalex.org/I166825849"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5093817160","display_name":"Mindaugas Budzys","orcid":"https://orcid.org/0000-0002-1913-7985","observed_orcids":["https://orcid.org/0000-0002-1913-7985"]},"institutions":[{"id":"https://openalex.org/I166825849","display_name":"Tampere University","ror":"https://ror.org/033003e23","country_code":"FI","type":"education","lineage":["https://openalex.org/I166825849"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Mindaugas Budzys","raw_affiliation_strings":["Tampere University, Tampere, Finland"],"raw_orcid":"https://orcid.org/0000-0002-1913-7985","affiliations":[{"raw_affiliation_string":"Tampere University, Tampere, Finland","institution_ids":["https://openalex.org/I166825849"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5014749102","display_name":"Antonis Michalas","orcid":"https://orcid.org/0000-0002-0189-3520","observed_orcids":["https://orcid.org/0000-0002-0189-3520"]},"institutions":[{"id":"https://openalex.org/I166825849","display_name":"Tampere University","ror":"https://ror.org/033003e23","country_code":"FI","type":"education","lineage":["https://openalex.org/I166825849"]},{"id":"https://openalex.org/I2800664555","display_name":"RISE Research Institutes of Sweden","ror":"https://ror.org/03nnxqz81","country_code":"SE","type":"other","lineage":["https://openalex.org/I2800664555"]}],"countries":["FI","SE"],"is_corresponding":false,"raw_author_name":"Antonis Michalas","raw_affiliation_strings":["Tampere University & RISE Research Institutes of Sweden, Tampere, Finland"],"raw_orcid":"https://orcid.org/0000-0002-0189-3520","affiliations":[{"raw_affiliation_string":"Tampere University & RISE Research Institutes of Sweden, Tampere, Finland","institution_ids":["https://openalex.org/I166825849","https://openalex.org/I2800664555"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.5985,"has_fulltext":true,"cited_by_count":9,"citation_normalized_percentile":{"value":0.91350812,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"19","last_page":"30"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.0026000000070780516,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.0003000000142492354,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/split-learning","display_name":"split learning","score":0.9860000014305115},{"id":"https://openalex.org/keywords/function-secret-sharing","display_name":"function secret sharing","score":0.984000027179718},{"id":"https://openalex.org/keywords/data-privacy","display_name":"data privacy","score":0.6489999890327454},{"id":"https://openalex.org/keywords/privacy-leakage","display_name":"privacy leakage","score":0.7250000238418579},{"id":"https://openalex.org/keywords/collaborative-machine-learning","display_name":"collaborative machine learning","score":0.7360000014305115},{"id":"https://openalex.org/keywords/communication-overhead","display_name":"communication overhead","score":0.6510000228881836},{"id":"https://openalex.org/keywords/image-classification","display_name":"image classification","score":0.3089999854564667}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7517507076263428},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6192603707313538},{"id":"https://openalex.org/C2778572836","wikidata":"https://www.wikidata.org/wiki/Q380933","display_name":"Space (punctuation)","level":2,"score":0.5646677613258362},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.5613415837287903},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1015254557132721},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0}],"mesh":[],"locations_count":6,"locations":[{"id":"doi:10.1145/3649158.3657039","doi":"https://doi.org/10.1145/3649158.3657039","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3649158.3657039","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3649158.3657039","source":{"id":"https://openalex.org/S7407087914","display_name":"ACM Symposium on Access Control Models and Technologies (SACMAT)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 29th ACM Symposium on Access Control Models and Technologies","raw_type":"proceedings-article"},{"id":"pmh:oai:trepo.tuni.fi:10024/210840","doi":null,"is_oa":true,"landing_page_url":"https://trepo.tuni.fi/handle/10024/210840","pdf_url":null,"source":{"id":"https://openalex.org/S4306401860","display_name":"Tampere University Institutional Repository (Tampere University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I150589677","host_organization_name":"Tampere University of Applied Sciences","host_organization_lineage":["https://openalex.org/I150589677"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"conference"},{"id":"pmh:oai:arXiv.org:2404.09265","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2404.09265","pdf_url":"https://arxiv.org/pdf/2404.09265","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:westminsterresearch.westminster.ac.uk:wy33z","doi":null,"is_oa":true,"landing_page_url":"https://doi.org/10.1145/3649158.3657039","pdf_url":"https://westminsterresearch.westminster.ac.uk/download/9a3d7385db2542922a9661b6157c44b15be59d29bb16838f8392440502b7f2d9/1861615/3649158.3657039.pdf","source":{"id":"https://openalex.org/S4306400277","display_name":"WestminsterResearch (University of Westminster)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I94951947","host_organization_name":"University of Westminster","host_organization_lineage":["https://openalex.org/I94951947"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"conference-paper"},{"id":"pmh:oai:DiVA.org:ri-74716","doi":null,"is_oa":true,"landing_page_url":"https://ri.diva-portal.org/smash/get/diva2:1887557/FULLTEXT01","pdf_url":null,"source":{"id":"https://openalex.org/S4306401559","display_name":"KTH Publication Database DiVA (KTH Royal Institute of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I86987016","host_organization_name":"KTH Royal Institute of Technology","host_organization_lineage":["https://openalex.org/I86987016"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"doi:10.48550/arxiv.2404.09265","doi":"https://doi.org/10.48550/arxiv.2404.09265","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2404.09265","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.1145/3649158.3657039","doi":"https://doi.org/10.1145/3649158.3657039","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3649158.3657039","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3649158.3657039","source":{"id":"https://openalex.org/S7407087914","display_name":"ACM Symposium on Access Control Models and Technologies (SACMAT)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 29th ACM Symposium on Access Control Models and Technologies","raw_type":"proceedings-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4399993634.pdf","grobid_xml":"https://content.openalex.org/works/W4399993634.grobid-xml"},"referenced_works_count":26,"referenced_works":["https://openalex.org/W2112796928","https://openalex.org/W2533357737","https://openalex.org/W2535690855","https://openalex.org/W2591882872","https://openalex.org/W2701059868","https://openalex.org/W2803823081","https://openalex.org/W2883108656","https://openalex.org/W2970606380","https://openalex.org/W2982446812","https://openalex.org/W2984644945","https://openalex.org/W3013997074","https://openalex.org/W3018102029","https://openalex.org/W3109688427","https://openalex.org/W3111351313","https://openalex.org/W3138815606","https://openalex.org/W3188430965","https://openalex.org/W3216987697","https://openalex.org/W4235202118","https://openalex.org/W4244533844","https://openalex.org/W4293783465","https://openalex.org/W4293783482","https://openalex.org/W4312815981","https://openalex.org/W4378527334","https://openalex.org/W4399119707","https://openalex.org/W4400019411","https://openalex.org/W6602615877"],"related_works":["https://openalex.org/W7091350010","https://openalex.org/W6912878709","https://openalex.org/W4402753937","https://openalex.org/W4386348100","https://openalex.org/W4317939300","https://openalex.org/W7154966612","https://openalex.org/W4394805025","https://openalex.org/W7118956619","https://openalex.org/W4386907889","https://openalex.org/W4409916877"],"abstract_inverted_index":{"The":[0,75,91],"popularity":[1],"of":[2,9,44,136],"Machine":[3],"Learning":[4,21],"(ML)":[5],"makes":[6],"the":[7,82,89,95,113,117,122,132,138,143,162,204,226],"privacy":[8,151,154],"sensitive":[10,180],"data":[11,27,53,73,120,141],"more":[12],"imperative":[13],"than":[14],"ever.":[15],"Collaborative":[16],"learning":[17],"techniques":[18],"like":[19],"Split":[20],"(SL)":[22],"aim":[23],"to":[24,38,41,70,81,88,157,203,225],"protect":[25],"client":[26,72,76,166],"while":[28],"enhancing":[29],"ML":[30],"processes.":[31],"Though":[32],"promising,":[33],"SL":[34,64],"has":[35],"been":[36],"proved":[37],"be":[39],"vulnerable":[40],"a":[42,60,78],"plethora":[43],"attacks,":[45],"thus":[46],"raising":[47],"concerns":[48],"about":[49],"its":[50],"effectiveness":[51],"on":[52],"privacy.":[54,74],"In":[55],"this":[56],"work,":[57],"we":[58,129,213],"introduce":[59],"hybrid":[61],"approach":[62,170,217],"combining":[63],"and":[65,110,196,222],"Function":[66],"Secret":[67],"Sharing":[68],"(FSS)":[69],"ensure":[71],"adds":[77],"random":[79],"mask":[80],"activation":[83,123,144],"map":[84,145],"before":[85],"sending":[86],"it":[87],"servers.":[90],"servers":[92,114],"cannot":[93,115],"access":[94,165],"original":[96],"function":[97],"but":[98],"instead":[99],"work":[100],"with":[101,207],"shares":[102],"generated":[103],"using":[104,147],"FSS.":[105,148],"Consequently,":[106],"during":[107],"both":[108],"forward":[109],"backward":[111],"propagation,":[112],"reconstruct":[116],"client's":[118],"raw":[119,139],"from":[121,142,182],"map.":[124],"Furthermore,":[125],"through":[126],"visual":[127],"invertibility,":[128],"demonstrate":[130],"that":[131,215],"server":[133,163],"is":[134],"incapable":[135],"reconstructing":[137],"image":[140],"when":[146],"It":[149],"enhances":[150],"by":[152,193,199],"reducing":[153,190],"leakage":[155],"compared":[156,202],"other":[158],"SL-based":[159],"approaches":[160],"where":[161],"can":[164],"input":[167],"information.":[168],"Our":[169,185],"also":[171],"ensures":[172],"security":[173],"against":[174],"feature":[175],"space":[176],"hijacking":[177],"attack,":[178],"protecting":[179],"information":[181],"potential":[183],"manipulation.":[184],"protocols":[186],"yield":[187],"promising":[188],"results,":[189],"communication":[191],"overhead":[192],"over":[194,200],"2\u00d7":[195],"training":[197],"time":[198],"7\u00d7":[201],"same":[205],"model":[206],"FSS,":[208],"without":[209],"any":[210],"SL.":[211],"Also,":[212],"show":[214],"our":[216],"achieves":[218],">":[219],"96%":[220],"accuracy":[221],"remains":[223],"equivalent":[224],"plaintext":[227],"models.":[228]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":6}],"updated_date":"2026-10-16T09:59:22.235173","created_date":"2024-06-26T00:00:00"}