{"id":"https://openalex.org/W4406457997","doi":"https://doi.org/10.1109/bigdata62323.2024.10825545","title":"Defending Against Inference and Backdoor Attacks in Vertical Federated Learning via Mutual Information Regularization","display_name":"Defending Against Inference and Backdoor Attacks in Vertical Federated Learning via Mutual Information Regularization","publication_year":2024,"publication_date":"2024-12-15","ids":{"openalex":"https://openalex.org/W4406457997","doi":"https://doi.org/10.1109/bigdata62323.2024.10825545"},"language":"en","primary_location":{"id":"doi:10.1109/bigdata62323.2024.10825545","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bigdata62323.2024.10825545","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE International Conference on Big Data (BigData)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5056834945","display_name":"Tianyuan Zou","orcid":null},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tianyuan Zou","raw_affiliation_strings":["Tsinghua University,Institute for AI Industry Research,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University,Institute for AI Industry Research,Beijing,China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100693653","display_name":"Yang Liu","orcid":"https://orcid.org/0000-0002-4393-1791"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yang Liu","raw_affiliation_strings":["Tsinghua University,Institute for AI Industry Research,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University,Institute for AI Industry Research,Beijing,China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5107230366","display_name":"Xiaozhou Ye","orcid":"https://orcid.org/0000-0002-4925-5907"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xiaozhou Ye","raw_affiliation_strings":["AsiaInfo Technologies,Shanghai,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"AsiaInfo Technologies,Shanghai,China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016317255","display_name":"Ye Ouyang","orcid":"https://orcid.org/0000-0002-6195-6415"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ye Ouyang","raw_affiliation_strings":["AsiaInfo Technologies,Shanghai,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"AsiaInfo Technologies,Shanghai,China","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100663312","display_name":"Ya-Qin Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ya-Qin Zhang","raw_affiliation_strings":["Tsinghua University,Institute for AI Industry Research,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University,Institute for AI Industry Research,Beijing,China","institution_ids":["https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"8098","last_page":"8107"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9947999715805054,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9725611209869385},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.6808437705039978},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6469265222549438},{"id":"https://openalex.org/keywords/regularization","display_name":"Regularization (linguistics)","score":0.5720626711845398},{"id":"https://openalex.org/keywords/mutual-information","display_name":"Mutual information","score":0.521761953830719},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4733215272426605},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3619579076766968}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9725611209869385},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.6808437705039978},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6469265222549438},{"id":"https://openalex.org/C2776135515","wikidata":"https://www.wikidata.org/wiki/Q17143721","display_name":"Regularization (linguistics)","level":2,"score":0.5720626711845398},{"id":"https://openalex.org/C152139883","wikidata":"https://www.wikidata.org/wiki/Q252973","display_name":"Mutual information","level":2,"score":0.521761953830719},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4733215272426605},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3619579076766968}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/bigdata62323.2024.10825545","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bigdata62323.2024.10825545","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE International Conference on Big Data (BigData)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Reduced inequalities","id":"https://metadata.un.org/sdg/10","score":0.41999998688697815}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":79,"referenced_works":["https://openalex.org/W2024922353","https://openalex.org/W2053637704","https://openalex.org/W2283463896","https://openalex.org/W2592232824","https://openalex.org/W2606891064","https://openalex.org/W2911978475","https://openalex.org/W2912213068","https://openalex.org/W2950306824","https://openalex.org/W2951059495","https://openalex.org/W2964184826","https://openalex.org/W2970408908","https://openalex.org/W2990138404","https://openalex.org/W3041668106","https://openalex.org/W3083445965","https://openalex.org/W3086532969","https://openalex.org/W3092642435","https://openalex.org/W3094542121","https://openalex.org/W3098656025","https://openalex.org/W3101036738","https://openalex.org/W3103401990","https://openalex.org/W3103989228","https://openalex.org/W3109630125","https://openalex.org/W3118608800","https://openalex.org/W3164712068","https://openalex.org/W3177170788","https://openalex.org/W3185214297","https://openalex.org/W3206887799","https://openalex.org/W3208814888","https://openalex.org/W3212471751","https://openalex.org/W3214142560","https://openalex.org/W4220928404","https://openalex.org/W4221104046","https://openalex.org/W4221141634","https://openalex.org/W4221146017","https://openalex.org/W4221152728","https://openalex.org/W4230874317","https://openalex.org/W4285751090","https://openalex.org/W4285821506","https://openalex.org/W4286225556","https://openalex.org/W4296207781","https://openalex.org/W4306309293","https://openalex.org/W4312815981","https://openalex.org/W4375859938","https://openalex.org/W4385656628","https://openalex.org/W4388754504","https://openalex.org/W4391020754","https://openalex.org/W4391093346","https://openalex.org/W4391424621","https://openalex.org/W4391641509","https://openalex.org/W4394972260","https://openalex.org/W4399837571","https://openalex.org/W4401540313","https://openalex.org/W6637108112","https://openalex.org/W6640425456","https://openalex.org/W6695838908","https://openalex.org/W6729906282","https://openalex.org/W6746839373","https://openalex.org/W6763664782","https://openalex.org/W6764838729","https://openalex.org/W6780246824","https://openalex.org/W6782671307","https://openalex.org/W6783392303","https://openalex.org/W6784001418","https://openalex.org/W6784239669","https://openalex.org/W6786060194","https://openalex.org/W6787972765","https://openalex.org/W6790338629","https://openalex.org/W6791120749","https://openalex.org/W6799371539","https://openalex.org/W6802646539","https://openalex.org/W6803930324","https://openalex.org/W6810057099","https://openalex.org/W6810606160","https://openalex.org/W6810931898","https://openalex.org/W6840579860","https://openalex.org/W6845652446","https://openalex.org/W6864882997","https://openalex.org/W6869814233","https://openalex.org/W6948004256"],"related_works":["https://openalex.org/W4320031223","https://openalex.org/W4200629851","https://openalex.org/W4281902577","https://openalex.org/W4309417370","https://openalex.org/W4292107232","https://openalex.org/W3009072493","https://openalex.org/W4386080799","https://openalex.org/W3140988292","https://openalex.org/W4317672133","https://openalex.org/W4401407399"],"abstract_inverted_index":{"Vertical":[0],"Federated":[1],"Learning":[2],"(VFL)":[3],"is":[4],"widely":[5],"utilized":[6],"in":[7,30,83,109,156,172],"real-world":[8],"applications":[9],"to":[10,71,78,130,148,188],"enable":[11],"collaborative":[12],"learning":[13],"while":[14],"protecting":[15],"local":[16],"data":[17,126],"and":[18,101,127,139,145,164,182],"models.":[19],"However,":[20],"previous":[21],"works":[22],"show":[23],"that":[24],"parties":[25],"without":[26],"labels":[27,45],"(passive":[28],"parties)":[29],"VFL":[31,72,110],"can":[32,55],"infer":[33,57],"the":[34,42,120,150],"sensitive":[35,58],"label":[36,163],"or":[37,48,60,86],"feature":[38,59,165],"information":[39,62,122],"owned":[40],"by":[41],"party":[43,54],"with":[44,169],"(active":[46],"party),":[47],"execute":[49],"backdoor":[50,170],"attacks.":[51],"Meanwhile,":[52],"active":[53],"also":[56],"attribute":[61],"from":[63],"passive":[64],"party.":[65],"All":[66],"these":[67],"pose":[68],"great":[69],"challenges":[70],"systems.":[73],"Former":[74],"defense":[75,184],"methods":[76],"tend":[77],"experience":[79],"either":[80],"a":[81,98,102,132,159,180],"loss":[82],"overall":[84],"effectiveness":[85,151],"are":[87],"too":[88],"specialized":[89],"for":[90,105],"specific":[91,190],"tasks.":[92],"In":[93],"this":[94],"work,":[95],"we":[96],"propose":[97],"novel":[99],"method":[100],"unified":[103],"framework":[104,155],"defending":[106,157],"various":[107],"attacks":[108,171],"altogether,":[111],"namely":[112],"Mutual":[113],"Information":[114],"Regularization":[115],"Defense":[116],"(MID),":[117],"which":[118],"limits":[119],"mutual":[121],"between":[123,136],"private":[124],"raw":[125],"intermediate":[128],"outputs":[129],"achieve":[131],"consistently":[133],"better":[134],"trade-off":[135],"model":[137],"utility":[138],"privacy.":[140],"We":[141],"provide":[142],"both":[143],"theoretical":[144],"experimental":[146],"evidence":[147],"confirm":[149],"of":[152,162],"our":[153],"MID":[154],"against":[158],"wide":[160],"range":[161],"inference":[166],"attacks,":[167],"along":[168],"VFL.":[173],"These":[174],"showcase":[175],"its":[176],"promising":[177],"potential":[178],"as":[179],"versatile":[181],"effective":[183],"mechanism,":[185],"not":[186],"tied":[187],"any":[189],"task.":[191]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}