{"id":"https://openalex.org/W4413278419","doi":"https://doi.org/10.1109/icip55913.2025.11084627","title":"Anti-FT: Towards Practical Deep Leakage From Gradients","display_name":"Anti-FT: Towards Practical Deep Leakage From Gradients","publication_year":2025,"publication_date":"2025-08-18","ids":{"openalex":"https://openalex.org/W4413278419","doi":"https://doi.org/10.1109/icip55913.2025.11084627"},"language":"en","primary_location":{"id":"doi:10.1109/icip55913.2025.11084627","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icip55913.2025.11084627","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE International Conference on Image Processing (ICIP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101824364","display_name":"Linghui Zhu","orcid":"https://orcid.org/0000-0002-6476-7943"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Linghui Zhu","raw_affiliation_strings":["Tsinghua University,Tsinghua Shenzhen International Graduate School"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University,Tsinghua Shenzhen International Graduate School","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100346318","display_name":"Yiming Li","orcid":"https://orcid.org/0000-0001-7530-7988"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Yiming Li","raw_affiliation_strings":["Nanyang Technological University,College of Computing and Data Science"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanyang Technological University,College of Computing and Data Science","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5119330240","display_name":"Haiqin Weng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Haiqin Weng","raw_affiliation_strings":["Ant Group"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ant Group","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100351061","display_name":"Yan Liu","orcid":"https://orcid.org/0000-0002-2523-997X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yan Liu","raw_affiliation_strings":["Ant Group"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ant Group","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034104790","display_name":"Shu\u2010Tao Xia","orcid":"https://orcid.org/0000-0002-8639-982X"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shu-Tao Xia","raw_affiliation_strings":["Tsinghua University,Tsinghua Shenzhen International Graduate School"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University,Tsinghua Shenzhen International Graduate School","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101821088","display_name":"Zhi Wang","orcid":"https://orcid.org/0000-0002-5859-5698"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhi Wang","raw_affiliation_strings":["Tsinghua University,Tsinghua Shenzhen International Graduate School"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University,Tsinghua Shenzhen International Graduate School","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.22596358,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"2606","last_page":"2611"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10558","display_name":"Advancements in Semiconductor Devices and Circuit Design","score":0.8371999859809875,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10558","display_name":"Advancements in Semiconductor Devices and Circuit Design","score":0.8371999859809875,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11338","display_name":"Advancements in Photolithography Techniques","score":0.7494000196456909,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/leakage","display_name":"Leakage (economics)","score":0.7335137128829956},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5081791877746582}],"concepts":[{"id":"https://openalex.org/C2777042071","wikidata":"https://www.wikidata.org/wiki/Q6509304","display_name":"Leakage (economics)","level":2,"score":0.7335137128829956},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5081791877746582},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C139719470","wikidata":"https://www.wikidata.org/wiki/Q39680","display_name":"Macroeconomics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icip55913.2025.11084627","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icip55913.2025.11084627","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE International Conference on Image Processing (ICIP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/13","display_name":"Climate action","score":0.8600000143051147}],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320337504","display_name":"Research and Development","ror":"https://ror.org/027s68j25"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W1836465849","https://openalex.org/W1873763122","https://openalex.org/W2077217970","https://openalex.org/W2103559027","https://openalex.org/W2108598243","https://openalex.org/W2133665775","https://openalex.org/W2194775991","https://openalex.org/W2895550533","https://openalex.org/W2911978475","https://openalex.org/W2912213068","https://openalex.org/W2970408908","https://openalex.org/W3159069780","https://openalex.org/W3175192640","https://openalex.org/W3205428167","https://openalex.org/W4205228770","https://openalex.org/W4210728809","https://openalex.org/W4221162964","https://openalex.org/W4225289116","https://openalex.org/W4312809802","https://openalex.org/W4402264897","https://openalex.org/W4403908451"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Federated":[0],"learning":[1],"is":[2,78],"usually":[3],"regarded":[4],"as":[5],"a":[6,18,31,68,133,161],"privacy-preserving":[7],"training":[8,19],"paradigm":[9],"for":[10],"it":[11,159],"enables":[12],"multiple":[13],"clients":[14,42],"to":[15,67,109,120,184],"participate":[16],"in":[17,71,102],"task":[20],"without":[21],"sharing":[22],"their":[23],"private":[24,37],"data.":[25],"However,":[26],"recent":[27],"studies":[28],"revealed":[29],"that":[30,98],"malicious":[32],"server":[33],"can":[34,146],"still":[35],"recover":[36],"data":[38],"from":[39,51,89],"the":[40,45,63,75,90,93,103,112,115,144,148,154,176],"victim":[41],"based":[43,61],"on":[44,62,128,171],"shared":[46],"gradients":[47,52],"via":[48],"deep":[49],"leakage":[50],"(DLG).":[53],"Currently,":[54],"almost":[55],"all":[56,100],"DLG":[57,87,110,125,137,151],"attacks":[58,88],"are":[59,106,169,189],"designed":[60],"average":[64],"loss,":[65],"leading":[66],"significant":[69],"decrease":[70],"attack":[72],"efficiency":[73],"when":[74],"batch":[76,105],"size":[77],"greater":[79],"than":[80],"1.":[81],"In":[82],"this":[83],"paper,":[84],"we":[85,131],"revisit":[86],"perspective":[91],"of":[92,150,178],"loss":[94,117],"function.":[95],"We":[96],"reveal":[97],"not":[99],"samples":[101,164],"target":[104],"equally":[107],"susceptible":[108],"attacks:":[111],"sample":[113],"with":[114,160],"highest":[116],"value":[118],"tends":[119],"be":[121],"easily":[122],"recovered":[123],"by":[124,152],"attacks.":[126],"Based":[127],"these":[129],"observations,":[130],"propose":[132],"simple":[134],"yet":[135],"effective":[136],"method":[138,180],"under":[139],"practical":[140],"FL":[141],"settings.":[142],"Specifically,":[143],"adversaries":[145],"enhance":[147],"effectiveness":[149,177],"perturbing":[153],"global":[155],"model":[156],"through":[157],"finetuning":[158],"few":[162],"mislabeled":[163],"(dubbed":[165],"\u2018Anti-FT\u2019).":[166],"Extensive":[167],"experiments":[168],"conducted":[170],"benchmark":[172],"datasets,":[173],"which":[174],"verify":[175],"our":[179],"and":[181],"its":[182],"resistance":[183],"potential":[185],"defenses.":[186],"The":[187],"codes":[188],"available":[190],"at":[191],"https://github.com/zlh-thu/anti-finetune.":[192]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}