{"id":"https://openalex.org/W4285821506","doi":"https://doi.org/10.1109/tbdata.2022.3192121","title":"Defending Batch-Level Label Inference and Replacement Attacks in Vertical Federated Learning","display_name":"Defending Batch-Level Label Inference and Replacement Attacks in Vertical Federated Learning","publication_year":2022,"publication_date":"2022-07-19","ids":{"openalex":"https://openalex.org/W4285821506","doi":"https://doi.org/10.1109/tbdata.2022.3192121"},"language":"en","primary_location":{"id":"doi:10.1109/tbdata.2022.3192121","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tbdata.2022.3192121","pdf_url":null,"source":{"id":"https://openalex.org/S2491400915","display_name":"IEEE Transactions on Big Data","issn_l":"2332-7790","issn":["2332-7790","2372-2096"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Big Data","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5055567810","display_name":"Tianyuan Zou","orcid":"https://orcid.org/0000-0002-6068-2635"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tianyuan Zou","raw_affiliation_strings":["Computer Science and Technology, Tsinghua University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-6068-2635","affiliations":[{"raw_affiliation_string":"Computer Science and Technology, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100356161","display_name":"Yang Liu","orcid":"https://orcid.org/0000-0003-3800-3533"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yang Liu","raw_affiliation_strings":["Institute for AI Industry Research (AIR) at Tsinghua University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-3800-3533","affiliations":[{"raw_affiliation_string":"Institute for AI Industry Research (AIR) at Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100615074","display_name":"Yan Kang","orcid":"https://orcid.org/0000-0002-3439-551X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yan Kang","raw_affiliation_strings":["Webank, Shenzhen, China","AI, Webank, Shenzhen, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Webank, Shenzhen, China","institution_ids":[]},{"raw_affiliation_string":"AI, Webank, Shenzhen, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115600517","display_name":"Wenhan Liu","orcid":"https://orcid.org/0000-0003-1236-2490"},"institutions":[{"id":"https://openalex.org/I154099455","display_name":"Shandong University","ror":"https://ror.org/0207yh398","country_code":"CN","type":"education","lineage":["https://openalex.org/I154099455"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenhan Liu","raw_affiliation_strings":["Shandong University, Weihai, China","shan dong da xue wei hai fen xiao, Shenzhen, Guangdong, China"],"raw_orcid":"https://orcid.org/0000-0003-1236-2490","affiliations":[{"raw_affiliation_string":"Shandong University, Weihai, China","institution_ids":["https://openalex.org/I154099455"]},{"raw_affiliation_string":"shan dong da xue wei hai fen xiao, Shenzhen, Guangdong, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081652296","display_name":"Yuanqin He","orcid":"https://orcid.org/0000-0001-5468-6608"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yuanqin He","raw_affiliation_strings":["Webank, Shenzhen, China","AI, Webank, Shenzhen, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Webank, Shenzhen, China","institution_ids":[]},{"raw_affiliation_string":"AI, Webank, Shenzhen, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108740347","display_name":"Zhihao Yi","orcid":"https://orcid.org/0000-0002-2381-8660"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhihao Yi","raw_affiliation_strings":["Webank, Shenzhen, China","Webank, Shenzhen, Guangdong, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Webank, Shenzhen, China","institution_ids":[]},{"raw_affiliation_string":"Webank, Shenzhen, Guangdong, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100636286","display_name":"Qiang Yang","orcid":"https://orcid.org/0000-0001-5059-8360"},"institutions":[{"id":"https://openalex.org/I200769079","display_name":"Hong Kong University of Science and Technology","ror":"https://ror.org/00q4vv597","country_code":"HK","type":"education","lineage":["https://openalex.org/I200769079"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Qiang Yang","raw_affiliation_strings":["Webank, Shenzhen, China","Computer Science and Engineering, Hong Kong University of Science and Technology, Kowloon, Hong Kong"],"raw_orcid":"https://orcid.org/0000-0001-5059-8360","affiliations":[{"raw_affiliation_string":"Webank, Shenzhen, China","institution_ids":[]},{"raw_affiliation_string":"Computer Science and Engineering, Hong Kong University of Science and Technology, Kowloon, Hong Kong","institution_ids":["https://openalex.org/I200769079"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5107228559","display_name":"Ya-Qin Zhang","orcid":"https://orcid.org/0000-0003-4515-6212"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ya-Qin Zhang","raw_affiliation_strings":["Institute for AI Industry Research (AIR) at Tsinghua University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-4515-6212","affiliations":[{"raw_affiliation_string":"Institute for AI Industry Research (AIR) at Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":5.5676,"has_fulltext":false,"cited_by_count":54,"citation_normalized_percentile":{"value":0.96479503,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":"10","issue":"6","first_page":"1016","last_page":"1027"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9898999929428101,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11612","display_name":"Stochastic Gradient Optimization Techniques","score":0.989799976348877,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8066600561141968},{"id":"https://openalex.org/keywords/autoencoder","display_name":"Autoencoder","score":0.7787488698959351},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.707645058631897},{"id":"https://openalex.org/keywords/homomorphic-encryption","display_name":"Homomorphic encryption","score":0.6717904806137085},{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.6553956866264343},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.6116796731948853},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4436514973640442},{"id":"https://openalex.org/keywords/entropy","display_name":"Entropy (arrow of time)","score":0.4288327097892761},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4120897054672241},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3642999231815338},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.3402841091156006}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8066600561141968},{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.7787488698959351},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.707645058631897},{"id":"https://openalex.org/C158338273","wikidata":"https://www.wikidata.org/wiki/Q2154943","display_name":"Homomorphic encryption","level":3,"score":0.6717904806137085},{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.6553956866264343},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.6116796731948853},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4436514973640442},{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.4288327097892761},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4120897054672241},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3642999231815338},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.3402841091156006},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tbdata.2022.3192121","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tbdata.2022.3192121","pdf_url":null,"source":{"id":"https://openalex.org/S2491400915","display_name":"IEEE Transactions on Big Data","issn_l":"2332-7790","issn":["2332-7790","2372-2096"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Big Data","raw_type":"journal-article"},{"id":"pmh:oai:repository.hkust.edu.hk:1783.1-119762","is_oa":false,"landing_page_url":"http://repository.hkust.edu.hk/ir/Record/1783.1-119762","pdf_url":null,"source":{"id":"https://openalex.org/S4306401796","display_name":"Rare & Special e-Zone (The Hong Kong University of Science and Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I200769079","host_organization_name":"Hong Kong University of Science and Technology","host_organization_lineage":["https://openalex.org/I200769079"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.7699999809265137,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":46,"referenced_works":["https://openalex.org/W150223756","https://openalex.org/W2027595342","https://openalex.org/W2109426455","https://openalex.org/W2170334586","https://openalex.org/W2283463896","https://openalex.org/W2606882085","https://openalex.org/W2606891064","https://openalex.org/W2613563955","https://openalex.org/W2748789698","https://openalex.org/W2774000609","https://openalex.org/W2810065831","https://openalex.org/W2912213068","https://openalex.org/W2919293260","https://openalex.org/W2951059495","https://openalex.org/W2960318545","https://openalex.org/W2970408908","https://openalex.org/W2990595670","https://openalex.org/W3000479830","https://openalex.org/W3041668106","https://openalex.org/W3092642435","https://openalex.org/W3101036738","https://openalex.org/W3118608800","https://openalex.org/W3130421912","https://openalex.org/W3164712068","https://openalex.org/W3175192640","https://openalex.org/W3175386621","https://openalex.org/W3206887799","https://openalex.org/W4206320562","https://openalex.org/W4230874317","https://openalex.org/W4296207781","https://openalex.org/W6606067566","https://openalex.org/W6695838908","https://openalex.org/W6743581629","https://openalex.org/W6746839373","https://openalex.org/W6752600739","https://openalex.org/W6756840679","https://openalex.org/W6764838729","https://openalex.org/W6766107292","https://openalex.org/W6771533808","https://openalex.org/W6773039429","https://openalex.org/W6780246824","https://openalex.org/W6784001418","https://openalex.org/W6784239669","https://openalex.org/W6787972765","https://openalex.org/W6791120749","https://openalex.org/W6802646539"],"related_works":["https://openalex.org/W4320031223","https://openalex.org/W3015678314","https://openalex.org/W4281902577","https://openalex.org/W4200629851","https://openalex.org/W4386185023","https://openalex.org/W3009072493","https://openalex.org/W4317672133","https://openalex.org/W3140988292","https://openalex.org/W4386080799","https://openalex.org/W4382469137"],"abstract_inverted_index":{"In":[0,59],"a":[1,120],"vertical":[2],"federated":[3],"learning":[4],"(VFL)":[5],"scenario":[6],"where":[7],"features":[8],"and":[9,136,161],"models":[10],"are":[11],"split":[12],"into":[13],"different":[14],"parties,":[15],"it":[16],"has":[17],"been":[18],"shown":[19],"that":[20,32,64,87,99,163],"sample-level":[21,44],"gradient":[22,79],"information":[23,31,89],"can":[24,71,102],"be":[25,34,73,104],"exploited":[26],"to":[27,42,56,83,92,139],"deduce":[28],"crucial":[29],"label":[30,150,178],"should":[33],"kept":[35],"secret.":[36],"An":[37],"immediate":[38],"defense":[39,122],"strategy":[40],"is":[41,90,132],"protect":[43],"messages":[45,111],"communicated":[46,110],"with":[47,66,75,147],"Homomorphic":[48],"Encryption":[49],"(HE),":[50],"exposing":[51],"only":[52],"batch-averaged":[53,88],"local":[54],"gradients":[55],"each":[57],"party.":[58],"this":[60],"paper,":[61],"we":[62,118,152],"show":[63,98,162],"even":[65],"HE-protected":[67],"communication,":[68],"private":[69],"labels":[70],"still":[72],"reconstructed":[74],"high":[76],"accuracy":[77,170],"by":[78,106],"inversion":[80],"attack,":[81],"contrary":[82],"the":[84,167],"common":[85],"belief":[86],"safe":[91],"share":[93],"under":[94],"encryption.":[95],"We":[96],"then":[97],"backdoor":[100],"attack":[101],"also":[103],"conducted":[105],"directly":[107],"replacing":[108],"encrypted":[109],"without":[112],"decryption.":[113],"To":[114,143],"tackle":[115],"these":[116],"attacks,":[117],"propose":[119],"novel":[121],"method,":[123],"Confusional":[124],"AutoEncoder":[125],"(termed":[126,156],"<bold":[127,157],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[128,158],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">CAE</b>":[129],"),":[130,160],"which":[131],"based":[133],"on":[134],"autoencoder":[135],"entropy":[137],"regularization":[138],"disguise":[140],"true":[141],"labels.":[142],"further":[144],"defend":[145],"attackers":[146],"sufficient":[148],"prior":[149],"knowledge,":[151],"introduce":[153],"DiscreteSGD-enhanced":[154],"CAE":[155],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">DCAE</b>":[159],"DCAE":[164],"significantly":[165],"boosts":[166],"main":[168],"task":[169],"than":[171],"other":[172],"known":[173],"methods":[174],"when":[175],"defending":[176],"various":[177],"inference":[179],"attacks.":[180]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":18},{"year":2024,"cited_by_count":16},{"year":2023,"cited_by_count":13},{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-19T07:52:34.831488","created_date":"2025-10-10T00:00:00"}