{"id":"https://openalex.org/W4401691685","doi":"https://doi.org/10.1109/tdsc.2024.3445600","title":"Finding the PISTE: Towards Understanding Privacy Leaks in Vertical Federated Learning Systems","display_name":"Finding the PISTE: Towards Understanding Privacy Leaks in Vertical Federated Learning Systems","publication_year":2024,"publication_date":"2024-08-19","ids":{"openalex":"https://openalex.org/W4401691685","doi":"https://doi.org/10.1109/tdsc.2024.3445600"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2024.3445600","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2024.3445600","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://inria.hal.science/hal-04829817","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5002113782","display_name":"Xiangrui Xu","orcid":"https://orcid.org/0000-0003-3759-4706"},"institutions":[{"id":"https://openalex.org/I21193070","display_name":"Beijing Jiaotong University","ror":"https://ror.org/01yj56c84","country_code":"CN","type":"education","lineage":["https://openalex.org/I21193070"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiangrui Xu","raw_affiliation_strings":["Beijing Key Laboratory of Security and Privacy in Intelligent Transportation, Beijing Jiaotong University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-3759-4706","affiliations":[{"raw_affiliation_string":"Beijing Key Laboratory of Security and Privacy in Intelligent Transportation, Beijing Jiaotong University, Beijing, China","institution_ids":["https://openalex.org/I21193070"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100777576","display_name":"Wei Wang","orcid":"https://orcid.org/0000-0002-5974-1589"},"institutions":[{"id":"https://openalex.org/I21193070","display_name":"Beijing Jiaotong University","ror":"https://ror.org/01yj56c84","country_code":"CN","type":"education","lineage":["https://openalex.org/I21193070"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wei Wang","raw_affiliation_strings":["Beijing Key Laboratory of Security and Privacy in Intelligent Transportation, Beijing Jiaotong University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-5974-1589","affiliations":[{"raw_affiliation_string":"Beijing Key Laboratory of Security and Privacy in Intelligent Transportation, Beijing Jiaotong University, Beijing, China","institution_ids":["https://openalex.org/I21193070"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115595476","display_name":"Zheng Chen","orcid":null},"institutions":[{"id":"https://openalex.org/I21193070","display_name":"Beijing Jiaotong University","ror":"https://ror.org/01yj56c84","country_code":"CN","type":"education","lineage":["https://openalex.org/I21193070"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zheng Chen","raw_affiliation_strings":["Beijing Key Laboratory of Security and Privacy in Intelligent Transportation, Beijing Jiaotong University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing Key Laboratory of Security and Privacy in Intelligent Transportation, Beijing Jiaotong University, Beijing, China","institution_ids":["https://openalex.org/I21193070"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108156794","display_name":"Bin Wang","orcid":"https://orcid.org/0000-0002-3790-2708"},"institutions":[{"id":"https://openalex.org/I4210123185","display_name":"Zhejiang Lab","ror":"https://ror.org/02m2h7991","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210123185"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bin Wang","raw_affiliation_strings":["Zhejiang Key Laboratory of Artificial Intelligence of Things (AIoT) Network and Data Security, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-3790-2708","affiliations":[{"raw_affiliation_string":"Zhejiang Key Laboratory of Artificial Intelligence of Things (AIoT) Network and Data Security, Hangzhou, China","institution_ids":["https://openalex.org/I4210123185"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100323236","display_name":"Chao Li","orcid":"https://orcid.org/0000-0002-8832-0513"},"institutions":[{"id":"https://openalex.org/I21193070","display_name":"Beijing Jiaotong University","ror":"https://ror.org/01yj56c84","country_code":"CN","type":"education","lineage":["https://openalex.org/I21193070"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chao Li","raw_affiliation_strings":["Beijing Key Laboratory of Security and Privacy in Intelligent Transportation, Beijing Jiaotong University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-8832-0513","affiliations":[{"raw_affiliation_string":"Beijing Key Laboratory of Security and Privacy in Intelligent Transportation, Beijing Jiaotong University, Beijing, China","institution_ids":["https://openalex.org/I21193070"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019931070","display_name":"Li Duan","orcid":"https://orcid.org/0000-0002-1825-7416"},"institutions":[{"id":"https://openalex.org/I21193070","display_name":"Beijing Jiaotong University","ror":"https://ror.org/01yj56c84","country_code":"CN","type":"education","lineage":["https://openalex.org/I21193070"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Li Duan","raw_affiliation_strings":["Beijing Key Laboratory of Security and Privacy in Intelligent Transportation, Beijing Jiaotong University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-1825-7416","affiliations":[{"raw_affiliation_string":"Beijing Key Laboratory of Security and Privacy in Intelligent Transportation, Beijing Jiaotong University, Beijing, China","institution_ids":["https://openalex.org/I21193070"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059369429","display_name":"Zhen Han","orcid":"https://orcid.org/0000-0002-3688-873X"},"institutions":[{"id":"https://openalex.org/I21193070","display_name":"Beijing Jiaotong University","ror":"https://ror.org/01yj56c84","country_code":"CN","type":"education","lineage":["https://openalex.org/I21193070"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhen Han","raw_affiliation_strings":["Beijing Key Laboratory of Security and Privacy in Intelligent Transportation, Beijing Jiaotong University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-3688-873X","affiliations":[{"raw_affiliation_string":"Beijing Key Laboratory of Security and Privacy in Intelligent Transportation, Beijing Jiaotong University, Beijing, China","institution_ids":["https://openalex.org/I21193070"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5001937964","display_name":"Yufei Han","orcid":"https://orcid.org/0000-0002-9035-6718"},"institutions":[{"id":"https://openalex.org/I1326498283","display_name":"Institut national de recherche en sciences et technologies du num\u00e9rique","ror":"https://ror.org/02kvxyf05","country_code":"FR","type":"government","lineage":["https://openalex.org/I1326498283"]},{"id":"https://openalex.org/I4210133778","display_name":"Centre Inria de l'Universit\u00e9 de Rennes","ror":"https://ror.org/04040yw90","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1326498283","https://openalex.org/I4210133778"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Yufei Han","raw_affiliation_strings":["INRIA, Rennes, France","INRIA, Rennes, Bretagne, France"],"raw_orcid":"https://orcid.org/0000-0002-9035-6718","affiliations":[{"raw_affiliation_string":"INRIA, Rennes, France","institution_ids":["https://openalex.org/I4210133778","https://openalex.org/I1326498283"]},{"raw_affiliation_string":"INRIA, Rennes, Bretagne, France","institution_ids":["https://openalex.org/I4210133778","https://openalex.org/I1326498283"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.5006,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":{"value":0.90569423,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"22","issue":"2","first_page":"1537","last_page":"1550"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9959999918937683,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9959999918937683,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11612","display_name":"Stochastic Gradient Optimization Techniques","score":0.9846000075340271,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7144321203231812},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.46731799840927124},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.44026219844818115},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.4065853953361511}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7144321203231812},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.46731799840927124},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.44026219844818115},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.4065853953361511}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tdsc.2024.3445600","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2024.3445600","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},{"id":"pmh:oai:HAL:hal-04829817v1","is_oa":true,"landing_page_url":"https://inria.hal.science/hal-04829817","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing, 2024, pp.1-14. &#x27E8;10.1109/TDSC.2024.3445600&#x27E9;","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"pmh:oai:HAL:hal-04829817v1","is_oa":true,"landing_page_url":"https://inria.hal.science/hal-04829817","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing, 2024, pp.1-14. &#x27E8;10.1109/TDSC.2024.3445600&#x27E9;","raw_type":"info:eu-repo/semantics/article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1905834040","display_name":null,"funder_award_id":"L221014","funder_id":"https://openalex.org/F4320322919","funder_display_name":"Natural Science Foundation of Beijing Municipality"}],"funders":[{"id":"https://openalex.org/F4320322919","display_name":"Natural Science Foundation of Beijing Municipality","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":33,"referenced_works":["https://openalex.org/W2051267297","https://openalex.org/W2085988980","https://openalex.org/W2130486630","https://openalex.org/W2167372639","https://openalex.org/W2473418344","https://openalex.org/W2592232824","https://openalex.org/W2793423901","https://openalex.org/W2963303354","https://openalex.org/W2963456518","https://openalex.org/W2972112224","https://openalex.org/W3094542121","https://openalex.org/W3175192640","https://openalex.org/W3211753216","https://openalex.org/W3213008925","https://openalex.org/W4210630464","https://openalex.org/W4282971242","https://openalex.org/W4308410741","https://openalex.org/W4312126007","https://openalex.org/W4312722286","https://openalex.org/W4312815981","https://openalex.org/W4321437364","https://openalex.org/W4382237486","https://openalex.org/W4385653232","https://openalex.org/W4387665621","https://openalex.org/W4393103422","https://openalex.org/W4401864009","https://openalex.org/W4405184271","https://openalex.org/W6789723219","https://openalex.org/W6803930324","https://openalex.org/W6809700810","https://openalex.org/W6844417880","https://openalex.org/W6856444032","https://openalex.org/W6869404756"],"related_works":["https://openalex.org/W2584827882","https://openalex.org/W3195097297","https://openalex.org/W4225340788","https://openalex.org/W3038106605","https://openalex.org/W2513267613","https://openalex.org/W3049084372","https://openalex.org/W2528109871","https://openalex.org/W2940702331","https://openalex.org/W2905822832","https://openalex.org/W2240244939"],"abstract_inverted_index":{"Vertical":[0],"Federated":[1],"Learning":[2],"(VFL)":[3],"is":[4],"a":[5,35,112],"collaborative":[6],"learning":[7],"paradigm":[8],"where":[9],"participants":[10,24],"share":[11],"the":[12,18,42,45,60,72,79,91,94,172],"same":[13],"sample":[14],"space":[15],"while":[16],"splitting":[17],"feature":[19,30],"space.":[20],"In":[21,167],"VFL,":[22],"local":[23,48],"host":[25],"their":[26],"bottom":[27,52],"models":[28,53],"for":[29],"extraction":[31],"and":[32,51,57,66,96,101,132,140,183],"collaboratively":[33],"train":[34],"classifier":[36],"by":[37,71],"exchanging":[38],"intermediate":[39],"results":[40,152],"with":[41],"server":[43,95],"owning":[44],"labels.":[46],"Both":[47],"training":[49,100],"data":[50,130,182],"contain":[54],"privacy-sensitive":[55],"information":[56],"are":[58],"considered":[59],"intellectual":[61],"property":[62,133],"of":[63,74,82,115,156,178],"each":[64],"participant,":[65],"thus":[67],"should":[68],"be":[69],"protected":[70],"design":[73],"VFL.":[75,120],"Our":[76],"study":[77,170],"exposes":[78],"fundamental":[80],"susceptibility":[81],"VFL":[83,179],"systems":[84],"to":[85],"privacy":[86,116,124,162],"leaks,":[87],"which":[88],"arise":[89],"from":[90],"collaboration":[92],"between":[93],"clients":[97],"during":[98],"both":[99],"testing.":[102],"Based":[103],"on":[104,136,180],"our":[105,169],"findings,":[106],"we":[107],"propose":[108],"<italic":[109],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[110],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">PISTE</i>,":[111],"model-agnostic":[113],"framework":[114],"stealing":[117,163],"attacks":[118,135,164],"against":[119],"PISTE":[121],"delivers":[122],"three":[123,161],"inference":[125,134],"attacks,":[126],"i.e.,":[127],"model":[128,143,184],"stealing,":[129],"reconstruction,":[131],"five":[137],"benchmark":[138],"datasets":[139],"four":[141,148],"different":[142],"architectures.":[144],"We":[145],"further":[146],"discuss":[147],"potential":[149],"countermeasures.":[150],"Experimental":[151],"show":[153],"that":[154],"all":[155,160],"them":[157],"cannot":[158],"prevent":[159],"in":[165],"PISTE.":[166],"summary,":[168],"demonstrates":[171],"inherent":[173],"yet":[174],"rarely":[175],"uncovered":[176],"vulnerability":[177],"leaking":[181],"privacy.":[185]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":1}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}