{"id":"https://openalex.org/W4405717542","doi":"https://doi.org/10.1109/tdsc.2024.3521451","title":"Feature Reconstruction Attacks and Countermeasures of DNN Training in Vertical Federated Learning","display_name":"Feature Reconstruction Attacks and Countermeasures of DNN Training in Vertical Federated Learning","publication_year":2024,"publication_date":"2024-12-23","ids":{"openalex":"https://openalex.org/W4405717542","doi":"https://doi.org/10.1109/tdsc.2024.3521451"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2024.3521451","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2024.3521451","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5059839177","display_name":"Peng Ye","orcid":"https://orcid.org/0000-0001-6287-6356"},"institutions":[{"id":"https://openalex.org/I200769079","display_name":"Hong Kong University of Science and Technology","ror":"https://ror.org/00q4vv597","country_code":"HK","type":"education","lineage":["https://openalex.org/I200769079"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Peng Ye","raw_affiliation_strings":["Department of Computer Science and Engineering, Hong Kong University of Science and Technology, Hong Kong"],"raw_orcid":"https://orcid.org/0000-0001-6287-6356","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Hong Kong University of Science and Technology, Hong Kong","institution_ids":["https://openalex.org/I200769079"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031038452","display_name":"Zhifeng Jiang","orcid":"https://orcid.org/0000-0002-7024-441X"},"institutions":[{"id":"https://openalex.org/I200769079","display_name":"Hong Kong University of Science and Technology","ror":"https://ror.org/00q4vv597","country_code":"HK","type":"education","lineage":["https://openalex.org/I200769079"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Zhifeng Jiang","raw_affiliation_strings":["Department of Computer Science and Engineering, Hong Kong University of Science and Technology, Hong Kong"],"raw_orcid":"https://orcid.org/0000-0002-7024-441X","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Hong Kong University of Science and Technology, Hong Kong","institution_ids":["https://openalex.org/I200769079"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100391928","display_name":"Wei Wang","orcid":"https://orcid.org/0000-0002-2990-229X"},"institutions":[{"id":"https://openalex.org/I200769079","display_name":"Hong Kong University of Science and Technology","ror":"https://ror.org/00q4vv597","country_code":"HK","type":"education","lineage":["https://openalex.org/I200769079"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Wei Wang","raw_affiliation_strings":["Department of Computer Science and Engineering, Hong Kong University of Science and Technology, Hong Kong"],"raw_orcid":"https://orcid.org/0000-0002-2990-229X","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Hong Kong University of Science and Technology, Hong Kong","institution_ids":["https://openalex.org/I200769079"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100374506","display_name":"Bo Li","orcid":"https://orcid.org/0000-0003-2083-9105"},"institutions":[{"id":"https://openalex.org/I185261750","display_name":"University of Toronto","ror":"https://ror.org/03dbr7087","country_code":"CA","type":"education","lineage":["https://openalex.org/I185261750"]},{"id":"https://openalex.org/I200769079","display_name":"Hong Kong University of Science and Technology","ror":"https://ror.org/00q4vv597","country_code":"HK","type":"education","lineage":["https://openalex.org/I200769079"]}],"countries":["CA","HK"],"is_corresponding":false,"raw_author_name":"Bo Li","raw_affiliation_strings":["Department of Computer Science and Engineering, Hong Kong University of Science and Technology, Hong Kong","Department of Electrical and Computer Engineering, University of Toronto, Toronto, ON, Canada"],"raw_orcid":"https://orcid.org/0000-0003-2083-9105","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Hong Kong University of Science and Technology, Hong Kong","institution_ids":["https://openalex.org/I200769079"]},{"raw_affiliation_string":"Department of Electrical and Computer Engineering, University of Toronto, Toronto, ON, Canada","institution_ids":["https://openalex.org/I185261750"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5083596391","display_name":"Baochun Li","orcid":"https://orcid.org/0000-0003-2404-0974"},"institutions":[{"id":"https://openalex.org/I185261750","display_name":"University of Toronto","ror":"https://ror.org/03dbr7087","country_code":"CA","type":"education","lineage":["https://openalex.org/I185261750"]},{"id":"https://openalex.org/I200769079","display_name":"Hong Kong University of Science and Technology","ror":"https://ror.org/00q4vv597","country_code":"HK","type":"education","lineage":["https://openalex.org/I200769079"]}],"countries":["CA","HK"],"is_corresponding":false,"raw_author_name":"Baochun Li","raw_affiliation_strings":["Department of Computer Science and Engineering, Hong Kong University of Science and Technology, Hong Kong","Department of Electrical and Computer Engineering, University of Toronto, Toronto, ON, Canada","Department of Electrical and Computer Engineering, University of Toronto, Canada"],"raw_orcid":"https://orcid.org/0000-0003-2404-0974","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Hong Kong University of Science and Technology, Hong Kong","institution_ids":["https://openalex.org/I200769079"]},{"raw_affiliation_string":"Department of Electrical and Computer Engineering, University of Toronto, Toronto, ON, Canada","institution_ids":["https://openalex.org/I185261750"]},{"raw_affiliation_string":"Department of Electrical and Computer Engineering, University of Toronto, Canada","institution_ids":["https://openalex.org/I185261750"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.4606,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.84976073,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":"22","issue":"3","first_page":"2659","last_page":"2669"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9883000254631042,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9883000254631042,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9819999933242798,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8393927812576294},{"id":"https://openalex.org/keywords/training","display_name":"Training (meteorology)","score":0.6918007731437683},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.631145715713501},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4860461354255676},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.4236268401145935},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.38871094584465027},{"id":"https://openalex.org/keywords/multimedia","display_name":"Multimedia","score":0.3639565706253052}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8393927812576294},{"id":"https://openalex.org/C2777211547","wikidata":"https://www.wikidata.org/wiki/Q17141490","display_name":"Training (meteorology)","level":2,"score":0.6918007731437683},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.631145715713501},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4860461354255676},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.4236268401145935},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.38871094584465027},{"id":"https://openalex.org/C49774154","wikidata":"https://www.wikidata.org/wiki/Q131765","display_name":"Multimedia","level":1,"score":0.3639565706253052},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C153294291","wikidata":"https://www.wikidata.org/wiki/Q25261","display_name":"Meteorology","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tdsc.2024.3521451","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2024.3521451","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},{"id":"pmh:oai:repository.hkust.edu.hk:1783.1-146814","is_oa":false,"landing_page_url":"http://repository.hkust.edu.hk/ir/Record/1783.1-146814","pdf_url":null,"source":{"id":"https://openalex.org/S4306401796","display_name":"Rare & Special e-Zone (The Hong Kong University of Science and Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I200769079","host_organization_name":"Hong Kong University of Science and Technology","host_organization_lineage":["https://openalex.org/I200769079"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Climate action","score":0.41999998688697815,"id":"https://metadata.un.org/sdg/13"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W1498436455","https://openalex.org/W1988115241","https://openalex.org/W2015627422","https://openalex.org/W2085988980","https://openalex.org/W2130486630","https://openalex.org/W2401610261","https://openalex.org/W2903890850","https://openalex.org/W2912213068","https://openalex.org/W2951059495","https://openalex.org/W3094542121","https://openalex.org/W3177196641","https://openalex.org/W4206320562","https://openalex.org/W4220928404","https://openalex.org/W4244670803","https://openalex.org/W4255900881","https://openalex.org/W4281848858","https://openalex.org/W6631190155","https://openalex.org/W6728757088","https://openalex.org/W6766978945","https://openalex.org/W6786060194","https://openalex.org/W6791120749","https://openalex.org/W6792742759","https://openalex.org/W6796538260","https://openalex.org/W6840813031","https://openalex.org/W6841431707","https://openalex.org/W6927807963"],"related_works":["https://openalex.org/W230091440","https://openalex.org/W2233261550","https://openalex.org/W2810751659","https://openalex.org/W258997015","https://openalex.org/W2997094352","https://openalex.org/W3216976533","https://openalex.org/W100620283","https://openalex.org/W2495260952","https://openalex.org/W4366179611","https://openalex.org/W2996078371"],"abstract_inverted_index":{"Federated":[0],"learning":[1],"(FL)":[2],"has":[3],"increasingly":[4],"been":[5],"deployed,":[6],"in":[7,99,199],"its":[8],"vertical":[9,19],"form,":[10],"among":[11],"organizations":[12],"to":[13,131,151],"facilitate":[14],"secure":[15],"collaborative":[16],"training.":[17],"In":[18],"FL":[20],"(VFL),":[21],"participants":[22,51],"hold":[23],"disjoint":[24],"features":[25,125],"of":[26,30,96,119,126],"the":[27,40,53,92,113,120,138],"same":[28],"set":[29],"sample":[31],"instances.":[32],"The":[33,191],"one":[34],"with":[35,49,123,156,203],"<italic":[36,41,54,62,66],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[37,42,55,63,67],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">labels</i>":[38],"-":[39,52],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">active":[43],"party</i>,":[44],"initiates":[45],"training":[46,83,98],"and":[47,65,109,149,178],"interacts":[48],"other":[50],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">passive":[56],"parties</i>.":[57],"It":[58],"remains":[59,145],"largely":[60],"unknown":[61],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">whether</i>":[64],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">how</i>":[68],"an":[69,157],"active":[70,108],"party":[71,115],"can":[72],"extract":[73],"private":[74],"feature":[75,93,139,165,171,196],"data":[76],"owned":[77],"by":[78,174],"passive":[79,110,114],"parties,":[80,111],"especially":[81],"when":[82],"deep":[84],"neural":[85],"network":[86],"(DNN)":[87],"models.":[88],"This":[89],"work":[90],"examines":[91],"security":[94],"problem":[95],"DNN":[97,104],"VFL.":[100],"We":[101,167],"consider":[102],"a":[103,117,153,169],"model":[105,207],"partitioned":[106],"between":[107],"where":[112],"holds":[116],"subset":[118],"input":[121,180],"layer":[122],"some":[124],"binary":[127],"values.":[128,190],"Though":[129],"proved":[130],"be":[132],"NP-hard.":[133],"we":[134],"demonstrate":[135],"that,":[136],"unless":[137],"dimension":[140],"is":[141],"exceedingly":[142],"large,":[143],"it":[144,194],"feasible,":[146],"both":[147],"theoretically":[148],"practically,":[150],"launch":[152],"reconstruction":[154,185,197],"attack":[155,198],"efficient":[158],"search-based":[159],"algorithm":[160],"that":[161],"prevails":[162],"over":[163],"current":[164],"protection.":[166],"propose":[168],"novel":[170],"protection":[172],"scheme":[173],"perturbing":[175],"intermediate":[176],"results":[177],"fabricated":[179],"features,":[181],"which":[182],"effectively":[183],"misleads":[184],"attacks":[186],"towards":[187],"pre-specified":[188],"random":[189],"evaluation":[192],"shows":[193],"sustains":[195],"various":[200],"VFL":[201],"applications":[202],"negligible":[204],"impact":[205],"on":[206],"performance.":[208]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}