{"id":"https://openalex.org/W4391641509","doi":"https://doi.org/10.1109/tifs.2024.3361813","title":"Vulnerabilities of Data Protection in Vertical Federated Learning Training and Countermeasures","display_name":"Vulnerabilities of Data Protection in Vertical Federated Learning Training and Countermeasures","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4391641509","doi":"https://doi.org/10.1109/tifs.2024.3361813"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2024.3361813","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3361813","pdf_url":"https://ieeexplore.ieee.org/ielx7/10206/4358835/10430093.pdf","source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://ieeexplore.ieee.org/ielx7/10206/4358835/10430093.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5103227499","display_name":"Derui Zhu","orcid":"https://orcid.org/0000-0002-9552-0097"},"institutions":[{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Derui Zhu","raw_affiliation_strings":["Department of Computer Science, Technical University of Munich, Garching, Germany","Department of Computer Science, Technical University of Munich, Boltzmannstr. 3, Garching, Germany"],"raw_orcid":"https://orcid.org/0000-0002-9552-0097","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Technical University of Munich, Garching, Germany","institution_ids":["https://openalex.org/I62916508"]},{"raw_affiliation_string":"Department of Computer Science, Technical University of Munich, Boltzmannstr. 3, Garching, Germany","institution_ids":["https://openalex.org/I62916508"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101882679","display_name":"Jinfu Chen","orcid":"https://orcid.org/0000-0001-7410-9146"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jinfu Chen","raw_affiliation_strings":["School of Computer Science, Wuhan University, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0001-7410-9146","affiliations":[{"raw_affiliation_string":"School of Computer Science, Wuhan University, Wuhan, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102141512","display_name":"Xuebing Zhou","orcid":"https://orcid.org/0000-0001-6883-3453"},"institutions":[{"id":"https://openalex.org/I4210166625","display_name":"Huawei German Research Center","ror":"https://ror.org/00z59w514","country_code":"DE","type":"facility","lineage":["https://openalex.org/I2250955327","https://openalex.org/I4210129353","https://openalex.org/I4210166625"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Xuebing Zhou","raw_affiliation_strings":["Huawei Munich Research Center, Munich, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Huawei Munich Research Center, Munich, Germany","institution_ids":["https://openalex.org/I4210166625"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056378414","display_name":"Weiyi Shang","orcid":"https://orcid.org/0000-0001-6222-7444"},"institutions":[{"id":"https://openalex.org/I151746483","display_name":"University of Waterloo","ror":"https://ror.org/01aff2v68","country_code":"CA","type":"education","lineage":["https://openalex.org/I151746483"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Weiyi Shang","raw_affiliation_strings":["Department of Electrical and Computer Engineering, University of Waterloo, Waterloo, ON, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, University of Waterloo, Waterloo, ON, Canada","institution_ids":["https://openalex.org/I151746483"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091586373","display_name":"Ahmed E. Hassan","orcid":"https://orcid.org/0000-0001-7749-5513"},"institutions":[{"id":"https://openalex.org/I204722609","display_name":"Queen's University","ror":"https://ror.org/02y72wh86","country_code":"CA","type":"education","lineage":["https://openalex.org/I204722609"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Ahmed E. Hassan","raw_affiliation_strings":["School of Computing, Queen&#x2019;s University, Kingston, ON, Canada"],"raw_orcid":"https://orcid.org/0000-0001-7749-5513","affiliations":[{"raw_affiliation_string":"School of Computing, Queen&#x2019;s University, Kingston, ON, Canada","institution_ids":["https://openalex.org/I204722609"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5063714878","display_name":"Jens Gro\u00dfklags","orcid":"https://orcid.org/0000-0003-1093-1282"},"institutions":[{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Jens Grossklags","raw_affiliation_strings":["Department of Computer Science, Technical University of Munich, Garching, Germany","Department of Computer Science, Technical University of Munich, Boltzmannstr. 3, Garching, Germany"],"raw_orcid":"https://orcid.org/0000-0003-1093-1282","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Technical University of Munich, Garching, Germany","institution_ids":["https://openalex.org/I62916508"]},{"raw_affiliation_string":"Department of Computer Science, Technical University of Munich, Boltzmannstr. 3, Garching, Germany","institution_ids":["https://openalex.org/I62916508"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.7234,"has_fulltext":true,"cited_by_count":17,"citation_normalized_percentile":{"value":0.9533007,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"19","issue":null,"first_page":"3674","last_page":"3689"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9926000237464905,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9697999954223633,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7814416885375977},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.6254342794418335},{"id":"https://openalex.org/keywords/hyperparameter","display_name":"Hyperparameter","score":0.5861561894416809},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5036363005638123},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4767787754535675},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.4717358350753784},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.4208013415336609},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3387298583984375},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.25093644857406616}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7814416885375977},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.6254342794418335},{"id":"https://openalex.org/C8642999","wikidata":"https://www.wikidata.org/wiki/Q4171168","display_name":"Hyperparameter","level":2,"score":0.5861561894416809},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5036363005638123},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4767787754535675},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.4717358350753784},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4208013415336609},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3387298583984375},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.25093644857406616}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2024.3361813","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3361813","pdf_url":"https://ieeexplore.ieee.org/ielx7/10206/4358835/10430093.pdf","source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/tifs.2024.3361813","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3361813","pdf_url":"https://ieeexplore.ieee.org/ielx7/10206/4358835/10430093.pdf","source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4391641509.pdf","grobid_xml":"https://content.openalex.org/works/W4391641509.grobid-xml"},"referenced_works_count":66,"referenced_works":["https://openalex.org/W1522301498","https://openalex.org/W1677182931","https://openalex.org/W1834627138","https://openalex.org/W2040367556","https://openalex.org/W2083780116","https://openalex.org/W2134479759","https://openalex.org/W2136114025","https://openalex.org/W2473418344","https://openalex.org/W2535690855","https://openalex.org/W2535838896","https://openalex.org/W2591882872","https://openalex.org/W2750384547","https://openalex.org/W2767079719","https://openalex.org/W2781091734","https://openalex.org/W2808706611","https://openalex.org/W2902114605","https://openalex.org/W2912213068","https://openalex.org/W2930926105","https://openalex.org/W2940527161","https://openalex.org/W2963456518","https://openalex.org/W2964162474","https://openalex.org/W2970408908","https://openalex.org/W2995022099","https://openalex.org/W3011407827","https://openalex.org/W3016632787","https://openalex.org/W3042785565","https://openalex.org/W3049595782","https://openalex.org/W3082181878","https://openalex.org/W3086809868","https://openalex.org/W3091473186","https://openalex.org/W3094542121","https://openalex.org/W3096738375","https://openalex.org/W3101860164","https://openalex.org/W3103245149","https://openalex.org/W3109695251","https://openalex.org/W3114953370","https://openalex.org/W3123459983","https://openalex.org/W3142852780","https://openalex.org/W3164712068","https://openalex.org/W3173290664","https://openalex.org/W3174440551","https://openalex.org/W3189551349","https://openalex.org/W3189913556","https://openalex.org/W3204999899","https://openalex.org/W4285751090","https://openalex.org/W4297687186","https://openalex.org/W4306309293","https://openalex.org/W4309130950","https://openalex.org/W4362655910","https://openalex.org/W4376464626","https://openalex.org/W6631190155","https://openalex.org/W6718865826","https://openalex.org/W6743688258","https://openalex.org/W6756680320","https://openalex.org/W6760759230","https://openalex.org/W6761518891","https://openalex.org/W6767676916","https://openalex.org/W6775563089","https://openalex.org/W6780910697","https://openalex.org/W6791120749","https://openalex.org/W6792742759","https://openalex.org/W6802338539","https://openalex.org/W6803951002","https://openalex.org/W6845652446","https://openalex.org/W6846771285","https://openalex.org/W6852144137"],"related_works":["https://openalex.org/W4390421286","https://openalex.org/W4280563792","https://openalex.org/W2602382373","https://openalex.org/W3003615511","https://openalex.org/W4285827128","https://openalex.org/W3198113463","https://openalex.org/W2787698406","https://openalex.org/W2963844355","https://openalex.org/W4361251046","https://openalex.org/W98577079"],"abstract_inverted_index":{"Vertical":[0],"federated":[1],"learning":[2,11],"(VFL)":[3],"is":[4,92],"an":[5],"increasingly":[6],"popular,":[7],"yet":[8],"understudied,":[9],"collaborative":[10],"technique.":[12],"In":[13,65],"VFL,":[14,36],"features":[15,81],"and":[16,40,80,107,119,159,170,200],"labels":[17,79,201],"are":[18],"distributed":[19],"among":[20],"different":[21,161],"participants":[22],"allowing":[23],"for":[24],"various":[25],"innovative":[26],"applications":[27],"in":[28,60,147],"business":[29],"domains,":[30],"e.g.,":[31],"online":[32],"marketing.":[33],"When":[34],"deploying":[35],"training":[37,63,150,162,175],"data":[38,58,72,144,154,158],"(labels":[39],"features)":[41],"from":[42],"each":[43],"participant":[44],"ought":[45],"to":[46,82,95,103,112,137,192],"be":[47,138],"protected;":[48],"however,":[49],"very":[50],"few":[51],"studies":[52],"have":[53],"investigated":[54],"the":[55,61,148,194],"vulnerability":[56],"of":[57,174],"protection":[59],"VFL":[62,91,149],"stage.":[64],"this":[66,84,125,179],"paper,":[67],"we":[68,181],"propose":[69],"a":[70,171,183],"posterior-difference-based":[71],"attack,":[73],"<italic":[74,187,210],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[75,188,211],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">VFLRecon</i>":[76],",":[77,190],"reconstructing":[78],"examine":[83],"problem.":[85],"Our":[86],"experiments":[87],"show":[88],"that":[89,135,209],"standard":[90,130,217,225],"highly":[93],"vulnerable":[94],"serious":[96],"privacy":[97,126],"threats,":[98],"with":[99,115,165],"reconstruction":[100,214],"achieving":[101],"up":[102],"92%":[104],"label":[105,117],"accuracy":[106,118],"0.05":[108],"feature":[109,121],"MSE,":[110],"compared":[111],"our":[113],"baseline":[114],"55%":[116],"0.19":[120],"MSE.":[122],"Even":[123],"worse,":[124],"risk":[127],"remains":[128],"during":[129,203,216],"operations":[131,219],"(e.g.,":[132],"encrypted":[133],"aggregation)":[134],"appear":[136],"safe.":[139],"We":[140],"also":[141],"systematically":[142],"analyze":[143],"leakage":[145],"risks":[146],"stage":[151],"across":[152],"diverse":[153],"modalities":[155],"(i.e.,":[156,164],"tabular":[157],"images),":[160],"frameworks":[163],"or":[166],"without":[167],"encryption":[168,218,226],"techniques),":[169],"wide":[172],"range":[173],"hyperparameters.":[176],"To":[177],"mitigate":[178],"risk,":[180],"design":[182],"novel":[184],"defense":[185],"mechanism,":[186],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">VFLDefender</i>":[189,212],"dedicated":[191],"obfuscating":[193],"correlation":[195],"between":[196],"bottom":[197],"model":[198],"changes":[199],"(features)":[202],"training.":[204],"The":[205],"experimental":[206],"results":[207],"demonstrate":[208],"prevents":[213],"attacks":[215],"(around":[220],"17%":[221],"more":[222],"effective":[223],"than":[224],"operations).":[227]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":12},{"year":2024,"cited_by_count":4}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}