{"id":"https://openalex.org/W4405304730","doi":"https://doi.org/10.1109/tifs.2024.3516545","title":"Decaf: Data Distribution Decompose Attack Against Federated Learning","display_name":"Decaf: Data Distribution Decompose Attack Against Federated Learning","publication_year":2024,"publication_date":"2024-12-12","ids":{"openalex":"https://openalex.org/W4405304730","doi":"https://doi.org/10.1109/tifs.2024.3516545"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2024.3516545","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3516545","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101066549","display_name":"Zhiyang Dai","orcid":null},"institutions":[{"id":"https://openalex.org/I36399199","display_name":"Nanjing University of Science and Technology","ror":"https://ror.org/00xp9wg62","country_code":"CN","type":"education","lineage":["https://openalex.org/I36399199"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Zhiyang Dai","raw_affiliation_strings":["School of Cyber Science and Engineering, Nanjing University of Science and Technology, Nanjing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Nanjing University of Science and Technology, Nanjing, China","institution_ids":["https://openalex.org/I36399199"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101863680","display_name":"Yansong Gao","orcid":"https://orcid.org/0000-0001-5783-2172"},"institutions":[{"id":"https://openalex.org/I177877127","display_name":"The University of Western Australia","ror":"https://ror.org/047272k79","country_code":"AU","type":"education","lineage":["https://openalex.org/I177877127"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Yansong Gao","raw_affiliation_strings":["Department of Computer Science and Software Engineering, The University of Western Australia, Perth, WA, Australia","University of Western Australia, Perth, Australia"],"raw_orcid":"https://orcid.org/0000-0001-5783-2172","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Software Engineering, The University of Western Australia, Perth, WA, Australia","institution_ids":["https://openalex.org/I177877127"]},{"raw_affiliation_string":"University of Western Australia, Perth, Australia","institution_ids":["https://openalex.org/I177877127"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016021356","display_name":"Chunyi Zhou","orcid":"https://orcid.org/0000-0003-0081-0946"},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chunyi Zhou","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University, Hangzhou, China","College of Computer Science and Technology, Zhejiang Univesity, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-0081-0946","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I168879160"]},{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang Univesity, Hangzhou, China","institution_ids":["https://openalex.org/I168879160"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048592388","display_name":"Anmin Fu","orcid":"https://orcid.org/0000-0002-1632-5737"},"institutions":[{"id":"https://openalex.org/I36399199","display_name":"Nanjing University of Science and Technology","ror":"https://ror.org/00xp9wg62","country_code":"CN","type":"education","lineage":["https://openalex.org/I36399199"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Anmin Fu","raw_affiliation_strings":["School of Cyber Science and Engineering, Nanjing University of Science and Technology, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-1632-5737","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Nanjing University of Science and Technology, Nanjing, China","institution_ids":["https://openalex.org/I36399199"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100410710","display_name":"Zhi Zhang","orcid":"https://orcid.org/0000-0003-3604-5369"},"institutions":[{"id":"https://openalex.org/I177877127","display_name":"The University of Western Australia","ror":"https://ror.org/047272k79","country_code":"AU","type":"education","lineage":["https://openalex.org/I177877127"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Zhi Zhang","raw_affiliation_strings":["Department of Computer Science and Software Engineering, The University of Western Australia, Perth, WA, Australia","University of Western Australia, Perth, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Software Engineering, The University of Western Australia, Perth, WA, Australia","institution_ids":["https://openalex.org/I177877127"]},{"raw_affiliation_string":"University of Western Australia, Perth, Australia","institution_ids":["https://openalex.org/I177877127"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009850797","display_name":"Minhui Xue","orcid":"https://orcid.org/0000-0002-9172-4252"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Minhui Xue","raw_affiliation_strings":["CSIRO Data61, Sydney, NSW, Australia","Data61, CSIRO, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0002-9172-4252","affiliations":[{"raw_affiliation_string":"CSIRO Data61, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]},{"raw_affiliation_string":"Data61, CSIRO, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086945099","display_name":"Yifeng Zheng","orcid":"https://orcid.org/0000-0001-7852-6051"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yifeng Zheng","raw_affiliation_strings":["Harbin Institute of Technology, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0001-7852-6051","affiliations":[{"raw_affiliation_string":"Harbin Institute of Technology, Shenzhen, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100401884","display_name":"Yuqing Zhang","orcid":"https://orcid.org/0000-0001-8306-7195"},"institutions":[{"id":"https://openalex.org/I4210108629","display_name":"Computer Network Information Center","ror":"https://ror.org/01s0wyf50","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210108629"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuqing Zhang","raw_affiliation_strings":["National Computer Network Intrusion Protection Center, University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-8306-7195","affiliations":[{"raw_affiliation_string":"National Computer Network Intrusion Protection Center, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210108629","https://openalex.org/I4210165038"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":8,"corresponding_author_ids":["https://openalex.org/A5101066549"],"corresponding_institution_ids":["https://openalex.org/I36399199"],"apc_list":null,"apc_paid":null,"fwci":0.9615,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.81073245,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":96},"biblio":{"volume":"20","issue":null,"first_page":"405","last_page":"420"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9934999942779541,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9934999942779541,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9901999831199646,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9557999968528748,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.839546799659729},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3550899624824524}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.839546799659729},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3550899624824524}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tifs.2024.3516545","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3516545","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},{"id":"pmh:oai:pure.atira.dk:publications/12f01250-4f14-46ce-92f7-7ea24340a0c0","is_oa":false,"landing_page_url":"https://research-repository.uwa.edu.au/en/publications/12f01250-4f14-46ce-92f7-7ea24340a0c0","pdf_url":null,"source":{"id":"https://openalex.org/S4306402492","display_name":"UWA Profiles and Research Repository (UWA)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I177877127","host_organization_name":"The University of Western Australia","host_organization_lineage":["https://openalex.org/I177877127"],"host_organization_lineage_names":[],"type":"repository"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Dai, Z, Gao, Y, Zhou, C, Fu, A, Zhang, Z, Xue, M, Zheng, Y & Zhang, Y 2025, 'Decaf: Data Distribution Decompose Attack Against Federated Learning.', IEEE Transactions on Information Forensics and Security, vol. 20, pp. 405-420. https://doi.org/10.1109/TIFS.2024.3516545","raw_type":"info:eu-repo/semantics/publishedVersion"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3561187080","display_name":null,"funder_award_id":"BK20211192","funder_id":"https://openalex.org/F4320322769","funder_display_name":"Natural Science Foundation of Jiangsu Province"},{"id":"https://openalex.org/G5663473917","display_name":null,"funder_award_id":"62072239","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6632032882","display_name":null,"funder_award_id":"ISN24-15","funder_id":"https://openalex.org/F4320330485","funder_display_name":"State Key Laboratory of Integrated Services Networks"},{"id":"https://openalex.org/G7524508071","display_name":null,"funder_award_id":"KLCS20240204","funder_id":"https://openalex.org/F4320322349","funder_display_name":"Ministry of Education, Science and Technology"},{"id":"https://openalex.org/G913869186","display_name":null,"funder_award_id":"62372236","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322349","display_name":"Ministry of Education, Science and Technology","ror":"https://ror.org/01p262204"},{"id":"https://openalex.org/F4320322769","display_name":"Natural Science Foundation of Jiangsu Province","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320330485","display_name":"State Key Laboratory of Integrated Services Networks","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":55,"referenced_works":["https://openalex.org/W2051267297","https://openalex.org/W2112796928","https://openalex.org/W2405578611","https://openalex.org/W2473418344","https://openalex.org/W2535690855","https://openalex.org/W2591882872","https://openalex.org/W2767079719","https://openalex.org/W2781091734","https://openalex.org/W2794825826","https://openalex.org/W2795435272","https://openalex.org/W2897830718","https://openalex.org/W2911978475","https://openalex.org/W2930926105","https://openalex.org/W2932083555","https://openalex.org/W2962858109","https://openalex.org/W2963378725","https://openalex.org/W2963456518","https://openalex.org/W2964162474","https://openalex.org/W2982611438","https://openalex.org/W3010852232","https://openalex.org/W3015625436","https://openalex.org/W3034892461","https://openalex.org/W3106653625","https://openalex.org/W3109094166","https://openalex.org/W3127299377","https://openalex.org/W3128761003","https://openalex.org/W3138597937","https://openalex.org/W3165639541","https://openalex.org/W3176639943","https://openalex.org/W3181304926","https://openalex.org/W3202882929","https://openalex.org/W3213807399","https://openalex.org/W3214437258","https://openalex.org/W3215194618","https://openalex.org/W4206426144","https://openalex.org/W4210894459","https://openalex.org/W4283373300","https://openalex.org/W4285189699","https://openalex.org/W4308642595","https://openalex.org/W4312307529","https://openalex.org/W4313547874","https://openalex.org/W4317425179","https://openalex.org/W4324007185","https://openalex.org/W4384948739","https://openalex.org/W4385080314","https://openalex.org/W4388856889","https://openalex.org/W4402264897","https://openalex.org/W4405181861","https://openalex.org/W4405304730","https://openalex.org/W6674330103","https://openalex.org/W6728757088","https://openalex.org/W6743688258","https://openalex.org/W6752029299","https://openalex.org/W6775482175","https://openalex.org/W6781511523"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"In":[0],"contrast":[1],"to":[2,50,152,196],"prevalent":[3],"Federated":[4],"Learning":[5],"(FL)":[6],"privacy":[7,30],"inference":[8,17,20],"techniques":[9],"such":[10],"as":[11,123],"generative":[12],"adversarial":[13],"networks":[14],"attacks,":[15,18,21,25],"membership":[16],"property":[19],"and":[22,72,126,135,150,173,185,233],"model":[23,91,177],"inversion":[24],"we":[26],"devise":[27],"an":[28,46],"innovative":[29],"threat:":[31],"the":[32,53,60,83,87,96,101,115,129,156,213,226],"Data":[33],"Distribution":[34],"Decompose":[35],"Attack":[36],"on":[37,165],"FL,":[38],"termed":[39],"<monospace":[40,78,106,141,188,230,246],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[41,79,107,142,189,218,231,247],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Decaf</monospace>.":[42],"This":[43],"attack":[44],"enables":[45],"honest-but-curious":[47],"FL":[48,62],"server":[49],"meticulously":[51],"profile":[52],"proportion":[54,102],"of":[55,77,89,103,158,204],"each":[56,104,136],"class":[57],"owned":[58],"by":[59,119,229],"victim":[61,121,153,255],"user,":[63],"divulging":[64],"sensitive":[65],"information":[66],"like":[67],"local":[68,90,199],"market":[69],"item":[70],"distribution":[71,161,227],"business":[73],"competitiveness.":[74],"The":[75],"crux":[76],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Decaf</monospace>":[80,108,143,232,248],"lies":[81],"in":[82,252],"profound":[84],"observation":[85],"that":[86],"magnitude":[88],"gradient":[92,133],"changes":[93,134],"closely":[94],"mirrors":[95],"underlying":[97],"data":[98,160,201],"distribution,":[99,202],"including":[100,179],"class.":[105,139],"addresses":[109],"two":[110],"crucial":[111],"challenges:":[112],"accurately":[113,197],"identify":[114],"missing/null":[116],"class(es)":[117],"given":[118],"any":[120,254],"user":[122,200],"a":[124],"premise":[125],"then":[127],"quantify":[128],"precise":[130],"relationship":[131],"between":[132,225],"remaining":[137],"non-null":[138],"Notably,":[140],"operates":[144],"stealthily,":[145],"rendering":[146],"it":[147,206],"entirely":[148],"passive":[149],"undetectable":[151],"users":[154],"regarding":[155],"infringement":[157],"their":[159],"privacy.":[162],"Experimental":[163],"validation":[164],"five":[166],"benchmark":[167],"datasets":[168],"(MNIST,":[169],"FASHION-MNIST,":[170],"CIFAR-10,":[171],"FER-2013,":[172],"SkinCancer)":[174],"employing":[175],"diverse":[176],"architectures,":[178],"customized":[180],"convolutional":[181],"networks,":[182],"standardized":[183],"VGG16,":[184],"ResNet18,":[186],"demonstrates":[187],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Decaf</monospace>\u2019s":[190],"efficacy.":[191],"Results":[192],"indicate":[193],"its":[194],"ability":[195],"decompose":[198],"regardless":[203],"whether":[205],"is":[207,236],"IID":[208],"or":[209],"non-IID":[210],"distributed.":[211],"Specifically,":[212],"dissimilarity":[214],"measured":[215],"using":[216],"<inline-formula":[217],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">":[219],"<tex-math":[220],"notation=\"LaTeX\">$L_{\\infty":[221],"}$":[222],"</tex-math></inline-formula>":[223],"distance":[224],"decomposed":[228],"ground":[234],"truth":[235],"consistently":[237],"below":[238],"5%":[239],"when":[240],"no":[241],"null":[242,257],"classes":[243],"exist.":[244],"Moreover,":[245],"achieves":[249],"100%":[250],"accuracy":[251],"determining":[253],"user\u2019s":[256],"classes,":[258],"validated":[259],"through":[260],"formal":[261],"proof.":[262]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1}],"updated_date":"2026-05-13T08:25:38.343686","created_date":"2025-10-10T00:00:00"}