{"id":"https://openalex.org/W4416144400","doi":"https://doi.org/10.1145/3721201.3721375","title":"MedLeak: Multimodal Medical Data Leakage in Secure Federated Learning with Crafted Models","display_name":"MedLeak: Multimodal Medical Data Leakage in Secure Federated Learning with Crafted Models","publication_year":2025,"publication_date":"2025-06-24","ids":{"openalex":"https://openalex.org/W4416144400","doi":"https://doi.org/10.1145/3721201.3721375"},"language":"en","primary_location":{"id":"doi:10.1145/3721201.3721375","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3721201.3721375","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3721201.3721375","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM/IEEE International Conference on Connected Health: Applications, Systems and Engineering Technologies","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3721201.3721375","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5011992463","display_name":"Shanghao Shi","orcid":"https://orcid.org/0009-0007-6964-8250"},"institutions":[{"id":"https://openalex.org/I859038795","display_name":"Virginia Tech","ror":"https://ror.org/02smfhw86","country_code":"US","type":"education","lineage":["https://openalex.org/I859038795"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shanghao Shi","raw_affiliation_strings":["Virginia Tech, Arlington, VA, USA"],"raw_orcid":"https://orcid.org/0009-0007-6964-8250","affiliations":[{"raw_affiliation_string":"Virginia Tech, Arlington, VA, USA","institution_ids":["https://openalex.org/I859038795"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046921154","display_name":"Md Shahedul Haque","orcid":"https://orcid.org/0000-0002-0916-922X"},"institutions":[{"id":"https://openalex.org/I859038795","display_name":"Virginia Tech","ror":"https://ror.org/02smfhw86","country_code":"US","type":"education","lineage":["https://openalex.org/I859038795"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Md Shahedul Haque","raw_affiliation_strings":["Virginia Tech, Arlington, VA, USA"],"raw_orcid":"https://orcid.org/0000-0002-0916-922X","affiliations":[{"raw_affiliation_string":"Virginia Tech, Arlington, VA, USA","institution_ids":["https://openalex.org/I859038795"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089319608","display_name":"Abhijeet Parida","orcid":"https://orcid.org/0000-0002-4978-0576"},"institutions":[{"id":"https://openalex.org/I1336742384","display_name":"Children's National","ror":"https://ror.org/03wa2q724","country_code":"US","type":"healthcare","lineage":["https://openalex.org/I1336742384"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Abhijeet Parida","raw_affiliation_strings":["Children's National Hospital, Washington, D.C., USA"],"raw_orcid":"https://orcid.org/0000-0002-4978-0576","affiliations":[{"raw_affiliation_string":"Children's National Hospital, Washington, D.C., USA","institution_ids":["https://openalex.org/I1336742384"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101904206","display_name":"Chaoyu Zhang","orcid":"https://orcid.org/0009-0007-8066-709X"},"institutions":[{"id":"https://openalex.org/I859038795","display_name":"Virginia Tech","ror":"https://ror.org/02smfhw86","country_code":"US","type":"education","lineage":["https://openalex.org/I859038795"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chaoyu Zhang","raw_affiliation_strings":["Virginia Tech, Arlington, VA, USA"],"raw_orcid":"https://orcid.org/0009-0007-8066-709X","affiliations":[{"raw_affiliation_string":"Virginia Tech, Arlington, VA, USA","institution_ids":["https://openalex.org/I859038795"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085732379","display_name":"Marius George Linguraru","orcid":"https://orcid.org/0000-0001-6175-8665"},"institutions":[{"id":"https://openalex.org/I1336742384","display_name":"Children's National","ror":"https://ror.org/03wa2q724","country_code":"US","type":"healthcare","lineage":["https://openalex.org/I1336742384"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Marius George Linguraru","raw_affiliation_strings":["Children's National Hospital, Washington, D.C., USA"],"raw_orcid":"https://orcid.org/0000-0001-6175-8665","affiliations":[{"raw_affiliation_string":"Children's National Hospital, Washington, D.C., USA","institution_ids":["https://openalex.org/I1336742384"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059824798","display_name":"Y. Thomas Hou","orcid":"https://orcid.org/0000-0003-3716-5768"},"institutions":[{"id":"https://openalex.org/I859038795","display_name":"Virginia Tech","ror":"https://ror.org/02smfhw86","country_code":"US","type":"education","lineage":["https://openalex.org/I859038795"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Y. Thomas Hou","raw_affiliation_strings":["Virginia Tech, Blacksburg, VA, USA"],"raw_orcid":"https://orcid.org/0000-0003-3716-5768","affiliations":[{"raw_affiliation_string":"Virginia Tech, Blacksburg, VA, USA","institution_ids":["https://openalex.org/I859038795"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Syed Muhammad Anwar","orcid":"https://orcid.org/0000-0002-8179-3959"},"institutions":[{"id":"https://openalex.org/I1336742384","display_name":"Children's National","ror":"https://ror.org/03wa2q724","country_code":"US","type":"healthcare","lineage":["https://openalex.org/I1336742384"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Syed Muhammad Anwar","raw_affiliation_strings":["Children's National Hospital, Washington, D.C., USA"],"raw_orcid":"https://orcid.org/0000-0002-8179-3959","affiliations":[{"raw_affiliation_string":"Children's National Hospital, Washington, D.C., USA","institution_ids":["https://openalex.org/I1336742384"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5001879281","display_name":"Wenjing Lou","orcid":"https://orcid.org/0000-0002-2421-4623"},"institutions":[{"id":"https://openalex.org/I859038795","display_name":"Virginia Tech","ror":"https://ror.org/02smfhw86","country_code":"US","type":"education","lineage":["https://openalex.org/I859038795"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Wenjing Lou","raw_affiliation_strings":["Virginia Tech, Arlington, VA, USA"],"raw_orcid":"https://orcid.org/0000-0002-2421-4623","affiliations":[{"raw_affiliation_string":"Virginia Tech, Arlington, VA, USA","institution_ids":["https://openalex.org/I859038795"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"245","last_page":"256"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.920199990272522,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.920199990272522,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.04170000180602074,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.009700000286102295,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/federated-learning","display_name":"Federated learning","score":0.8342000246047974},{"id":"https://openalex.org/keywords/upload","display_name":"Upload","score":0.7594000101089478},{"id":"https://openalex.org/keywords/scheme","display_name":"Scheme (mathematics)","score":0.5406000018119812},{"id":"https://openalex.org/keywords/rendering","display_name":"Rendering (computer graphics)","score":0.5368000268936157},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.4754999876022339},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.4399999976158142},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.40709999203681946},{"id":"https://openalex.org/keywords/private-information-retrieval","display_name":"Private information retrieval","score":0.3617999851703644}],"concepts":[{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.8342000246047974},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8083999752998352},{"id":"https://openalex.org/C71901391","wikidata":"https://www.wikidata.org/wiki/Q7126699","display_name":"Upload","level":2,"score":0.7594000101089478},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.5406000018119812},{"id":"https://openalex.org/C205711294","wikidata":"https://www.wikidata.org/wiki/Q176953","display_name":"Rendering (computer graphics)","level":2,"score":0.5368000268936157},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.4754999876022339},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.4399999976158142},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.40709999203681946},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.38339999318122864},{"id":"https://openalex.org/C99221444","wikidata":"https://www.wikidata.org/wiki/Q1532069","display_name":"Private information retrieval","level":2,"score":0.3617999851703644},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.3587000072002411},{"id":"https://openalex.org/C82578977","wikidata":"https://www.wikidata.org/wiki/Q16773055","display_name":"Data aggregator","level":3,"score":0.3553999960422516},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3521000146865845},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.33959999680519104},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3393000066280365},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.30070000886917114},{"id":"https://openalex.org/C2776959682","wikidata":"https://www.wikidata.org/wiki/Q17005296","display_name":"Co-training","level":3,"score":0.2782999873161316},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.27149999141693115},{"id":"https://openalex.org/C2776145971","wikidata":"https://www.wikidata.org/wiki/Q30673951","display_name":"Labeled data","level":2,"score":0.27059999108314514},{"id":"https://openalex.org/C2777042071","wikidata":"https://www.wikidata.org/wiki/Q6509304","display_name":"Leakage (economics)","level":2,"score":0.26919999718666077},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.26339998841285706},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.2533999979496002},{"id":"https://openalex.org/C2779582901","wikidata":"https://www.wikidata.org/wiki/Q21013010","display_name":"Distributed learning","level":2,"score":0.25270000100135803}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3721201.3721375","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3721201.3721375","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3721201.3721375","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM/IEEE International Conference on Connected Health: Applications, Systems and Engineering Technologies","raw_type":"proceedings-article"},{"id":"pmh:oai:vtechworks.lib.vt.edu:10919/139815","is_oa":true,"landing_page_url":"https://hdl.handle.net/10919/139815","pdf_url":null,"source":{"id":"https://openalex.org/S4306400248","display_name":"VTechWorks (Virginia Tech)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I859038795","host_organization_name":"Virginia Tech","host_organization_lineage":["https://openalex.org/I859038795"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":null,"raw_type":"Article - Refereed"}],"best_oa_location":{"id":"doi:10.1145/3721201.3721375","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3721201.3721375","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3721201.3721375","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM/IEEE International Conference on Connected Health: Applications, Systems and Engineering Technologies","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2454284058","display_name":null,"funder_award_id":"N00014-24-1-2730","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G3405165046","display_name":null,"funder_award_id":"N00014-19-1-2621","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G3744122248","display_name":"CPS: Medium: Collaborative Research: Robust Sensing and Learning for Autonomous Driving Against Perceptual Illusion","funder_award_id":"2235232","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G393918126","display_name":"Collaborative Research: SaTC: CORE: Medium: An Anti-tracking and Robocall-free Architecture for Next-G Mobile Networks","funder_award_id":"2247560","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G4436609510","display_name":"Collaborative Research: NeTS: Medium: An Integrated Multi-Time Scale Approach to High-Performance, Intelligent, and Secure O-RAN based NextG","funder_award_id":"2312447","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G5192101867","display_name":"Collaborative Research: SaTC: CORE: Medium: A Networking Perspective of Blockchain Security: Modeling, Analysis, and Defense","funder_award_id":"2154929","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8233812092","display_name":"SWIFT-SAT: Efficient and On-Demand Spectrum Coexistence for Satellite-Terrestrial Systems","funder_award_id":"2332675","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8876996369","display_name":null,"funder_award_id":"N00014","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320317457","display_name":"Children's National Hospital","ror":"https://ror.org/03wa2q724"},{"id":"https://openalex.org/F4320337345","display_name":"Office of Naval Research","ror":"https://ror.org/00rk2pe57"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4416144400.pdf","grobid_xml":"https://content.openalex.org/works/W4416144400.grobid-xml"},"referenced_works_count":20,"referenced_works":["https://openalex.org/W2767079719","https://openalex.org/W2930926105","https://openalex.org/W3012501605","https://openalex.org/W3045674654","https://openalex.org/W3094542121","https://openalex.org/W3096328345","https://openalex.org/W3099081599","https://openalex.org/W3110845456","https://openalex.org/W3123459983","https://openalex.org/W3128515475","https://openalex.org/W3169231731","https://openalex.org/W3175192640","https://openalex.org/W3178709966","https://openalex.org/W3212079419","https://openalex.org/W4213446860","https://openalex.org/W4311165713","https://openalex.org/W4312604272","https://openalex.org/W4317436377","https://openalex.org/W4382201643","https://openalex.org/W4408750008"],"related_works":[],"abstract_inverted_index":{"Federated":[0],"learning":[1,9],"(FL)":[2],"allows":[3,40],"participants":[4],"to":[5,52,96],"collaboratively":[6],"train":[7],"machine":[8],"models":[10],"while":[11,169],"keeping":[12],"their":[13,99],"data":[14,119],"private,":[15],"making":[16],"it":[17,137],"ideal":[18],"for":[19,167],"collaborations":[20],"among":[21],"healthcare":[22],"institutions":[23],"on":[24,148,161],"sensitive":[25],"datasets.":[26],"However,":[27],"in":[28,91],"this":[29],"paper,":[30],"we":[31],"demonstrate":[32],"a":[33,41,71,109],"novel":[34,110],"privacy":[35],"attack":[36],"called":[37],"MedLeak,":[38,70],"which":[39],"malicious":[42,72],"participant":[43],"who":[44],"initiates":[45],"the":[46,50,63,80,88,92,103,121,133,139,144,149,162,171],"FL":[47,81,105],"task":[48],"as":[49,101,136,158],"server":[51,73],"recover":[53,116],"high-quality":[54],"site-specific":[55],"private":[56,117],"medical":[57],"images":[58],"and":[59],"text":[60],"records":[61],"from":[62,120],"model":[64,78],"updates":[65,100],"uploaded":[66],"by":[67],"clients.":[68],"In":[69],"introduces":[74],"an":[75],"adversarially":[76],"crafted":[77],"during":[79],"training":[82,106],"process.":[83,142],"Honest":[84],"clients,":[85],"unaware":[86],"of":[87,164],"insidious":[89],"changes":[90],"published":[93],"model,":[94],"continue":[95],"send":[97],"back":[98],"per":[102],"standard":[104],"protocol.":[107],"Leveraging":[108],"analytical":[111],"method,":[112],"MedLeak":[113],"can":[114],"efficiently":[115],"client":[118],"aggregated":[122,150,173],"parameter":[123],"updates.":[124],"This":[125],"recovery":[126],"scheme":[127,145],"is":[128],"significantly":[129],"more":[130],"efficient":[131],"than":[132],"state-of-the-art":[134],"solutions,":[135],"avoids":[138],"costly":[140],"optimization":[141],"Additionally,":[143],"relies":[146],"solely":[147],"updates,":[151],"thus":[152],"rendering":[153],"secure":[154],"aggregation":[155],"protocols":[156],"ineffective,":[157],"they":[159],"depend":[160],"randomization":[163],"intermediate":[165],"results":[166,174],"security":[168],"leaving":[170],"final":[172],"unaltered.":[175]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-11-12T00:00:00"}