{"id":"https://openalex.org/W7163552987","doi":"https://doi.org/10.1145/3779208.3785389","title":"Mitigating Gradient Inversion Risks in Language Models via Token Obfuscation","display_name":"Mitigating Gradient Inversion Risks in Language Models via Token Obfuscation","publication_year":2026,"publication_date":"2026-06-01","ids":{"openalex":"https://openalex.org/W7163552987","doi":"https://doi.org/10.1145/3779208.3785389"},"language":null,"primary_location":{"id":"doi:10.1145/3779208.3785389","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3779208.3785389","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3779208.3785389","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5074650815","display_name":"Xinguo Feng","orcid":"https://orcid.org/0000-0003-2307-2771"},"institutions":[{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xinguo Feng","raw_affiliation_strings":["The University of Queensland, Brisbane, Australia and CSIRO's Data61, Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0003-2307-2771","affiliations":[{"raw_affiliation_string":"The University of Queensland, Brisbane, Australia and CSIRO's Data61, Sydney, Australia","institution_ids":["https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021033946","display_name":"Zhongkui Ma","orcid":"https://orcid.org/0000-0002-2392-3751"},"institutions":[{"id":"https://openalex.org/I165143802","display_name":"The University of Queensland","ror":"https://ror.org/00rqy9422","country_code":"AU","type":"education","lineage":["https://openalex.org/I165143802"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Zhongkui Ma","raw_affiliation_strings":["The University of Queensland, Brisbane, Australia"],"raw_orcid":"https://orcid.org/0000-0002-2392-3751","affiliations":[{"raw_affiliation_string":"The University of Queensland, Brisbane, Australia","institution_ids":["https://openalex.org/I165143802"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137896217","display_name":"Zihan Wang","orcid":"https://orcid.org/0000-0002-6536-2948"},"institutions":[{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Zihan Wang","raw_affiliation_strings":["The University of Queensland, Brisbane, Australia and CSIRO's Data61, Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0002-6536-2948","affiliations":[{"raw_affiliation_string":"The University of Queensland, Brisbane, Australia and CSIRO's Data61, Sydney, Australia","institution_ids":["https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086357020","display_name":"Alsharif Abuadbba","orcid":"https://orcid.org/0000-0001-9695-7947"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Alsharif Abuadbba","raw_affiliation_strings":["CSIRO's Data61, Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0001-9695-7947","affiliations":[{"raw_affiliation_string":"CSIRO's Data61, Sydney, Australia","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I42894916"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5015858067","display_name":"Guangdong Bai","orcid":"https://orcid.org/0000-0002-6390-9890"},"institutions":[{"id":"https://openalex.org/I168719708","display_name":"City University of Hong Kong","ror":"https://ror.org/03q8dnn23","country_code":"HK","type":"education","lineage":["https://openalex.org/I168719708"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Guangdong Bai","raw_affiliation_strings":["City University of Hong Kong, Hong Kong, Hong Kong"],"raw_orcid":"https://orcid.org/0000-0002-6390-9890","affiliations":[{"raw_affiliation_string":"City University of Hong Kong, Hong Kong, Hong Kong","institution_ids":["https://openalex.org/I168719708"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1832","last_page":"1848"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.21639999747276306,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.21639999747276306,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.16300000250339508,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.1225999966263771,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/inversion","display_name":"Inversion (geology)","score":0.46239998936653137},{"id":"https://openalex.org/keywords/security-token","display_name":"Security token","score":0.44589999318122864},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.42640000581741333},{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.39570000767707825},{"id":"https://openalex.org/keywords/data-modeling","display_name":"Data modeling","score":0.29170000553131104}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6335999965667725},{"id":"https://openalex.org/C1893757","wikidata":"https://www.wikidata.org/wiki/Q3653001","display_name":"Inversion (geology)","level":3,"score":0.46239998936653137},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.44589999318122864},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.42640000581741333},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.39739999175071716},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.39570000767707825},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3208000063896179},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.29170000553131104},{"id":"https://openalex.org/C114289077","wikidata":"https://www.wikidata.org/wiki/Q3284399","display_name":"Statistical model","level":2,"score":0.26989999413490295},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2685999870300293}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3779208.3785389","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3779208.3785389","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3779208.3785389","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3779208.3785389","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities","score":0.45531678199768066}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W2019759670","https://openalex.org/W2473418344","https://openalex.org/W2535690855","https://openalex.org/W3011594683","https://openalex.org/W3175192640","https://openalex.org/W4214607237","https://openalex.org/W4311431702","https://openalex.org/W4312604272","https://openalex.org/W4367046777","https://openalex.org/W4383221498","https://openalex.org/W4385570555","https://openalex.org/W4385572039","https://openalex.org/W4385573947","https://openalex.org/W4402263968","https://openalex.org/W4403577360","https://openalex.org/W4405182932","https://openalex.org/W4410089546","https://openalex.org/W7133200591"],"related_works":[],"abstract_inverted_index":{"Training":[0],"and":[1,74,85],"fine-tuning":[2],"large-scale":[3],"language":[4],"models":[5],"largely":[6],"benefit":[7],"from":[8,31,52],"collaborative":[9],"learning,":[10],"but":[11],"the":[12,66],"approach":[13],"has":[14],"been":[15],"proven":[16],"vulnerable":[17],"to":[18,26,47,55,65,89],"gradient":[19,38,45,53],"inversion":[20],"attacks":[21],"(GIAs),":[22],"which":[23],"allow":[24],"adversaries":[25],"reconstruct":[27],"private":[28],"training":[29],"data":[30],"shared":[32],"gradients.":[33],"Existing":[34],"defenses":[35],"mainly":[36],"employ":[37],"perturbation":[39],"techniques,":[40],"e.g.,":[41],"noise":[42],"injection":[43],"or":[44],"pruning,":[46],"disrupt":[48],"GIAs'":[49],"direct":[50],"mapping":[51],"space":[54],"token":[56,75],"space.":[57],"However,":[58],"these":[59],"methods":[60],"often":[61],"fall":[62],"short":[63],"due":[64],"retention":[67],"of":[68],"semantics":[69],"similarity":[70],"across":[71],"gradient,":[72],"embedding,":[73],"spaces.":[76],"Attackers":[77],"can":[78],"map":[79],"proximate":[80],"gradients":[81],"into":[82],"similar":[83,92],"embeddings,":[84],"subsequently":[86],"correspond":[87],"them":[88],"tokens":[90],"with":[91],"semantics.":[93]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2026-06-05T00:00:00"}