{"id":"https://openalex.org/W4414359500","doi":"https://doi.org/10.24963/ijcai.2025/536","title":"Where Does This Data Come From? Enhanced Source Inference Attacks in Federated Learning","display_name":"Where Does This Data Come From? Enhanced Source Inference Attacks in Federated Learning","publication_year":2025,"publication_date":"2025-09-01","ids":{"openalex":"https://openalex.org/W4414359500","doi":"https://doi.org/10.24963/ijcai.2025/536"},"language":"en","primary_location":{"id":"doi:10.24963/ijcai.2025/536","is_oa":false,"landing_page_url":"https://doi.org/10.24963/ijcai.2025/536","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirty-Fourth International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://research-repository.uwa.edu.au/en/publications/6002c729-bdf7-427b-8af0-c542cbea2277","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100697327","display_name":"Haiyang Chen","orcid":"https://orcid.org/0000-0002-7556-6741"},"institutions":[{"id":"https://openalex.org/I200845125","display_name":"Nanjing University of Information Science and Technology","ror":"https://ror.org/02y0rxk19","country_code":"CN","type":"education","lineage":["https://openalex.org/I200845125"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haiyang Chen","raw_affiliation_strings":["Nanjing University of Information Science and Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanjing University of Information Science and Technology","institution_ids":["https://openalex.org/I200845125"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007818509","display_name":"Xiaolong Xu","orcid":"https://orcid.org/0000-0003-4879-9803"},"institutions":[{"id":"https://openalex.org/I200845125","display_name":"Nanjing University of Information Science and Technology","ror":"https://ror.org/02y0rxk19","country_code":"CN","type":"education","lineage":["https://openalex.org/I200845125"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaolong Xu","raw_affiliation_strings":["Nanjing University of Information Science and Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanjing University of Information Science and Technology","institution_ids":["https://openalex.org/I200845125"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100577932","display_name":"Xiang Zhu","orcid":null},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiang Zhu","raw_affiliation_strings":["National University of Defense Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Defense Technology","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055675863","display_name":"Xiaokang Zhou","orcid":"https://orcid.org/0000-0003-3488-4679"},"institutions":[{"id":"https://openalex.org/I56624758","display_name":"Kansai University","ror":"https://ror.org/03xg1f311","country_code":"JP","type":"education","lineage":["https://openalex.org/I56624758"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Xiaokang Zhou","raw_affiliation_strings":["Kansai University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kansai University","institution_ids":["https://openalex.org/I56624758"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001996145","display_name":"Fei Dai","orcid":"https://orcid.org/0000-0001-6469-357X"},"institutions":[{"id":"https://openalex.org/I25399270","display_name":"Southwest Forestry University","ror":"https://ror.org/03dfa9f06","country_code":"CN","type":"education","lineage":["https://openalex.org/I25399270"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fei Dai","raw_affiliation_strings":["Southwest Forestry University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Southwest Forestry University","institution_ids":["https://openalex.org/I25399270"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067969908","display_name":"Yansong Gao","orcid":"https://orcid.org/0000-0001-6029-5064"},"institutions":[{"id":"https://openalex.org/I177877127","display_name":"The University of Western Australia","ror":"https://ror.org/047272k79","country_code":"AU","type":"education","lineage":["https://openalex.org/I177877127"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Yansong Gao","raw_affiliation_strings":["The University of Western Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Western Australia","institution_ids":["https://openalex.org/I177877127"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100373698","display_name":"Xiao Dong Chen","orcid":"https://orcid.org/0000-0002-0150-0491"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xiao Chen","raw_affiliation_strings":["University of Newcastle"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Newcastle","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101828750","display_name":"Shuo Wang","orcid":"https://orcid.org/0000-0003-2854-9460"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shuo Wang","raw_affiliation_strings":["Shanghai Jiao Tong University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5067937193","display_name":"Hongsheng Hu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hongsheng Hu","raw_affiliation_strings":["University of Newcastle"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Newcastle","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"4815","last_page":"4823"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9923999905586243,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9158999919891357,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.7914000153541565},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7735000252723694},{"id":"https://openalex.org/keywords/federated-learning","display_name":"Federated learning","score":0.7328000068664551},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5728999972343445},{"id":"https://openalex.org/keywords/property","display_name":"Property (philosophy)","score":0.48910000920295715},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.43639999628067017},{"id":"https://openalex.org/keywords/training","display_name":"Training (meteorology)","score":0.4253999888896942},{"id":"https://openalex.org/keywords/raw-data","display_name":"Raw data","score":0.4203999936580658}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8001999855041504},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.7914000153541565},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7735000252723694},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.7328000068664551},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5728999972343445},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5350000262260437},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.48910000920295715},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.43639999628067017},{"id":"https://openalex.org/C2777211547","wikidata":"https://www.wikidata.org/wiki/Q17141490","display_name":"Training (meteorology)","level":2,"score":0.4253999888896942},{"id":"https://openalex.org/C132964779","wikidata":"https://www.wikidata.org/wiki/Q2110223","display_name":"Raw data","level":2,"score":0.4203999936580658},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3361000120639801},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.33340001106262207},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.32440000772476196},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.3156000077724457},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.31520000100135803},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3084999918937683},{"id":"https://openalex.org/C2983685735","wikidata":"https://www.wikidata.org/wiki/Q5227355","display_name":"Data source","level":2,"score":0.29679998755455017},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.28439998626708984},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.2599000036716461},{"id":"https://openalex.org/C160234255","wikidata":"https://www.wikidata.org/wiki/Q812535","display_name":"Bayesian inference","level":3,"score":0.2590999901294708},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2587999999523163},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.25619998574256897},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.25119999051094055}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.24963/ijcai.2025/536","is_oa":false,"landing_page_url":"https://doi.org/10.24963/ijcai.2025/536","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirty-Fourth International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"},{"id":"pmh:oai:pure.atira.dk:publications/6002c729-bdf7-427b-8af0-c542cbea2277","is_oa":true,"landing_page_url":"https://research-repository.uwa.edu.au/en/publications/6002c729-bdf7-427b-8af0-c542cbea2277","pdf_url":null,"source":{"id":"https://openalex.org/S4306402492","display_name":"UWA Profiles and Research Repository (UWA)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I177877127","host_organization_name":"The University of Western Australia","host_organization_lineage":["https://openalex.org/I177877127"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"pmh:oai:pure.atira.dk:publications/6002c729-bdf7-427b-8af0-c542cbea2277","is_oa":true,"landing_page_url":"https://research-repository.uwa.edu.au/en/publications/6002c729-bdf7-427b-8af0-c542cbea2277","pdf_url":null,"source":{"id":"https://openalex.org/S4306402492","display_name":"UWA Profiles and Research Repository (UWA)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I177877127","host_organization_name":"The University of Western Australia","host_organization_lineage":["https://openalex.org/I177877127"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/conferenceObject"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Federated":[0],"learning":[1],"(FL)":[2],"enables":[3],"collaborative":[4],"model":[5,29],"training":[6,52,81,115],"without":[7],"exposing":[8],"raw":[9],"data,":[10],"offering":[11],"a":[12,50,96,146],"privacy-aware":[13],"alternative":[14],"to":[15,22,57,105,120],"centralized":[16],"learning.":[17],"However,":[18],"FL":[19,44,129,153],"remains":[20],"vulnerable":[21],"various":[23],"privacy":[24,150],"attacks":[25,41,65],"that":[26,93,135],"exploit":[27],"shared":[28],"updates,":[30],"including":[31],"membership":[32],"inference,":[33,35],"property":[34],"and":[36,59,70,117,131,154],"gradient":[37],"inversion.":[38],"Source":[39],"inference":[40,64,91],"further":[42],"threaten":[43],"by":[45],"identifying":[46],"which":[47],"client":[48],"contributed":[49],"specific":[51],"sample,":[53],"posing":[54],"severe":[55],"risks":[56],"user":[58],"institutional":[60],"privacy.":[61],"Existing":[62],"source":[63,90],"mainly":[66],"assume":[67],"passive":[68,141],"adversaries":[69],"overlook":[71],"more":[72,106],"realistic":[73],"scenarios":[74],"where":[75],"the":[76,80],"server":[77,98],"actively":[78],"manipulates":[79],"process.":[82],"In":[83],"this":[84],"paper,":[85],"we":[86],"present":[87],"an":[88],"enhanced":[89],"attack":[92],"demonstrates":[94],"how":[95],"malicious":[97],"can":[99],"amplify":[100],"behavioral":[101],"differences":[102],"between":[103],"clients":[104],"accurately":[107],"infer":[108],"data":[109,118],"origin.":[110],"Our":[111],"approach":[112],"introduces":[113],"active":[114,161],"manipulation":[116],"augmentation":[119],"expose":[121],"client-specific":[122],"patterns.":[123],"Experimental":[124],"results":[125],"across":[126],"five":[127],"representative":[128],"algorithms":[130],"multiple":[132],"datasets":[133],"show":[134],"our":[136],"method":[137],"significantly":[138],"outperforms":[139],"prior":[140],"attacks.":[142],"These":[143],"findings":[144],"reveal":[145],"deeper":[147],"level":[148],"of":[149],"vulnerability":[151],"in":[152],"call":[155],"for":[156],"stronger":[157],"defense":[158],"mechanisms":[159],"under":[160],"threat":[162],"models.":[163]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-19T07:52:34.831488","created_date":"2025-10-10T00:00:00"}