{"id":"https://openalex.org/W7148534848","doi":"https://doi.org/10.48550/arxiv.2604.00955","title":"Enhancing Gradient Inversion Attacks in Federated Learning via Hierarchical Feature Optimization","display_name":"Enhancing Gradient Inversion Attacks in Federated Learning via Hierarchical Feature Optimization","publication_year":2026,"publication_date":"2026-04-01","ids":{"openalex":"https://openalex.org/W7148534848","doi":"https://doi.org/10.48550/arxiv.2604.00955"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.00955","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.00955","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.00955","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5132827146","display_name":"Hao Fang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Fang, Hao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5132801249","display_name":"Wenbo Yu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yu, Wenbo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5132811018","display_name":"Bin Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Bin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5132819699","display_name":"Xuan Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Xuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5132789409","display_name":"Shu-Tao Xia","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xia, Shu-Tao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5132801569","display_name":"Qing Liao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liao, Qing","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5132796492","display_name":"Ke Xu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xu, Ke","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5659000277519226,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5659000277519226,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.3637999892234802,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11612","display_name":"Stochastic Gradient Optimization Techniques","score":0.015699999406933784,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/federated-learning","display_name":"Federated learning","score":0.6184999942779541},{"id":"https://openalex.org/keywords/feature-vector","display_name":"Feature vector","score":0.4853000044822693},{"id":"https://openalex.org/keywords/inversion","display_name":"Inversion (geology)","score":0.47769999504089355},{"id":"https://openalex.org/keywords/constraint","display_name":"Constraint (computer-aided design)","score":0.4717999994754791},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.446399986743927},{"id":"https://openalex.org/keywords/generative-grammar","display_name":"Generative grammar","score":0.3903000056743622},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.3716999888420105},{"id":"https://openalex.org/keywords/synthetic-data","display_name":"Synthetic data","score":0.36329999566078186},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.3560999929904938},{"id":"https://openalex.org/keywords/generative-model","display_name":"Generative model","score":0.3472000062465668}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8091999888420105},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.6184999942779541},{"id":"https://openalex.org/C83665646","wikidata":"https://www.wikidata.org/wiki/Q42139305","display_name":"Feature vector","level":2,"score":0.4853000044822693},{"id":"https://openalex.org/C1893757","wikidata":"https://www.wikidata.org/wiki/Q3653001","display_name":"Inversion (geology)","level":3,"score":0.47769999504089355},{"id":"https://openalex.org/C2776036281","wikidata":"https://www.wikidata.org/wiki/Q48769818","display_name":"Constraint (computer-aided design)","level":2,"score":0.4717999994754791},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4478999972343445},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.446399986743927},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.4287000000476837},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4050000011920929},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.3903000056743622},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.37599998712539673},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.3716999888420105},{"id":"https://openalex.org/C160920958","wikidata":"https://www.wikidata.org/wiki/Q7662746","display_name":"Synthetic data","level":2,"score":0.36329999566078186},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.3560999929904938},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.3472000062465668},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.3165000081062317},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.31310001015663147},{"id":"https://openalex.org/C2988382989","wikidata":"https://www.wikidata.org/wiki/Q370685","display_name":"Data space","level":2,"score":0.30730000138282776},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.30660000443458557},{"id":"https://openalex.org/C70061542","wikidata":"https://www.wikidata.org/wiki/Q989016","display_name":"Distributed database","level":2,"score":0.2969000041484833},{"id":"https://openalex.org/C147764199","wikidata":"https://www.wikidata.org/wiki/Q6865248","display_name":"Minification","level":2,"score":0.29510000348091125},{"id":"https://openalex.org/C2778572836","wikidata":"https://www.wikidata.org/wiki/Q380933","display_name":"Space (punctuation)","level":2,"score":0.2777000069618225},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.275299996137619},{"id":"https://openalex.org/C2988773926","wikidata":"https://www.wikidata.org/wiki/Q25104379","display_name":"Generative adversarial network","level":3,"score":0.2745000123977661},{"id":"https://openalex.org/C47487241","wikidata":"https://www.wikidata.org/wiki/Q5227230","display_name":"Data access","level":2,"score":0.2743000090122223},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2694999873638153},{"id":"https://openalex.org/C23130292","wikidata":"https://www.wikidata.org/wiki/Q5275358","display_name":"Differential privacy","level":2,"score":0.26750001311302185},{"id":"https://openalex.org/C136197465","wikidata":"https://www.wikidata.org/wiki/Q1729295","display_name":"Variety (cybernetics)","level":2,"score":0.26570001244544983},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.2653000056743622},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.2646999955177307},{"id":"https://openalex.org/C137836250","wikidata":"https://www.wikidata.org/wiki/Q984063","display_name":"Optimization problem","level":2,"score":0.2603999972343445},{"id":"https://openalex.org/C153258448","wikidata":"https://www.wikidata.org/wiki/Q1199743","display_name":"Gradient descent","level":3,"score":0.25929999351501465},{"id":"https://openalex.org/C72634772","wikidata":"https://www.wikidata.org/wiki/Q386824","display_name":"Data integration","level":2,"score":0.25060001015663147}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.00955","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.00955","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.00955","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.00955","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Federated":[0],"Learning":[1],"(FL)":[2],"has":[3],"emerged":[4],"as":[5,73,217],"a":[6,20,29,156,165,213,236],"compelling":[7],"paradigm":[8],"for":[9],"privacy-preserving":[10],"distributed":[11],"machine":[12],"learning,":[13],"allowing":[14],"multiple":[15],"clients":[16],"to":[17,28,52,62,144,148,158,170,178],"collaboratively":[18],"train":[19],"global":[21],"model":[22,114],"by":[23,66,163],"transmitting":[24],"locally":[25],"computed":[26],"gradients":[27,43,61],"central":[30],"server":[31],"without":[32],"exposing":[33],"their":[34,93],"private":[35],"data.":[36],"Nonetheless,":[37],"recent":[38],"studies":[39],"find":[40],"that":[41,187,224],"the":[42,46,84,88,112,117,121,129,136,140,149,171,179,185,188,197,204],"exchanged":[44],"in":[45,83],"FL":[47,194,239],"system":[48],"are":[49],"also":[50,175],"vulnerable":[51],"privacy":[53],"leakage,":[54],"e.g.,":[55],"an":[56,218],"attacker":[57],"can":[58,227],"invert":[59],"shared":[60],"reconstruct":[63],"sensitive":[64],"data":[65,199],"leveraging":[67],"pre-trained":[68],"generative":[69],"adversarial":[70],"networks":[71],"(GAN)":[72],"prior":[74],"knowledge.":[75],"However,":[76],"existing":[77],"attacks":[78],"simply":[79],"perform":[80],"gradient":[81],"inversion":[82],"latent":[85,131,142],"space":[86,143],"of":[87,120,125,191,208,238],"GAN":[89,113],"model,":[90],"which":[91,110,183],"limits":[92],"expression":[94],"ability":[95],"and":[96,115,193,211,231],"generalizability.":[97],"To":[98],"tackle":[99],"these":[100],"challenges,":[101],"we":[102,133,154,202],"propose":[103,212],"\\textbf{G}radient":[104],"\\textbf{I}nversion":[105],"over":[106,128],"\\textbf{F}eature":[107],"\\textbf{D}omains":[108],"(GIFD),":[109],"disassembles":[111],"searches":[116],"hierarchical":[118],"features":[119],"intermediate":[122,145],"layers.":[123],"Instead":[124],"optimizing":[126],"only":[127],"initial":[130,141],"code,":[132],"progressively":[134],"change":[135],"optimized":[137],"layer,":[138],"from":[139],"layers":[146],"closer":[147],"output":[150],"images.":[151],"In":[152],"addition,":[153],"design":[155],"regularizer":[157],"avoid":[159],"unreal":[160],"image":[161],"generation":[162],"adding":[164],"small":[166],"${l_1}$":[167],"ball":[168],"constraint":[169],"searching":[172],"range.":[173],"We":[174],"extend":[176],"GIFD":[177],"out-of-distribution":[180],"(OOD)":[181],"setting,":[182],"weakens":[184],"assumption":[186],"training":[189],"sets":[190],"GANs":[192],"tasks":[195],"obey":[196],"same":[198],"distribution.":[200],"Furthermore,":[201],"consider":[203],"challenging":[205],"OOD":[206],"scenario":[207],"label":[209,214],"inconsistency":[210],"mapping":[215],"technique":[216],"effective":[219],"solution.":[220],"Extensive":[221],"experiments":[222],"demonstrate":[223],"our":[225],"method":[226],"achieve":[228],"pixel-level":[229],"reconstruction":[230],"outperform":[232],"competitive":[233],"baselines":[234],"across":[235],"variety":[237],"scenarios.":[240]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-04-03T00:00:00"}