Batch Label Inference and Replacement Attacks in Black-Boxed Vertical Federated Learning

no code implementations • 10 Dec 2021 • Yang Liu, Tianyuan Zou, Yan Kang, Wenhan Liu, Yuanqin He, Zhihao Yi, Qiang Yang

An immediate defense strategy is to protect sample-level messages communicated with Homomorphic Encryption (HE), and in this way only the batch-averaged local gradients are exposed to each party (termed black-boxed VFL).

Inference Attack Vertical Federated Learning

Backdoor attacks and defenses in feature-partitioned collaborative learning

no code implementations • 7 Jul 2020 • Yang Liu, Zhihao Yi, Tianjian Chen

In this paper, we show that even parties with no access to labels can successfully inject backdoor attacks, achieving high accuracy on both main and backdoor tasks.

Federated Learning