Privacy Against Inference Attacks in Vertical Federated Learning

07/24/2022
by   Borzoo Rassouli, et al.
2

Vertical federated learning is considered, where an active party, having access to true class labels, wishes to build a classification model by utilizing more features from a passive party, which has no access to the labels, to improve the model accuracy. In the prediction phase, with logistic regression as the classification model, several inference attack techniques are proposed that the adversary, i.e., the active party, can employ to reconstruct the passive party's features, regarded as sensitive information. These attacks, which are mainly based on a classical notion of the center of a set, i.e., the Chebyshev center, are shown to be superior to those proposed in the literature. Moreover, several theoretical performance guarantees are provided for the aforementioned attacks. Subsequently, we consider the minimum amount of information that the adversary needs to fully reconstruct the passive party's features. In particular, it is shown that when the passive party holds one feature, and the adversary is only aware of the signs of the parameters involved, it can perfectly reconstruct that feature when the number of predictions is large enough. Next, as a defense mechanism, a privacy-preserving scheme is proposed that worsen the adversary's reconstruction attacks, while preserving the full benefits that VFL brings to the active party. Finally, experimental results demonstrate the effectiveness of the proposed attacks and the privacy-preserving scheme.

READ FULL TEXT

page 1

page 2

page 3

page 4

research
02/10/2023

Privacy Against Agnostic Inference Attacks in Vertical Federated Learning

A novel form of inference attack in vertical federated learning (VFL) is...
research
07/07/2023

Incentive Allocation in Vertical Federated Learning Based on Bankruptcy Problem

Vertical federated learning (VFL) is a promising approach for collaborat...
research
10/13/2022

Feature Reconstruction Attacks and Countermeasures of DNN training in Vertical Federated Learning

Federated learning (FL) has increasingly been deployed, in its vertical ...
research
10/20/2020

Feature Inference Attack on Model Predictions in Vertical Federated Learning

Federated learning (FL) is an emerging paradigm for facilitating multipl...
research
11/05/2021

DVFL: A Vertical Federated Learning Method for Dynamic Data

Federated learning, which solves the problem of data island by connectin...
research
07/19/2022

Is Vertical Logistic Regression Privacy-Preserving? A Comprehensive Privacy Analysis and Beyond

We consider vertical logistic regression (VLR) trained with mini-batch g...
research
08/27/2019

Key Protected Classification for Collaborative Learning

Large-scale datasets play a fundamental role in training deep learning m...

Please sign up or login with your details

Forgot password? Click here to reset