arXiv:2411.18269cs.CLcs.CR2024-11被引 1

提出隐蔽数据重建攻击,可无声窃取高分辨率私有数据

Hidden Data Privacy Breaches in Federated Learning

  • 通过参数共享嵌入隐藏模型,实现无痕数据提取
  • 在5个数据集上优于现有5种攻击方法,可处理高分辨率图像
  • 适用于主流联邦学习框架,提醒开发者加强防御

联邦学习(FL)通过避免直接共享数据来提升隐私保护,但近期研究发现攻击者可通过模型操控或梯度分析窃取私有数据。现有攻击受限于窃取量少或数据分辨率低,且常被梯度/权重异常检测发现。本文提出一种新型数据重建攻击,利用恶意代码注入,结合独特稀疏编码设计与块分区技术。该方法通过参数共享隐蔽嵌入隐藏模型,系统性提取敏感数据;基于斐波那契的索引设计实现高效结构化检索,块分区使高分辨率图像处理更可行。在4个数据集上的实验表明,本方法在5种检测机制下均优于5种前沿数据重建攻击,能有效应对当前最先进的防御手段,且无需修改即可应用于FedAVG和FedSGD场景。研究揭示了现有防御体系的漏洞,亟需新防护策略。

原文摘要 · Abstract (English)

Federated Learning (FL) emerged as a paradigm for conducting machine learning across broad and decentralized datasets, promising enhanced privacy by obviating the need for direct data sharing. However, recent studies show that attackers can steal private data through model manipulation or gradient analysis. Existing attacks are constrained by low theft quantity or low-resolution data, and they are often detected through anomaly monitoring in gradients or weights. In this paper, we propose a novel data-reconstruction attack leveraging malicious code injection, supported by two key techniques, i.e., distinctive and sparse encoding design and block partitioning. Unlike conventional methods that require detectable changes to the model, our method stealthily embeds a hidden model using parameter sharing to systematically extract sensitive data. The Fibonacci-based index design ensures efficient, structured retrieval of memorized data, while the block partitioning method enhances our method's capability to handle high-resolution images by dividing them into smaller, manageable units. Extensive experiments on 4 datasets confirmed that our method is superior to the five state-of-the-art data-reconstruction attacks under the five respective detection methods. Our method can handle large-scale and high-resolution data without being detected or mitigated by state-of-the-art data reconstruction defense methods. In contrast to baselines, our method can be directly applied to both FedAVG and FedSGD scenarios, underscoring the need for developers to devise new defenses against such vulnerabilities. We will open-source our code upon acceptance.

联邦学习隐私泄露数据重建安全攻防

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。