{"total":382,"rows":[{"id":"2106.06843","title":"Federated Learning on Non-IID Data: A Survey","created":"2021-06-12","cited_by_count":346,"area":null},{"id":"2104.07586","title":"See through Gradients: Image Batch Recovery via GradInversion","created":"2021-04-15","cited_by_count":326,"area":null},{"id":"2112.00059","title":"Evaluating Gradient Inversion Attacks and Defenses in Federated Learning","created":"2021-11-30","cited_by_count":196,"area":null},{"id":"2310.06816","title":"Text Embeddings Reveal (Almost) As Much As Text","created":"2023-10-10","cited_by_count":192,"area":null},{"id":"2112.02918","title":"When the Curious Abandon Honesty: Federated Learning Is Not Private","created":"2021-12-06","cited_by_count":127,"area":null},{"id":"2203.11473","title":"Federated Class-Incremental Learning","created":"2022-03-22","cited_by_count":127,"area":null},{"id":"2110.13057","title":"Robbing the Fed: Directly Obtaining Private Data in Federated Learning with Modified Models","created":"2021-10-25","cited_by_count":108,"area":null},{"id":"2110.14962","title":"Gradient Inversion with Generative Image Prior","created":"2021-10-28","cited_by_count":101,"area":null},{"id":"2107.06641","title":"Trustworthy AI: A Computational Perspective","created":"2021-07-12","cited_by_count":93,"area":null},{"id":"2102.08504","title":"Label Leakage and Protection in Two-party Split Learning","created":"2021-02-17","cited_by_count":90,"area":null},{"id":"2201.08135","title":"Survey on Federated Learning Threats: concepts, taxonomy on attacks and defences, experimental study and challenges","created":"2022-01-20","cited_by_count":84,"area":null},{"id":"2305.03010","title":"Sentence Embedding Leaks More Information than You Expect: Generative Embedding Inversion Attack to Recover the Whole Sentence","created":"2023-05-04","cited_by_count":81,"area":null},{"id":"2110.15122","title":"CAFE: Catastrophic Data Leakage in Vertical Federated Learning","created":"2021-10-26","cited_by_count":76,"area":null},{"id":"2203.15696","title":"Auditing Privacy Defenses in Federated Learning via Generative Gradient Leakage","created":"2022-03-29","cited_by_count":72,"area":null},{"id":"2205.08514","title":"Recovering Private Text in Federated Learning of Language Models","created":"2022-05-17","cited_by_count":70,"area":null},{"id":"2106.13673","title":"Understanding Clipping for Federated Learning: Convergence and Client-Level Differential Privacy","created":"2021-06-25","cited_by_count":69,"area":null},{"id":"2104.14362","title":"From Distributed Machine Learning to Federated Learning: A Survey","created":"2021-04-29","cited_by_count":66,"area":null},{"id":"2108.04417","title":"Privacy-Preserving Machine Learning: Methods, Challenges and Directions","created":"2021-08-10","cited_by_count":58,"area":null},{"id":"2206.00216","title":"THE-X: Privacy-Preserving Transformer Inference with Homomorphic Encryption","created":"2022-06-01","cited_by_count":57,"area":null},{"id":"2202.08827","title":"LAMP: Extracting Text from Gradients with Language Model Priors","created":"2022-02-17","cited_by_count":54,"area":null},{"id":"2204.05011","title":"FederatedScope: A Flexible Federated Learning Platform for Heterogeneity","created":"2022-04-11","cited_by_count":53,"area":null},{"id":"2312.16475","title":"Federated Continual Learning via Knowledge Fusion: A Survey","created":"2023-12-27","cited_by_count":53,"area":null},{"id":"2108.09033","title":"UnSplit: Data-Oblivious Model Inversion, Model Stealing, and Label Inference Attacks Against Split Learning","created":"2021-08-20","cited_by_count":52,"area":null},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2404.03233","title":"Learn What You Want to Unlearn: Unlearning Inversion Attacks against Machine Unlearning","created":"2024-04-04","cited_by_count":48,"area":"safety"},{"id":"2302.07225","title":"Bounding Training Data Reconstruction in DP-SGD","created":"2023-02-14","cited_by_count":46,"area":"safety"},{"id":"2308.04699","title":"GIFD: A Generative Gradient Inversion Method with Feature Domain Optimization","created":"2023-08-09","cited_by_count":45,"area":null},{"id":"2102.05218","title":"FLOP: Federated Learning on Medical Datasets using Partial Networks","created":"2021-02-10","cited_by_count":42,"area":null},{"id":"2203.10144","title":"Closing the Generalization Gap of Cross-silo Federated Medical Image Segmentation","created":"2022-03-18","cited_by_count":42,"area":null},{"id":"2301.01299","title":"Recent Advances on Federated Learning: A Systematic Survey","created":"2023-01-03","cited_by_count":41,"area":null},{"id":"2110.09074","title":"Towards General Deep Leakage in Federated Learning","created":"2021-10-18","cited_by_count":40,"area":null},{"id":"2206.07284","title":"A Survey on Gradient Inversion: Attacks, Defenses and Future Directions","created":"2022-06-15","cited_by_count":40,"area":null},{"id":"2111.08211","title":"FedCG: Leverage Conditional GAN for Protecting Privacy and Maintaining Competitive Performance in Federated Learning","created":"2021-11-16","cited_by_count":39,"area":null},{"id":"2203.05816","title":"No Free Lunch Theorem for Security and Utility in Federated Learning","created":"2022-03-11","cited_by_count":39,"area":null},{"id":"2206.04055","title":"Gradient Obfuscation Gives a False Sense of Security in Federated Learning","created":"2022-06-08","cited_by_count":39,"area":null},{"id":"2105.00529","title":"GRNN: Generative Regression Neural Network -- A Data Leakage Attack for Federated Learning","created":"2021-05-02","cited_by_count":36,"area":null},{"id":"2303.12233","title":"LOKI: Large-scale Data Reconstruction Attack against Federated Learning through Model Manipulation","created":"2023-03-21","cited_by_count":36,"area":null},{"id":"2404.15381","title":"Advances and Open Challenges in Federated Foundation Models","created":"2024-04-23","cited_by_count":36,"area":null},{"id":"2208.10888","title":"Joint Privacy Enhancement and Quantization in Federated Learning","created":"2022-08-23","cited_by_count":35,"area":null},{"id":"2111.04706","title":"Bayesian Framework for Gradient Leakage","created":"2021-11-08","cited_by_count":34,"area":null},{"id":"2209.00230","title":"Trading Off Privacy, Utility and Efficiency in Federated Learning","created":"2022-09-01","cited_by_count":33,"area":null},{"id":"2412.06157","title":"Membership Inference Attacks and Defenses in Federated Learning: A Survey","created":"2024-12-09","cited_by_count":31,"area":"safety"},{"id":"2111.00173","title":"Dynamic Differential-Privacy Preserving SGD","created":"2021-10-30","cited_by_count":30,"area":null},{"id":"2210.10880","title":"Learning to Invert: Simple Adaptive Attacks for Gradient Inversion in Federated Learning","created":"2022-10-19","cited_by_count":30,"area":null},{"id":"2209.05578","title":"Cocktail Party Attack: Breaking Aggregation-Based Privacy in Federated Learning using Independent Component Analysis","created":"2022-09-12","cited_by_count":29,"area":null},{"id":"2108.04725","title":"PRECODE - A Generic Model Extension to Prevent Deep Gradient Leakage","created":"2021-08-10","cited_by_count":28,"area":null},{"id":"2210.07714","title":"CrowdGuard: Federated Backdoor Detection in Federated Learning","created":"2022-10-14","cited_by_count":27,"area":null},{"id":"2212.03714","title":"Reconstructing Training Data from Model Gradient, Provably","created":"2022-12-07","cited_by_count":27,"area":null},{"id":"2308.04604","title":"A Survey on Decentralized Federated Learning","created":"2023-08-08","cited_by_count":27,"area":null},{"id":"2206.12395","title":"Data Leakage in Federated Averaging","created":"2022-06-24","cited_by_count":26,"area":null},{"id":"2306.14123","title":"Privacy and Fairness in Federated Learning: on the Perspective of Trade-off","created":"2023-06-25","cited_by_count":26,"area":null},{"id":"2210.08371","title":"Sketching for First Order Method: Efficient Algorithm for Low-Bandwidth Channel and Vulnerability","created":"2022-10-15","cited_by_count":25,"area":null},{"id":"2405.20272","title":"Reconstruction Attacks on Machine Unlearning: Simple Models are Vulnerable","created":"2024-05-30","cited_by_count":25,"area":"safety"},{"id":"2112.14087","title":"APRIL: Finding the Achilles' Heel on Privacy for Vision Transformers","created":"2021-12-28","cited_by_count":24,"area":null},{"id":"2302.04787","title":"On the Privacy-Robustness-Utility Trilemma in Distributed Learning","created":"2023-02-09","cited_by_count":24,"area":null},{"id":"2302.10637","title":"A Survey of Trustworthy Federated Learning with Perspectives on Security, Robustness, and Privacy","created":"2023-02-21","cited_by_count":24,"area":null},{"id":"2306.16064","title":"Federated Generative Learning with Foundation Models","created":"2023-06-28","cited_by_count":23,"area":null},{"id":"2105.09369","title":"User-Level Label Leakage from Gradients in Federated Learning","created":"2021-05-19","cited_by_count":21,"area":null},{"id":"2307.10655","title":"A Survey of What to Share in Federated Learning: Perspectives on Model Utility, Privacy Leakage, and Communication Efficiency","created":"2023-07-20","cited_by_count":21,"area":null},{"id":"2311.05808","title":"Scale-MIA: A Scalable Model Inversion Attack against Secure Federated Learning via Latent Space Reconstruction","created":"2023-11-10","cited_by_count":21,"area":null},{"id":"2409.11585","title":"Advances in APPFL: A Comprehensive and Extensible Federated Learning Framework","created":"2024-09-17","cited_by_count":19,"area":null},{"id":"2108.06910","title":"A Novel Attribute Reconstruction Attack in Federated Learning","created":"2021-08-16","cited_by_count":18,"area":null},{"id":"2112.13178","title":"Gradient Leakage Attack Resilient Deep Learning","created":"2021-12-25","cited_by_count":18,"area":null},{"id":"2111.00556","title":"Revealing and Protecting Labels in Distributed Training","created":"2021-10-31","cited_by_count":17,"area":null},{"id":"2111.01338","title":"Federated Split Vision Transformer for COVID-19 CXR Diagnosis using Task-Agnostic Training","created":"2021-11-02","cited_by_count":17,"area":null},{"id":"2312.10108","title":"Privacy-Aware Document Visual Question Answering","created":"2023-12-15","cited_by_count":17,"area":null},{"id":"2111.00430","title":"Efficient passive membership inference attack in federated learning","created":"2021-10-31","cited_by_count":16,"area":"safety"},{"id":"2111.10178","title":"Understanding Training-Data Leakage from Gradients in Neural Networks for Image Classification","created":"2021-11-19","cited_by_count":16,"area":null},{"id":"2112.05409","title":"Batch Label Inference and Replacement Attacks in Black-Boxed Vertical Federated Learning","created":"2021-12-10","cited_by_count":16,"area":null},{"id":"2301.04017","title":"Reconstructing Individual Data Points in Federated Learning Hardened with Differential Privacy and Secure Aggregation","created":"2023-01-09","cited_by_count":16,"area":null},{"id":"2203.05222","title":"Similarity-based Label Inference Attack against Training and Inference of Split Learning","created":"2022-03-10","cited_by_count":15,"area":null},{"id":"2204.13784","title":"AGIC: Approximate Gradient Inversion Attack on Federated Learning","created":"2022-04-28","cited_by_count":15,"area":null},{"id":"2307.16680","title":"On the Trustworthiness Landscape of State-of-the-art Generative Models: A Survey and Outlook","created":"2023-07-31","cited_by_count":15,"area":"diffusion"},{"id":"2308.05832","title":"FLShield: A Validation Based Federated Learning Framework to Defend Against Poisoning Attacks","created":"2023-08-10","cited_by_count":15,"area":null},{"id":"2312.04447","title":"Privacy-preserving quantum federated learning via gradient hiding","created":"2023-12-07","cited_by_count":15,"area":null},{"id":"2403.03945","title":"SPEAR:Exact Gradient Inversion of Batches in Federated Learning","created":"2024-03-06","cited_by_count":15,"area":null},{"id":"2305.06473","title":"Securing Distributed SGD against Gradient Leakage Threats","created":"2023-05-10","cited_by_count":14,"area":null},{"id":"2405.15586","title":"DAGER: Exact Gradient Inversion for Large Language Models","created":"2024-05-24","cited_by_count":14,"area":null},{"id":"2405.20725","title":"GI-NAS: Boosting Gradient Inversion Attacks Through Adaptive Neural Architecture Search","created":"2024-05-31","cited_by_count":14,"area":null},{"id":"2109.13012","title":"Federated Deep Learning with Bayesian Privacy","created":"2021-09-27","cited_by_count":13,"area":null},{"id":"2210.01785","title":"TabLeak: Tabular Data Leakage in Federated Learning","created":"2022-10-04","cited_by_count":13,"area":null},{"id":"2308.04761","title":"Feature Matching Data Synthesis for Non-IID Federated Learning","created":"2023-08-09","cited_by_count":13,"area":null},{"id":"2309.13038","title":"Privacy Assessment on Reconstructed Images: Are Existing Evaluation Metrics Faithful to Human Perception?","created":"2023-09-22","cited_by_count":13,"area":null},{"id":"2402.15109","title":"Remaining-data-free Machine Unlearning by Suppressing Sample Contribution","created":"2024-02-23","cited_by_count":13,"area":"safety"},{"id":"2403.02116","title":"Inf2Guard: An Information-Theoretic Framework for Learning Privacy-Preserving Representations against Inference Attacks","created":"2024-03-04","cited_by_count":13,"area":"safety"},{"id":"2405.03636","title":"The Federation Strikes Back: A Survey of Federated Learning Privacy Attacks, Defenses, Applications, and Policy Landscape","created":"2024-05-06","cited_by_count":13,"area":null},{"id":"2107.02586","title":"Differentially private federated deep learning for multi-site medical image segmentation","created":"2021-07-06","cited_by_count":12,"area":null},{"id":"2211.14952","title":"Federated Learning Attacks and Defenses: A Survey","created":"2022-11-27","cited_by_count":12,"area":null},{"id":"2305.00312","title":"Optimizing Privacy, Utility and Efficiency in Constrained Multi-Objective Federated Learning","created":"2023-04-29","cited_by_count":12,"area":null},{"id":"2306.01356","title":"FedCIP: Federated Client Intellectual Property Protection with Traitor Tracking","created":"2023-06-02","cited_by_count":12,"area":"safety"},{"id":"2310.12462","title":"Unmasking Transformers: A Theoretical Approach to Data Recovery via Attention Weights","created":"2023-10-19","cited_by_count":12,"area":null},{"id":"2208.06163","title":"Dropout is NOT All You Need to Prevent Gradient Leakage","created":"2022-08-12","cited_by_count":11,"area":null},{"id":"2209.05724","title":"Concealing Sensitive Samples against Gradient Leakage in Federated Learning","created":"2022-09-13","cited_by_count":11,"area":null},{"id":"2306.00127","title":"Surrogate Model Extension (SME): A Fast and Accurate Weight Update Attack on Federated Learning","created":"2023-05-31","cited_by_count":11,"area":null},{"id":"2310.00222","title":"Source Inference Attacks: Beyond Membership Inference Attacks in Federated Learning","created":"2023-09-30","cited_by_count":11,"area":"safety"},{"id":"2204.03500","title":"Multi-Task Distributed Learning using Vision Transformer with Random Patch Permutation","created":"2022-04-07","cited_by_count":10,"area":null},{"id":"2209.03885","title":"A Framework for Evaluating Privacy-Utility Trade-off in Vertical Federated Learning","created":"2022-09-08","cited_by_count":10,"area":null},{"id":"2405.11916","title":"Information Leakage from Embedding in Large Language Models","created":"2024-05-20","cited_by_count":10,"area":null},{"id":"2106.04384","title":"FL-Market: Trading Private Models in Federated Learning","created":"2021-06-08","cited_by_count":9,"area":null},{"id":"2206.04887","title":"Deep Leakage from Model in Federated Learning","created":"2022-06-10","cited_by_count":9,"area":null}],"next_cursor":"100"}