On the Efficiency of Privacy Attacks in Federated Learning
Not on the map. Why?
Abstract (arXiv)
Recent studies have revealed severe privacy risks in federated learning, represented by Gradient Leakage Attacks. However, existing studies mainly aim at increasing the privacy attack success rate and overlook the high computation costs for recovering private data, making the privacy attack impractical in real applications. In this study, we examine privacy attacks from the perspective of efficiency and propose a framework for improving the Efficiency of Privacy Attacks in Federated Learning (EPAFL). We make three novel contributions. First, we systematically evaluate the computational costs for representative privacy attacks in federated learning, which exhibits a high potential to optimize efficiency. Second, we propose three early-stopping techniques to effectively reduce the computational costs of these privacy attacks. Third, we perform experiments on benchmark datasets and show that our proposed method can significantly reduce computational costs and maintain comparable attack success rates for state-of-the-art privacy attacks in federated learning. We provide the codes on GitHub at https://github.com/mlsysx/EPAFL.
Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Builds on 29 of its 45 references that are in the map. First posted on arXiv 15 Apr 2024.
Builds on
29 of 45 references.
References · 29
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,592
- 2018Federated Optimization in Heterogeneous Networkscited by 2,971
- 2019Federated Learning: Challenges, Methods, and Future Directionscited by 1,531
- 2016Federated Learning: Strategies for Improving Communication Efficiencycited by 1,461
- 2019On the Convergence of FedAvg on Non-IID Datacited by 1,220
- 2020Adaptive Federated Optimizationcited by 1,036
- 2019Deep Leakage from Gradientscited by 1,004
- 2018How To Backdoor Federated Learningcited by 745
- 2020Inverting Gradients -- How easy is it to break privacy in federated learning?cited by 707
- 2018Federated Learning for Mobile Keyboard Predictioncited by 565
- 2020Federated Learning with Matched Averagingcited by 564
- 2019Local Model Poisoning Attacks to Byzantine-Robust Federated Learningcited by 479
17 more
- 2020iDLG: Improved Deep Leakage from Gradientscited by 367
- 2021See through Gradients: Image Batch Recovery via GradInversioncited by 320
- 2019Robust Aggregation for Federated Learningcited by 314
- 2018Horovod: fast and easy distributed deep learning in TensorFlowcited by 275
- 2020Data Poisoning Attacks Against Federated Learning Systemscited by 266
- 2020R-GAP: Recursive Gradient Attack on Privacycited by 95
- 2021Federated Learning: Opportunities and Challengescited by 83
- 2021CAFE: Catastrophic Data Leakage in Vertical Federated Learningcited by 76
- 2020SAPAG: A Self-Adaptive Privacy Attack From Gradientscited by 27
- 2021Get a Model! Model Hijacking Attack Against Machine Learning Modelscited by 13
- 2023Securing Distributed SGD against Gradient Leakage Threatscited by 13
- 2022Selecting and Composing Learning Rate Policies for Deep Neural Networkscited by 11
- 2018A Comparative Measurement Study of Deep Learning as a Service Frameworkcited by 10
- 2023Privacy Risks Analysis and Mitigation in Federated Learning for Medical Imagescited by 7
- 2021Parallel Detection for Efficient Video Analytics at the Edgecited by 6
- 2023STDLens: Model Hijacking-Resilient Federated Learning for Object Detectioncited by 4
- 2016DeepSpark: A Spark-Based Distributed Deep Learning Framework for Commodity Clusterscited by 2
Built on by
Citing papers per year: 2024: 2; 2025: 0; 2026: 1.
3 papers.