Skip to content

Add a backdoor attack and a label inference attack against VFL#5

Open
shgal637 wants to merge 1 commit into
mindspore-ai:masterfrom
shgal637:vfl_attacks
Open

Add a backdoor attack and a label inference attack against VFL#5
shgal637 wants to merge 1 commit into
mindspore-ai:masterfrom
shgal637:vfl_attacks

Conversation

@shgal637

@shgal637 shgal637 commented Nov 4, 2024

Copy link
Copy Markdown

What type of PR is this?

Uncomment only one /kind <> line, hit enter to put that in a new line, and remove leading whitespaces from that line:

/kind bug

/kind task

/kind feature

What does this PR do / why do we need it:
This PR introduces two new algorithms aimed at enhancing research on the security issues in Vertical Federated Learning (VFL) scenarios:

  1. Gradient-Replacement Backdoor Attack: A backdoor attack algorithm that manipulates the gradients to inject malicious behaviors into the server.
  2. Direct Label Inference Attack: A label inference algorithm that aims to infer the labels of the data owned by other parties in the VFL setting.
    These additions are crucial for studying and understanding the vulnerabilities and potential defenses in VFL.

Which issue(s) this PR fixes:

Fixes #

Special notes for your reviewers:
The examples folder and the_example.py file are provided as examples. The main code for the algorithms is located in the utils folder.

@VioletZCJ

VioletZCJ commented Oct 24, 2025

Copy link
Copy Markdown

所属项目:分布式学习中的数据安全基础理论,课题1,武汉大学,何琨老师团队
支持算法数量:4种
· gr(梯度替换攻击):通用场景(cifar)/医疗场景(bhi)
· direct_label_inference(直接标签推理攻击):通用场景(cifar)/医疗场景(bhi)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants