Membership Inference Attacks and Defenses in Federated Learning: A Survey

Fuente: arXiv
Salvato in:
Dettagli Bibliografici
Autori principali: Bai, Li, Hu, Haibo, Ye, Qingqing, Li, Haoyang, Wang, Leixia, Xu, Jianliang
Natura: Preprint
Pubblicazione: 2024
Soggetti:
Accesso online:
Tags: Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
_version_ 1866912149237923840
author Bai, Li
Hu, Haibo
Ye, Qingqing
Li, Haoyang
Wang, Leixia
Xu, Jianliang
author_facet Bai, Li
Hu, Haibo
Ye, Qingqing
Li, Haoyang
Wang, Leixia
Xu, Jianliang
contents Federated learning is a decentralized machine learning approach where clients train models locally and share model updates to develop a global model. This enables low-resource devices to collaboratively build a high-quality model without requiring direct access to the raw training data. However, despite only sharing model updates, federated learning still faces several privacy vulnerabilities. One of the key threats is membership inference attacks, which target clients' privacy by determining whether a specific example is part of the training set. These attacks can compromise sensitive information in real-world applications, such as medical diagnoses within a healthcare system. Although there has been extensive research on membership inference attacks, a comprehensive and up-to-date survey specifically focused on it within federated learning is still absent. To fill this gap, we categorize and summarize membership inference attacks and their corresponding defense strategies based on their characteristics in this setting. We introduce a unique taxonomy of existing attack research and provide a systematic overview of various countermeasures. For these studies, we thoroughly analyze the strengths and weaknesses of different approaches. Finally, we identify and discuss key future research directions for readers interested in advancing the field.
format Preprint
id arxiv_https___arxiv_org_abs_2412_06157
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Membership Inference Attacks and Defenses in Federated Learning: A Survey
Bai, Li
Hu, Haibo
Ye, Qingqing
Li, Haoyang
Wang, Leixia
Xu, Jianliang
Cryptography and Security
Federated learning is a decentralized machine learning approach where clients train models locally and share model updates to develop a global model. This enables low-resource devices to collaboratively build a high-quality model without requiring direct access to the raw training data. However, despite only sharing model updates, federated learning still faces several privacy vulnerabilities. One of the key threats is membership inference attacks, which target clients' privacy by determining whether a specific example is part of the training set. These attacks can compromise sensitive information in real-world applications, such as medical diagnoses within a healthcare system. Although there has been extensive research on membership inference attacks, a comprehensive and up-to-date survey specifically focused on it within federated learning is still absent. To fill this gap, we categorize and summarize membership inference attacks and their corresponding defense strategies based on their characteristics in this setting. We introduce a unique taxonomy of existing attack research and provide a systematic overview of various countermeasures. For these studies, we thoroughly analyze the strengths and weaknesses of different approaches. Finally, we identify and discuss key future research directions for readers interested in advancing the field.
title Membership Inference Attacks and Defenses in Federated Learning: A Survey
topic Cryptography and Security
url https://arxiv.org/abs/2412.06157