{"id":"W4405717542","doi":"10.1109/tdsc.2024.3521451","title":"Feature Reconstruction Attacks and Countermeasures of DNN Training in Vertical Federated Learning","year":2024,"lang":"en","type":"article","venue":"IEEE Transactions on Dependable and Secure Computing","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":5,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Toronto","funders":"","keywords":"Computer science; Training (meteorology); Feature (linguistics); Computer security; Feature extraction; Artificial intelligence; Multimedia","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0004696217,0.0001746846,0.0002524363,0.0002607152,0.0003142047,0.0002671067,0.0001265988,0.0001434124,0.000005966202],"category_scores_gemma":[0.00002903704,0.0001718527,0.00004719132,0.0004234435,0.00007109229,0.0004173498,0.000008775408,0.0009752248,0.000001417632],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00004891661,"about_ca_system_score_gemma":0.00009409586,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00003467685,"about_ca_topic_score_gemma":0.0000638039,"domain_scores_codex":[0.9986913,0.0001596635,0.0002358053,0.0004535108,0.000197733,0.0002619828],"domain_scores_gemma":[0.999341,0.0004033931,0.00003986255,0.0001020062,0.0000456782,0.00006810317],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00004360105,0.0000257302,0.0005478002,0.0001939334,0.00006967685,0.00009236421,0.00711989,0.2345559,0.00227468,0.001258656,0.00001263023,0.7538051],"study_design_scores_gemma":[0.0003436768,0.0000988825,0.0001985808,0.0005349217,0.00001707971,0.0003229832,0.0005967164,0.9950595,0.002314426,0.0001814748,0.0001538944,0.0001778782],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.279805,0.0004127468,0.7186282,0.0002614651,0.00052757,0.0000740406,9.162202e-7,0.0001393147,0.0001508281],"genre_scores_gemma":[0.993282,0.00004190646,0.006543809,0.00002637141,0.00004623874,0.000002090073,7.235048e-7,0.00001591976,0.00004090475],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.7605036,"threshold_uncertainty_score":0.700795,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01503552347500677,"score_gpt":0.2595993449859744,"score_spread":0.2445638215109676,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}