{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,17]],"date-time":"2026-06-17T00:53:20Z","timestamp":1781657600184,"version":"3.54.5"},"reference-count":24,"publisher":"Springer Science and Business Media LLC","issue":"8","license":[{"start":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T00:00:00Z","timestamp":1750118400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T00:00:00Z","timestamp":1750118400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62472211"],"award-info":[{"award-number":["62472211"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62472211"],"award-info":[{"award-number":["62472211"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62472211"],"award-info":[{"award-number":["62472211"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62472211"],"award-info":[{"award-number":["62472211"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Nanjing University-China Mobile Communications Group Co.,Ltd. Joint Institute"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Mach Learn"],"published-print":{"date-parts":[[2025,8]]},"DOI":"10.1007\/s10994-025-06804-2","type":"journal-article","created":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T15:11:34Z","timestamp":1750173094000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["HFIA: a parasitic feature inference attack and gradient-based defense strategy in SplitNN-based vertical federated learning"],"prefix":"10.1007","volume":"114","author":[{"given":"Qixuan","family":"Dong","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Boyang","family":"Zhou","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"ZhiQiang","family":"Ru","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ying","family":"He","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jingyu","family":"Hua","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sheng","family":"Zhong","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,6,17]]},"reference":[{"key":"6804_CR1","doi-asserted-by":"publisher","unstructured":"Azmat, M., & Alessio, A. M. (2022). Feature importance estimation using gradient based method for multimodal fused neural networks. In 2022 IEEE nuclear science symposium and medical imaging conference (NSS\/MIC), pp. 1\u20135. https:\/\/doi.org\/10.1109\/NSS\/MIC44845.2022.10398969","DOI":"10.1109\/NSS\/MIC44845.2022.10398969"},{"key":"6804_CR2","doi-asserted-by":"crossref","unstructured":"Cheng, H. -T., Koc, L., Harmsen, J., Shaked, T., Chandra, T., Aradhye, H., Anderson, G., Corrado, G., Chai, W., & Ispir, M., et al. (2016). Wide & deep learning for recommender systems. In: Proceedings of the 1st workshop on deep learning for recommender systems, pp. 7\u201310","DOI":"10.1145\/2988450.2988454"},{"key":"6804_CR3","doi-asserted-by":"publisher","first-page":"103744","DOI":"10.1016\/j.cose.2024.103744","volume":"139","author":"W Chang","year":"2024","unstructured":"Chang, W., & Zhu, T. (2024). Gradient-based defense methods for data leakage in vertical federated learning. Computers & Security, 139, 103744.","journal-title":"Computers & Security"},{"key":"6804_CR4","unstructured":"Fu, C., Zhang, X., Ji, S., Chen, J., Wu, J., Guo, S., Zhou, J., Liu, A. X., & Wang, T. (2022). Label inference attacks against vertical federated learning. In: 31st USENIX security symposium (USENIX Security 22), pp. 1397\u20131414"},{"key":"6804_CR5","doi-asserted-by":"crossref","unstructured":"Hitaj, B., Ateniese, G., & Perez-Cruz, F. (2017). Deep models under the GAN: Information leakage from collaborative deep learning. In Proceedings of the 2017 ACM SIGSAC conference on computer and communications security, pp. 603\u2013618","DOI":"10.1145\/3133956.3134012"},{"key":"6804_CR6","first-page":"994","volume":"34","author":"X Jin","year":"2021","unstructured":"Jin, X., Chen, P.-Y., Hsu, C.-Y., Yu, C.-M., & Chen, T. (2021). Cafe: Catastrophic data leakage in vertical federated learning. Advances in Neural Information Processing Systems, 34, 994\u20131006.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"6804_CR7","doi-asserted-by":"crossref","unstructured":"Jiang, X., Zhou, X., & Grossklags, J. (2022). Comprehensive analysis of privacy leakage in vertical federated learning during prediction. Proceedings on privacy enhancing technologies","DOI":"10.2478\/popets-2022-0045"},{"key":"6804_CR8","unstructured":"Kaggle: Criteo Dataset. Accessed 8 July 2024 (2014). https:\/\/www.kaggle.com\/c\/criteo-display-ad-challenge\/data"},{"key":"6804_CR9","doi-asserted-by":"publisher","first-page":"3615","DOI":"10.1109\/TKDE.2024.3352628","volume":"36","author":"Y Liu","year":"2024","unstructured":"Liu, Y., Kang, Y., Zou, T., Pu, Y., He, Y., Ye, X., Ouyang, Y., Zhang, Y.-Q., & Yang, Q. (2024). Vertical federated learning: Concepts, advances, and challenges. IEEE Transactions on Knowledge and Data Engineering., 36, 3615.","journal-title":"IEEE Transactions on Knowledge and Data Engineering."},{"key":"6804_CR10","doi-asserted-by":"publisher","first-page":"123109","DOI":"10.1016\/j.eswa.2023.123109","volume":"246","author":"T Li","year":"2024","unstructured":"Li, T., Luo, Y., Wan, X., Li, Q., Liu, Q., Wang, R., Jia, C., & Xiao, Y. (2024). A malware detection model based on imbalanced heterogeneous graph embeddings. Expert Systems with Applications, 246, 123109.","journal-title":"Expert Systems with Applications"},{"key":"6804_CR11","doi-asserted-by":"crossref","unstructured":"Liu, Z., Luo, P., Wang, X., & Tang, X. (2015). Deep learning face attributes in the wild. In: Proceedings of international conference on computer vision (ICCV)","DOI":"10.1109\/ICCV.2015.425"},{"key":"6804_CR12","doi-asserted-by":"crossref","unstructured":"Luo, X., Wu, Y., Xiao, X., & Ooi, B. C. (2021). Feature inference attack on model predictions in vertical federated learning. In: 2021 IEEE 37th international conference on data engineering (ICDE), pp. 181\u2013192. IEEE","DOI":"10.1109\/ICDE51399.2021.00023"},{"key":"6804_CR13","unstructured":"Liu, Y., Zou, T., Kang, Y., Liu, W., He, Y., Yi, Z., & Yang, Q. (2021). Batch label inference and replacement attacks in black-boxed vertical federated learning. arXiv preprint arXiv:2112.05409"},{"key":"6804_CR14","unstructured":"McMahan, B., Moore, E., Ramage, D., Hampson, S., & Arcas, B. A. (2017). Communication-efficient learning of deep networks from decentralized data. In: Artificial intelligence and statistics, pp. 1273\u20131282. PMLR"},{"key":"6804_CR15","doi-asserted-by":"publisher","first-page":"3653","DOI":"10.1109\/TDSC.2022.3208630","volume":"20","author":"P Qiu","year":"2022","unstructured":"Qiu, P., Zhang, X., Ji, S., Du, T., Pu, Y., Zhou, J., & Wang, T. (2022). Your labels are selling you out: Relation leaks in vertical federated learning. IEEE Transactions on Dependable and Secure Computing., 20, 3653.","journal-title":"IEEE Transactions on Dependable and Secure Computing."},{"key":"6804_CR16","doi-asserted-by":"publisher","first-page":"3435","DOI":"10.1109\/TIFS.2024.3356164","volume":"19","author":"P Qiu","year":"2024","unstructured":"Qiu, P., Zhang, X., Ji, S., Fu, C., Yang, X., & Wang, T. (2024). Hashvfl: Defending against data reconstruction attacks in vertical federated learning. IEEE Transactions on Information Forensics and Security, 19, 3435.","journal-title":"IEEE Transactions on Information Forensics and Security"},{"key":"6804_CR17","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2024.3358081","author":"P Qiu","year":"2024","unstructured":"Qiu, P., Zhang, X., Ji, S., Li, C., Pu, Y., Yang, X., & Wang, T. (2024). Hijack vertical federated learning models as one party. IEEE Transactions on Dependable and Secure Computing. https:\/\/doi.org\/10.1109\/TDSC.2024.3358081","journal-title":"IEEE Transactions on Dependable and Secure Computing"},{"key":"6804_CR18","unstructured":"Repository, U.M.L. (1998). CovType Dataset. Accessed 8 July 2024 . https:\/\/archive.ics.uci.edu\/ml\/datasets\/covertype"},{"key":"6804_CR19","unstructured":"Repository, U.M.L. (2012). Bank Marketing Dataset. Accessed 8 July 2024. https:\/\/archive.ics.uci.edu\/ml\/datasets\/bank+marketing"},{"key":"6804_CR20","unstructured":"Sun, J., Yao, Y., Gao, W., Xie, J., & Wang, C. (2021). Defending against reconstruction attack in vertical federated learning. arXiv preprint arXiv:2107.09898"},{"key":"6804_CR21","doi-asserted-by":"publisher","first-page":"8485","DOI":"10.1609\/aaai.v36i8.20825","volume":"36","author":"C Thapa","year":"2022","unstructured":"Thapa, C., Arachchige, P. C. M., Camtepe, S., & Sun, L. (2022). Splitfed: When federated learning meets split learning. Proceedings of the AAAI Conference on Artificial Intelligence, 36, 8485\u20138493.","journal-title":"Proceedings of the AAAI Conference on Artificial Intelligence"},{"key":"6804_CR22","doi-asserted-by":"crossref","unstructured":"Wang, Z., Song, M., Zhang, Z., Song, Y., Wang, Q., & Qi, H. (2019). Beyond inferring class representatives: User-level privacy leakage from federated learning. In: IEEE INFOCOM 2019-IEEE conference on computer communications, pp. 2512\u20132520. IEEE","DOI":"10.1109\/INFOCOM.2019.8737416"},{"key":"6804_CR23","doi-asserted-by":"crossref","unstructured":"Yang, J., Chen, P., Lu, Z., Duan, Q., & Bao, Y. (2024). UIFV: Data reconstruction attack in vertical federated learning. arXiv preprint arXiv:2406.12588.","DOI":"10.1109\/ICWS67624.2025.00026"},{"key":"6804_CR24","unstructured":"Ye, P., Jiang, Z., Wang, W., Li, B., & Li, B. (2022). Feature reconstruction attacks and countermeasures of DNN training in vertical federated learning. arXiv preprint arXiv:2210.06771"}],"container-title":["Machine Learning"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10994-025-06804-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10994-025-06804-2","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10994-025-06804-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,17]],"date-time":"2026-06-17T00:05:13Z","timestamp":1781654713000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10994-025-06804-2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,6,17]]},"references-count":24,"journal-issue":{"issue":"8","published-print":{"date-parts":[[2025,8]]}},"alternative-id":["6804"],"URL":"https:\/\/doi.org\/10.1007\/s10994-025-06804-2","relation":{},"ISSN":["0885-6125","1573-0565"],"issn-type":[{"value":"0885-6125","type":"print"},{"value":"1573-0565","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,6,17]]},"assertion":[{"value":"22 September 2024","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"8 May 2025","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"26 May 2025","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"17 June 2025","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no Conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}],"article-number":"170"}}