{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T15:54:59Z","timestamp":1783439699080,"version":"3.54.6"},"reference-count":63,"publisher":"IEEE","license":[{"start":{"date-parts":[[2024,12,15]],"date-time":"2024-12-15T00:00:00Z","timestamp":1734220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,12,15]],"date-time":"2024-12-15T00:00:00Z","timestamp":1734220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024,12,15]]},"DOI":"10.1109\/bigdata62323.2024.10825545","type":"proceedings-article","created":{"date-parts":[[2025,1,16]],"date-time":"2025-01-16T18:31:23Z","timestamp":1737052283000},"page":"8098-8107","source":"Crossref","is-referenced-by-count":4,"title":["Defending Against Inference and Backdoor Attacks in Vertical Federated Learning via Mutual Information Regularization"],"prefix":"10.1109","author":[{"given":"Tianyuan","family":"Zou","sequence":"first","affiliation":[{"name":"Tsinghua University,Institute for AI Industry Research,Beijing,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yang","family":"Liu","sequence":"additional","affiliation":[{"name":"Tsinghua University,Institute for AI Industry Research,Beijing,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiaozhou","family":"Ye","sequence":"additional","affiliation":[{"name":"AsiaInfo Technologies,Shanghai,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ye","family":"Ouyang","sequence":"additional","affiliation":[{"name":"AsiaInfo Technologies,Shanghai,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ya-Qin","family":"Zhang","sequence":"additional","affiliation":[{"name":"Tsinghua University,Institute for AI Industry Research,Beijing,China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Federated learning of deep networks using model averaging","volume-title":"CoRR","volume":"abs\/1602.05629","author":"McMahan","year":"2016"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3298981"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3292500.3330765"},{"key":"ref4","article-title":"Secure federated transfer learning","volume-title":"CoRR","volume":"abs\/1812.03337","author":"Liu","year":"2018"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/MIS.2021.3082561"},{"key":"ref6","first-page":"14 068","article-title":"Group knowledge transfer: Federated learning of large cnns at the edge","volume-title":"Advances in Neural Information Processing Systems","volume":"33","author":"He","year":"2020"},{"key":"ref7","article-title":"Label leakage and protection in two-party split learning","volume-title":"International Conference on Learning Representations","author":"Li"},{"key":"ref8","article-title":"Label inference attacks against vertical federated learning","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Fu"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TBDATA.2022.3192121"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3361813"},{"key":"ref11","first-page":"994","article-title":"Cafe: Catastrophic data leakage in vertical federated learning","volume":"34","author":"Jin","year":"2021","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE51399.2021.00023"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/BigData59044.2023.10386594"},{"key":"ref14","article-title":"Uifv: Data reconstruction attack in vertical federated learning","author":"Yang","year":"2024"},{"key":"ref15","article-title":"Overlearning reveals sensitive attributes","volume-title":"International Conference on Learning Representations","author":"Song"},{"key":"ref16","article-title":"Rvfr: Robust vertical federated learning via feature subspace recovery","volume-title":"NeurIPS Workshop New Frontiers in Federated Learning: Privacy, Fairness, Robustness, Personalization and Data Ownership","author":"Liu"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/11787006_1"},{"key":"ref18","article-title":"Hybrid differentially private federated learning on vertically partitioned data","author":"Wang","year":"2020"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D17-1045"},{"key":"ref20","first-page":"27 131","article-title":"Deep learning with label differential privacy","volume":"34","author":"Ghazi","year":"2021","journal-title":"Advances in neural information processing systems"},{"key":"ref21","article-title":"Differentially private label protection in split learning","author":"Yang","year":"2022"},{"key":"ref22","article-title":"Kdk: A defense mechanism against label inference attacks in vertical federated learning","author":"Arazzi","year":"2024"},{"key":"ref23","article-title":"Label leakage and protection from forward embedding in vertical federated learning","author":"Sun","year":"2022"},{"key":"ref24","article-title":"Reducing leakage in distributed deep learning for sensitive health data","volume":"2","author":"Vepakomma","year":"2019"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2023.3302792"},{"key":"ref26","article-title":"Defending against reconstruction attack in vertical federated learning","author":"Sun","year":"2021"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.00995"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2024.103744"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3356164"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3474369.3486872"},{"key":"ref31","article-title":"Federated learning of deep networks using model averaging","volume":"2","author":"McMahan","year":"2016"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/TSP.2022.3198176"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3517820"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3387107"},{"issue":"1","key":"ref35","first-page":"10 320","article-title":"Fate: An industrial grade platform for collaborative learning with data protection","volume":"22","author":"Liu","year":"2021","journal-title":"The Journal of Machine Learning Research"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2022-0045"},{"key":"ref37","article-title":"Backdoor attacks and defenses in feature-partitioned collaborative learning","author":"Liu","year":"2020"},{"key":"ref38","article-title":"Attacking vertical collaborative learning system using adversarial dominating inputs","author":"Pang","year":"2022"},{"key":"ref39","article-title":"Is vertical logistic regression privacy-preserving? a comprehensive privacy analysis and beyond","author":"Hu","year":"2022"},{"key":"ref40","article-title":"Privacy leakage of real-world vertical federated learning","author":"Weng","year":"2020"},{"key":"ref41","article-title":"Feature reconstruction attacks and countermeasures of dnn training in vertical federated learning","author":"Ye","year":"2022"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOMWKSHPS61880.2024.10620788"},{"key":"ref43","article-title":"Explaining and harnessing adversarial examples","volume-title":"3rd International Conference on Learning Representations, ICLR 2015, San Diego, CA, USA, May 7-9, 2015, Conference Track Proceedings","author":"Goodfellow","year":"2015"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/MLHPC.2016.004"},{"key":"ref45","article-title":"Deep gradient compression: Reducing the communication bandwidth for distributed training","volume-title":"International Conference on Learning Representations","author":"Lin"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813687"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1007\/s11280-023-01159-x"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2023.3333879"},{"key":"ref49","article-title":"Deep variational information bottleneck","volume-title":"International Conference on Learning Representations","author":"Alemi"},{"key":"ref50","article-title":"Infobert: Improving robustness of language models from an information theoretic perspective","author":"Wang","year":"2020"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i13.17387"},{"key":"ref52","article-title":"Deep leakage from gradients","volume":"32","author":"Zhu","year":"2019","journal-title":"Advances in neural information processing systems"},{"key":"ref53","article-title":"The information bottleneck method","volume-title":"Proc. of the 37th Allerton Conference on Communication and Computation, 1999","author":"TISHBY"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/ITW.2015.7133169"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.26421\/QIC12.5-6-4"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58539-6_33"},{"key":"ref57","article-title":"The mnist dataset","author":"Yann LeCun","year":"1994"},{"key":"ref58","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009","journal-title":"University of Toronto, Toronto, Ontario, Tech. Rep. 0"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.463"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2014.7025068"},{"key":"ref61","doi-asserted-by":"crossref","first-page":"69","DOI":"10.1007\/978-3-031-01585-4_5","volume-title":"Vertical Federated Learning","author":"Yang","year":"2020"},{"key":"ref62","article-title":"Convinced\u2014enabling privacy-preserving survival analyses using multi-party computation","author":"Rooijakkers","year":"2020"},{"key":"ref63","article-title":"A vertical federated learning method for interpretable scorecard and its application in credit scoring","author":"Zheng","year":"2020"}],"event":{"name":"2024 IEEE International Conference on Big Data (BigData)","location":"Washington, DC, USA","start":{"date-parts":[[2024,12,15]]},"end":{"date-parts":[[2024,12,18]]}},"container-title":["2024 IEEE International Conference on Big Data (BigData)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10824975\/10824942\/10825545.pdf?arnumber=10825545","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,1,17]],"date-time":"2025-01-17T07:47:17Z","timestamp":1737100037000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10825545\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12,15]]},"references-count":63,"URL":"https:\/\/doi.org\/10.1109\/bigdata62323.2024.10825545","relation":{},"subject":[],"published":{"date-parts":[[2024,12,15]]}}}