{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T07:01:15Z","timestamp":1782975675086,"version":"3.54.5"},"reference-count":49,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,5,18]]},"DOI":"10.1109\/sp63933.2026.00181","type":"proceedings-article","created":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T19:34:20Z","timestamp":1782934460000},"page":"2327-2345","source":"Crossref","is-referenced-by-count":0,"title":["ARES: Scalable and Practical Gradient Inversion Attack in Federated Learning Through Activation Recovery"],"prefix":"10.1109","author":[{"given":"Zirui","family":"Gong","sequence":"first","affiliation":[{"name":"Griffith University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Leo Yu","family":"Zhang","sequence":"additional","affiliation":[{"name":"Griffith University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yanjun","family":"Zhang","sequence":"additional","affiliation":[{"name":"Griffith University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Viet","family":"Vo","sequence":"additional","affiliation":[{"name":"Swinburne University of Technology"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tianqing","family":"Zhu","sequence":"additional","affiliation":[{"name":"City University of Macau"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shirui","family":"Pan","sequence":"additional","affiliation":[{"name":"Griffith University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Cong","family":"Wang","sequence":"additional","affiliation":[{"name":"City University of Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"idlg: Improved deep leakage from gradients","author":"Zhao","year":"2020","journal-title":"arXiv preprint"},{"key":"ref2","first-page":"16937","article-title":"Inverting gradients-how easy is it to break privacy in federated learning?","volume":"33","author":"Geiping","year":"2020","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01607"},{"key":"ref4","article-title":"Boosting gradient leakage attacks: Data reconstruction in realistic fl settings","volume-title":"USENIX Security Symposium","author":"Fan","year":"2025"},{"key":"ref5","article-title":"Fishing for user data in large-batch federated learning via gradient magnification","volume-title":"ICML","author":"Wen","year":"2022"},{"key":"ref6","article-title":"Robbing the fed: Directly obtaining private data in federated learning with modified models","volume-title":"International Conference on Learning Representations","author":"Fowl"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP57164.2023.00020"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00030"},{"key":"ref9","first-page":"1273","article-title":"Communication-efficient learning of deep networks from decentralized data","author":"McMahan","year":"2017","journal-title":"Artificial Intelligence and Statistics. PMLR"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3501296"},{"key":"ref11","article-title":"Federated learning: Opportunities and challenges","author":"Mammen","year":"2021","journal-title":"arXiv preprint"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/SP61157.2025.00251"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3333555"},{"key":"ref14","article-title":"Beyond denial-of-service: The puppeteer\u2019s attack for fine-grained control in ranking-based federated learning","volume-title":"Proceedings of the Web Conference 2026 (WWW \u201926). ACM","author":"Chen","year":"2026"},{"key":"ref15","article-title":"Deep leakage from gradients","volume":"32","author":"Zhu","year":"2019","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3690292"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.2005.862083"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1002\/cpa.20124"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1016\/j.crma.2008.03.014"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.2016.2517008"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2016.2581593"},{"key":"ref22","article-title":"The mnist database of handwritten digits","author":"LeCun","year":"1998"},{"key":"ref23","author":"Krizhevsky","year":"2009","journal-title":"Learning multiple layers of features from tiny images"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1038\/sdata.2018.161"},{"key":"ref26","article-title":"Lung and colon cancer histopathological image dataset (lc25000)","author":"Borkowski","year":"2019","journal-title":"arXiv preprint"},{"key":"ref27","article-title":"Pointer sentinel mixture models","author":"Merity","year":"2016","journal-title":"arXiv preprint"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1016\/j.jfranklin.2023.11.038"},{"key":"ref29","article-title":"Differentially private federated learning: A client level perspective","author":"Geyer","year":"2017","journal-title":"arXiv preprint"},{"key":"ref30","first-page":"6381","article-title":"Gradient obfuscation gives a false sense of security in federated learning","volume-title":"32nd USENIX security symposium (USENIX Security 23)","author":"Yue","year":"2023"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2023.3262813"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133982"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/SPW53761.2021.00017"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3779208.3785389"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2025.240644"},{"key":"ref36","first-page":"114","article-title":"Privacypreserving collaborative learning with automatic transformation search","volume-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","author":"Gao","year":"2021"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2787987"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i6.28460"},{"key":"ref39","article-title":"A field guide to federated optimization","author":"Wang","year":"2021","journal-title":"arXiv preprint"},{"key":"ref40","article-title":"Decepticons: Corrupted transformers breach privacy in federated learning for language models","volume-title":"The Eleventh International Conference on Learning Representations","author":"Fowl"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2013.50"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2010.2044470"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2010.2040551"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.2019.2932426"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.2016.2642993"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.2005.858979"},{"issue":"83","key":"ref47","first-page":"1","article-title":"Cvxpy: A python-embedded modeling language for convex optimization","volume":"17","author":"Diamond","year":"2016","journal-title":"Journal of Machine Learning Research"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560557"},{"key":"ref49","first-page":"3581","article-title":"Federated learning with buffered asynchronous aggregation","volume-title":"International Conference on Artificial Intelligence and Statistics. PMLR","author":"Nguyen","year":"2022"}],"event":{"name":"2026 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2026,5,18]]},"end":{"date-parts":[[2026,5,21]]}},"container-title":["2026 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11573355\/11573356\/11573610.pdf?arnumber=11573610","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T05:30:36Z","timestamp":1782970236000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11573610\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,18]]},"references-count":49,"URL":"https:\/\/doi.org\/10.1109\/sp63933.2026.00181","relation":{},"subject":[],"published":{"date-parts":[[2026,5,18]]}}}