{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,19]],"date-time":"2026-07-19T02:45:28Z","timestamp":1784429128710,"version":"3.55.0"},"reference-count":36,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"6","license":[{"start":{"date-parts":[[2024,12,1]],"date-time":"2024-12-01T00:00:00Z","timestamp":1733011200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,12,1]],"date-time":"2024-12-01T00:00:00Z","timestamp":1733011200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,12,1]],"date-time":"2024-12-01T00:00:00Z","timestamp":1733011200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Xiaomi AI Innovation Research","award":["202-422-002"],"award-info":[{"award-number":["202-422-002"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Big Data"],"published-print":{"date-parts":[[2024,12]]},"DOI":"10.1109\/tbdata.2022.3192121","type":"journal-article","created":{"date-parts":[[2022,7,19]],"date-time":"2022-07-19T19:27:35Z","timestamp":1658258855000},"page":"1016-1027","source":"Crossref","is-referenced-by-count":50,"title":["Defending Batch-Level Label Inference and Replacement Attacks in Vertical Federated Learning"],"prefix":"10.1109","volume":"10","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6068-2635","authenticated-orcid":false,"given":"Tianyuan","family":"Zou","sequence":"first","affiliation":[{"name":"Computer Science and Technology, Tsinghua University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3800-3533","authenticated-orcid":false,"given":"Yang","family":"Liu","sequence":"additional","affiliation":[{"name":"Institute for AI Industry Research (AIR) at Tsinghua University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yan","family":"Kang","sequence":"additional","affiliation":[{"name":"Webank, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1236-2490","authenticated-orcid":false,"given":"Wenhan","family":"Liu","sequence":"additional","affiliation":[{"name":"Shandong University, Weihai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yuanqin","family":"He","sequence":"additional","affiliation":[{"name":"Webank, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhihao","family":"Yi","sequence":"additional","affiliation":[{"name":"Webank, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5059-8360","authenticated-orcid":false,"given":"Qiang","family":"Yang","sequence":"additional","affiliation":[{"name":"Webank, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4515-6212","authenticated-orcid":false,"given":"Ya-Qin","family":"Zhang","sequence":"additional","affiliation":[{"name":"Institute for AI Industry Research (AIR) at Tsinghua University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3214303"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/d17-1045"},{"key":"ref3","first-page":"2938","article-title":"How to backdoor federated learning","author":"Bagdasaryan","year":"2018","journal-title":"Proc. Int. Conf. Artif. Intell. Statist."},{"key":"ref4","first-page":"634","article-title":"Analyzing federated learning through an adversarial lens","volume-title":"Proc. 36th Int. Conf. Mach. Learn.","author":"Bhagoji"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/MIS.2021.3082561"},{"key":"ref6","first-page":"1","article-title":"NUS-WIDE: A real-world web image database from National University of Singapore","volume-title":"Proc. ACM Int. Conf. Image Video Retrieval","author":"Tang"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/MLHPC.2016.004"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-79228-4_1"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4419-5906-5"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1561\/9781601988195"},{"key":"ref11","first-page":"18","article-title":"Label inference attacks against vertical federated learning","volume-title":"Proc. 31st USENIX Secur. Symp.","author":"Fu"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00018"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ACSSC.2018.8645549"},{"key":"ref14","article-title":"BadNets: Identifying vulnerabilities in the machine learning model supply chain","author":"Gu","year":"2017"},{"key":"ref15","first-page":"14068","article-title":"Group knowledge transfer: Federated learning of large CNNs at the edge","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"He"},{"key":"ref16","article-title":"Learning privately over distributed features: An ADMM sharing approach","author":"Hu","year":"2019"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3292500.3330765"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1561\/9781680837896"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/AINA.2017.52"},{"key":"ref20","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref21","article-title":"Label leakage and protection in two-party split learning","author":"Li","year":"2021"},{"key":"ref22","article-title":"Deep gradient compression: Reducing the communication bandwidth for distributed training","author":"Lin","year":"2017"},{"issue":"226","key":"ref23","first-page":"1","article-title":"Fate: An industrial grade platform for collaborative learning with data protection","volume":"22","author":"Liu","year":"2021","journal-title":"J. Mach. Learn. Res."},{"issue":"226","key":"ref24","first-page":"1","article-title":"FATE: An industrial grade platform for collaborative learning with data protection","volume":"22","author":"Liu","year":"2021","journal-title":"J. Mach. Learn. Res."},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/tsp.2022.3198176"},{"key":"ref26","article-title":"Backdoor attacks and defenses in feature-partitioned collaborative learning","author":"Liu","year":"2020"},{"key":"ref27","article-title":"Federated learning of deep networks using model averaging","author":"McMahan","year":"2016"},{"issue":"11","key":"ref28","first-page":"169","article-title":"On data banks and privacy homomorphisms","volume":"4","author":"Rivest","year":"1978","journal-title":"Found. Secure Comput."},{"key":"ref29","article-title":"Can you really backdoor federated learning?","author":"Sun","year":"2019"},{"key":"ref30","article-title":"InfoBERT: Improving robustness of language models from an information theoretic perspective","author":"Wang","year":"2020"},{"key":"ref31","first-page":"19","article-title":"DBA: Distributed backdoor attacks against federated learning","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Xie"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3298981"},{"key":"ref33","article-title":"The MNIST dataset","author":"Burges"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01607"},{"key":"ref35","article-title":"iDLG: Improved deep leakage from gradients","author":"Zhao","year":"2020"},{"key":"ref36","article-title":"Deep leakage from gradients","volume":"32","author":"Zhu","year":"2019","journal-title":"Proc. Adv. Neural Inform. Process. Syst."}],"container-title":["IEEE Transactions on Big Data"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6687317\/10750532\/09833321.pdf?arnumber=9833321","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,11,27]],"date-time":"2024-11-27T19:28:32Z","timestamp":1732735712000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9833321\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12]]},"references-count":36,"journal-issue":{"issue":"6"},"URL":"https:\/\/doi.org\/10.1109\/tbdata.2022.3192121","relation":{},"ISSN":["2332-7790","2372-2096"],"issn-type":[{"value":"2332-7790","type":"electronic"},{"value":"2372-2096","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,12]]}}}