{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,25]],"date-time":"2026-07-25T02:53:39Z","timestamp":1784948019397,"version":"3.55.0"},"reference-count":83,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"publisher","award":["2022YFB3102100"],"award-info":[{"award-number":["2022YFB3102100"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"NSFC","doi-asserted-by":"publisher","award":["62102360"],"award-info":[{"award-number":["62102360"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2024]]},"DOI":"10.1109\/tifs.2024.3356164","type":"journal-article","created":{"date-parts":[[2024,1,19]],"date-time":"2024-01-19T18:41:00Z","timestamp":1705689660000},"page":"3435-3450","source":"Crossref","is-referenced-by-count":26,"title":["HashVFL: Defending Against Data Reconstruction Attacks in Vertical Federated Learning"],"prefix":"10.1109","volume":"19","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3118-0521","authenticated-orcid":false,"given":"Pengyu","family":"Qiu","sequence":"first","affiliation":[{"name":"College of Computer Science and Technology, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8571-9780","authenticated-orcid":false,"given":"Xuhong","family":"Zhang","sequence":"additional","affiliation":[{"name":"School of Software Technology, Zhejiang University, Ningbo, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4268-372X","authenticated-orcid":false,"given":"Shouling","family":"Ji","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6465-2305","authenticated-orcid":false,"given":"Chong","family":"Fu","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xing","family":"Yang","sequence":"additional","affiliation":[{"name":"Hefei Interdisciplinary Center, National University of Defense Technology, Hefei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4927-5833","authenticated-orcid":false,"given":"Ting","family":"Wang","sequence":"additional","affiliation":[{"name":"College of Information Sciences and Technology, The Pennsylvania State University, State College, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1023\/A:1010933404324"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/1961189.1961199"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1038\/nature14539"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/s42521-020-00019-x"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.3233\/AF-170176"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1038\/s41586-021-03819-2"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1016\/j.jbi.2019.103133"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/ITSC.2017.8317904"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.32603\/1993-8985-2022-25-1-36-46"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-57959-7"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.54648\/GTCJ2012001"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/s41666-020-00082-4"},{"key":"ref13","article-title":"Federated learning for mobile keyboard prediction","author":"Hard","year":"2018","journal-title":"arXiv:1811.0360"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3298981"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijmedinf.2018.01.007"},{"key":"ref16","article-title":"Private federated learning on vertically partitioned data via entity resolution and additively homomorphic encryption","author":"Hardy","year":"2017","journal-title":"arXiv:1711.10677"},{"key":"ref17","first-page":"493","article-title":"BatchCrypt: Efficient homomorphic encryption for cross-silo federated learning","volume-title":"Proc. USENIX Annu. Tech. Conf.","author":"Zhang"},{"key":"ref18","article-title":"Feature inference attack on model predictions in vertical federated learning","author":"Luo","year":"2020","journal-title":"arXiv:2010.10152"},{"key":"ref19","article-title":"Privacy leakage of real-world vertical federated learning","author":"Weng","year":"2021","journal-title":"arXiv:2011.09290"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2022.3208630"},{"key":"ref21","first-page":"1397","article-title":"Label inference attacks against vertical federated learning","volume-title":"Proc. 31st USENIX Secur. Symp.","author":"Fu"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2017.2765202"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00813"},{"key":"ref24","article-title":"Defending against reconstruction attack in vertical federated learning","author":"Sun","year":"2021","journal-title":"arXiv:2107.09898"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/ICDMW51313.2020.00134"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359824"},{"key":"ref27","first-page":"1","article-title":"Greedy hash: Towards fast optimization for accurate hash coding in CNN","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"31","author":"Su"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2020.107281"},{"key":"ref29","article-title":"Estimating or propagating gradients through stochastic neurons for conditional computation","author":"Bengio","year":"2013","journal-title":"arXiv:1308.3432"},{"key":"ref30","first-page":"1","article-title":"Understanding straight-through estimator in training activation quantized neural nets","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Yin"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.5555\/3045118.3045167"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2020\/115"},{"key":"ref33","first-page":"24286","article-title":"One loss for all: Deep hashing with a single cosine similarity based learning objective","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"34","author":"Hoe"},{"key":"ref34","volume-title":"FATE"},{"key":"ref35","volume-title":"PySyft"},{"key":"ref36","volume-title":"TF Encrypted"},{"key":"ref37","article-title":"CrypTen: Secure multi-party computation meets machine learning","author":"Knott","year":"2021","journal-title":"arXiv:2109.00984"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/1536414.1536440"},{"key":"ref39","first-page":"1","article-title":"Deep leakage from gradients","volume-title":"Proc. NIPS","author":"Zhu"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3485259"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/3559613.3563201"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1016\/0167-2789(92)90242-F"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.17487\/rfc1321"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00928"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2017.2699960"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.598"},{"key":"ref47","volume-title":"Modelling and automatically analysing privacy properties for honest-but-curious adversaries","author":"Paverd","year":"2014"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref49","article-title":"Very deep convolutional networks for large-scale image recognition","author":"Simonyan","year":"2015","journal-title":"arXiv:1409.1556"},{"key":"ref50","first-page":"1","article-title":"Spectral hashing","volume-title":"Proc. NIPS","author":"Weiss"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/509907.509965"},{"key":"ref52","first-page":"1","article-title":"Hamming distance metric learning","volume-title":"Proc. NIPS","author":"Norouzi"},{"key":"ref53","first-page":"1","article-title":"Federated learning for mobile keyboard prediction","author":"Hard","year":"2018","journal-title":"arXiv:1811.03604"},{"key":"ref54","volume-title":"A Case of Traffic Violations Insurance-Using Federated Learning","year":"2020"},{"key":"ref55","volume-title":"Utilization of FATE in Risk Management of Credit in Small and Micro Enterprises","year":"2020"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref57","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/2993148.2993165"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1016\/j.ejor.2016.01.012"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2017\/239"},{"key":"ref61","first-page":"142","article-title":"Learning word vectors for sentiment analysis","volume-title":"Proc. 49th Annu. Meet. Assoc. Comput. Linguistics, Hum. Lang. Technol.","author":"Maas"},{"key":"ref62","first-page":"1","article-title":"BERT: Pre-training of deep bidirectional transformers for language understanding","volume-title":"Proc. NAACL","author":"Devlin"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2015.2424995"},{"key":"ref64","article-title":"Adam: A method for stochastic optimization","author":"Kingma","year":"2015","journal-title":"arXiv:1412.6980"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1561\/9781601988195"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978318"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00029"},{"key":"ref68","first-page":"507","article-title":"Why do tree-based models still outperform deep learning on typical tabular data?","volume-title":"Proc. 36th Conf. Neural Inf. Process. Syst. Datasets Benchmarks Track","author":"Grinsztajn"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2763126"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1145\/3320269.3384740"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/tifs.2023.3274391"},{"key":"ref72","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2017","journal-title":"arXiv:1706.06083"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1007\/11761679_29"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-019-01174-4"},{"key":"ref75","article-title":"Feature learning based deep supervised hashing with pairwise labels","author":"Li","year":"2015","journal-title":"arXiv:1511.03855"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v32i1.11814"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00315"},{"key":"ref78","article-title":"Batch label inference and replacement attacks in black-boxed vertical federated learning","author":"Liu","year":"2021","journal-title":"arXiv:2112.05409"},{"key":"ref79","article-title":"Label leakage and protection from forward embedding in vertical federated learning","author":"Sun","year":"2022","journal-title":"arXiv:2203.01451"},{"key":"ref80","article-title":"Deep gradient compression: Reducing the communication bandwidth for distributed training","author":"Lin","year":"2017","journal-title":"arXiv:1712.01887"},{"key":"ref81","volume-title":"RVFR: Robust Vertical Federated Learning Via Feature Subspace Recovery","author":"Liu","year":"2022"},{"key":"ref82","article-title":"GPT-4 technical report","volume-title":"arXiv:2303.08774","author":"Achiam","year":"2023"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1109\/cvpr52688.2022.01042"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/10319981\/10409241.pdf?arnumber=10409241","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,4,13]],"date-time":"2024-04-13T05:06:59Z","timestamp":1712984819000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10409241\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"references-count":83,"URL":"https:\/\/doi.org\/10.1109\/tifs.2024.3356164","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024]]}}}