{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,25]],"date-time":"2026-07-25T02:53:40Z","timestamp":1784948020452,"version":"3.55.0"},"reference-count":67,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Science Foundation of China","doi-asserted-by":"publisher","award":["62371059"],"award-info":[{"award-number":["62371059"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100012226","name":"Fundamental Research Funds for the Central Universities","doi-asserted-by":"publisher","award":["2242022k60006"],"award-info":[{"award-number":["2242022k60006"]}],"id":[{"id":"10.13039\/501100012226","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100018919","name":"Major Key Project of Peng Cheng Laboratory","doi-asserted-by":"publisher","award":["PCL2021A15"],"award-info":[{"award-number":["PCL2021A15"]}],"id":[{"id":"10.13039\/100018919","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2024]]},"DOI":"10.1109\/tifs.2024.3356821","type":"journal-article","created":{"date-parts":[[2024,1,22]],"date-time":"2024-01-22T18:37:14Z","timestamp":1705948634000},"page":"2881-2895","source":"Crossref","is-referenced-by-count":27,"title":["Similarity-Based Label Inference Attack Against Training and Inference of Split Learning"],"prefix":"10.1109","volume":"19","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4981-1010","authenticated-orcid":false,"given":"Junlin","family":"Liu","sequence":"first","affiliation":[{"name":"National Engineering Research Center for Mobile Network Technologies, Beijing University of Posts and Telecommunications, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0404-4310","authenticated-orcid":false,"given":"Xinchen","family":"Lyu","sequence":"additional","affiliation":[{"name":"National Engineering Research Center for Mobile Network Technologies, Beijing University of Posts and Telecommunications, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1720-220X","authenticated-orcid":false,"given":"Qimei","family":"Cui","sequence":"additional","affiliation":[{"name":"National Engineering Research Center for Mobile Network Technologies, Beijing University of Posts and Telecommunications, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9518-1622","authenticated-orcid":false,"given":"Xiaofeng","family":"Tao","sequence":"additional","affiliation":[{"name":"National Engineering Research Center for Mobile Network Technologies, Beijing University of Posts and Telecommunications, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2012.2205597"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2020.07.053"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3065386"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2017.2763440"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1016\/j.jmsy.2018.01.003"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2020.2967556"},{"key":"ref7","volume-title":"Market Size and Revenue Comparison for Artificial Intelligence Worldwide From 2018 to 2027","year":"2022"},{"key":"ref8","first-page":"1273","article-title":"Communication-efficient learning of deep networks from decentralized data","volume-title":"Proc. Artif. Intell. Statist.","author":"McMahan"},{"key":"ref9","article-title":"Split learning for health: Distributed deep learning without sharing raw patient data","author":"Vepakomma","year":"2018","journal-title":"arXiv:1812.00564"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2018.05.003"},{"key":"ref11","article-title":"Split learning for collaborative deep learning in healthcare","author":"Poirot","year":"2019","journal-title":"arXiv:1912.12115"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3360468.3368176"},{"key":"ref13","article-title":"Detailed comparison of communication efficiency of split learning and federated learning","author":"Singh","year":"2019","journal-title":"arXiv:1909.09145"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3320269.3384740"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/SRDS51746.2020.00017"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3426020.3426131"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-70604-3_4"},{"key":"ref18","article-title":"FedSL: Federated split learning on distributed sequential data in recurrent neural networks","author":"Abedi","year":"2020","journal-title":"arXiv:2011.03180"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3386367.3431678"},{"key":"ref20","article-title":"SplitNN-driven vertical partitioning","author":"Ceballos","year":"2020","journal-title":"arXiv:2008.04137"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ICOIN48656.2020.9016486"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i8.20825"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3446382.3448362"},{"key":"ref24","article-title":"PyVertical: A vertical federated learning framework for multi-headed SplitNN","author":"Romanini","year":"2021","journal-title":"arXiv:2104.00489"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3108455"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/ICUFN49451.2021.9528601"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/LCOMM.2020.2978824"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978381"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3154794"},{"key":"ref30","article-title":"Deep gradient attack with strong DP-SGD lower bound for label privacy","volume-title":"Proc. Workshop Secur. Saf. Mach. Learn. Syst. (ICLR)","author":"Yuan"},{"key":"ref31","article-title":"Label leakage and protection in two-party split learning","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Li"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3559613.3563201"},{"key":"ref33","article-title":"ExPLoit: Extracting private labels in split learning","author":"Kariyappa","year":"2021","journal-title":"arXiv:2112.01299"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP49357.2023.10096955"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1002\/nav.3800020109"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3377454"},{"key":"ref37","article-title":"Communication-efficient learning of deep networks from decentralized data","author":"Brendan McMahan","year":"2016","journal-title":"arXiv:1602.05629"},{"key":"ref38","first-page":"1397","article-title":"Label inference attacks against vertical federated learning","volume-title":"Proc. 31st USENIX Secur. Symp. (USENIX Secur.)","author":"Fu"},{"key":"ref39","article-title":"Label inference attack against split learning under regression setting","author":"Xie","year":"2023","journal-title":"arXiv:2301.07284"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134012"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2019.8737416"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/TSC.2019.2897554"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.3028110"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00029"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/mwc.014.2200438"},{"key":"ref47","article-title":"Deep leakage from gradients","author":"Zhu","year":"2019","journal-title":"arXiv:1906.08935"},{"key":"ref48","article-title":"IDLG: Improved deep leakage from gradients","author":"Zhao","year":"2020","journal-title":"arXiv:2001.02610"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2022-0043"},{"key":"ref50","first-page":"1727","article-title":"Revealing and protecting labels in distributed training","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"34","author":"Dang"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3485259"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-10590-1_53"},{"key":"ref53","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref54","first-page":"8026","article-title":"PyTorch: An imperative style, high-performance deep learning library","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"32","author":"Paszke"},{"key":"ref55","article-title":"Fashion-MNIST: A novel image dataset for benchmarking machine learning algorithms","author":"Xiao","year":"2017","journal-title":"arXiv:1708.07747"},{"key":"ref56","volume-title":"Dogs vs. Cats","year":"2013"},{"key":"ref57","volume-title":"Intel Image Classification","year":"2018"},{"key":"ref58","volume-title":"Fruits 360","year":"2020"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-015-0816-y"},{"key":"ref60","article-title":"Lets keep it simple, using simple architectures to outperform deeper and more complex architectures","author":"Hossein Hasanpour","year":"2016","journal-title":"arXiv:1608.06037"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978318"},{"key":"ref63","first-page":"27131","article-title":"Deep learning with label differential privacy","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"34","author":"Ghazi"},{"key":"ref64","article-title":"Variance-based gradient compression for efficient distributed deep learning","author":"Tsuzuku","year":"2018","journal-title":"arXiv:1802.06058"},{"key":"ref65","article-title":"Deep gradient compression: Reducing the communication bandwidth for distributed training","author":"Lin","year":"2017","journal-title":"arXiv:1712.01887"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1561\/9781601988195"},{"key":"ref67","article-title":"Opacus: User-friendly differential privacy library in PyTorch","author":"Yousefpour","year":"2021","journal-title":"arXiv:2109.12298"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/10319981\/10411061.pdf?arnumber=10411061","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,2,6]],"date-time":"2024-02-06T20:21:47Z","timestamp":1707250907000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10411061\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"references-count":67,"URL":"https:\/\/doi.org\/10.1109\/tifs.2024.3356821","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024]]}}}