{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,11]],"date-time":"2026-04-11T04:16:29Z","timestamp":1775880989269,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":22,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,11,9]],"date-time":"2020-11-09T00:00:00Z","timestamp":1604880000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"National Key Research and Development Program of China","award":["2017YFB0801900"],"award-info":[{"award-number":["2017YFB0801900"]}]},{"name":"the Key Research Program of Frontier Sciences","award":["ZDBS-LY-JSC038"],"award-info":[{"award-number":["ZDBS-LY-JSC038"]}]},{"name":"National Natural Science Foundation of China","award":["61772507"],"award-info":[{"award-number":["61772507"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,11,9]]},"DOI":"10.1145\/3411501.3419423","type":"proceedings-article","created":{"date-parts":[[2020,11,4]],"date-time":"2020-11-04T03:22:57Z","timestamp":1604460177000},"page":"31-36","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":17,"title":["Information Leakage by Model Weights on Federated Learning"],"prefix":"10.1145","author":[{"given":"Xiaoyun","family":"Xu","sequence":"first","affiliation":[{"name":"Institute of Software, Chinese Academy of Sciences, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jingzheng","family":"Wu","sequence":"additional","affiliation":[{"name":"Institute of Software, Chinese Academy of Sciences, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mutian","family":"Yang","sequence":"additional","affiliation":[{"name":"Beijing ZhongKeWeiLan Technology Co.,Ltd., Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tianyue","family":"Luo","sequence":"additional","affiliation":[{"name":"Institute of Software, Chinese Academy of Sciences, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xu","family":"Duan","sequence":"additional","affiliation":[{"name":"Institute of Software, Chinese Academy of Sciences, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Weiheng","family":"Li","sequence":"additional","affiliation":[{"name":"University of Chinese Academy of Sciences, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yanjun","family":"Wu","sequence":"additional","affiliation":[{"name":"Institute of Software, Chinese Academy of Sciences, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bin","family":"Wu","sequence":"additional","affiliation":[{"name":"Institute of Software, Chinese Academy of Sciences, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2020,11,9]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.5555\/3016100.3016102"},{"key":"e_1_3_2_1_2_1","volume-title":"How To Backdoor Federated Learning. CoRR abs\/1807.00459","author":"Bagdasaryan Eugene","year":"2018","unstructured":"Eugene Bagdasaryan , Andreas Veit , Yiqing Hua , Deborah Estrin , and Vitaly Shmatikov . 2018. How To Backdoor Federated Learning. CoRR abs\/1807.00459 ( 2018 ). arXiv:1807.00459 http:\/\/arxiv.org\/abs\/1807.00459 Eugene Bagdasaryan, Andreas Veit, Yiqing Hua, Deborah Estrin, and Vitaly Shmatikov. 2018. How To Backdoor Federated Learning. CoRR abs\/1807.00459 (2018). arXiv:1807.00459 http:\/\/arxiv.org\/abs\/1807.00459"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.5555\/3042573.3042761"},{"key":"e_1_3_2_1_4_1","volume-title":"Neural Cleanse: Identifying and Mitigating Backdoor Attacks in Neural Networks. In 2019 IEEE Symposium on Security and Privacy (SP). IEEE Computer Society","author":"Huiying Li Bimal Viswanath Shawn Shan","year":"2019","unstructured":"Shawn Shan Huiying Li Bimal Viswanath Haitao Zheng Bolun Wang , Yuan-shun Yao and Ben Y. Zhao . 2019 . Neural Cleanse: Identifying and Mitigating Backdoor Attacks in Neural Networks. In 2019 IEEE Symposium on Security and Privacy (SP). IEEE Computer Society , Los Alamitos, CA, USA. https: \/\/doi.org\/10.1109\/SP. 2019 .00031 10.1109\/SP.2019.00031 Shawn Shan Huiying Li Bimal Viswanath Haitao Zheng Bolun Wang, Yuan-shun Yao and Ben Y. Zhao. 2019. Neural Cleanse: Identifying and Mitigating Backdoor Attacks in Neural Networks. In 2019 IEEE Symposium on Security and Privacy (SP). IEEE Computer Society, Los Alamitos, CA, USA. https: \/\/doi.org\/10.1109\/SP.2019.00031"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/647"},{"key":"e_1_3_2_1_7_1","volume-title":"A fully homomorphic encryption scheme","author":"Gentry Craig","unstructured":"Craig Gentry and Dan Boneh . 2009. A fully homomorphic encryption scheme . Vol. 20 . Stanford university Stanford . Craig Gentry and Dan Boneh. 2009. A fully homomorphic encryption scheme. Vol. 20. Stanford university Stanford."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"e_1_3_2_1_9_1","volume-title":"Evaluating Differentially Private Machine Learning in Practice. In 28th USENIX Security Symposium (USENIX Security 19)","author":"Jayaraman Bargav","year":"2019","unstructured":"Bargav Jayaraman and David Evans . 2019 . Evaluating Differentially Private Machine Learning in Practice. In 28th USENIX Security Symposium (USENIX Security 19) . USENIX Association, Santa Clara, CA , 1895--1912. https:\/\/www. usenix.org\/conference\/usenixsecurity19\/presentation\/jayaraman Bargav Jayaraman and David Evans. 2019. Evaluating Differentially Private Machine Learning in Practice. In 28th USENIX Security Symposium (USENIX Security 19). USENIX Association, Santa Clara, CA, 1895--1912. https:\/\/www. usenix.org\/conference\/usenixsecurity19\/presentation\/jayaraman"},{"key":"e_1_3_2_1_10_1","volume-title":"Federated Optimization: Distributed Machine Learning for On-Device Intelligence. CoRR abs\/1610.02527","author":"Konecn\u00fd Jakub","year":"2016","unstructured":"Jakub Konecn\u00fd , H. Brendan McMahan , Daniel Ramage , and Peter Richt\u00e1rik . 2016 . Federated Optimization: Distributed Machine Learning for On-Device Intelligence. CoRR abs\/1610.02527 (2016). arXiv:1610.02527 http:\/\/arxiv.org\/abs\/ 1610.02527 Jakub Konecn\u00fd, H. Brendan McMahan, Daniel Ramage, and Peter Richt\u00e1rik. 2016. Federated Optimization: Distributed Machine Learning for On-Device Intelligence. CoRR abs\/1610.02527 (2016). arXiv:1610.02527 http:\/\/arxiv.org\/abs\/ 1610.02527"},{"key":"e_1_3_2_1_11_1","volume-title":"Ananda Theertha Suresh, and Dave Bacon","author":"Konecn\u00fd Jakub","year":"2016","unstructured":"Jakub Konecn\u00fd , H. Brendan McMahan , Felix X. Yu , Peter Richt\u00e1rik , Ananda Theertha Suresh, and Dave Bacon . 2016 . Federated Learning : Strategies for Improving Communication Efficiency. CoRR abs\/1610.05492 (2016). arXiv:1610.05492 http:\/\/arxiv.org\/abs\/1610.05492 Jakub Konecn\u00fd, H. Brendan McMahan, Felix X. Yu, Peter Richt\u00e1rik, Ananda Theertha Suresh, and Dave Bacon. 2016. Federated Learning: Strategies for Improving Communication Efficiency. CoRR abs\/1610.05492 (2016). arXiv:1610.05492 http:\/\/arxiv.org\/abs\/1610.05492"},{"key":"e_1_3_2_1_12_1","volume-title":"Trojaning Attack on Neural Networks. In Network and Distributed System Security Symposium.","author":"Liu Yingqi","year":"2018","unstructured":"Yingqi Liu , Shiqing Ma , Yousra Aafer , Wen Chuan Lee , and Xiangyu Zhang . 2018 . Trojaning Attack on Neural Networks. In Network and Distributed System Security Symposium. Yingqi Liu, Shiqing Ma,Yousra Aafer, Wen Chuan Lee, and Xiangyu Zhang. 2018. Trojaning Attack on Neural Networks. In Network and Distributed System Security Symposium."},{"key":"e_1_3_2_1_13_1","unstructured":"H. Brendan McMahan Eider Moore Daniel Ramage Seth Hampson and Blaise Ag\u00fcera y Arcas. 2016. Communication-Efficient Learning of Deep Networks from Decentralized Data. arXiv:1602.05629 [cs.LG]  H. Brendan McMahan Eider Moore Daniel Ramage Seth Hampson and Blaise Ag\u00fcera y Arcas. 2016. Communication-Efficient Learning of Deep Networks from Decentralized Data. arXiv:1602.05629 [cs.LG]"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.5555\/2886521.2886721"},{"key":"e_1_3_2_1_15_1","unstructured":"Ronald L Rivest Len Adleman Michael L Dertouzos etal 1978. On data banks and privacy homomorphisms. Foundations of secure computation 4 11 (1978) 169--180.  Ronald L Rivest Len Adleman Michael L Dertouzos et al. 1978. On data banks and privacy homomorphisms. Foundations of secure computation 4 11 (1978) 169--180."},{"key":"e_1_3_2_1_16_1","volume-title":"Pang Wei W Koh, and Percy S Liang","author":"Steinhardt Jacob","year":"2017","unstructured":"Jacob Steinhardt , Pang Wei W Koh, and Percy S Liang . 2017 . Certified defenses for data poisoning attacks. In Advances in neural information processing systems. 3517--3529. Jacob Steinhardt, Pang Wei W Koh, and Percy S Liang. 2017. Certified defenses for data poisoning attacks. In Advances in neural information processing systems. 3517--3529."},{"key":"e_1_3_2_1_17_1","volume-title":"Federated learning workshop at NeurRIPS","author":"Suresh Ananda Theertha","year":"2019","unstructured":"Ananda Theertha Suresh , Brendan McMahan , Peter Kairouz , and Ziteng Sun . 2019. Can You Really Backdoor Federated Learning? . In Federated learning workshop at NeurRIPS ( 2019 ). Ananda Theertha Suresh, Brendan McMahan, Peter Kairouz, and Ziteng Sun. 2019. Can You Really Backdoor Federated Learning?. In Federated learning workshop at NeurRIPS (2019)."},{"key":"e_1_3_2_1_18_1","volume-title":"2nd International Conference on Learning Representations, ICLR 2014; Conference date: 14-04-2014 Through 16-04-2014","author":"Szegedy Christian","year":"2014","unstructured":"Christian Szegedy , Wojciech Zaremba , Ilya Sutskever , Joan Bruna Estrach , Dumitru Erhan , Ian Goodfellow , and Robert Fergus . 2014 . Intriguing properties of neural networks . 2nd International Conference on Learning Representations, ICLR 2014; Conference date: 14-04-2014 Through 16-04-2014 . Christian Szegedy, Wojciech Zaremba, Ilya Sutskever, Joan Bruna Estrach, Dumitru Erhan, Ian Goodfellow, and Robert Fergus. 2014. Intriguing properties of neural networks. 2nd International Conference on Learning Representations, ICLR 2014; Conference date: 14-04-2014 Through 16-04-2014."},{"key":"e_1_3_2_1_19_1","volume-title":"25th USENIX Security Symposium (USENIX Security 16)","author":"Tram\u00e8r Florian","year":"2016","unstructured":"Florian Tram\u00e8r , Fan Zhang , Ari Juels , Michael K. Reiter , and Thomas Ristenpart . 2016 . Stealing Machine Learning Models via Prediction APIs . In 25th USENIX Security Symposium (USENIX Security 16) . USENIX Association, Austin, TX, 601--618. https:\/\/www.usenix.org\/conference\/usenixsecurity16\/technical-sessions\/ presentation\/tramer Florian Tram\u00e8r, Fan Zhang, Ari Juels, Michael K. Reiter, and Thomas Ristenpart. 2016. Stealing Machine Learning Models via Prediction APIs. In 25th USENIX Security Symposium (USENIX Security 16). USENIX Association, Austin, TX, 601--618. https:\/\/www.usenix.org\/conference\/usenixsecurity16\/technical-sessions\/ presentation\/tramer"},{"key":"e_1_3_2_1_20_1","article-title":"Federated Machine Learning","volume":"10","author":"Yang Qiang","year":"2019","unstructured":"Qiang Yang , Yang Liu , Tianjian Chen , and Yongxin Tong . 2019 . Federated Machine Learning : Concept and Applications. ACM Trans. Intell. Syst. Technol. 10 , 2, Article 12 (Jan. 2019), 19 pages. https:\/\/doi.org\/10.1145\/3298981 10.1145\/3298981 Qiang Yang, Yang Liu, Tianjian Chen, and Yongxin Tong. 2019. Federated Machine Learning: Concept and Applications. ACM Trans. Intell. Syst. Technol. 10, 2, Article 12 (Jan. 2019), 19 pages. https:\/\/doi.org\/10.1145\/3298981","journal-title":"Concept and Applications. ACM Trans. Intell. Syst. Technol."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.5555\/1382436.1382751"},{"key":"e_1_3_2_1_22_1","unstructured":"Yue Zhao Meng Li Liangzhen Lai Naveen Suda Damon Civin and Vikas Chandra. 2018. Federated Learning with Non-IID Data. arXiv:1806.00582 [cs.LG]  Yue Zhao Meng Li Liangzhen Lai Naveen Suda Damon Civin and Vikas Chandra. 2018. Federated Learning with Non-IID Data. arXiv:1806.00582 [cs.LG]"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.33012253"}],"event":{"name":"CCS '20: 2020 ACM SIGSAC Conference on Computer and Communications Security","location":"Virtual Event USA","acronym":"CCS '20","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2020 Workshop on Privacy-Preserving Machine Learning in Practice"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3411501.3419423","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3411501.3419423","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T21:31:41Z","timestamp":1750195901000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3411501.3419423"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,11,9]]},"references-count":22,"alternative-id":["10.1145\/3411501.3419423","10.1145\/3411501"],"URL":"https:\/\/doi.org\/10.1145\/3411501.3419423","relation":{},"subject":[],"published":{"date-parts":[[2020,11,9]]},"assertion":[{"value":"2020-11-09","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}