{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,24]],"date-time":"2025-08-24T00:01:01Z","timestamp":1755993661746,"version":"3.44.0"},"publisher-location":"New York, NY, USA","reference-count":33,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,6,24]],"date-time":"2024-06-24T00:00:00Z","timestamp":1719187200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,6,24]]},"DOI":"10.1145\/3658664.3659636","type":"proceedings-article","created":{"date-parts":[[2024,6,12]],"date-time":"2024-06-12T15:09:27Z","timestamp":1718204967000},"page":"235-246","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Extending the Scope of Gradient Reconstruction Attacks in Federated Averaging"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0009-2720-1324","authenticated-orcid":false,"given":"Pierre","family":"Jobic","sequence":"first","affiliation":[{"name":"CEA List, Universit\u00e9 Paris-Saclay, F-91120, Palaiseau, France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7330-3024","authenticated-orcid":false,"given":"Aur\u00e9lien","family":"Mayoue","sequence":"additional","affiliation":[{"name":"CEA List, Universit\u00e9 Paris-Saclay, F-91120, Palaiseau, France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9738-9021","authenticated-orcid":false,"given":"Sara","family":"Tucci-Piergiovanni","sequence":"additional","affiliation":[{"name":"CEA List, Universit\u00e9 Paris-Saclay, F-91120, Palaiseau, France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6871-9818","authenticated-orcid":false,"given":"Fran\u00e7ois","family":"Terrier","sequence":"additional","affiliation":[{"name":"CEA List, Universit\u00e9 Paris-Saclay, F-91120, Palaiseau, France"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,6,24]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Aaditya Kumar Singh, and Sunav Choudhary","author":"Arivazhagan Manoj Ghuhan","year":"2019","unstructured":"Manoj Ghuhan Arivazhagan, Vinay Aggarwal, Aaditya Kumar Singh, and Sunav Choudhary. 2019. Federated Learning with Personalization Layers. http:\/\/arxiv.org\/abs\/1912.00818 arXiv:1912.00818 [cs, stat]."},{"key":"e_1_3_2_1_2_1","volume-title":"Titouan Parcollet, Pedro Porto Buarque de Gusm\u00e3o, and Nicholas D. Lane.","author":"Beutel Daniel J.","year":"2022","unstructured":"Daniel J. Beutel, Taner Topal, Akhil Mathur, Xinchi Qiu, Javier Fernandez-Marques, Yan Gao, Lorenzo Sani, Kwing Hei Li, Titouan Parcollet, Pedro Porto Buarque de Gusm\u00e3o, and Nicholas D. Lane. 2022. Flower: A Friendly Federated Learning Research Framework. http:\/\/arxiv.org\/abs\/2007.14390 arXiv:2007.14390 [cs, stat]."},{"key":"e_1_3_2_1_3_1","unstructured":"Trung Dang Om Thakkar Swaroop Ramaswamy Rajiv Mathews Peter Chin and Fran\u00e7oise Beaufays. 2021. Revealing and Protecting Labels in Distributed Training. http:\/\/arxiv.org\/abs\/2111.00556 arXiv:2111.00556 [cs]."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","unstructured":"Dimitar I. Dimitrov Mislav Balunovi? Nikola Konstantinov and Martin Vechev. 2022. Data Leakage in Federated Averaging. https:\/\/doi.org\/10.48550\/arXiv.2206.12395 arXiv:2206.12395 [cs].","DOI":"10.48550\/arXiv.2206.12395"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813677"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","unstructured":"Jonas Geiping Hartmut Bauermeister Hannah Dr\u00f6ge and Michael Moeller. 2020. Inverting Gradients -- How easy is it to break privacy in federated learning? https:\/\/doi.org\/10.48550\/arXiv.2003.14053 arXiv:2003.14053 [cs].","DOI":"10.48550\/arXiv.2003.14053"},{"key":"e_1_3_2_1_7_1","unstructured":"Jiahui Geng Yongli Mou Feifei Li Qing Li Oya Beyan Stefan Decker and Chunming Rong. 2022. Towards General Deep Leakage in Federated Learning. http:\/\/arxiv.org\/abs\/2110.09074 arXiv:2110.09074 [cs]."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","unstructured":"Kaiming He Xiangyu Zhang Shaoqing Ren and Jian Sun. 2015. Deep Residual Learning for Image Recognition. https:\/\/doi.org\/10.48550\/arXiv.1512.03385 arXiv:1512.03385 [cs].","DOI":"10.48550\/arXiv.1512.03385"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"crossref","unstructured":"Briland Hitaj Giuseppe Ateniese and Fernando Perez-Cruz. 2017. Deep Models Under the GAN: Information Leakage from Collaborative Deep Learning. http:\/\/arxiv.org\/abs\/1702.07464 arXiv:1702.07464 [cs stat].","DOI":"10.1145\/3133956.3134012"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","unstructured":"Yangsibo Huang Samyak Gupta Zhao Song Kai Li and Sanjeev Arora. 2021. Evaluating Gradient Inversion Attacks and Defenses in Federated Learning. https:\/\/doi.org\/10.48550\/arXiv.2112.00059 arXiv:2112.00059 [cs].","DOI":"10.48550\/arXiv.2112.00059"},{"key":"e_1_3_2_1_11_1","unstructured":"Jinwoo Jeon Jaechang Kim Kangwook Lee Sewoong Oh and Jungseul Ok. 2021. Gradient Inversion with Generative Image Prior. http:\/\/arxiv.org\/abs\/2110.14962 arXiv:2110.14962 [cs]."},{"key":"e_1_3_2_1_12_1","unstructured":"Pierre Jobic Maxime Haddouche and Benjamin Guedj. 2023. Federated Learning with Nonvacuous Generalisation Bounds. http:\/\/arxiv.org\/abs\/2310.11203 arXiv:2310.11203 [cs stat]."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"crossref","unstructured":"Peter Kairouz H. Brendan McMahan Brendan Avent Aur\u00e9lien Bellet Mehdi Bennis Arjun Nitin Bhagoji Kallista Bonawitz Zachary Charles Graham Cormode Rachel Cummings Rafael G. L. D'Oliveira Hubert Eichner Salim El Rouayheb David Evans Josh Gardner Zachary Garrett Adri\u00e0 Gasc\u00f3n Badih Ghazi Phillip B. Gibbons Marco Gruteser Zaid Harchaoui Chaoyang He Lie He Zhouyuan Huo Ben Hutchinson Justin Hsu Martin Jaggi Tara Javidi Gauri Joshi Mikhail Khodak Jakub Kone?n\u00fd Aleksandra Korolova Farinaz Koushanfar Sanmi Koyejo Tancr\u00e8de Lepoint Yang Liu Prateek Mittal Mehryar Mohri Richard Nock Ayfer \u00d6zg\u00fcr Rasmus Pagh Mariana Raykova Hang Qi Daniel Ramage Ramesh Raskar Dawn Song Weikang Song Sebastian U. Stich Ziteng Sun Ananda Theertha Suresh Florian Tram\u00e8r Praneeth Vepakomma Jianyu Wang Li Xiong Zheng Xu Qiang Yang Felix X. Yu Han Yu and Sen Zhao. 2021. Advances and Open Problems in Federated Learning. http:\/\/arxiv.org\/abs\/1912.04977 arXiv:1912.04977 [cs stat].","DOI":"10.1561\/9781680837896"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.1412.6980"},{"key":"e_1_3_2_1_15_1","unstructured":"Alex Krizhevsky and Geoffrey Hinton. 2009. Learning multiple layers of features from tiny images. Technical Report 0. Technical report University of Toronto \/ University of Toronto Toronto Ontario. https:\/\/www.cs.toronto.edu\/ kriz\/learning-features-2009-TR.pdf"},{"key":"e_1_3_2_1_16_1","unstructured":"Bowen Li Hanlin Gu Ruoxin Chen Jie Li Chentao Wu Na Ruan Xueming Si and Lixin Fan. 2023. Temporal Gradient Inversion Attacks with Robust Optimization. http:\/\/arxiv.org\/abs\/2306.07883 arXiv:2306.07883 [cs]."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1007\/BF01589116"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","unstructured":"H. Brendan McMahan Eider Moore Daniel Ramage Seth Hampson and Blaise Ag\u00fcera y Arcas. 2017. Communication-Efficient Learning of Deep Networks from Decentralized Data. https:\/\/doi.org\/10.48550\/arXiv.1602.05629","DOI":"10.48550\/arXiv.1602.05629"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.1712.05889"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.1912.01703"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1016\/0167--2789(92)90242-F"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","unstructured":"Reza Shokri Marco Stronati Congzheng Song and Vitaly Shmatikov. 2017. Membership Inference Attacks against Machine Learning Models. https:\/\/doi.org\/10.48550\/arXiv.1610.05820 arXiv:1610.05820 [cs stat].","DOI":"10.48550\/arXiv.1610.05820"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00919"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","unstructured":"Nguyen Truong Kai Sun Siyao Wang Florian Guitton and Yike Guo. 2021. Privacy Preservation in Federated Learning: An insightful survey from the GDPR Perspective. https:\/\/doi.org\/10.48550\/arXiv.2011.05411 arXiv:2011.05411 [cs].","DOI":"10.48550\/arXiv.2011.05411"},{"key":"e_1_3_2_1_25_1","volume-title":"Ephraim Zimmer, Tim Grube, Kristian Kersting, and Max M\u00fchlh\u00e4user.","author":"Wainakh Aidmar","year":"2022","unstructured":"Aidmar Wainakh, Fabrizio Ventola, Till M\u00fc\u00dfig, Jens Keim, Carlos Garcia Cordero, Ephraim Zimmer, Tim Grube, Kristian Kersting, and Max M\u00fchlh\u00e4user. 2022. User-Level Label Leakage from Gradients in Federated Learning. http:\/\/arxiv.org\/abs\/2105.09369 arXiv:2105.09369 [cs]."},{"key":"e_1_3_2_1_26_1","volume-title":"Alejandro Sanchez Guinea, and Max M\u00fchlh\u00e4user","author":"Wainakh Aidmar","year":"2021","unstructured":"Aidmar Wainakh, Ephraim Zimmer, Sandeep Subedi, Jens Keim, Tim Grube, Shankar Karuppayah, Alejandro Sanchez Guinea, and Max M\u00fchlh\u00e4user. 2021. Federated Learning Attacks Revisited: A Critical Discussion of Gaps, Assumptions, and Evaluation Setups. http:\/\/arxiv.org\/abs\/2111.03363 arXiv:2111.03363 [cs] version: 1."},{"key":"e_1_3_2_1_27_1","volume-title":"Stacey Truex, and Yanzhao Wu.","author":"Wei Wenqi","year":"2020","unstructured":"Wenqi Wei, Ling Liu, Margaret Loper, Ka-Ho Chow, Mehmet Emre Gursoy, Stacey Truex, and Yanzhao Wu. 2020. A Framework for Evaluating Gradient Leakage Attacks in Federated Learning. http:\/\/arxiv.org\/abs\/2004.10397 arXiv:2004.10397 [cs, stat]."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2018.00027"},{"key":"e_1_3_2_1_29_1","unstructured":"Hongxu Yin Hongxu Arun Mallya Arash Vahdat Jose M. Alvarez Jan Kautz and Pavlo Molchanov. 2021. See through Gradients: Image Batch Recovery via GradInversion. http:\/\/arxiv.org\/abs\/2104.07586 arXiv:2104.07586 [cs]."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1007\/10968987_3"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","unstructured":"Richard Zhang Phillip Isola Alexei A. Efros Eli Shechtman and Oliver Wang. 2018. The Unreasonable Effectiveness of Deep Features as a Perceptual Metric. https:\/\/doi.org\/10.48550\/arXiv.1801.03924 arXiv:1801.03924 [cs].","DOI":"10.48550\/arXiv.1801.03924"},{"key":"e_1_3_2_1_32_1","volume-title":"Konda Reddy Mopuri, and Hakan Bilen","author":"Zhao Bo","year":"2020","unstructured":"Bo Zhao, Konda Reddy Mopuri, and Hakan Bilen. 2020. iDLG: Improved Deep Leakage from Gradients. http:\/\/arxiv.org\/abs\/2001.02610 arXiv:2001.02610 [cs, stat]."},{"key":"e_1_3_2_1_33_1","unstructured":"Ligeng Zhu Zhijian Liu and Song Han. 2019. Deep Leakage from Gradients. http:\/\/arxiv.org\/abs\/1906.08935 arXiv:1906.08935 [cs stat]. io"}],"event":{"name":"IH&MMSEC '24: ACM Workshop on Information Hiding and Multimedia Security","sponsor":["SIGMM ACM Special Interest Group on Multimedia"],"location":"Baiona Spain","acronym":"IH&MMSEC '24"},"container-title":["Proceedings of the 2024 ACM Workshop on Information Hiding and Multimedia Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658664.3659636","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3658664.3659636","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T23:43:26Z","timestamp":1755906206000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658664.3659636"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,6,24]]},"references-count":33,"alternative-id":["10.1145\/3658664.3659636","10.1145\/3658664"],"URL":"https:\/\/doi.org\/10.1145\/3658664.3659636","relation":{},"subject":[],"published":{"date-parts":[[2024,6,24]]},"assertion":[{"value":"2024-06-24","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}