Recovering Labels from Local Updates in Federated Learning

arXiv:2405.00955v1 Announce Type: new
Abstract: Gradient inversion (GI) attacks present a threat to the privacy of clients in federated learning (FL) by aiming to enable reconstruction of the clients' data from communicated model updates. A number of such techniques attempts to accelerate data recovery by first reconstructing labels of the samples used in local training. However, existing label extraction methods make strong assumptions that typically do not hold in realistic FL settings. In this paper we present a novel label …

abstract arxiv attacks cs.cr cs.lg data data recovery federated learning gradient labels privacy recovery samples threat type updates