Beyond Inferring Class Representatives: User-Level Privacy Leakage From Federated Learning

M. Pathak, S. Rane, and B. Raj, “Multiparty differential privacy via aggregation of locally trained classifiers,” in Proc. of NIPS , 2010, pp. 1876–1884

2010

Earlier work this paper cites.

H. Corrigan-Gibbs, D. I. Wolinsky, and B. Ford, “Proactively accountable anonymous messaging in verdict.” in USENIX Security Symposium , 2013, pp. 147–162

2013

Earlier work this paper cites.

C. Szegedy, W. Zaremba, I. Sutskever, J. Bruna, D. Erhan, I. Goodfellow, and R. Fergus, “Intriguing properties of neural networks,” arXiv preprint arXiv:1312.6199 , 2013

Original

2013

Earlier work this paper cites.

I. Goodfellow, J. Pouget-Abadie, M. Mirza, B. Xu, D. Warde-Farley, S. Ozair, A. Courville, and Y. Bengio, “Generative adversarial nets,” in Proc. of NIPS , 2014, pp. 2672–2680

2014

Earlier work this paper cites.

C. Dwork and A. Roth, “The algorithmic foundations of differential privacy,” Foundations and Trends® in Theoretical Computer Science , vol. 9, no. 3–4, pp. 211–407, 2014

2014

Earlier work this paper cites.

R. Shokri and V. Shmatikov, “Privacy-preserving deep learning,” in Proc. of ACM CCS , 2015, pp. 1310–1321

2015

Earlier work this paper cites.

G. Danner and M. Jelasity, “Fully distributed privacy preserving mini-batch gradient descent learning,” in Proc. of IFIP , 2015, pp. 30–44

2015

Earlier work this paper cites.

M. Fredrikson, S. Jha, and T. Ristenpart, “Model inversion attacks that exploit confidence information and basic countermeasures,” in Proc. of ACM SIGSAC , 2015, pp. 1322–1333

2015

Earlier work this paper cites.

A. Mahendran and A. Vedaldi, “Understanding deep image representations by inverting them,” in Proc. of IEEE CVPR , 2015, pp. 5188–5196

2015

Cited alongside, same era.

H. B. McMahan, E. Moore, D. Ramage, S. Hampson, and B. A. y. Arcas, “Communication-efficient learning of deep networks from decentralized data,” arXiv preprint arXiv:1602.05629 , 2016

Original

2016

Cited alongside, same era.

A. Odena, C. Olah, and J. Shlens, “Conditional image synthesis with auxiliary classifier gans,” arXiv preprint arXiv:1610.09585 , 2016

Original

2016

Cited alongside, same era.

J. Konečnỳ, H. B. McMahan, D. Ramage, and P. Richtárik, “Federated optimization: distributed machine learning for on-device intelligence,” arXiv preprint arXiv:1610.02527 , 2016

Original

2016

Cited alongside, same era.

J. Chen, R. Monga, S. Bengio, and R. Jozefowicz, “Revisiting distributed synchronous sgd,” arXiv preprint arXiv:1604.00981 , 2016

Y. Aono, T. Hayashi, L. Wang, S. Moriai et al. , “Privacy-preserving deep learning: Revisited and enhanced,” in Proc. of ATIS . Springer, 2017, pp. 100–110

2017

Later among the works it cites.

B. Hitaj, G. Ateniese, and F. Perez-Cruz, “Deep models under the gan: information leakage from collaborative deep learning,” in Proc. of ACM CCS . ACM, 2017, pp. 603–618

2017

Later among the works it cites.

R. C. Geyer, T. Klein, and M. Nabi, “Differentially private federated learning: A client level perspective,” arXiv preprint arXiv:1712.07557 , 2017

Original

2017

Later among the works it cites.

P. Mohassel and Y. Zhang, “Secureml: A system for scalable privacy-preserving machine learning.” IACR Cryptology ePrint Archive , vol. 2017, p. 396, 2017

2017

Later among the works it cites.