Qingzhe Lv

Dr. Qingzhe Lv


Research Focus & Metrics

Academic Career Length

4Years (2023-Present)

(Calculated once Scilit publication data is synced: current year − year of first publication + 1)

Representative Publications

View All Publications
8 May 2023 in World Wide Web
Verified
Journal Article
Closed access
PDF file
YWYilei Wang
Yilei Wang
QLQingzhe Lv
Qingzhe Lv
HZHuang Zhang
Huang Zhang
MZMinghao Zhao
Minghao Zhao
YSYuhong Sun
Yuhong Sun
TLTao Li
Tao Li

8 November 2024 in Electronics
Verified
Journal Article
Open access
PDF file
LDLiansheng Ding
Liansheng Ding
HBHaibin Bao
Haibin Bao
QLQingzhe Lv
Qingzhe Lv
FZFeng Zhang
Feng Zhang
ZZZhouyang Zhang
Zhouyang Zhang
SDShuang Ding
Shuang Ding
Federated learning, as an emerging machine-learning method, has received widespread attention because it allows users to train locally during the training process and uses relevant cryptographic knowledge to safeguard the privacy of data during model aggregation. However, existing federated learning is also susceptible to privacy breaches, e.g., label inference attacks against vertical federated learning scenarios, where an adversary is able to reason about the labels of other participants based on the trained model, leading to serious privacy breaches. In this paper, we design a detection method for label inference attacks in vertical federated learning scenarios, which is able to detect the attacks based on the principles of the attacks. We design a threshold-filtering detection method based on the principle of attack to determine that the model is under attack when the threshold value is greater than a set parameter. Furthermore, we have created six threat model classifications based on different a priori conditions of the adversary to comprehensively analyze the adversary’s attacks. In addition to the detection method of attacks, the extent of attacks on the model and the effectiveness of the defense can also be evaluated. The evaluation module will experimentally measure the changes in the relevant metrics such as the accuracy of the attack, the F1 score, and the change in the accuracy after the defense method. For example, detection in the full connected neural network model assesses the attack and defense effectiveness of the model with an attack accuracy of 86.72% in the breast cancer Wisconsin dataset and an F1 score of 0.743, which is reduced to 36.36% after dispersed training. This ensures that users have an overall grasp of the extent to which the training model is under attack before deploying the model.