Yanhang Shi

Stealing Split Learning Bottom Models by Recovering Embedding Geometry

Vertical federated learning (VFL) trains models by splitting computation across clients and a server that only exchange intermediate embeddings. Recent work shows that a server even if honest-but-curious can steal a client's bottom model by querying the system and regressing on the returned embeddin