EMNLP 2021main15 citations
Reconstruction Attack on Instance Encoding for Language Understanding
Abstract
A private learning scheme TextHide was recently proposed to protect the private text data during the training phase via so-called instance encoding. We propose a novel reconstruction attack to break TextHide by recovering the private training data, and thus unveil the privacy risks of instance encoding. We have experimentally validated the effectiveness of the reconstruction attack with two commonly-used datasets for sentence classification. Our attack would advance the development of privacy preserving machine learning in the context of natural language processing.
BibTeX
@inproceedings{xie-hong-2021-reconstruction,
title = "Reconstruction Attack on Instance Encoding for Language Understanding",
author = "Xie, Shangyu and
Hong, Yuan",
editor = "Moens, Marie-Francine and
Huang, Xuanjing and
Specia, Lucia and
Yih, Scott Wen-tau",
booktitle = "Proceedings of the 2021 Conference on Empirical Methods in Natural Language Processing",
month = nov,
year = "2021",
address = "Online and Punta Cana, Dominican Republic",
publisher = "Association for Computational Linguistics",
url = "https://aclanthology.org/2021.emnlp-main.154/",
doi = "10.18653/v1/2021.emnlp-main.154",
pages = "2038--2044"
}