MGIA: Mutual Gradient Inversion Attack in Multi-Modal Federated Learning (Student Abstract)

Recent studies have demonstrated that local training data in Federated Learning can be recovered from gradients, which are called gradient inversion attacks. These attacks display powerful effects on either computer vision or natural language processing tasks. As it is known that there are certain correlations between multi-modality data, we argue that the threat of such attacks combined with Multi-modal Learning may cause more severe effects. Different modalities may communicate through gradients to provide richer information for the attackers, thus improving the strength and efficiency of the gradient inversion attacks. In this paper, we propose the Mutual Gradient Inversion Attack (MGIA), by utilizing the shared labels between image and text modalities combined with the idea of knowledge distillation. Our experimental results show that MGIA achieves the best quality of both modality data and label recoveries in comparison with other methods. In the meanwhile, MGIA verifies that multi-modality gradient inversion attacks are more likely to disclose private information than the existing single-modality attacks.

Authors

• Xuan Liu Xinyang Normal University
• Siqi Cai Hubei Key Laboratory of Transportation Internet of Things, Wuhan University of Technology
• Lin Li Shanxi University
• Rui Zhang
• Song Guo Department of Computer Science and Engineering, The Hong Kong University of Science and Technology

Keywords

• Federated Learning
• Gradient Inversion Attack
• Information Security
• Knowledge Distillation
• Multimodal Machine Learning