Deep Leakage from Gradients

Code

• github.com/mit-han-lab/deep-leakage-from-gradients
  pytorch★ 476
• github.com/ytingma/ppidsg
  pytorch★ 8
• github.com/Mishuni/ViT_Inversion
  pytorch★ 0
• github.com/MiscCoding/AddGausianNoise
  pytorch★ 0
• github.com/FaisalAhmed0/Deep-Leakage-from-Gradients
  pytorch★ 0
• github.com/mit-han-lab/dlg
  pytorch★ 0
• github.com/kei773/CSED199_Freshman_Research_Participation
  pytorch★ 0

Abstract

Exchanging gradients is a widely used method in modern multi-node machine learning system (e.g., distributed training, collaborative learning). For a long time, people believed that gradients are safe to share: i.e., the training data will not be leaked by gradient exchange. However, we show that it is possible to obtain the private training data from the publicly shared gradients. We name this leakage as Deep Leakage from Gradient and empirically validate the effectiveness on both computer vision and natural language processing tasks. Experimental results show that our attack is much stronger than previous approaches: the recovery is pixel-wise accurate for images and token-wise matching for texts. We want to raise people's awareness to rethink the gradient's safety. Finally, we discuss several possible strategies to prevent such deep leakage. The most effective defense method is gradient pruning.

Reproductions