Label Inference Attack on Vertical Federated Learning (VFL) environment
2Number of Supported ClassesDirect Label Inference (DLI)
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| Direct Label Inference (DLI)AggVFL=✓, SplitVFL=×, LR=×, NN=✓, Support Batch-Level Gradients=×, Protecting Intermediate Results=×, Auxiliary Requirement=-2026.03 | 2 | — | |
| Norm Scoring Attack (NS)AggVFL=×, SplitVFL=✓, LR=×, NN=✓, Support Batch-Level Gradients=×, Protecting Intermediate Results=×, Auxiliary Requirement=-2026.03 | 2 | — | |
| Direction Scoring Attack (DS)AggVFL=×, SplitVFL=✓, LR=×, NN=✓, Support Batch-Level Gradients=×, Protecting Intermediate Results=×, Auxiliary Requirement=-2026.03 | 2 | — | |
| Residual Reconstruction Attacks (RR)AggVFL=✓, SplitVFL=×, LR=✓, NN=×, Support Batch-Level Gradients=✓, Protecting Intermediate Results=✓, Auxiliary Requirement=-2026.03 | 2 | 3 | |
| Passive Model Completion (PMC)AggVFL=×, SplitVFL=✓, LR=×, NN=✓, Support Batch-Level Gradients=✓, Protecting Intermediate Results=✓, Auxiliary Requirement=Labeled data2026.03 | 2 | — | |
| Active Model Completion (AMC)AggVFL=×, SplitVFL=✓, LR=×, NN=✓, Support Batch-Level Gradients=✓, Protecting Intermediate Results=✓, Auxiliary Requirement=Labeled data2026.03 | 2 | — | |
| Label-related Relation Inference (LRI)AggVFL=×, SplitVFL=✓, LR=×, NN=✓, Support Batch-Level Gradients=✓, Protecting Intermediate Results=✓, Auxiliary Requirement=-2026.03 | 2 | — | |
| Gradient Inversion with a Label PriorAggVFL=×, SplitVFL=✓, LR=×, NN=✓, Support Batch-Level Gradients=✓, Protecting Intermediate Results=✓, Auxiliary Requirement=Label distribution2026.03 | 2 | — | |
| Label Enumeration Attack (LEA)AggVFL=✓, SplitVFL=✓, LR=✓, NN=✓, Support Batch-Level Gradients=✓, Protecting Intermediate Results=✓, Auxiliary Requirement=-2026.03 | 2 | 3 |