VFL Attack Performance on MNIST
73.23LISRfeature-based triggerless backdoor attack
Evaluation results
| Method | Links | |||||||
|---|---|---|---|---|---|---|---|---|
| feature-based triggerless backdoor attackscenario=two-party VFL2026.02 | 73.23 | — | — | — | 100 | 100 | 93.92 | |
| VILLAINscenario=two-party VFL2026.02 | 73.11 | 96.61 | 99.73 | 99.72 | 98.66 | 100 | 91.77 | |
| BASLscenario=two-party VFL2026.02 | 72.11 | 96.78 | 98.44 | 99.77 | 70.15 | 76.31 | 92.96 | |
| BadVFLscenario=two-party VFL2026.02 | 71.36 | 69.84 | 70.21 | 70.35 | 94.93 | 97.44 | 77.36 |