Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Chengang Yang

dblp:321/6391 · DBLP profile ↗
← Back
2ranked-venue papers
1as first author
2since 2021 · last 2022
0000-0002-3117-3129ORCID · reported

Domains — the database's venue-derived domains; a paper can count in several

Systems, architecture and hardware · 1 · 1 since 2021Databases, data management, data science and information retrieval · 1 · 1 first-author · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
1 paper
Privacy and data protection · 67% Security and privacy of machine learning · 33%
Artificial intelligence
1 paper
Efficient and distributed learning · 100%

Topics — the 5 heaviest of 5, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Machine learning › Efficient and distributed learning
distributed training
0.612022
Mixing Activations and Labels in Distributed Training for Split Learning · IEEE Trans. Parallel Distributed Syst. 2022
Machine learning › Efficient and distributed learning › distributed training › distributed DNN training
split learning
0.612022
Mixing Activations and Labels in Distributed Training for Split Learning · IEEE Trans. Parallel Distributed Syst. 2022
Security and privacy of machine learning › privacy attack
data reconstruction attack
0.612022
Mixing Activations and Labels in Distributed Training for Split Learning · IEEE Trans. Parallel Distributed Syst. 2022
Privacy and data protection › information leakage
privacy leakage
0.612022
Mixing Activations and Labels in Distributed Training for Split Learning · IEEE Trans. Parallel Distributed Syst. 2022
Privacy and data protection › privacy-preserving machine learning
split learning privacy
0.612022
Mixing Activations and Labels in Distributed Training for Split Learning · IEEE Trans. Parallel Distributed Syst. 2022

Methods — techniques the papers use, named apart from their topics

label obfuscation · 1.1bipartite graph matching · 1.1activation mixing · 1.1
YearPublicationVenuePosition
2022 RTGA: Robust ternary gradients aggregation for federated learning
Chengang Yang, Danyang Xiao, Bokai Cao, Weigang Wu
Inf. Sci.1
2022 Mixing Activations and Labels in Distributed Training for Split Learning
abstract
Split Learning (SL) is a distributed machine learning setting that allows several nodes to train neural networks based on model parallelism. Since SL avoids sharing raw data among training nodes, it can protect data privacy by nature. However, recent studies show that, raw data may be reconstructed from activations in training, which may cause data privacy leakage. Besides raw data, label sharing in SL may also cause privacy problems. In order to address these issues, we propose a novel mechanism called multiple activations and labels mix (MALM). By taking advantage of the diversity of sample categories, MALM generates mixed activations that preserve a low distance correlation with the raw data so as to reduce the risk of reconstruction attacks. To protect label information, MALM creates obfuscated labels associated with the raw data so as to prevent adversaries from inferring ground-truth labels. Since clients with few sample categories may not effectively generate mixed activations and obfuscated labels, we propose a bipartite graph based assistant client match technique for MALM, which lets clients with a large number of categories provide mixed activations and obfuscated labels for clients with few categories. Those clients with few categories can mix the obtained mixed activations and obfuscated labels with their own activations and labels. Experimental results show that, compared with baselines, MALM can reduce the risk of raw data and label information leakage with lower cost, while achieving comparable even better model performance.
Danyang Xiao, Chengang Yang, Weigang Wu
IEEE Trans. Parallel Distributed Syst.2