{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/addressing-membership-inference-attack-in","title":"Privacy and Accuracy Implications of Model Complexity and Integration in Heterogeneous Federated Learning","arxiv_id":"2311.17750","date":"2023-11-29","proceeding":null,"authors":["Gergely Dániel Németh","Miguel Ángel Lozano","Novi Quadrianto","Nuria Oliver"],"abstract":"Federated Learning (FL) has been proposed as a privacy-preserving solution for distributed machine learning, particularly in heterogeneous FL settings where clients have varying computational capabilities and thus train models with different complexities compared to the server's model. However, FL is not without vulnerabilities: recent studies have shown that it is susceptible to membership inference attacks (MIA), which can compromise the privacy of client data. In this paper, we examine the intersection of these two aspects, heterogeneous FL and its privacy vulnerabilities, by focusing on the role of client model integration, the process through which the server integrates parameters from clients' smaller models into its larger model. To better understand this process, we first propose a taxonomy that categorizes existing heterogeneous FL methods and enables the design of seven novel heterogeneous FL model integration strategies. Using CIFAR-10, CIFAR-100, and FEMNIST vision datasets, we evaluate the privacy and accuracy trade-offs of these approaches under three types of MIAs. Our findings reveal significant differences in privacy leakage and performance depending on the integration method. Notably, introducing randomness in the model integration process enhances client privacy while maintaining competitive accuracy for both the clients and the server. This work provides quantitative light on the privacy-accuracy implications client model integration in heterogeneous FL settings, paving the way towards more secure and efficient FL systems.","url_abs":"https://arxiv.org/abs/2311.17750v3","url_pdf":"https://arxiv.org/pdf/2311.17750v3.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"addressing-membership-inference-attack-in","repo_url":"https://github.com/ellisalicante/ma-fl-mia","is_official":1,"mentioned_in_paper":1,"mentioned_in_github":0,"framework":"pytorch","reach":null},{"paper_slug":"addressing-membership-inference-attack-in","repo_url":"https://github.com/negedng/ma-fl-mia","is_official":1,"mentioned_in_paper":1,"mentioned_in_github":0,"framework":"pytorch","reach":null}],"tasks":[{"task_slug":"federated-learning","task_name":"Federated Learning"},{"task_slug":"inference-attack","task_name":"Inference Attack"},{"task_slug":"membership-inference-attack","task_name":"Membership Inference Attack"},{"task_slug":"model-compression","task_name":"Model Compression"},{"task_slug":"privacy-preserving","task_name":"Privacy Preserving"}],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"atlas_url":"https://app.syntology.ai/?focus=2311.17750","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2311.17750"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-24T18:15:14+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/ellisalicante/ma-fl-mia","reach":null},{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/negedng/ma-fl-mia","reach":null}],"summary":{"ran_fixture":3,"ran_draft_wrong":1,"unverified":1},"by_repo_kind":{"official":{"samples":5,"ran":4,"repositories":2}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":5,"samples":[{"code_sha256_prefix":"df0300d7347f7808","entry":"check_and_transform_label_format","repo":"ellisalicante/ma-fl-mia","repo_kind":"official","path":"trajectoryMIA.py","file_url":"https://github.com/ellisalicante/ma-fl-mia/blob/HEAD/trajectoryMIA.py","link_basis":"first_harvest_node","language":"python","status":"ran_fixture","verification_level":1,"contract_check":"RAISES","metamorphic_tier":"invariant","behaviour_fingerprint":true,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"df0300d7347f7808"}},{"code_sha256_prefix":"a6978e8cce7cfba1","entry":"cut_idx_diagonal","repo":"negedng/ma-fl-mia","repo_kind":"official","path":"src/model_aggregation.py","file_url":"https://github.com/negedng/ma-fl-mia/blob/HEAD/src/model_aggregation.py","link_basis":"first_harvest_node","language":"python","status":"ran_fixture","verification_level":1,"contract_check":"RAISES","metamorphic_tier":"well_formed","behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"a6978e8cce7cfba1"}},{"code_sha256_prefix":"ec501564c99e99c2","entry":"cut_idx_rand","repo":"negedng/ma-fl-mia","repo_kind":"official","path":"src/model_aggregation.py","file_url":"https://github.com/negedng/ma-fl-mia/blob/HEAD/src/model_aggregation.py","link_basis":"first_harvest_node","language":"python","status":"ran_fixture","verification_level":1,"contract_check":"RAISES","metamorphic_tier":"well_formed","behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"ec501564c99e99c2"}},{"code_sha256_prefix":"1bfe4f56727f2aba","entry":"to_categorical","repo":"ellisalicante/ma-fl-mia","repo_kind":"official","path":"trajectoryMIA.py","file_url":"https://github.com/ellisalicante/ma-fl-mia/blob/HEAD/trajectoryMIA.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"MISDECLARED","metamorphic_tier":"well_formed","behaviour_fingerprint":true,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"1bfe4f56727f2aba"}},{"code_sha256_prefix":"bdb498acd83fe5e8","entry":"train_mia_attack_model","repo":"ellisalicante/ma-fl-mia","repo_kind":"official","path":"trajectoryMIA.py","file_url":"https://github.com/ellisalicante/ma-fl-mia/blob/HEAD/trajectoryMIA.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"bdb498acd83fe5e8"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}