VMask: Tunable Label Privacy Protection for Vertical Federated Learning via Layer Masking Article Swipe

MAKE IMPACT

Lan Zhang , Ran Peng , Bo Li · YOU? · · 2025 · Open Access ·

Though vertical federated learning (VFL) is generally considered to be privacy-preserving, recent studies have shown that VFL system is vulnerable to label inference attacks originating from various attack surfaces. Among these attacks, the model completion (MC) attack is currently the most powerful one. Existing defense methods against it either sacrifice model accuracy or incur impractical computational overhead. In this paper, we propose VMask, a novel label privacy protection framework designed to defend against MC attack from the perspective of layer masking. Our key insight is to disrupt the strong correlation between input data and intermediate outputs by applying the secret sharing (SS) technique to mask layer parameters in the attacker's model. We devise a strategy for selecting critical layers to mask, reducing the overhead that would arise from naively applying SS to the entire model. Moreover, VMask is the first framework to offer a tunable privacy budget to defenders, allowing for flexible control over the levels of label privacy according to actual requirements. We built a VFL system, implemented VMask on it, and extensively evaluated it using five model architectures and 13 datasets with different modalities, comparing it to 12 other defense methods. The results demonstrate that VMask achieves the best privacy-utility trade-off, successfully thwarting the MC attack (reducing the label inference accuracy to a random guessing level) while preserving model performance (e.g., in Transformer-based model, the averaged drop of VFL model accuracy is only 0.09%). VMask's runtime is up to 60,846 times faster than cryptography-based methods, and it only marginally exceeds that of standard VFL by 1.8 times in a large Transformer-based model, which is generally acceptable.

Type

article

Language

en

Landing Page

http://arxiv.org/abs/2507.14629

PDF

https://arxiv.org/pdf/2507.14629

OA Status

green

OpenAlex ID

https://openalex.org/W4416838703

Raw OpenAlex JSON

OpenAlex ID

https://openalex.org/W4416838703

Canonical identifier for this work in OpenAlex

Title

VMask: Tunable Label Privacy Protection for Vertical Federated Learning via Layer Masking

Work title

Type

article

OpenAlex work type

Language

en

Primary language

Publication year

2025

Year of publication

Publication date

2025-07-19

Full publication date if available

Authors

Lan Zhang, Ran Peng, Bo Li

List of authors in order

Landing page

https://arxiv.org/abs/2507.14629

Publisher landing page

PDF URL

https://arxiv.org/pdf/2507.14629

Direct link to full text PDF

Open access

Yes

Whether a free full text is available

OA status

green

Open access status per OpenAlex

OA URL

https://arxiv.org/pdf/2507.14629

Direct OA link when available

Cited by

0

Total citation count in OpenAlex

Full payload