It can be seen that in the early training phase, the F1-score of the attribute inference attack shows a slow decreasing trend, the F1-score of the label inference attack shows an increasing trend, and the overall F1-score shows an increasing trend.
← all excerpts
FedDroidMeter: A Privacy Risk Evaluator for FL-Based Android Malware Classification Systems.
1
—
—