SVAFD signs per-slice sums of logits, not the logits themselves, so a malicious server can change the teacher knowledge without breaking the proof.
Breaching FedMD: Image Recovery via Paired-Logits Inversion Attack,
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
citation-role summary
background 1
citation-polarity summary
fields
cs.CR 1years
2025 1verdicts
REJECT 1roles
background 1polarities
unclear 1representative citing papers
citing papers explorer
-
SVAFD: A Secure and Verifiable Co-Aggregation Protocol for Federated Distillation
SVAFD signs per-slice sums of logits, not the logits themselves, so a malicious server can change the teacher knowledge without breaking the proof.