Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Models

1 code implementation • 7 Nov 2023 • HANLIN ZHANG, Benjamin L. Edelman, Danilo Francati, Daniele Venturi, Giuseppe Ateniese, Boaz Barak

To prove this result, we introduce a generic efficient watermark attack; the attacker is not required to know the private key of the scheme or even which scheme is used.

Eluding Secure Aggregation in Federated Learning via Model Inconsistency

1 code implementation • 14 Nov 2021 • Dario Pasquini, Danilo Francati, Giuseppe Ateniese

Indeed, the use of secure aggregation prevents the server from learning the value and the source of the individual model updates provided by the users, hampering inference and data attribution attacks.

Federated Learning