TY - GEN
T1 - VFL-Searcher
T2 - 18th International Symposium on Search-Based Software Engineering, SSBSE 2026
AU - Chan, Pichsereyvattana
AU - Even-Mendoza, Karine
AU - Berger, Harel
N1 - Publisher Copyright:
© The Author(s), under exclusive license to Springer Nature Switzerland AG 2027.
PY - 2027
Y1 - 2027
N2 - Vertical Federated Learning (VFL) preserves privacy by splitting features across participants, yet the exchange of intermediate embeddings creates a unique attack surface. We investigate VFL security through Search-Based Software Engineering (SBSE) and propose VFL-Searcher, a search-based framework for systematically auditing the robustness of VFL. Our methodology treats adversarial synthesis as a multi-objective search problem, allowing researchers to automatically discover the Pareto-optimal trade-offs between attack impact and bypass capability. Unlike gradient-based methods, our approach treats the attack as a multi-objective optimization problem, simultaneously maximizing classification impact and minimizing detectability against anomaly detectors. Evaluation across four datasets and five detection algorithms shows that VFL-Searcher achieves near-perfect success in undefended settings and maintains significantly higher stealth against robust detectors compared to baseline attacks.
AB - Vertical Federated Learning (VFL) preserves privacy by splitting features across participants, yet the exchange of intermediate embeddings creates a unique attack surface. We investigate VFL security through Search-Based Software Engineering (SBSE) and propose VFL-Searcher, a search-based framework for systematically auditing the robustness of VFL. Our methodology treats adversarial synthesis as a multi-objective search problem, allowing researchers to automatically discover the Pareto-optimal trade-offs between attack impact and bypass capability. Unlike gradient-based methods, our approach treats the attack as a multi-objective optimization problem, simultaneously maximizing classification impact and minimizing detectability against anomaly detectors. Evaluation across four datasets and five detection algorithms shows that VFL-Searcher achieves near-perfect success in undefended settings and maintains significantly higher stealth against robust detectors compared to baseline attacks.
KW - Multi-objectives
KW - NSGA-II
KW - Privacy
KW - SBSE
KW - VFL
UR - https://www.scopus.com/pages/publications/105045587029
U2 - 10.1007/978-3-032-30699-9_10
DO - 10.1007/978-3-032-30699-9_10
M3 - ???researchoutput.researchoutputtypes.contributiontobookanthology.conference???
AN - SCOPUS:105045587029
SN - 9783032306982
T3 - Lecture Notes in Computer Science
SP - 114
EP - 120
BT - Search-Based Software Engineering - 18th International Symposium, SSBSE 2026, Proceedings
A2 - Assunção, Wesley K.G.
A2 - Kim, Mijung
A2 - Ouni, Ali
PB - Springer Science and Business Media Deutschland GmbH
Y2 - 5 July 2026 through 6 July 2026
ER -