程烨 CHENG YE
Logo 切尔西球迷

你好,我是程烨(CHENG YE)。目前是京都大学情报学研究科的一年级硕士研究生, 在Data Engineering and Platform Research Group从事研究,导师为首藤一幸教授。 本科毕业于关西大学,获工学学士学位,本科导师为 Adachi Naotoshi 副教授。

我的研究兴趣主要包括联邦学习、区块链和 AI 安全。 业余时间喜欢攀岩、足球和健身。


教育经历
  • 京都大学
    2026年4月 - 2028年3月
    情报学研究科
    硕士研究生
  • 关西大学
    2021年4月 - 2026年3月
    工学学士:环境都市工学部 都市系统工学科
工作经历
  • 乐天集团
    2026年8月 - 2026年10月
    Ad Product Development Department, Global Ad Division
    应用工程师
语言
  • 中文
    母语
  • 日语
    商务水平
  • 英语
    日常会话
动态
2026
结束了在乐天集团的实习。
10月1日
我开发的个人项目 hackmd.vim 已经投入使用。
6月30日
进入京都大学攻读硕士,加入首藤研究室
4月8日
🎉GOFA 被 ICECET'2026 接收
3月19日
完成了本科毕业论文:GOFA
2月25日
回到中国南京啦
2月25日
代表性论文 (查看全部 )
GOFA: Gradient-Oriented Backdoor Attack in Vertical Federated Learning
GOFA: Gradient-Oriented Backdoor Attack in Vertical Federated Learning

Ye CHENG, Adachi Naotoshi

International Conference on Electrial Computer and Energy Technologies 2026 ICECET2026

Vertical federated learning (VFL) enables multiple organizations with disjoint feature spaces and overlapping sample identities to collaboratively train machine learning models without sharing raw local data. Despite this privacy-preserving paradigm, VFL remains vulnerable to backdoor attacks. In particular, a malicious passive party can inject carefully crafted triggers into local inputs or intermediate embeddings, causing targeted mispredictions during inference. Existing VFL backdoor attacks (e.g., BadVFL) typically assume that the malicious client has additional knowledge of task labels, which conflicts with the core privacy assumptions of VFL. In this paper, we propose GOFA, a gradient-oriented backdoor attack for VFL. GOFA leverages server-provided gradient feedback to construct a poisoned dataset and applies adversarial-example techniques (e.g., FGSM) to mask original features and strengthen trigger learning. Experiments on CIFAR-10 and UCI-HAR demonstrate the effectiveness of our method across multiple settings.

GOFA: Gradient-Oriented Backdoor Attack in Vertical Federated Learning

Ye CHENG, Adachi Naotoshi

International Conference on Electrial Computer and Energy Technologies 2026 ICECET2026

Vertical federated learning (VFL) enables multiple organizations with disjoint feature spaces and overlapping sample identities to collaboratively train machine learning models without sharing raw local data. Despite this privacy-preserving paradigm, VFL remains vulnerable to backdoor attacks. In particular, a malicious passive party can inject carefully crafted triggers into local inputs or intermediate embeddings, causing targeted mispredictions during inference. Existing VFL backdoor attacks (e.g., BadVFL) typically assume that the malicious client has additional knowledge of task labels, which conflicts with the core privacy assumptions of VFL. In this paper, we propose GOFA, a gradient-oriented backdoor attack for VFL. GOFA leverages server-provided gradient feedback to construct a poisoned dataset and applies adversarial-example techniques (e.g., FGSM) to mask original features and strengthen trigger learning. Experiments on CIFAR-10 and UCI-HAR demonstrate the effectiveness of our method across multiple settings.

全部论文