Privacy Risk in Machine Learning: Analyzing the Connection to Overfitting
Yeom, Samuel, Giacomelli, Irene, Fredrikson, Matt, Jha, Somesh·2018·2018 IEEE 31st Computer Security Foundations Symposium (CSF)
Cited by (998)
Items 101–200 of 998
- Preprocessing approaches in machine-learning-based groundwater potential mapping: an application to the Koulikoro and Bamako regions, MaliVíctor Gómez‐Escalonilla, Pedro Martínez‐Santos, Miguel Martín-Loeches · 2022 · Hydrology and earth system sciences
- A review of mechanistic learning in mathematical oncologyJohn Metzcar, Catherine R. Jutzeler, Paul Macklin, Alvaro Köhn‐Luque, Sarah C. Brüningk · 2024 · Frontiers in Immunology
- Survey: Leakage and Privacy at Inference TimeJegorova, Marija, Kaul, Chaitanya, Mayor, Charlie, O'Neil, Alison Q., Weir, Alexander, Murray-Smith, Roderick, Tsaftaris, Sotirios A. · 2022 · IEEE Transactions on Pattern Analysis and Machine Intelligence
- EncoderMI: Membership Inference against Pre-trained Encoders in Contrastive LearningHongbin Liu, Jinyuan Jia, Wenjie Qu, Neil Zhenqiang Gong · 2021 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
- Truth SerumFlorian Tramèr, Reza Shokri, Ayrton San Joaquin, Hoang Le, Matthew Jagielski, Sanghyun Hong, Nicholas Carlini · 2022 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
- Evaluation Gaps in Machine Learning PracticeBen Hutchinson, Negar Rostamzadeh, Christina Greer, Katherine Heller, Vinodkumar Prabhakaran · 2022 · ACM Conference on Fairness, Accountability, and Transparency (FAccT)
- MemGuard: Defending against Black-Box Membership Inference Attacks via Adversarial ExamplesJia, Jinyuan, Ahmed Salem, Michael Backes A, Y Victoria Zhang, Neil Zhenqiang Gong · 2019 · arXiv (Cornell University)
- Membership Inference Attacks and Defenses in Classification ModelsJiacheng Li, Ninghui Li, Bruno Ribeiro · 2021 · ACM Conference on Data and Application Security and Privacy (CODASPY)
- Improving Robustness to Model Inversion Attacks via Mutual Information RegularizationTianhao Wang, Yuheng Zhang, Ruoxi Jia · 2021 · Proceedings of the AAAI Conference on Artificial Intelligence
- Privacy-preserving Machine Learning through Data ObfuscationTianwei Zhang, Zecheng He, Ruby Bei-Loh Lee · 2018 · arXiv (Cornell University)
- The Federation Strikes Back: A Survey of Federated Learning Privacy Attacks, Defenses, Applications, and Policy LandscapeZhao, Joshua, Bagchi, Saurabh, Avestimehr, Salman, Chan, Kevin, Chaterji, Somali, Dimitriadis, Dimitris, Li, Jiacheng, Li, Ninghui, Nourian, Arash, Roth, Holger · 2025 · ACM Computing Surveys
- PUMA: Performance Unchanged Model Augmentation for Training Data RemovalWu, Ga, Hashemi, Masoud, Srinivasa, Christopher · 2022 · Proceedings of the AAAI Conference on Artificial Intelligence
- Towards Measuring Membership PrivacyYunhui Long, Vincent Bindschaedler, Carl A. Gunter · 2017 · arXiv (Cornell University)
- Model Inversion Attacks Against Graph Neural NetworksZaixi Zhang, Qi Liu, Zhenya Huang, Hao Wang, Chee‐Kong Lee, Enhong Chen · 2022 · IEEE Transactions on Knowledge and Data Engineering
- Recent Advances of Differential Privacy in Centralized Deep Learning: A Systematic SurveyLea Demelius, Roman Kern, Andreas Trügler · 2025 · ACM Computing Surveys
- CS-MIA: Membership inference attack based on prediction confidence series in federated learningYuhao Gu, Yuebin Bai, Shubin Xu · 2022 · Journal of Information Security and Applications
- Differential Privacy in Deep Learning: An OverviewTrung Ha, Tran Khanh Dang, Tran Tri Dang, Tuan Anh Truong, Manh Tuan Nguyen · 2019 · International Conference on Advanced Computing and Applications (ACOMP)
- DP-Forward: Fine-tuning and Inference on Language Models with Differential Privacy in Forward PassMinxin Du, Xiang Yue, Sherman S. M. Chow, Tianhao Wang, Chenyu Huang, Huan Sun · 2023 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
- Defending Model Inversion and Membership Inference Attacks via Prediction PurificationZiqi Yang, Shao, Bin, Bohan Xuan, Ee‐Chien Chang, Zhang, Fan · 2020 · arXiv (Cornell University)
- Digestive neural networks: A novel defense strategy against inference attacks in federated learningHong-Kyu Lee, Jeehyeong Kim, Se-young Ahn, Rasheed Hussain, Sunghyun Cho, Junggab Son · 2021 · Computers & Security
- StarFL: Hybrid Federated Learning Architecture for Smart Urban ComputingAnbu Huang, Yang Liu, Tianjian Chen, Yongkai Zhou, Quan Sun, Hongfeng Chai, Qiang Yang · 2021 · ACM Transactions on Intelligent Systems and Technology
- A Review of the Key Technology in a Blockchain Building Decentralized Trust PlatformWeichu Deng, Teng Huang, Haiyang Wang · 2022 · Mathematics
- Label-Only Model Inversion Attacks: Attack With the Least InformationTianqing Zhu, Dayong Ye, Shuai Zhou, Bo Liu, Wanlei Zhou · 2022 · IEEE Transactions on Information Forensics and Security
- Node-Level Membership Inference Attacks Against Graph Neural NetworksXinlei He, Rui Wen, Yixin Wu, Michael Backes A, Yun Cheng Shen, Yang Zhang · 2021 · arXiv (Cornell University)
- Advancing Differential Privacy: Where We Are Now and Future Directions for Real-World DeploymentRachel Cummings, Damien Desfontaines, David Evans, Roxana Geambasu, Yangsibo Huang, Matthew Jagielski, Peter Kairouz, Gautam Kamath, Sewoong Oh, Olga Ohrimenko et al. · 2024 · Harvard Data Science Review
- Effects of Differential Privacy and Data Skewness on Membership Inference VulnerabilityStacey Truex, Ling Liu, Mehmet Emre Gürsoy, Wenqi Wei, Lei Yu · 2019 · IEEE International Conference on Trust, Privacy and Security in Intelligent Systems and Applications (TPS-ISA)
- Privacy-preserving Voice Analysis via Disentangled RepresentationsRanya Aloufi, Hamed Haddadi, David Boyle · 2020 · Cloud Computing Security Workshop
- Membership Inference Attacks Against Machine Learning Models via Prediction SensitivityLan Liu, Yi Wang, Gaoyang Liu, Kai Peng, Chen Wang · 2022 · IEEE Transactions on Dependable and Secure Computing
- Are Attribute Inference Attacks Just Imputation?Bargav Jayaraman, David Evans · 2022 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
- Industry-Scale Orchestrated Federated Learning for Drug DiscoveryMartijn Oldenhof, Gergely Ács, Balázs Pejó, Ansgar Schuffenhauer, Nicholas Holway, Noé Sturm, Arne Dieckmann, Oliver Fortmeier, Eric Boniface, Clément Mayer et al. · 2023 · Proceedings of the AAAI Conference on Artificial Intelligence
- SoK: Model Inversion Attack Landscape: Taxonomy, Challenges, and Future RoadmapSayanton Vhaduri Dibbo · 2023 · IEEE Computer Security Foundations Workshop (CSFW)
- PPFL: Privacy-preserving Federated Learning with Trusted Execution EnvironmentsMo, Fan, Hamed Haddadi, Kleomenis Katevas, Eduard Marin, Diego Perino, Nicolas Kourtellis · 2021 · arXiv (Cornell University)
- Athena: Probabilistic Verification of Machine UnlearningSommer, David M., Song, Liwei, Wagh, Sameer, Mittal, Prateek · 2022 · Proceedings on Privacy Enhancing Technologies
- DataLens: Scalable Privacy Preserving Training via Gradient Compression and AggregationBoxin Wang, Fan Wu, Yunhui Long, Luka Rimanić, Ce Zhang, Bo Li · 2021 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
- Visual privacy attacks and defenses in deep learning: a surveyGuangsheng Zhang, Bo Liu, Tianqing Zhu, Andi Zhou, Wanlei Zhou · 2022 · Artificial Intelligence Review
- An Overview of Privacy in Machine LearningEmiliano De Cristofaro · 2020 · arXiv (Cornell University)
- MIRROR: Model Inversion for Deep Learning Network with High FidelityShengwei An, Guanhong Tao, Qiuling Xu, Yingqi Liu, Guangyu Shen, Yuan Yao, Jingwei Xu, Xiangyu Zhang · 2022 · Network and Distributed System Security Symposium
- When Machine Learning Meets Spectrum Sharing Security: Methodologies and ChallengesQun Wang, Haijian Sun, Rose Qingyang Hu, Arupjyoti Bhuyan · 2022 · IEEE Open Journal of the Communications Society
- Defenses to Membership Inference Attacks: A SurveyLi Fang Hu, Anli Yan, Hongyang Yan, Jin Li, Teng Huang, Yingying Zhang, Changyu Dong, Chunsheng Yang · 2023 · ACM Computing Surveys
- P3SGD: Patient Privacy Preserving SGD for Regularizing Deep CNNs in Pathological Image ClassificationWu, Bingzhe, Zhao, Shiwan, Sun, Guangyu, Zhang, Xiaolu, Su, Zhong, Zeng, Caihong, Liu, Zhihong · 2019 · 2019 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)
- How Does Data Augmentation Affect Privacy in Machine Learning?Dahua Yu, Huishuai Zhang, Wei Chen, Jian Yin, Tie‐Yan Liu · 2021 · Proceedings of the AAAI Conference on Artificial Intelligence
- Radioactive data: tracing through trainingAlexandre Sablayrolles, Matthijs Douze, Cordelia Schmid, Hervé Jeǵou · 2020 · arXiv (Cornell University)
- On the (In)Feasibility of Attribute Inference Attacks on Machine Learning ModelsBenjamin Zi Hao Zhao, Aviral Agrawal, Catisha Coburn, Hassan Jameel Asghar, Raghav Bhaskar, Mohamed Ali Kâafar, Darren Webb, Peter Dickinson · 2021 · IEEE European Symposium on Security and Privacy
- Security and Privacy Issues in Deep Learning: A Brief ReviewTrung Ha, Tran Khanh Dang, Trung Hieu Le, Tuan Anh Truong · 2020 · SN Computer Science
- Adaptive Privacy Preserving Deep Learning Algorithms for Medical DataXinyue Zhang, Jiahao Ding, Maoqiang Wu, Stephen T. C. Wong, Hien Van Nguyen, Miao Pan · 2021 · IEEE Winter Conference on Applications of Computer Vision
- Encode, Shuffle, Analyze Privacy Revisited: Formalizations and Empirical EvaluationÚlfar Erlingsson, Vitaly Feldman, Ilya Mironov, Ananth Raghunathan, Shuang Song, Kunal Talwar, Abhradeep Thakurta · 2020 · arXiv (Cornell University)
- Membership Inference Attacks against Diffusion ModelsTomoya Matsumoto, Takayuki Miura, Naoto Yanai · 2023 · IEEE Security and Privacy Workshops (SPW)
- Source Inference Attacks: Beyond Membership Inference Attacks in Federated LearningHongsheng Hu, Xuyun Zhang, Zoran A. Salcic, Lichao Sun, Kim‐Kwang Raymond Choo, Gillian Dobbie · 2023 · IEEE Transactions on Dependable and Secure Computing
- Beyond Model-Level Membership Privacy Leakage: an Adversarial Approach in Federated LearningJiale Chen, Jiale Zhang, Yanchao Zhao, Hao Han, Kun Zhu, Bing Chen · 2020 · International Conference on Computer Communications and Networks (ICCCN)
- Differential privacy in deep learning: Privacy and beyondYanling Wang, Qian Wang, Lingchen Zhao, Cong Wang · 2023 · Future Generation Computer Systems
- DP 2 -NILM: A distributed and privacy-preserving framework for non-intrusive load monitoringShuang Dai, Fanlin Meng, Qian Wang, Xizhong Chen · 2023 · Renewable and Sustainable Energy Reviews
- A survey on privacy inference attacks and defenses in cloud-based Deep Neural NetworkXiaoyu Zhang, Chao Chen, Yi Xie, Xiaofeng Chen, Jun Zhang, Yang Xiang · 2022 · Computer Standards & Interfaces
- Label-Only Membership Inference Attacks and Defenses in Semantic Segmentation ModelsGuangsheng Zhang, Bo Liu, Tianqing Zhu, Ming Ding, Wanlei Zhou · 2022 · IEEE Transactions on Dependable and Secure Computing
- Defending Against Membership Inference Attacks With High Utility by GANLi Fang Hu, Jin Li, Guanbiao Lin, Shiyu Peng, Zhenxin Zhang, Yingying Zhang, Changyu Dong · 2022 · IEEE Transactions on Dependable and Secure Computing
- Collaborative Machine Learning: Schemes, Robustness, and PrivacyJunbo Wang, Amitangshu Pal, Qinglin Yang, Krishna Kant, Kaiming Zhu, Song Guo · 2022 · IEEE Transactions on Neural Networks and Learning Systems
- Unraveling Attacks to Machine-Learning-Based IoT Systems: A Survey and the Open Libraries Behind ThemChao Liu, Boxi Chen, Wei Shao, Wenjun Zhang, Kelvin K. L. Wong, Yi Zhang · 2024 · IEEE Internet of Things Journal
- Overfitting, robustness, and malicious algorithms: A study of potential causes of privacy risk in machine learningSamuel Yeom, Irene Giacomelli, Alan Menaged, Matt Fredrikson, Somesh Jha · 2019 · Journal of Computer Security
- DP-Sniper: Black-Box Discovery of Differential Privacy Violations using ClassifiersBenjamin Bichsel, Samuel Steffen, Ilija Bogunovic, Martin Vechev · 2021 · IEEE Symposium on Security and Privacy (S&P)
- Dataset Inference: Ownership Resolution in Machine LearningPratyush Maini, Mohammad Yaghini, Nicolas Papernot · 2021 · arXiv (Cornell University)
- Your Model Trains on My Data? Protecting Intellectual Property of Training Data via Membership Fingerprint AuthenticationGaoyang Liu, Tianlong Xu, Xiaoqiang Ma, Chen Wang · 2022 · IEEE Transactions on Information Forensics and Security
- TEAR: Exploring Temporal Evolution of Adversarial Robustness for Membership Inference Attacks Against Federated LearningGaoyang Liu, Zehao Tian, Jian Chen, Chen Wang, Jiangchuan Liu · 2023 · IEEE Transactions on Information Forensics and Security
- PPFed: A Privacy-Preserving and Personalized Federated Learning FrameworkGuangsheng Zhang, Bo Liu, Tianqing Zhu, Ming Ding, Wanlei Zhou · 2024 · IEEE Internet of Things Journal
- privGAN: Protecting GANs from membership inference attacks at low cost to utilitySumit Mukherjee, Yixi Xu, Anusua Trivedi, Nabajyoti Patowary, Juan Lavista Ferres · 2021 · Proceedings on Privacy Enhancing Technologies
- Please Tell Me More: Privacy Impact of Explainability through the Lens of Membership Inference AttackHan Liu, Yuhao Wu, Zhiyuan Yu, Ning Zhang · 2024 · IEEE Symposium on Security and Privacy (S&P)
- Membership Inference via BackdooringHongsheng Hu, Zoran A. Salcic, Gillian Dobbie, Jinjun Chen, Lichao Sun, Xuyun Zhang · 2022 · International Joint Conference on Artificial Intelligence
- Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble ArchitectureXinyu Tang, Saeed Mahloujifar, Liwei Song, Virat Shejwalkar, Milad Nasr, Amir Houmansadr, Prateek Mittal · 2021 · arXiv (Cornell University)
- A survey on membership inference attacks and defenses in machine learningJun Niu, Peng Liu, Xiaoyan Zhu, Kuo Shen, Yuecong Wang, Haotian Chi, Yulong Shen, Xiaohong Jiang, Jianfeng Ma, Yuqing Zhang · 2024 · Journal of Information and Intelligence
- Label-Only Membership Inference Attack against Node-Level Graph Neural NetworksMauro Conti, Jiaxin Li, Stjepan Picek, Jing Xu · 2022 · ACM Workshop on Artificial Intelligence and Security (AISec)
- Survey on Privacy-Preserving Techniques for Microdata PublicationTânia Carvalho, Nuno Moniz, Pedro Faria, Luís Filipe Antunes · 2023 · ACM Computing Surveys
- Differential privacy model for blockchain based smart home architectureAmjad Qashlan, Priyadarsi Nanda, Manoranjan Mohanty · 2023 · Future Generation Computer Systems
- Towards Automatic Generation of Shareable Synthetic Clinical Notes Using Neural Language ModelsOren Melamud, Chaitanya Shivade · 2019 · Clinical Natural Language Processing Workshop (ClinicalNLP)
- Membership Inference Attack and Defense for Wireless Signal Classifiers With Deep LearningYi Shi, Yalin E. Sagduyu · 2022 · IEEE Transactions on Mobile Computing
- Deep Learning for Code Intelligence: Survey, Benchmark and ToolkitYao Wan, Zhangqian Bi, Yang He, Jianguo Zhang, Hongyu Zhang, Yulei Sui, Guandong Xu, Hai Jin, Philip S. Yu · 2024 · ACM Computing Surveys
- PAR-GAN: Improving the Generalization of Generative Adversarial Networks Against Membership Inference AttacksJunjie Chen, Hui Wang, Hongchang Gao, Xinghua Mindy Shi · 2021 · ACM SIGKDD Conference on Knowledge Discovery and Data Mining (KDD)
- Substra: a framework for privacy-preserving, traceable and collaborative Machine LearningGaltier, Mathieu N, Camille Marini · 2019 · arXiv (Cornell University)
- Quantifying and Mitigating Privacy Risks of Contrastive LearningXinlei He, Yang Zhang · 2021 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
- Enhance membership inference attacks in federated learningXinlong He, Yang Xu, Sicong Zhang, Weida Xu, Jiale Yan · 2023 · Computers & Security
- A data-driven binary-classification framework for oil fingerprinting analysisYifu Chen, Bing Chen, Xing Song, Qiao Kang, Xudong Ye, Baiyu Zhang · 2021 · Environmental Research
- Formalizing and Estimating Distribution Inference RisksAnshuman Suri, David Evans · 2022 · Proceedings on Privacy Enhancing Technologies
- A federated learning architecture for secure and private neuroimaging analysisStripelis, Dimitris, Gupta, Umang, Saleem, Hamza, Dhinagar, Nikhil, Ghai, Tanmay, Anastasiou, Chrysovalantis, Sánchez, Rafael, Steeg, Greg Ver, Ravi, Srivatsan, Naveed, Muhammad et al. · 2024 · Patterns
- When the machine learns from users, is it helping or snooping?Sangwook Lee, Won-Ki Moon, Jae-Gil Lee, S. Shyam Sundar · 2022 · Computers in Human Behavior
- Privacy-preserving explainable AI: a surveyThành Tâm Nguyên, Thanh Trung Huynh, Zhao Ren, Thanh Toan Nguyen, Phi Le Nguyen, Hongzhi Yin, Quoc Viet Hung Nguyen · 2024 · Science China Information Sciences
- Security of federated learning for cloud‐edge intelligence collaborative computingJie Yang, Jun Zheng, Zheng Zhang, Qian Chen, Duncan S. Wong, Yuanzhang Li · 2022 · International Journal of Intelligent Systems
- GAMIN: An Adversarial Approach to Black-Box Model InversionUlrich Aïvodji, Sébastien Gambs, Timon Ther · 2019 · arXiv (Cornell University)
- On the Importance of Difficulty Calibration in Membership Inference AttacksLauren Watson, Chuan Guo, Graham Cormode, Alexandre Sablayrolles · 2021 · arXiv (Cornell University)
- Digital forgetting in large language models: a survey of unlearning methodsBlanco-Justicia, Alberto, Jebreel, Najeeb, Manzanares-Salor, Benet, Sánchez, David, Domingo-Ferrer, Josep, Collell, Guillem, Eeik Tan, Kuan · 2025 · Artificial Intelligence Review
- Practical Attribute Reconstruction Attack Against Federated LearningChen, Chen, Lyu, Lingjuan, Yu, Han, Chen, Gang · 2024 · IEEE Transactions on Big Data
- E2EGI: End-to-End Gradient Inversion in Federated LearningZhaohua Li, Le Wang, Guangyao Chen, Zhiqiang Zhang, Muhammad Shafiq, Zhaoquan Gu · 2022 · IEEE Journal of Biomedical and Health Informatics
- Predictive Modeling of Employee Churn Analysis for IoT-Enabled Software IndustryKomal Naz, Isma Farah Siddiqui, Jahwan Koo, Mohammad Ali Khan, Nawab Muhammad Faseeh Qureshi · 2022 · Applied Sciences
- Optimizing prognostic factors of five-year survival in gastric cancer patients using feature selection techniques with machine learning algorithms: a comparative studyMohammad Reza Afrash, Esmat Mirbagheri, Mehrnaz Mashoufi, Hadi Kazemi-Arpanahi · 2023 · BMC Medical Informatics and Decision Making
- Synthetic data: revisiting the privacy-utility trade-offFatima Jahan Sarmin, Atiquer Rahman Sarkar, Yang Wang, Noman Mohammed · 2025 · International Journal of Information Security
- Not one but many TradeoffsBenjamin Zi Hao Zhao, Mohamed Ali Kâafar, Nicolas Kourtellis · 2020 · Cloud Computing Security Workshop
- Practical Membership Inference Attacks Against Large-Scale Multi-Modal Models: A Pilot StudyMyeongseob Ko, Ming Jin, Chenguang Wang, Ruoxi Jia · 2023 · IEEE/CVF International Conference on Computer Vision (ICCV)
- Hyperparameter Optimization Strategies for Tree-Based Machine Learning Models Prediction: A Comparative Study of AdaBoost, Decision Trees, and Random ForestMohsen Mohammadagha · 2025 · SSRN Electronic Journal
- Your Code Secret Belongs to Me: Neural Code Completion Tools Can Memorize Hard-Coded CredentialsYizhan Huang, Yichen Li, Weibin Wu, Jianping Zhang, Michael Rung-Tsong Lyu · 2024 · Proceedings of the ACM on software engineering.
- On the fidelity versus privacy and utility trade-off of synthetic patient dataTim Adams, Colin J. Birkenbihl, Karen Otte, Hwei Geok Ng, Jonas Adrian Rieling, Anatol‐Fiete Näher, Ulrich Sax, Fabian Praßer, Holger Fröhlich, Alzheimer’s Disease Neuroimaging Initiative · 2025 · iScience
- Debiasing Learning for Membership Inference Attacks Against Recommender SystemsZihan Wang, Na Huang, Fei Sun, Pengjie Ren, Zhumin Chen, Hengliang Luo, Maarten de Rijke, Zhaochun Ren · 2022 · ACM SIGKDD Conference on Knowledge Discovery and Data Mining (KDD)
- Auditing Membership Leakages of Multi-Exit NetworksZheng Li, Yiyong Liu, Xinlei He, Ning Yu, Michael Backes A, Yang Zhang · 2022 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
- A GAN-Based Defense Framework Against Model Inversion AttacksXueluan Gong, Ziyao Wang, Shuaike Li, Yanjiao Chen, Qian Wang · 2023 · IEEE Transactions on Information Forensics and Security
- On the (In)security of Peer-to-Peer Decentralized Machine LearningDario Pasquini, Mathilde Raynal, Carmela Troncoso · 2023 · IEEE Symposium on Security and Privacy (S&P)