Privacy Risk in Machine Learning: Analyzing the Connection to Overfitting

Yeom, Samuel, Giacomelli, Irene, Fredrikson, Matt, Jha, Somesh·2018·2018 IEEE 31st Computer Security Foundations Symposium (CSF)

Cited by (998)

Items 201–300 of 998

  1. PPM-InVIDS: Privacy protection model for in-vehicle intrusion detection system based complex-valued neural network
    Mu Han, Pengzhou Cheng, Shidian Ma · 2021 · Vehicular Communications
  2. AgrEvader: Poisoning Membership Inference against Byzantine-robust Federated Learning
    Yanjun Zhang, Guangdong Bai, M.A.P. Chamikara, Mengyao Ma, Liyue Shen, Jingwei Wang, ‪Surya Nepal‬, Minhui Xue, Long Wang, Joseph K. Liu · 2023 · International World Wide Web Conference (WWW)
  3. Privacy preserving large language models: ChatGPT case study based vision and framework
    Imdad Ullah, Najmul Hassan, Sukhpal Singh Gill, Basem Suleiman, Tariq Ahamed Ahanger, Zawar Shah, Junaid Qadir, Salil S. Kanhere · 2024 · IET Blockchain
  4. Privacy Threats and Protection in Machine Learning
    Jiliang Zhang, Chen Li, Jing Ye, Gang Qu · 2020 · ACM Great Lakes Symposium on VLSI (GLSVLSI)
  5. Leave-one-out Unfairness
    Emily Black, Matt Fredrikson · 2021 · ACM Conference on Fairness, Accountability, and Transparency (FAccT)
  6. Understanding and defending against White-box membership inference attack in deep learning
    Di Wu, Saiyu Qi, Yong Qi, Qian Li, Bowen Cai, Qi Guo, Jingxian Cheng · 2022 · Knowledge-Based Systems
  7. Gradient-Leaks: Enabling Black-Box Membership Inference Attacks Against Machine Learning Models
    Gaoyang Liu, Tianlong Xu, Rui Zhang, Zixiong Wang, Chen Wang, Ling Liu · 2023 · IEEE Transactions on Information Forensics and Security
  8. Overconfidence is a Dangerous Thing: Mitigating Membership Inference Attacks by Enforcing Less Confident Prediction
    Zitao Chen, Karthik Pattabiraman · 2024 · Network and Distributed System Security Symposium
  9. Sampling Attacks: Amplification of Membership Inference Attacks by Repeated Queries
    Shadi Rahimian, Tribhuvanesh Orekondy, Mario Fritz · 2020 · arXiv (Cornell University)
  10. FedMIA: An Effective Membership Inference Attack Exploiting "All for One" Principle in Federated Learning
    Gongxi Zhu, Donghao Li, Hanlin Gu, Yuan Yao, Lixin Fan, Yuxing Han · 2025 · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings
  11. Privacy-Preserving in Defending against Membership Inference Attacks
    Zuobin Ying, Yun Zhang, Ximeng Liu · 2020
  12. On the Role of Data Anonymization in Machine Learning Privacy
    Navoda Senavirathne, Vicenç Torra · 2020 · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)
  13. Investigating Membership Inference Attacks under Data Dependencies
    Thomas Humphries, Simon Oya, Lindsey Tulloch, Matthew Rafuse, Ian Goldberg, Urs Hengartner, Florian Kerschbaum · 2023 · IEEE Computer Security Foundations Workshop (CSFW)
  14. Membership Inference Attack Susceptibility of Clinical Language Models
    Abhyuday Jagannatha, Bhanu Pratap Singh Rawat, Hong Qing Yu · 2021 · arXiv (Cornell University)
  15. Comparing Local and Central Differential Privacy Using Membership Inference Attacks
    Daniel Bernau, Jonas Robl, Philip W. Grassal, Steffen Schneider, Florian Kerschbaum · 2021 · Lecture notes in computer science
  16. Differential Privacy Defenses and Sampling Attacks for Membership Inference
    Rahimian, Shadi, Orekondy, Tribhuvanesh, Fritz, Mario · 2021 · Proceedings of the 14th ACM Workshop on Artificial Intelligence and Security
  17. Get a Model! Model Hijacking Attack Against Machine Learning Models
    Ahmed Salem, Michael Backes A, Yang Zhang · 2022 · Network and Distributed System Security Symposium
  18. Privacy-preserving and verifiable deep learning inference based on secret sharing
    Jia Duan, Jiantao Zhou, Yuanman Li, Caishi Huang · 2022 · Neurocomputing
  19. Private Data Inference Attacks against Cloud: Model, Technologies, and Research Directions
    Xueluan Gong, Yanjiao Chen, Qian Wang, Meng Wang, Shuyang Li · 2022 · IEEE Communications Magazine
  20. Training Data Leakage Analysis in Language Models
    Huseyin A. Inan, Osman Ramadan, Lukas Wutschitz, Jones, Daniel, Victor Rühle, James Withers, Sim, Robert · 2021 · arXiv (Cornell University)
  21. Towards a Better Understanding of Evaluating Trustworthiness in AI Systems
    Nils Kemmerzell, Annika Schreiner, Haroon Khalid, Michael Schalk, Letizia Bordoli · 2025 · ACM Computing Surveys
  22. Leveraging Domain Adaptation as a Defense Against Membership Inference Attacks
    Hongwei Huang, Weiqi Luo, Guoqiang Zeng, Jian Weng, Yue Zhang, Anjia Yang · 2021 · IEEE Transactions on Dependable and Secure Computing
  23. Membership Inference Attacks and Defenses in Supervised Learning via Generalization Gap.
    Jiacheng Li, Ninghui Li, Bruno Ribeiro · 2020 · arXiv (Cornell University)
  24. Membership Inference Attacks Against In-Context Learning
    Rui Wen, Zheng Li, Michael Backes A, Yang Zhang · 2024 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
  25. Deletion inference, reconstruction, and compliance in machine (un)learning
    Ji Gao, Sanjam Garg, Mohammad Mahmoody, Prashant Nalini Vasudevan · 2022 · Proceedings on Privacy Enhancing Technologies
  26. Leveraging Adversarial Examples to Quantify Membership Information Leakage
    Ganesh Del Grosso, Hamid Jalalzai, Georg Pichler, Catuscia Palamidessi A, Pablo Piantanida · 2022 · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings
  27. Federated and Transfer Learning: A Survey on Adversaries and Defense Mechanisms
    Ehsan Hallaji, Roozbeh Razavi‐Far, Mehrdad Saif · 2022 · Adaptation, learning, and optimization
  28. LDS-FL: Loss Differential Strategy Based Federated Learning for Privacy Preserving
    Taiyu Wang, Qinglin Yang, Kaiming Zhu, Junbo Wang, Chunhua Su, Kento Sato · 2023 · IEEE Transactions on Information Forensics and Security
  29. A unified method to revoke the private data of patients in intelligent healthcare with audit to forget
    Juexiao Zhou, Haoyang Li, Xingyu Liao, Bin Zhang, Wenjia He, Zhongxiao Li, Longxi Zhou, Xin Gao · 2023 · Nature Communications
  30. Leakage-Resilient Authenticated Key Exchange for Edge Artificial Intelligence
    Jie Zhang, Futai Zhang, Xin Huang, Xin Liu · 2020 · IEEE Transactions on Dependable and Secure Computing
  31. A comprehensive survey and taxonomy on privacy-preserving deep learning
    Tran, Anh-Tu, Luong, The-Dung, Huynh, Van-Nam · 2024 · Neurocomputing
  32. Accurate Differentially Private Deep Learning on the Edge
    Rui Han, Dong Li, Junyan Ouyang, Chi Harold Liu, Guoren Wang, Dapeng Oliver Wu, Lydia Y. Chen · 2021 · IEEE Transactions on Parallel and Distributed Systems
  33. Membership Inference Attacks Against Deep Learning Models via Logits Distribution
    Hongyang Yan, Shuhao Li, Yajie Wang, Yaoyuan Zhang, Kashif Sharif, Haibo Hu, Yuanzhang Li · 2022 · IEEE Transactions on Dependable and Secure Computing
  34. Improve individual fairness in federated learning via adversarial training
    Jie Li, Tianqing Zhu, Wei Ren, Kim-Kwang Raymond Choo · 2023 · Computers & Security
  35. SNAP: Efficient Extraction of Private Properties with Poisoning
    Harsh Chaudhari, John Abascal, Alina Oprea, Matthew Jagielski, Florian Tramèr, Jonathan Ullman · 2023 · IEEE Symposium on Security and Privacy (S&P)
  36. Assessment of data augmentation, dropout with L2 Regularization and differential privacy against membership inference attacks
    Sana Ben Hamida, Hichem Mrabet, Faten Chaieb, Abderrazak Jemai · 2023 · Multimedia Tools and Applications
  37. Characterizing Membership Privacy in Stochastic Gradient Langevin Dynamics
    Bingzhe Wu, Chaochao Chen, Shiwan Zhao, Cen Chen, Yuan Yao, Guangyu Sun, Li Wang, Xiaolu Zhang, Jun Zhou · 2020 · Proceedings of the AAAI Conference on Artificial Intelligence
  38. Defending Against Machine Learning Based Inference Attacks via Adversarial Examples: Opportunities and Challenges
    Jinyuan Jia, Neil Zhenqiang Gong · 2020 · Springer eBooks
  39. Modelling and Quantifying Membership Information Leakage in Machine Learning
    Farhad Farokhi, Mohamed Ali Kâafar · 2020 · arXiv (Cornell University)
  40. The “Code” of Ethics: A Holistic Audit of AI Code Generators
    Wanlun Ma, Yiliao Song, Minhui Xue, Sheng Wen, Yang Xiang · 2024 · IEEE Transactions on Dependable and Secure Computing
  41. A survey of intelligent multimedia forensics for internet of things communications: Approaches, strategies, perspectives, and challenges for a sustainable future
    Weiping Ding, Mohamed Abdel‐Basset, Ahmed M. Ali, Nour Moustafa · 2024 · Engineering Applications of Artificial Intelligence
  42. SPEED: secure, PrivatE, and efficient deep learning
    Arnaud Grivet Sébert, Rafaël Pinot, Martin Zuber, Cédric Gouy‐Pailler, Renaud Sirdey · 2021 · Machine Learning
  43. Adaptive Single-layer Aggregation Framework for Energy-efficient and Privacy-preserving Load Forecasting in Heterogeneous Federated Smart Grids
    Habib Ullah Manzoor, Atif Raza Jafri, Ahmed Zoha · 2024 · Internet of Things
  44. Learner’s Dilemma: IoT Devices Training Strategies in Collaborative Deep Learning
    Deepti Gupta, Olumide Kayode, Smriti Bhatt, Maanak Gupta, Ali Şaman Tosun · 2020 · IEEE World Forum on Internet of Things (WF-IoT)
  45. Privacy Regularization: Joint Privacy-Utility Optimization in LanguageModels
    Fatemehsadat Mireshghallah, Huseyin A. Inan, Marcello Hasegawa, Victor Rühle, Taylor Berg-Kirkpatrick, Robert Sim · 2021 · Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies (NAACL-HLT)
  46. TableGAN-MCA: Evaluating Membership Collisions of GAN-Synthesized Tabular Data Releasing
    Aoting Hu, Renjie Xie, Zhigang Lü, Aiqun Hu, Minhui Xue · 2021 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
  47. EAR: An Enhanced Adversarial Regularization Approach against Membership Inference Attacks
    Hongsheng Hu, Zoran A. Salcic, Gillian Dobbie, Yi Chen, Xuyun Zhang · 2021 · International Joint Conference on Neural Networks (IJCNN)
  48. A Differentially Private Framework for Deep Learning With Convexified Loss Functions
    Zhigang Lü, Hassan Jameel Asghar, Mohamed Ali Kâafar, Darren Webb, Peter Dickinson · 2022 · IEEE Transactions on Information Forensics and Security
  49. Evaluating Membership Inference Through Adversarial Robustness
    Zhaoxi Zhang, Leo Yu Zhang, Xufei Zheng, Bilal Abbasi, Shengshan Hu · 2022 · The Computer Journal
  50. DPIS
    Jianxin Wei, Ergute Bao, Xiaokui Xiao, Yin Yang · 2022 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
  51. Sanitizing Sentence Embeddings (and Labels) for Local Differential Privacy
    Minxin Du, Xiang Yue, Sherman S. M. Chow, Huan Sun · 2023 · International World Wide Web Conference (WWW)
  52. Training Data Extraction From Pre-trained Language Models: A Survey
    Shotaro Ishihara · 2023 · Workshop on Trustworthy Natural Language Processing (TrustNLP)
  53. Update Selective Parameters: Federated Machine Unlearning Based on Model Explanation
    Heng Yu Xu, Tianqing Zhu, Lefeng Zhang, Wanlei Zhou, Philip S. Yu · 2024 · IEEE Transactions on Big Data
  54. Supporting Trustworthy AI Through Machine Unlearning
    Emmie Hine, Claudio Novelli, Mariarosaria Taddeo, Luciano Floridi · 2024 · Science and Engineering Ethics
  55. Measuring Data Leakage in Machine-Learning Models with Fisher Information
    Awni Hannun, Chuan Guo, Laurens van der Maaten · 2021 · arXiv (Cornell University)
  56. ATTEQ-NN: Attention-based QoE-aware Evasive Backdoor Attacks
    Xueluan Gong, Yanjiao Chen, Jianshuo Dong, Qian Wang · 2022 · Network and Distributed System Security Symposium
  57. Membership Inference Attacks and Generalization
    Teodora Baluta, Shiqi Shen, S. Hitarth, Shruti Tople, Prateek Saxena · 2022 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
  58. Local Differential Privacy Based Membership-Privacy-Preserving Federated Learning for Deep-Learning-Driven Remote Sensing
    Zheng Zhang, Xindi Ma, Jianfeng Ma · 2023 · Remote Sensing
  59. CasTGAN: Cascaded Generative Adversarial Network for Realistic Tabular Data Synthesis
    Abdallah Alshantti, Damiano Varagnolo, Adil Rasheed, A Rahmati, Frank Westad · 2024 · IEEE Access
  60. Does CLIP Know My Face?
    Dominik Hintersdorf, Lukas Struppek, Manuel Brack, F. Friedrich, Patrick Schramowski, Kristian Kersting · 2024 · Journal of Artificial Intelligence Research
  61. Privacy enhancing and generalizable deep learning with synthetic data for mediastinal neoplasm diagnosis
    Zhanping Zhou, Yu-Chen Guo, Ruijie Tang, Hengrui Liang, Jianxing He, Feng Xu · 2024 · npj Digital Medicine
  62. Membership Inference Attacks are Easier on Difficult Problems
    Avital Shafran, Shmuel Peleg, Yedid Hoshen · 2021 · IEEE/CVF International Conference on Computer Vision (ICCV)
  63. On the Effectiveness of Regularization Against Membership Inference Attacks
    Yiğitcan Kaya, Sanghyun Hong, Tudor Dumitraş · 2020 · arXiv (Cornell University)
  64. Generating Is Believing: Membership Inference Attacks against Retrieval-Augmented Generation
    Li, Yuying, Liu, Gaoyang, Wang, Chen, Yang, Yang · 2024 · arXiv
  65. Disparate Vulnerability to Membership Inference Attacks
    Bogdan Kulynych, Mohammad Yaghini, Giovanni Cherubin, Michael Veale, Carmela Troncoso · 2021 · Proceedings on Privacy Enhancing Technologies
  66. Generating Is Believing: Membership Inference Attacks against Retrieval-Augmented Generation
    Yuying Li, Gaoyang Liu, Chen Wang, Yang Yang · 2025 · IEEE International Conference on Acoustics Speech and Signal Processing
  67. On a Utilitarian Approach to Privacy Preserving Text Generation
    Zekun Xu, Abhinav Aggarwal, Oluwaseyi Feyisetan, Nathanael Teissier · 2021 · Workshop on Privacy in Natural Language Processing (PrivateNLP)
  68. Understanding Disparate Effects of Membership Inference Attacks and their Countermeasures
    Da Zhong, Haipei Sun, Jun Xu, Neil Zhenqiang Gong, Hui Wang · 2022 · ACM Asia Conference on Computer and Communications Security (ASIA CCS)
  69. Skellam mixture mechanism
    Ergute Bao, Yizheng Zhu, Xiaokui Xiao, Yin Yang, Beng Chin Ooi, Benjamin Hong Meng Tan, Khin Mi Mi Aung · 2022 · Proceedings of the VLDB Endowment
  70. GFL: Federated Learning on Non-IID Data via Privacy-Preserving Synthetic Data
    Yihang Cheng, Lan Zhang, Anran Li · 2023 · IEEE International Conference on Pervasive Computing and Communications
  71. Benchmarking robustness and privacy-preserving methods in federated learning
    Zeinab Alebouyeh, Amir Jalaly Bidgoly · 2024 · Future Generation Computer Systems
  72. Gotcha! This Model Uses My Code! Evaluating Membership Leakage Risks in Code Models
    Zhou Yang, Zhipeng Zhao, Chenyu Wang, Jieke Shi, Dongsun Kim, DongGyun Han, David Lo · 2024 · IEEE Transactions on Software Engineering
  73. Game Theory Based Privacy Preserving Approach for Collaborative Deep Learning in IoT
    Deepti Gupta, Smriti Bhatt, Paras Bhatt, Maanak Gupta, Ali Şaman Tosun · 2021 · Signals and communication technology
  74. Federated Regularization Learning: an Accurate and Safe Method for Federated Learning
    Tianqi Su, Meiqi Wang, Zhongfeng Wang · 2021 · IEEE International Conference on Artificial Intelligence Circuits and Systems (AICAS)
  75. LOGAN: Membership Inference Attacks Against Generative Models
    Jamie Hayes, Luca Melis, George Danezis, Emiliano De Cristofaro · 2017 · arXiv (Cornell University)
  76. Information-theoretic generalization bounds for black-box learning algorithms
    Hrayr Harutyunyan, Maxim Raginsky, Greg Ver Steeg, Aram Galstyan · 2021 · arXiv (Cornell University)
  77. Membership Inference Attacks against GANs by Leveraging Over-representation Regions
    Hu, Hailong, Pang, Jun · 2021 · Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security
  78. The Data Minimization Principle in Machine Learning
    Prakhar Ganesh, Cuong Tran, Reza Shokri, Ferdinando Fioretto · 2025 · ACM Conference on Fairness, Accountability, and Transparency (FAccT)
  79. Backdoor smoothing: Demystifying backdoor attacks on deep neural networks
    Kathrin Grosse, Taesung Lee, Battista Biggio, Youngja H. Park, Michael Backes A, Ian Molloy · 2022 · Computers & Security
  80. Knowledge Cross-Distillation for Membership Privacy
    Rishav Chourasia, Batnyam Enkhtaivan, Kunihiro Ito, Junki Mori, Isamu Teranishi, Hikaru Tsuchida · 2022 · Proceedings on Privacy Enhancing Technologies
  81. A Dataset Auditing Method for Collaboratively Trained Machine Learning Models
    Yangsibo Huang, Chun-Yin Huang, Xiaoxiao Li, Kai Li · 2022 · IEEE Transactions on Medical Imaging
  82. Fortifying Federated Learning against Membership Inference Attacks via Client-level Input Perturbation
    Yuchen Yang, Haolin Yuan, Bo Hui, Neil Zhenqiang Gong, Neil Fendley, Philippe Burlina, Yinzhi Cao · 2023 · International Conference on Dependable Systems & Networks/Proceedings
  83. Achilles’ Heels: Vulnerable Record Identification in Synthetic Data Publishing
    Matthieu Meeus, Florent Guépin, Ana-Maria Creţu, Yves-Alexandre de Montjoye · 2024 · Lecture notes in computer science
  84. Privacy-preserving federated learning compatible with robust aggregators
    Zeinab Alebouyeh, Amir Jalaly Bidgoly · 2025 · Engineering Applications of Artificial Intelligence
  85. The Inadequacy of Similarity-Based Privacy Metrics: Privacy Attacks Against “Truly Anonymous” Synthetic Datasets
    Georgi Ganev, Emiliano De Cristofaro · 2025 · IEEE Symposium on Security and Privacy (S&P)
  86. Memorization in Deep Learning: A Survey
    Jiaheng Wei, Yanjun Zhang, Leo Yu Zhang, Ming Ding, Chao Chen, Kok‐Leong Ong, Jun Zhang, Yang Xiang · 2025 · ACM Computing Surveys
  87. Measuring Membership Privacy on Aggregate Location Time-Series
    Apostolos Pyrgelis, Carmela Troncoso, Emiliano De Cristofaro · 2020 · Proceedings of the ACM on Measurement and Analysis of Computing Systems
  88. Use the Spear as a Shield: An Adversarial Example Based Privacy-Preserving Technique Against Membership Inference Attacks
    Mingfu Xue, Chengxiang Yuan, Can He, Yinghao Wu, Zhiyu Wu, Yushu Zhang, Zhe Liu, Weiqiang Liu · 2022 · IEEE Transactions on Emerging Topics in Computing
  89. Layer-wise Characterization of Latent Information Leakage in Federated Learning
    Fan Mo, Anastasia Borovykh, Mohammad Malekzadeh, Hamed Haddadi, Soteris Demetriou · 2020 · arXiv (Cornell University)
  90. Federated Unlearning
    Gaoyang Liu, Xiaoqiang Ma, Yang, Yang, Chen Wang, Jiangchuan Liu · 2020 · arXiv (Cornell University)
  91. A Novel Attribute Reconstruction Attack in Federated Learning
    Lingjuan Lyu, Chen Chen · 2021 · arXiv (Cornell University)
  92. FedBiP: Heterogeneous One-Shot Federated Learning with Personalized Latent Diffusion Models
    Haokun Chen, Hang Li, Yao Zhang, Jinhe Bi, Gengyuan Zhang, Yueqi Zhang, Philip H. S. Torr, Jindong Gu, Denis Krompaß, Volker Tresp · 2025 · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings
  93. Being Patient and Persistent: Optimizing An Early Stopping Strategy for Deep Learning in Profiled Attacks
    Servio Paguada, Lejla Batina, Ileana Buhan, Igor Armendariz · 2023 · IEEE Transactions on Computers
  94. DP-UTIL: Comprehensive Utility Analysis of Differential Privacy in Machine Learning
    Ismat Jarin, Birhanu Eshete · 2022 · ACM Conference on Data and Application Security and Privacy (CODASPY)
  95. Inferring Sensitive Attributes from Model Explanations
    Vasisht Duddu, Antoine Boutet · 2022 · ACM International Conference on Information and Knowledge Management (CIKM)
  96. Machine Unlearning in Gradient Boosting Decision Trees
    Huawei Lin, Jun Woo Chung, Yingjie Lao, Weijie Zhao · 2023 · ACM SIGKDD Conference on Knowledge Discovery and Data Mining (KDD)
  97. Trustworthy decentralized collaborative learning for edge intelligence: A survey
    Dongxiao Yu, Zhenzhen Xie, Yuan Yuan, Shuzhen Chen, Jing Qiao, Yangyang Wang, Yong Hong Yu, Yifei Zou, Xiao Li Zhang · 2023 · High-Confidence Computing
  98. Paralinguistic Privacy Protection at the Edge
    Ranya Aloufi, Hamed Haddadi, David Boyle · 2022 · ACM Transactions on Privacy and Security
  99. Synaptic 1/f noise injection for overfitting suppression in hardware neural networks
    Yan Jun Du, Wei Shao, Zheng Chai, Hanzhang Zhao, Qihui Diao, Yawei Gao, Xihui Yuan, Qiaoqiao Wang, Tao Li, Weidong Zhang et al. · 2022 · Neuromorphic Computing and Engineering
  100. Measuring Data Leakage in Machine-Learning Models with Fisher Information (Extended Abstract)
    Awni Hannun, Chuan Guo, Laurens van der Maaten · 2022 · International Joint Conference on Artificial Intelligence