Privacy Risk in Machine Learning: Analyzing the Connection to Overfitting

Yeom, Samuel, Giacomelli, Irene, Fredrikson, Matt, Jha, Somesh·2018·2018 IEEE 31st Computer Security Foundations Symposium (CSF)
DOI 10.1109/csf.2018.00027

Cited by (998)

Items 701–800 of 998

  1. C2DP: CLIP-conditioned knowledge distillation for membership inference privacy protection
    Bo Yang, Hui Xin He, Zimeng Jia, Lun Xin, Wei Yu, Zejun Wang, Renhao Lu, Weizhe Zhang · 2025 · World Wide Web
  2. Membership Inference Attack Vulnerabilities of Record Linkage Models
    Piyumi Seneviratne, Dinusha Vatsalan, Mohamed Ali Kâafar · 2025 · ACM International Conference on Information and Knowledge Management (CIKM)
  3. Federated Unlearning in Healthcare: Why It Matters
    Alessio Mora, Carlo Mazzocca, Rebecca Montanari, Paolo Bellavista · 2025 · International Joint Conference on Neural Networks (IJCNN)
  4. Anonymity Unveiled: A Practical Framework for Auditing Data Use in Deep Learning Models
    Z. Chen, Karthik Pattabiraman · 2025 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
  5. Can Personal Health Information Be Secured in LLM? Privacy Attack and Defense in the Medical Domain
    Yujin Kang, Eunsun Kim, Yoon-Sik Cho · 2025 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
  6. Mitigating Data Exfiltration Attacks Through Layer-Wise Learning Rate Decay Fine-Tuning
    Elie Thellier, Huiyu Li, Nicholas Ayache, Hervé Delingette · 2025 · Lecture notes in computer science
  7. Early Detection and Reduction of Memorization for Domain Adaptation and Instruction Tuning
    Dean L. Slack, Noura Al Moubayed · 2025 · Transactions of the Association for Computational Linguistics
  8. DeepLeak: Privacy Enhancing Hardening of Model Explanations Against Membership Leakage
    Firas Ben Hmida, Zain Sbeih, Philemon Hailemariam, Birhanu Eshete · 2026 · IEEE Conference on Secure and Trustworthy Machine Learning (SaTML)
  9. Exposing Privacy Risks in Depression Classifiers: A Membership Inference Analysis on DAIC-WOZ
    Hassan A. Shafei · 2025 · International Conference on Software Engineering and Computer Systems
  10. How Does Quantization Impact Privacy Risk on LLMS for Code?
    Md Nazmul Haque, Hua Yang, Zhou Yang, Bowen Xu · 2025 · ACM International Conference on AI-Powered Software (AIware)
  11. Counterfactual Adversarial Examples for Mitigating Privacy Risk in Adversarially Robust Models
    Aohan Sun, Yanrong Lu, Wencheng Yang, Ji Zhang · 2026 · Lecture notes in computer science
  12. Unlearning Comparator: A Visual Analytics System for Comparative Evaluation of Machine Unlearning Methods
    Jaeung Lee, Suhyeon Yu, Yurim Jang, Simon S. Woo, Jaemin Jo · 2026 · IEEE Transactions on Visualization and Computer Graphics
  13. Bits for Privacy: Evaluating Post-Training Quantization via Membership Inference
    Chenxiang Zhang, Tongxi Qu, Zhong Li, Tian Zhang, Jun Pang, Sjouke Mauw · 2025 · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)
  14. Homomorphic Encryption in Finance: Training and Inference on Encrypted Data with Concrete ML
    Ensar Yilmaz, Burak Aktürk, Didem Civelek, Tolga Büyüktanır, Kazım Yıldız · 2026 · Afyon Kocatepe University Journal of Sciences and Engineering
  15. Federated Unlearning via Distilled Data
    Alessio Mora, Lorenzo Valerio, Paolo Bellavista · 2026 · IEEE Transactions on Mobile Computing
  16. Auditing unauthorized training data from AI generated content using information isotopes
    Tao Qi, Jinhua Yin, Dongqi Cai, Yueqi Xie, Huili Wang, Zhiyang Hu, Peiru Yang, Guoshun Nan, Zhili Zhou, Chuhan Wu et al. · 2026 · Nature Communications
  17. Exploring Membership Inference Vulnerabilities in Clinical Large Language Models
    Alexander Nemecek, Zebin Yun, Zahra Rahmani, Yaniv Harel, Vipin Chaudhary, Mahmood Sharif, Erman Ayday · 2025 · IEEE International Conference on Trust, Privacy and Security in Intelligent Systems and Applications (TPS-ISA)
  18. KI-SL: An Efficient and Secure Knowledge Index-Based Swarm Learning Method of Data Collaboration
    Haiyan Kang, Chong Zhang · 2026 · IEEE Internet of Things Journal
  19. From Forgetting to Future: A Survey of Machine Unlearning Approaches
    Sheetal Sehgal, Ankita Verma, Himani Bansal · 2026 · Wiley Interdisciplinary Reviews Data Mining and Knowledge Discovery
  20. Forget Me If You Can: Auditing User Data Revocation in Recommendation Systems
    Zhihao Zhu, Yi Yang, Yangyang Fan, Defu Lian · 2026 · Information Systems Research
  21. Trustworthy Distributed Load Forecasting in Resource‐Limited Smart Grids and Buildings via Random Layer Aggregation
    Habib Ullah Manzoor, Attia Shabbir, Rao Naveed Bin Rais, Sajjad Hussain, Ahmed Zoha · 2026 · International Journal of Intelligent Systems
  22. Is My Vision-Language Data in Your AI? Membership Inference Test (MINT) Demo 2
    Daniel DeAlcala, Gonzalo Mancera, Julián Fiérrez, Aythami Morales, Ruben Tolosana, Rubén Vera-Rodríguez · 2026 · IEEE Annual International Computer Software and Applications Conference (COMPSAC)
  23. In-Depth Exploration of Differentially Private Quantization for Privacy-Preserving and Communication-Efficient Federated Learning
    Shan Huang, Zhijing Ye, Jiamin Wang, Z ZHANG, Jie Fu, Wendy Hui Wang, Sheng Di, Xiaodong Yu · 2026 · International Conference on Dependable Systems & Networks/Proceedings
  24. G-Drift MIA: Membership Inference via Gradient-Induced Feature Drift in LLMs
    Ravi Ranjan, Utkarsh Grover, Xiaomin Lin, Agoritsa Polyzou · 2026 · Lecture notes in computer science
  25. FedMCP++: Integrating Modular Expert Heads with Prototype-Guided Contrastive Distillation for Wireless Personalized Federated Learning
    Faruk Baturalp Günay, Ferhat Bozkurt · 2026 · Sensors
  26. Using Rényi-divergence and Arimoto-Rényi Information to Quantify Membership Information Leakage
    Farhad Farokhi · 2021 · Conference on Information Sciences and Systems
  27. Research on Security and Privacy Problem in the Data Life Cycle for the IoT Scenario
    Shisong Yang, Yuwen Chen, Zhen Yang · 2021 · Asia Symposium on Signal Processing (ASSP)
  28. Defending Adversarial Examples by a Clipped Residual U-Net Model
    Kazim Ali, Adnan Nabeel Qureshi, Muhammad Shahid Bhatti, Abid Sohail, Mohammad Hijji · 2022 · Intelligent Automation & Soft Computing
  29. A Systems View of Enterprise Data Governance for Artificial Intelligence Applications in Government
    Luis F. Luna‐Reyes, Teresa M. Harrison · 2022 · Annual International Conference on Digital Government Research
  30. Membership Inference Countermeasure With A Partially Synthetic Data Approach
    Wakana Maeda, Yuji Higuchi, Kazuhiro Minami, Ikuya Morikawa · 2022 · International Conference on Data Intelligence and Security (ICDIS)
  31. BAN - MPR: Defending against Membership Inference Attacks with Born Again Networks and Membership Privacy Regularization
    Yiqing Liu, Juan Yu, Jianmin Han · 2022 · International Conference on Computers and Artificial Intelligence Technology (CAIT)
  32. Can the use of privacy enhancing technologies enable federated learning for health data applications in a Swedish regulatory context?
    Rickard Brännvall, Helena M. Linge, Johan Östman · 2023 · Linköping electronic conference proceedings
  33. Keeping it Low-Key: Modern-Day Approaches to Privacy-Preserving Machine Learning
    Jigyasa Grover, Rishabh Misra · 2023 · Springer eBooks
  34. Privacy vs Utility analysis when applying Differential Privacy on Machine Learning Classifiers
    Mathuranthagaa Selvarathnam, Roshan Ragel, Constantino Carlos Reyes‐Aldasoro, Muttukrishnan Rajarajan · 2023 · IEEE International Conference on Wireless and Mobile Computing, Networking and Communications (WiMob)
  35. A Quantifying Approach for Evaluating Differential Privacy in Deep Learning
    Lihua Yin, Yang Lv, Zhe Sun, Fuqiang Tao, Ran Li · 2022 · IEEE Smart World Congress (SWC)
  36. Solving the Performance Issues of Epsilon Estimation Method in Differentially Private ERM: Analysis, Solution and Evaluation
    Yuzhe Li, Bo Li · 2023 · International Conference on Networks, Communications and Information Technology (CNCIT)
  37. A Cautionary Tale: On the Role of Reference Data in Empirical Privacy Defenses
    Caelin Kaplan, Chuan Xu, Othmane Marfoq, Giovanni Neglia, Anderson Santana de Oliveira · 2023 · Proceedings on Privacy Enhancing Technologies
  38. Probing the Transition to Dataset-Level Privacy in ML Models Using an Output-Specific and Data-Resolved Privacy Profile
    Tyler LeBlond, Joseph Munoz, Fred Lu, Maya Fuchs, Elliott Zaresky-Williams, Edward Raff, Brian Testa · 2023 · ACM Workshop on Artificial Intelligence and Security (AISec)
  39. Evaluating Cluster-Based Synthetic Data Generation for Blood-Transfusion Analysis
    Shannon K. S. Kroes, Matthijs van Leeuwen, Rolf H. H. Groenwold, Mart P. Janssen · 2023 · Journal of Cybersecurity and Privacy
  40. Efficient Adversarial Training with Membership Inference Resistance
    Ran Yan, Ruiying Du, Kun He, Jing Chen · 2023 · Lecture notes in computer science
  41. MKD: Mutual Knowledge Distillation for Membership Privacy Protection
    Sihao Huang, Zhongxiang Liu, Jun Ho Yu, Yongde Tang, Zidan Luo, Yuan Rao · 2024 · Lecture notes in computer science
  42. Multiple regression and group method of data handling-based models for predicting arsenic concentration in sedimentary phosphate rock
    Mohamed Dassamiour, Djamel Samai, Naima Faghmous, Rédha Boustila · 2024 · International Journal of Environmental Science and Technology
  43. Timing Channels in Adaptive Neural Networks
    Ayomide Akinsanya, Tegan Brennan · 2024 · Network and Distributed System Security Symposium
  44. Label-Only Membership Inference Attack Against Federated Distillation
    Xi Wang, Yanchao Zhao, Jiale Zhang, Bing Chen · 2024 · Lecture notes in computer science
  45. Data-Free Model Stealing Attack Based on Denoising Diffusion Probabilistic Model
    Guofeng Gao, Xiaodong Wang, Zhiqiang Wei, Jinghai Ai · 2023 · IEEE Smart World Congress (SWC)
  46. Confidence Is All You Need for MI Attacks (Student Abstract)
    Abhishek Sinha, Himanshi Tibrewal, Mansi Gupta, Nikhar Waghela, Shivank Garg · 2024 · Proceedings of the AAAI Conference on Artificial Intelligence
  47. Dual defense: Combining preemptive exclusion of members and knowledge distillation to mitigate membership inference attacks
    Jun Niu, Peng Liu, Chunhui Huang, Yangming Zhang, Moxuan Zeng, Kuo Shen, Yangzhong Wang, Suyu An, Yulong Shen, Xiaohong Jiang et al. · 2024 · Journal of Information and Intelligence
  48. VAE-Based Membership Cleanser Against Membership Inference Attacks
    Li Fang Hu, Hongyang Yan, Yun Peng, Haibo Hu, Shaowei Wang, Jin Li · 2024 · IEEE Transactions on Dependable and Secure Computing
  49. Trojan attribute inference attack on gradient boosting decision trees
    Kunihiro Ito, Batnyam Enkhtaivan, Isamu Teranishi, Jun Sakuma · 2024 · IEEE European Symposium on Security and Privacy
  50. LFL-COBC:Lightweight Federated Learning On Blockchain-based Device Contribution Allocation
    Qiaoyang Li, Yanan Sun, Ning Xi · 2024 · International Conference on Networking and Network Applications (NaNA)
  51. Optimizing Label-Only Membership Inference Attacks by Global Relative Decision Boundary Distances
    Jiacheng Xu, Jianpeng Hu, Chunqing Yu, Chengxiang Tan · 2024 · Lecture notes in computer science
  52. Adversarial for Good – Defending Training Data Privacy with Adversarial Attack Wisdom
    Shengyuan Pang, Yanjiao Chen, Jiangyi Deng, Jialin Wu, Yijie Bai, Wenyuan Xu · 2024 · IEEE International Conference on Metaverse Computing, Networking and Applications (MetaCom)
  53. LFL-COBC: Lightweight Federated Learning on Blockchain-Based Device Contribution Allocation
    Qiaoyang Li, Yanan Sun, Ke Gao, Ning Xi, Xiaolin Zhou, Mingyan Wang, Kefeng Fan · 2024 · Electronics
  54. Analyzing and Enhancing LDP Perturbation Mechanisms in Federated Learning
    Jiawei Duan, Qingqing Ye, Haibo Hu, Xinyue Sun · 2025 · IEEE Transactions on Knowledge and Data Engineering
  55. Izhikevich-Inspired Temporal Dynamics for Enhancing Privacy, Efficiency, and Transferability in Spiking Neural Networks
    Ayana Moshruba, Hamed Poursiami, Maryam Parsa · 2025 · International Conference on Neuromorphic Systems (ICONS)
  56. A Privacy-Fidelity Tradeoff Framework in Post-Processed Machine Learning
    Md. Faisal Ahmed, Zhengdao Wang · 2025 · IEEE International Conference on Trust, Privacy and Security in Intelligent Systems and Applications (TPS-ISA)
  57. Model Extraction Oriented Data Publishing with k-anonymity
    Takeru Fukuoka, Yuji Yamaoka, Takeaki Terada · 2020 · Lecture notes in computer science
  58. Dissecting Membership Inference Risk in Machine Learning
    Navoda Senavirathne, Vicenç Torra · 2022 · Lecture notes in computer science
  59. Research Progress and Challenges of Membership Inference Attacks in Machine Learning
    婷 高 · 2022 · Operations Research and Fuzziology
  60. A Privacy Knowledge Transfer Method for Clinical Concept Extraction
    Xuan Luo, Yiping Yin, Yice Zhang, Ruifeng Xu · 2022 · Lecture notes in computer science
  61. Loss-based differentiation strategy for privacy preserving of social robots
    Qinglin Yang, Taiyu Wang, Kaiming Zhu, Junbo Wang, Han Yu, Chunhua Su · 2022 · The Journal of Supercomputing
  62. Two-Stage High Precision Membership Inference Attack
    Shi Chen, Yubin Zhong · 2023 · Lecture notes in computer science
  63. User-Entity Differential Privacy in Learning Natural Language Models
    Phung Lai, NhatHai Phan, Tong Sun, Rajiv Jain, Franck Dernoncourt, Jiuxiang Gu, Nikolaos Barmpalios · 2022 · IEEE International Conference on Big Data (BigData)
  64. An Efficient Epsilon Selection Method for DP-ERM with Expected Accuracy Constraints
    Yuzhe Li, Bo Li, Weiping Wang, Nan Liu · 2022 · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)
  65. Generalizing Differentially Private Decentralized Deep Learning with Multi-agent Consensus
    Jasmine Bayrooti, Zhan Gao, Amanda Prorok · 2025 · Springer proceedings in advanced robotics
  66. Ultimate Power of Inference Attacks: Privacy Risks of High-Dimensional Models.
    Sasi Kumar Murakonda, Reza Shokri, George Theodorakopoulos · 2019 · arXiv (Cornell University)
  67. Membership Inference with Privately Augmented Data Endorses the Benign while Suppresses the Adversary.
    Dahua Yu, Huishuai Zhang, Wei Ren Chen, Jian Yin, Tie‐Yan Liu · 2020 · arXiv (Cornell University)
  68. Privacy Analysis in Language Models via Training Data Leakage Report.
    Huseyin A. Inan, Osman Ramadan, Lukas Wutschitz, Daniel N. Jones, Victor Rühle, James Withers, Robert B. Sim · 2021 · arXiv (Cornell University)
  69. Accuracy-Privacy Trade-off in Deep Ensembles.
    Shahbaz Rezaei, Zubair Shafiq, Xin Liu · 2021 · arXiv (Cornell University)
  70. Causally Constrained Data Synthesis for Private Data Release
    Varun Chandrasekaran, Darren Edge, Somesh Jha, Amit Kumar Sharma, Zhang Cheng, Shruti Tople · 2021 · arXiv (Cornell University)
  71. Novel Neural Network Repair Methods for Data Privacy and Individual Fairness
    Laura M. Graves · 2021 · UWSpace (University of Waterloo)
  72. Quantifying and Localizing Private Information Leakage from Neural Network Gradients
    Fan Mo, Anastasia Borovykh, Mohammad Malekzadeh, Hamed Haddadi, Soteris Demetriou · 2021 · arXiv (Cornell University)
  73. Defining the Characteristics of Type I Interferon Stimulated Genes: Insight from Expression Data and Machine Learning
    Haiting Chai, Quan Gu, Joseph Hughes, David L. Robertson · 2021 · bioRxiv (Cold Spring Harbor Laboratory)
  74. Proceedings of the Fourth Workshop on Privacy in Natural Language Processing
    2022
  75. Variations and Extensions of Information Leakage Metrics with Applications to Privacy Problems with Imperfect Statistical Information
    Shahnewaz Karim Sakib, George T. Amariucai, Yong Guan · 2022
  76. Inferring Communities of Interest in Collaborative Learning-based Recommender Systems
    Yacine Belal, Sonia Ben Mokhtar, Mohamed Maouche, Anthony Simonet · 2023 · arXiv (Cornell University)
  77. Privacy-Preserving Federated Learning Compatible with Robust Aggregators
    Zeinab Alebouyeh, Amir Jalaly Bidgoly · 2024 · SSRN Electronic Journal
  78. Detecting Lookahead Bias in LLM Forecasts
    Zhenyu Gao, Wenxi Jiang, Yutong Yan · 2026 · SSRN Electronic Journal
  79. Robust and Privacy-Preserving Federated Learning
    Fatima Elhattab · 2023
  80. Detecting Data Contamination in Code Generation Benchmarks via DiffMIA
    Yamashita, Karin · 2025 · 2025 32nd Asia-Pacific Software Engineering Conference (APSEC)
  81. MRMMIA: Membership Inference Attacks on Memory in Chat Agents
    Chen, Kai, Pang, Yan, Wang, Tianhao · 2026 · arXiv
  82. Membership Encoding for Deep Learning
    Congzheng Song, Reza Shokri · 2020 · ACM Asia Conference on Computer and Communications Security (ASIA CCS)
  83. Reducing Risk of Model Inversion Using Privacy-Guided Training
    Abigail Goldsteen, Gilad Ezov, Ariel Farkash · 2020 · arXiv (Cornell University)
  84. Not one but many Tradeoffs: Privacy Vs. Utility in Differentially Private Machine Learning
    Benjamin Zi Hao Zhao, Mohamed Ali Kâafar, Nicolas Kourtellis · 2020 · arXiv (Cornell University)
  85. Quantifying identifiability to choose and audit $ε$ in differentially private deep learning
    Daniel Bernau, Günther Eibl, Philip W. Grassal, Hannah Keller, Florian Kerschbaum · 2021 · arXiv (Cornell University)
  86. Formalizing Distribution Inference Risks
    Anshuman Suri, David Evans · 2021 · arXiv (Cornell University)
  87. Leave-one-out Unfairness
    Emily Black, Matt Fredrikson · 2021 · arXiv (Cornell University)
  88. Integrity and privacy in adversarial machine learning
    Matthew Jagielski · 2021
  89. Do Not Trust Prediction Scores for Membership Inference Attacks.
    Dominik Hintersdorf, Lukas Struppek, Kristian Kersting · 2021 · arXiv (Cornell University)
  90. Influence of Training Data on the Invertability of Neural Networks for Handwritten Digit Recognition
    Antonia Adler, Michaela Geierhos, Eleanor Hobley · 2021 · International Conference on Machine Learning and Applications
  91. Just Keep Your Concerns Private: Guaranteeing Heterogeneous Privacy and Achieving High Availability for ERM Algorithms
    Yuzhe Li, Yong Liu, Bo Li, Weiping Wang, Nan Liu · 2021 · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)
  92. Defense Against Adversarial Attacks
    Minoru Kuribayashi · 2022 · Studies in autonomic, data-driven and industrial computing
  93. Variations and Extensions of Information Leakage Metrics with Applications to Privacy Problems with Imperfect Statistical Information
    Shahnewaz Karim Sakib, George T. Amariucai, Yong Guan · 2022
  94. Label-only membership inference attack based on the transferability of adversarial sample
    Xiaowei Hao, Dong Zhang, Hanwei Wu, Jing Duan, Long An, Xiu Liu · 2022 · International Conference on Cloud Computing, Performance Computing, and Deep Learning (CCPCDL)
  95. Membership Inference Attacks Against Temporally Correlated Data in Deep Reinforcement Learning
    Maziar Gomrokchi, Susan Amin, Hossein Aboutalebi, Alexander K.C. Wong, Doina Precup · 2022 · Research Square
  96. Squeeze-Loss: A Utility-Free Defense Against Membership Inference Attacks
    Yingying Zhang, Hongyang Yan, Guanbiao Lin, Shiyu Peng, Zhenxin Zhang, Yufeng Wang · 2022 · Communications in computer and information science
  97. Classifying Big Medical Data through Bootstrap Decision Forest Using Penalizing Attributes
    V. Gowri, V. Vijaya Chamundeeswari · 2023 · Intelligent Automation & Soft Computing
  98. Adversarial Machine Learning Problems: Threats and Attacks
    2023 · ISSE National Conference on Systems Approach for Self-Reliance in Advanced Technologies (INAC)
  99. Impact of Dimensionality Reduction on Membership Privacy of CNN Models
    Ashish Kumar Lal, S. Karthikeyan · 2023 · Lecture notes in networks and systems
  100. Towards an E-commerce Personalized Recommendation System with KNN Classification Method
    Doae Mensouri, Abdellah Azmani, Monir Azmani · 2023 · Lecture notes in networks and systems