The DOI matches its Crossref record; 62 of the 64 references it cites were found in a registry or an index.
LOGAN: Membership Inference Attacks Against Generative Models
Open accessAbstract
Generative models estimate the underlying distribution of a dataset to generate realistic samples according to that distribution. In this paper, we present the first membership inference attacks against generative models: given a data point, the adversary determines whether or not it was used to train the model. Our attacks leverage Generative Adversarial Networks (GANs), which combine a discriminative and a generative model, to detect overfitting and recognize inputs that were part of training datasets, using the discriminator’s capacity to learn statistical differences in distributions. We present attacks based on both white-box and black-box access to the target model, against several state-of-the-art generative models, over datasets of complex representations of faces (LFW), objects (CIFAR-10), and medical images (Diabetic Retinopathy). We also discuss the sensitivity of the attacks to different training parameters, and their robustness against mitigation strategies, finding that defenses are either ineffective or lead to significantly worse performances of the generative models in terms of training stability and/or sample quality.
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“Formal security and secrecy mechanisms such as model encryption can only partially address this requirement, as even encrypted models have been found to leak sensitive information in previous work23,24.”
From Medical imaging deep learning with differential privacy (2021) · cites this paper as [24]
Citations
Cites
(2014) · Cited by 33,419
Batch Normalization: Accelerating Deep Network Training by Reducing Internal Covariate Shift
Ioffe, S., & Szegedy, C. (2015) · arXiv · doi:10.48550/arxiv.1502.03167 · Cited by 27,818
Learning Multiple Layers of Features from Tiny Images
Krizhevsky, A. (2024) · doi:10.57702/zp44cu3g · Cited by 23,889
GAN（Generative Adversarial Nets）
淳司, 柴. (2017) · Journal of Japan Society for Fuzzy Theory and Intelligent Informatics · doi:10.3156/jsoft.29.5_177_2 · Cited by 20,507
Batch Normalization: Accelerating Deep Network Training by Reducing Internal Covariate ShiftPreprint
Ioffe, S. (2024) · arXiv (Cornell University) · doi:10.57702/o9raffed · Cited by 15,273
Communication-Efficient Learning of Deep Networks from Decentralized Data
McMahan, H. B., Moore, E., Ramage, D., Hampson, S., & Arcas, B. A. Y. (2016) · arXiv · doi:10.48550/arxiv.1602.05629 · Cited by 14,215
Distilling the Knowledge in a Neural Network
Hinton, G., Vinyals, O., & Dean, J. (2015) · arXiv · doi:10.48550/arxiv.1503.02531 · Cited by 14,204
Photo-Realistic Single Image Super-Resolution Using a Generative Adversarial Network
Ledig, C., Theis, L., Huszar, F., Caballero, J., Cunningham, A., Acosta, A., Aitken, A., Tejani, A., Totz, J., Wang, Z., et al. (2017) · 2017 IEEE Conference on Computer Vision and Pattern Recognition (CVPR) · doi:10.1109/cvpr.2017.19 · Cited by 12,696
Unsupervised representation learning with deep convolutional generative adversarial networks
Radford, A., Metz, L., & Chintala, S. (2015) · arXiv · doi:10.48550/arxiv.1511.06434 · Cited by 12,235
Improved Techniques for Training GANs
Salimans, T., Goodfellow, I., Zaremba, W., Cheung, V., Radford, A., & Chen, X. (2016) · arXiv · doi:10.48550/arxiv.1606.03498 · Cited by 6,965
Research works printed but not linked: 8
- [3] M. Arjovsky, S. Chintala, and L. Bottou. Wasserstein GAN. arXiv 1701.07875, 2017. · arXiv
- [20] I. Goodfellow, J. Pouget-Abadie, M. Mirza, B. Xu, D. Warde-Farley, S. Ozair, A. Courville, and Y. Bengio. Generative adversarial nets. In NIPS, 2014.
- [31] D. P. Kingma and M. Welling. Auto-Encoding Variational Bayes. In ICLR, 2013.
- [37] Y. Long, V. Bindschaedler, L. Wang, D. Bu, X. Wang, H. Tang, C. A. Gunter, and K. Chen. Understanding Membership Inferences on Well-Generalized Learning Models. arXiv:1802.04889, 2018. · arXiv
- [41] L. Melis, C. Song, E. De Cristofaro, and V. Shmatikov. Inference Attacks Against Collaborative Learning. arXiv:1805.04049, 2018. · arXiv
- [46] N. Papernot, M. Abadi, Ú. Erlingsson, I. Goodfellow, and K. Talwar. Semi-supervised knowledge transfer for deep learning from private training data. In ICLR, 2017.
- [62] A. Triastcyn and B. Faltings. Generating differentially private datasets using gans. arXiv preprint arXiv:1803.03148, 2018. · arXiv
- [67] X. Wu and X. Zhang. Automated Inference on Criminality using Face Images. arXiv 1611.04135, 2016. · arXiv
Cited by
Sorted by citations
Exploiting Unintended Feature Leakage in Collaborative Learning
Melis, L., Song, C., De Cristofaro, E., & Shmatikov, V. (2019) · 2019 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2019.00029 · Cited by 1,734
Self-citationA survey on large language model (LLM) security and privacy: The Good, The Bad, and The Ugly
Yao, Y., Duan, J., Xu, K., Cai, Y., Sun, Z., & Zhang, Y. (2024) · High-Confidence Computing · doi:10.1016/j.hcc.2024.100211 · Cited by 1,083
Membership Inference Attacks on Machine Learning: A Survey
Hu, H., Salcic, Z. A., Sun, L., Dobbie, G., Yu, P. S., & Zhang, X. (2022) · ACM Computing Surveys · doi:10.1145/3523273 · Cited by 662
Membership Inference Attacks From First Principles
Carlini, N., Chien, S., Nasr, M., Song, S., Terzis, A., & Tramèr, F. (2022) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp46214.2022.9833649 · Cited by 728
When Machine Learning Meets Privacy: A Survey and Outlook
Liu, B., Ding, M., Shaham, S., Rahayu, W., Farokhi, F., & Lin, Z. (2022) · ACM Computing Surveys · doi:10.1145/3436755 · Cited by 455
Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networks
Golatkar, A., Achille, A., & Soatto, S. (2020) · 2020 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) · doi:10.1109/cvpr42600.2020.00932 · Cited by 394
Generative Adversarial Networks: A Survey Toward Private and Secure Applications
Cai, Z., Xiong, Z., Xu, H., Wang, P., Li, W., & Pan, Y. (2022) · ACM Computing Surveys · doi:10.1145/3459992 · Cited by 376
Generative Adversarial Networks in Time Series: A Systematic Literature Review
Brophy, E., Wang, Z., She, Q., & Ward, T. (2023) · ACM Computing Surveys · doi:10.1145/3559540 · Cited by 337
A Survey of Privacy Attacks in Machine Learning
Rigaki, M., & Garcia, S. (2024) · ACM Computing Surveys · doi:10.1145/3624010 · Cited by 285
Privacy and Security Issues in Deep Learning: A Survey
Liu, X., Xie, L., Wang, Y., Zou, J., Xiong, J., Ying, Z., & Vasilakos, A. V. (2020) · IEEE Access · doi:10.1109/access.2020.3045078 · Cited by 311
Analyzing User-Level Privacy Attack Against Federated Learning
Song, M., Wang, Z., Zhang, Z., Song, Y., Wang, Q., Ren, J., & Qi, H. (2020) · IEEE Journal on Selected Areas in Communications · doi:10.1109/jsac.2020.3000372 · Cited by 262
Using GANs for Sharing Networked Time Series Data
Lin, Z., Jain, A., Wang, C., Fanti, G. C., & Sekar, V. (2020) · ACM Internet Measurement Conference (IMC) · doi:10.1145/3419394.3423643 · Cited by 278
Wireless Federated Learning with Local Differential Privacy
Seif, M., Tandon, R., & Li, M. (2020) · IEEE International Symposium on Information Theory (ISIT) · doi:10.1109/isit44484.2020.9174426 · Cited by 212
Label-Only Membership Inference AttacksPreprint
Choquette-Choo, C. A., Tramèr, F., Carlini, N., & Papernot, N. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2007.14321 · Cited by 229
DeepSight: Mitigating Backdoor Attacks in Federated Learning Through Deep Model Inspection
Rieger, P., Nguyen, T. D., Miettinen, M., & Sadeghi, A.-R. (2022) · Proceedings 2022 Network and Distributed System Security Symposium · doi:10.14722/ndss.2022.23156 · Cited by 202
Auditing Data Provenance in Text-Generation Models
Song, C., & Shmatikov, V. (2019) · ACM SIGKDD Conference on Knowledge Discovery and Data Mining (KDD) · doi:10.1145/3292500.3330885 · Cited by 217
Medical imaging deep learning with differential privacy
Ziller, A., Usynin, D., Braren, R., Makowski, M., Rueckert, D., & Kaissis, G. (2021) · Scientific Reports · doi:10.1038/s41598-021-93030-0 · Cited by 172
A review of generative adversarial networks and its application in cybersecurity
Yinka-Banjo, C., & Ugot, O.-A. (2019) · Artificial Intelligence Review · doi:10.1007/s10462-019-09717-4 · Cited by 164
Monte Carlo and Reconstruction Membership Inference Attacks against Generative Models
Hilprecht, B., Härterich, M., & Bernau, D. (2019) · Proceedings on Privacy Enhancing Technologies · doi:10.2478/popets-2019-0067 · Cited by 179
Local and Central Differential Privacy for Robustness and Privacy in Federated Learning
Naseri, M., Hayes, J., & De Cristofaro, E. (2022) · Proceedings 2022 Network and Distributed System Security Symposium · doi:10.14722/ndss.2022.23054 · Cited by 188
Self-citationPrivacy-Preserving Techniques in Generative AI and Large Language Models: A Narrative Review
Feretzakis, G., Papaspyridis, K., Gkoulalas-Divanis, A., & Verykios, V. S. (2024) · Information · doi:10.3390/info15110697 · Cited by 186
Differentially private synthetic medical data generation using convolutional GANs
Torfi, A., Fox, E. A., & Reddy, C. K. A. (2021) · Information Sciences · doi:10.1016/j.ins.2021.12.018 · Cited by 177
Adversary Instantiation: Lower Bounds for Differentially Private Machine Learning
Nasr, M., Song, S., Thakurta, A., Papernot, N., & Carlini, N. (2021) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp40001.2021.00069 · Cited by 181
A Privacy-Preserving and Verifiable Federated Learning Scheme
Zhang, X., Fu, A., Wang, H., Zhou, C., & Chen, Z. (2020) · International Conference on Communications · doi:10.1109/icc40277.2020.9148628 · Cited by 138
Li, J., Cairns, B. J., Li, J., & Zhu, T. (2023) · npj Digital Medicine · doi:10.1038/s41746-023-00834-7 · Cited by 148
Attacking and Protecting Data Privacy in Edge–Cloud Collaborative Inference Systems
He, Z., Zhang, T., & Lee, R. B.-L. (2020) · IEEE Internet of Things Journal · doi:10.1109/jiot.2020.3022358 · Cited by 130
GAN Enhanced Membership Inference: A Passive Local Attack in Federated Learning
Zhang, J., Zhang, J., Chen, J., & Yu, S. (2020) · ICC 2020 - 2020 IEEE International Conference on Communications (ICC) · doi:10.1109/icc40277.2020.9148790 · Cited by 133
Golatkar, A., Achille, A., & Soatto, S. (2020) · Lecture Notes in Computer Science · doi:10.1007/978-3-030-58526-6_23 · Cited by 122
Adversarial Attacks to Machine Learning-Based Smart Healthcare Systems
Newaz, A. I., Haque, N. I., Sikder, A. K., Rahman, M. A., & Uluagac, A. S. (2020) · Globecom · doi:10.1109/globecom42002.2020.9322472 · Cited by 117
Machine unlearning: linear filtration for logit-based classifiers
Baumhauer, T., Schöttle, P., & Zeppelzauer, M. (2022) · Machine Learning · doi:10.1007/s10994-022-06178-9 · Cited by 141
Practical GAN-based synthetic IP header trace generation using NetShare
Yin, Y., Lin, Z., Jin, M., Fanti, G. C., & Sekar, V. (2022) · ACM SIGCOMM Conference (SIGCOMM) · doi:10.1145/3544216.3544251 · Cited by 120
Privacy and Security of Big Data in AI Systems: A Research and Standards Perspective
Dilmaghani, S., Brust, M. R., Danoy, G., Cassagnes, N., Pecero, J., & Bouvry, P. (2019) · 2019 IEEE International Conference on Big Data (Big Data) · doi:10.1109/bigdata47090.2019.9006283 · Cited by 111
Anonymization: The imperfect science of using data while preserving privacy
Gadotti, A., Rocher, L., Houssiau, F., Creţu, A.-M., & de Montjoye, Y.-A. (2024) · Science Advances · doi:10.1126/sciadv.adn7053 · Cited by 135
Detecting Overfitting of Deep Generative Networks via Latent Recovery
Webster, R., Rabin, J., Simon, L., & Jurie, F. (2019) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr.2019.01153 · Cited by 101
Generative Models for Effective ML on Private, Decentralized Datasets
Augenstein, S., McMahan, H. B., Ramage, D., Ramaswamy, S., Kairouz, P., Chen, M., Mathews, R., & Arcas, B. A. Y. (2019) · arXiv · doi:10.48550/arxiv.1911.06679 · Cited by 103
Decentralized Wireless Federated Learning With Differential Privacy
Chen, S., Yu, D., Zou, Y., Yu, J., & Cheng, X. (2022) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2022.3145010 · Cited by 100
MLCAD: A Survey of Research in Machine Learning for CAD Keynote Paper
Rapp, M., Amrouch, H., Lin, Y., Yu, B., Pan, D. Z., Wolf, M., & Henkel, J. (2021) · IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems · doi:10.1109/tcad.2021.3124762 · Cited by 116
When Machine Learning Meets Privacy: A Survey and OutlookPreprint
Liu, B., Ding, M., Shaham, S., Rahayu, W. J., Farokhi, F., & Lin, Z. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2011.11819 · Cited by 99
Large Language Models Can Be Strong Differentially Private LearnersPreprint
Li, X., Tramèr, F., Liang, P., & Hashimoto, T. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2110.05679 · Cited by 291
REFIT: A Unified Watermark Removal Framework For Deep Learning Systems With Limited Data
Chen, X., Wang, W., Bender, C., Ding, Y., Jia, R., Li, B., & Song, D. (2021) · ACM Asia Conference on Computer and Communications Security (ASIA CCS) · doi:10.1145/3433210.3453079 · Cited by 108
Cronus: Robust and Heterogeneous Collaborative Learning with Black-Box Knowledge TransferPreprint
Chang, H., Shejwalkar, V., Shokri, R., & Houmansadr, A. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1912.11279 · Cited by 176
Practical Blind Membership Inference Attack via Differential Comparisons
Hui, B., Yang, Y., Yuan, H., Burlina, P., Gong, N. Z., & Cao, Y. (2021) · Network and Distributed System Security Symposium · doi:10.14722/ndss.2021.24293 · Cited by 127
Membership inference attacks against synthetic health data
Zhang, Z., Yan, C., & Malin, B. (2021) · Journal of Biomedical Informatics · doi:10.1016/j.jbi.2021.103977 · Cited by 118
Adversarial Attacks Against Deep Generative Models on Data: A Survey
Sun, H., Zhu, T., Zhang, Z., Jin, D., Xiong, P., & Zhou, W. (2023) · IEEE Transactions on Knowledge and Data Engineering · doi:10.1109/tkde.2021.3130903 · Cited by 90
Synthetic data in biomedicine via generative artificial intelligence
van Breugel, B., Liu, T., Oglić, D., & van der Schaar, M. (2024) · Nature Reviews Bioengineering · doi:10.1038/s44222-024-00245-7 · Cited by 111
Trusted AI in Multiagent Systems: An Overview of Privacy and Security for Distributed Learning
Ma, C., Li, J., Wei, K., Liu, B., Ding, M., Yuan, L., Han, Z., & Vincent Poor, H. (2023) · Proceedings of the IEEE · doi:10.1109/jproc.2023.3306773 · Cited by 96
Inference Attacks Against Collaborative Learning.Preprint
Melis, L., Song, C., Cristofaro, E. D., & Shmatikov, V. (2018) · arXiv (Cornell University) · Cited by 93
Self-citationSynthetic Data -- Anonymisation Groundhog DayPreprint
Stadler, T., Oprisanu, B., & Troncoso, C. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2011.07018 · Cited by 150
A Review on Machine Unlearning
Zhang, H., Nakamura, T., Isohara, T., & Sakurai, K. (2023) · SN Computer Science · doi:10.1007/s42979-023-01767-4 · Cited by 81
Poisoning-Assisted Property Inference Attack Against Federated Learning
Wang, Z., Huang, Y., Song, M., Wu, L., Xue, F., & Ren, K. (2022) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2022.3196646 · Cited by 86
Differential privacy in deep learning: A literature survey
Pan, K., Ong, Y.-S., Gong, M., Li, H., Qin, A. K., & Gao, Y. (2024) · Neurocomputing · doi:10.1016/j.neucom.2024.127663 · Cited by 89
Synthesis of Realistic ECG using Generative Adversarial NetworksPreprint
Delaney, A. M., Brophy, E., & Ward, T. E. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1909.09150 · Cited by 122
Shen, M., Wang, H., Zhang, B., Zhu, L., Xu, K., Li, Q. L., & Du, X. (2020) · IEEE Internet of Things Journal · doi:10.1109/jiot.2020.3028110 · Cited by 73
Privacy Inference Attack and Defense in Centralized and Federated Learning: A Comprehensive Survey
Rao, B., Zhang, J., Wu, D., Zhu, C., Sun, X., & Chen, B. (2024) · IEEE Transactions on Artificial Intelligence · doi:10.1109/tai.2024.3363670 · Cited by 89
Sun, C., van Soest, J., & Dumontier, M. (2023) · Journal of Biomedical Informatics · doi:10.1016/j.jbi.2023.104404 · Cited by 83
Survey: Leakage and Privacy at Inference Time
Jegorova, M., Kaul, C., Mayor, C., O'Neil, A. Q., Weir, A., Murray-Smith, R., & Tsaftaris, S. A. (2022) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2022.3229593 · Cited by 77
Secure Aggregation is Insecure: Category Inference Attack on Federated Learning
Gao, J., Hou, B., Guo, X., Liu, Z., Zhang, Y., Chen, K., & Li, J. (2021) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2021.3128679 · Cited by 71
Chen, J., Wang, H., & Shi, X. M. (2020) · Pacific Symposium on Biocomputing (PSB) · doi:10.1142/9789811232701_0003 · Cited by 68
Label-Only Model Inversion Attacks via Boundary Repulsion
Kahla, M., Chen, S., Just, H. A., & Jia, R. (2022) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52688.2022.01462 · Cited by 69
A Survey of Generative Adversarial Networks for Synthesizing Structured Electronic Health Records
Ghosheh, G. O., Li, J., & Zhu, T. (2024) · ACM Computing Surveys · doi:10.1145/3636424 · Cited by 95
Membership Inference Attacks and Defenses in Classification Models
Li, J., Li, N., & Ribeiro, B. (2021) · ACM Conference on Data and Application Security and Privacy (CODASPY) · doi:10.1145/3422337.3447836 · Cited by 87
Kossen, T., Subramaniam, P., Madai, V. I., Hennemuth, A., Hildebrand, K., Hilbert, A., Sobesky, J., Livne, M., Galinović, I., Khalil, A. A., et al. (2021) · Computers in Biology and Medicine · doi:10.1016/j.compbiomed.2021.104254 · Cited by 64
A Critical Overview of Privacy in Machine Learning
Cristofaro, E. D. (2021) · IEEE Security & Privacy · doi:10.1109/msec.2021.3076443 · Cited by 63
Adversarial interference and its mitigations in privacy-preserving collaborative machine learning
Usynin, D., Ziller, A., Makowski, M. R., Braren, R., Rueckert, D., Glocker, B., Kaissis, G. A., & Passerat‐Palmbach, J. (2021) · Nature Machine Intelligence · doi:10.1038/s42256-021-00390-3 · Cited by 68
Using Highly Compressed Gradients in Federated Learning for Data Reconstruction Attacks
Yang, H., Ge, M., Xiang, K., & Li, J. (2022) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2022.3227761 · Cited by 69
Efficiently Stealing your Machine Learning Models
Reith, R. N., Schneider, T. H., & Tkachenko, O. (2019) · ACM Workshop on Privacy in the Electronic Society (WPES) · doi:10.1145/3338498.3358646 · Cited by 59
Attack-Resistant Federated Learning with Residual-based ReweightingPreprint
Fu, S., Xie, C., Li, B., & Chen, Q. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1912.11464 · Cited by 91
Optimizing Privacy-Preserving Outsourced Convolutional Neural Network Predictions
Li, M., Chow, S. S. M., Hu, S., Yan, Y., Shen, C. Q., & Wang, Q. (2020) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2020.3029899 · Cited by 59
Defending Model Inversion and Membership Inference Attacks via Prediction PurificationPreprint
Yang, Z., Shao, B., Xuan, B., Chang, E., & Zhang, F. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2005.03915 · Cited by 93
RDP-GAN: A Rényi-Differential Privacy Based Generative Adversarial Network
Ma, C., Li, J., Ding, M., Liu, B., Wei, K., Weng, J., & Poor, H. V. (2023) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2022.3233580 · Cited by 70
Generative AI model privacy: a survey
Liu, Y., Huang, J., Li, Y., Wang, D., & Xiao, B. (2024) · Artificial Intelligence Review · doi:10.1007/s10462-024-11024-6 · Cited by 74
Naseri, M., Hayes, J., & Cristofaro, E. D. (2020) · arXiv (Cornell University) · Cited by 54
Self-citationImproved Gradient Inversion Attacks and Defenses in Federated Learning
Geng, J., Mou, Y., Li, Q., Li, F., Beyan, O., Decker, S., & Rong, C. (2023) · IEEE Transactions on Big Data · doi:10.1109/tbdata.2023.3239116 · Cited by 57
Visual privacy attacks and defenses in deep learning: a survey
Zhang, G., Liu, B., Zhu, T., Zhou, A., & Zhou, W. (2022) · Artificial Intelligence Review · doi:10.1007/s10462-021-10123-y · Cited by 56
Generative adversarial networks in time series: A survey and taxonomyPreprint
Brophy, E., Wang, Z., She, Q., & Ward, T. E. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2107.11098 · Cited by 50
An Overview of Privacy in Machine LearningPreprint
Cristofaro, E. D. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2005.08679 · Cited by 115
Privacy Amplification for Federated Learning via User Sampling and Wireless Aggregation
Seif, M., Chang, W.-T., & Tandon, R. (2021) · IEEE Journal on Selected Areas in Communications · doi:10.1109/jsac.2021.3118408 · Cited by 49
On the (In)Feasibility of Attribute Inference Attacks on Machine Learning Models
Zhao, B. Z. H., Agrawal, A., Coburn, C., Asghar, H. J., Bhaskar, R., Kâafar, M. A., Webb, D., & Dickinson, P. (2021) · IEEE European Symposium on Security and Privacy · doi:10.1109/eurosp51992.2021.00025 · Cited by 54
Privacy-Enhanced Decentralized Federated Learning at Dynamic Edge
Chen, S., Wang, Y., Yu, D., Ren, J., Xu, C., & Zheng, Y. (2023) · IEEE Transactions on Computers · doi:10.1109/tc.2023.3239542 · Cited by 43
Membership Inference Attacks against Diffusion Models
Matsumoto, T., Miura, T., & Yanai, N. (2023) · IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw59333.2023.00013 · Cited by 76
Label-Only Membership Inference Attacks and Defenses in Semantic Segmentation Models
Zhang, G., Liu, B., Zhu, T., Ding, M., & Zhou, W. (2022) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2022.3154029 · Cited by 43
Cancelable Permutation-Based Indexing for Secure and Efficient Biometric Identification
Murakami, T., Fujita, R., Ohki, T., Kaga, Y., Fujio, M., & Takahashi, K. (2019) · IEEE Access · doi:10.1109/access.2019.2908456 · Cited by 41
privGAN: Protecting GANs from membership inference attacks at low cost to utility
Mukherjee, S., Xu, Y., Trivedi, A., Patowary, N., & Ferres, J. L. (2021) · Proceedings on Privacy Enhancing Technologies · doi:10.2478/popets-2021-0041 · Cited by 64
SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning
Salem, A., Cherubin, G., Evans, D. M., Köpf, B., Paverd, A., Suri, A., Tople, S., & Zanella-Béguelin, S. (2023) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp46215.2023.10179281 · Cited by 44
Federated Learning for Smart Grid: A Survey on Applications and Potential Vulnerabilities
Zhang, Z., Rath, S., Xu, J., & Xiao, T. (2025) · ACM Transactions on Cyber-Physical Systems · doi:10.1145/3760788 · Cited by 60
Stealing Machine Learning Models: Attacks and Countermeasures for Generative Adversarial Networks
Hu, H., & Pang, J. (2021) · Annual Computer Security Applications Conference · doi:10.1145/3485832.3485838 · Cited by 54
Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble ArchitecturePreprint
Tang, X., Mahloujifar, S., Song, L., Shejwalkar, V., Nasr, M., Houmansadr, A., & Mittal, P. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2110.08324 · Cited by 43
PPA: Preference Profiling Attack Against Federated Learning
Zhou, C., Gao, Y., Fu, A., Chen, K., Dai, Z., Zhang, Z., Xue, M., & Zhang, Y. (2023) · Network and Distributed System Security Symposium · doi:10.14722/ndss.2023.23171 · Cited by 41
CrowdGuard: Federated Backdoor Detection in Federated Learning
Rieger, P., Krauß, T., Miettinen, M., Dmitrienko, A., & Sadeghi, A.-R. (2024) · Proceedings 2024 Network and Distributed System Security Symposium · doi:10.14722/ndss.2024.23233 · Cited by 36
Label-Only Membership Inference Attack against Node-Level Graph Neural Networks
Conti, M., Li, J., Picek, S., & Xu, J. (2022) · ACM Workshop on Artificial Intelligence and Security (AISec) · doi:10.1145/3560830.3563734 · Cited by 37
A federated learning scheme meets dynamic differential privacy
Guo, S., Wang, X., Long, S., Liu, H., Liu, H., & Sam, T. H. (2023) · CAAI Transactions on Intelligence Technology · doi:10.1049/cit2.12187 · Cited by 35
A survey on membership inference attacks and defenses in machine learning
Niu, J., Liu, P., Zhu, X., Shen, K., Wang, Y., Chi, H., Shen, Y., Jiang, X., Ma, J., & Zhang, Y. (2024) · Journal of Information and Intelligence · doi:10.1016/j.jiixd.2024.02.001 · Cited by 51
Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey
Truong, V. T., Dang, L., & Le, L. B. (2025) · ACM Computing Surveys · doi:10.1145/3721479 · Cited by 59
Chen, J., Wang, H., Gao, H., & Shi, X. M. (2021) · ACM SIGKDD Conference on Knowledge Discovery and Data Mining (KDD) · doi:10.1145/3447548.3467445 · Cited by 35
Resisting membership inference attacks through knowledge distillation
Zheng, J., Cao, Y., & Wang, H. (2021) · Neurocomputing · doi:10.1016/j.neucom.2021.04.082 · Cited by 33
SoK: Privacy-Preserving Data Synthesis
Hu, Y., Wu, F., Li, Q., Long, Y., Garrido, G. M., Ge, C., Ding, B., Forsyth, D. A., Li, B., & Song, D. X. (2024) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp54263.2024.00002 · Cited by 55
Deep convolutional and conditional neural networks for large-scale genomic data generation
Yelmen, B., Decelle, A., Boulos, L. L., Szatkownik, A., Furtlehner, C., Charpiat, G., & Jay, F. (2023) · PLoS Computational Biology · doi:10.1371/journal.pcbi.1011584 · Cited by 29
Privacy attacks against deep learning models and their countermeasures
Shafee, A. A., & Awaad, T. A. (2020) · Journal of Systems Architecture · doi:10.1016/j.sysarc.2020.101940 · Cited by 30
Differentially Private Synthetic Data: Applied Evaluations and EnhancementsPreprint
Rosenblatt, L., Liu, X., Pouyanfar, S., de Leon, E., Desai, A., & Allen, J. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2011.05537 · Cited by 89
Federated learning for generating synthetic data: a scoping review
Little, C. L., Elliot, M. J., & Allmendinger, R. (2023) · International Journal for Population Data Science · doi:10.23889/ijpds.v8i1.2158 · Cited by 30
Metadata
- Authors
- Hayes, J., Melis, L., Danezis, G., & De Cristofaro, E.
- Affiliations
- University College London (GB)
- University College London
- Venue
- Proceedings on Privacy Enhancing Technologies
- Published
- 2018-12-24
- Volume
- 2019
- Issue
- 1
- Pages
- 133-152
- ISSN
- 2299-0984 (ISSN-L)
- OpenAlex
- W2887995258
- Cited by
- 433
- References
- 64
- Citations by year
- 2026: 31 · 2025: 46 · 2024: 62 · 2023: 74 · 2022: 69 · 2021: 68 · 2020: 54 · 2019: 27 · 2018: 2
- FWCI
- 21.13
- Type
- journal article
- Language
- en
- Open access
- hybrid
- doi.org
- Licence
- Locations
- Proceedings on Privacy Enhancing Technologies (publishedVersion, cc-by-nc-nd)
- DOAJ (DOAJ: Directory of Open Access Journals) (submittedVersion)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Artificial Intelligence › Privacy-Preserving Technologies in Data
- Physical Sciences › Computer Science › Computer Vision and Pattern Recognition › Digital Media Forensic Detection
- Keywords
- membership inference attacks, generative models, generative adversarial networks, privacy attacks, overfitting detection, black-box attacks, white-box attacks, defense robustness, training data privacy, medical image privacy
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
