The DOI matches its DataCite record; 147 of the 152 references it cites were found in a registry or an index.
Privacy in Deep Learning: A Survey
Open accessAbstract
The ever-growing advances of deep learning in many areas including vision, recommendation systems, natural language processing, etc., have led to the adoption of Deep Neural Networks (DNNs) in production systems. The availability of large datasets and high computational power are the main contributors to these advances. The datasets are usually crowdsourced and may contain sensitive information. This poses serious privacy concerns as this data can be misused or leaked through various vulnerabilities. Even if the cloud provider and the communication link is trusted, there are still threats of inference attacks where an attacker could speculate properties of the data used for training, or find the underlying model architecture and parameters. In this survey, we review the privacy concerns brought by deep learning, and the mitigating techniques introduced to tackle these issues. We also show that there is a gap in the literature regarding test-time inference privacy, and propose possible future research directions.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“To circumvent these privacy risks, advanced privacy-preserving ML (PPML) techniques such as federated learning (FL), homomorphic encryption (HE), secure multi-party computations (SMPC), and differential privacy (DP) are being thoroughly studied to protect user data and model integrity in the ML pipeline [16, 97, 161].”
From Privacy-preserving Machine Learning in Internet of Vehicle Applications: Fundamentals, Recent Advances, and Future Direction (2025) · cites this paper as [97]
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“During the training phase, attacks such as data poisoning, property inference, or Byzantine attacks, and in the inference phase, membership inference, model inversion, or model extraction attacks can undermine the privacy and integrity of both the model and its underlying data [97, 161].”
From Privacy-preserving Machine Learning in Internet of Vehicle Applications: Fundamentals, Recent Advances, and Future Direction (2025) · cites this paper as [97]
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“During the training phase, attacks such as data poisoning, property inference, or Byzantine attacks, and in the inference phase, membership inference, model inversion, or model extraction attacks can undermine the privacy and integrity of both the model and its underlying data [97, 161].”
From Privacy-preserving Machine Learning in Internet of Vehicle Applications: Fundamentals, Recent Advances, and Future Direction (2025) · cites this paper as [97]
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“In the ML pipeline of an IoV application, privacy risks can arise during the training and inference phases to compromise the confidentiality and integrity of the system [16, 97, 161].”
From Privacy-preserving Machine Learning in Internet of Vehicle Applications: Fundamentals, Recent Advances, and Future Direction (2025) · cites this paper as [97]
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“data poisoning attacks involve adversaries manipulating training data to compromise model integrity or insert backdoors, a significant risk in IoV where data quality is crucial for safety”
From Privacy-preserving Machine Learning in Internet of Vehicle Applications: Fundamentals, Recent Advances, and Future Direction (2025) · cites this paper as [97]
Experimental — accuracy not yet measured
The cited source says what the claim attributes to it.
In the citing paper
“For instance, studies [116], [161], [97], [16] reviewed privacy issues in deep learning (DL), including attacks, privacy-preserving techniques and their challenges.”
From Privacy-preserving Machine Learning in Internet of Vehicle Applications: Fundamentals, Recent Advances, and Future Direction (2025) · cites this paper as [97]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
k-ANONYMITY: A MODEL FOR PROTECTING PRIVACY
SWEENEY, L. (2002) · International Journal of Uncertainty, Fuzziness and Knowledge-Based Systems · doi:10.1142/s0218488502001648 · Cited by 8,571
Advances and Open Problems in Federated Learning
Kairouz, P., & McMahan, H. B. (2021) · Foundations and Trends in Machine Learning · doi:10.1561/2200000083 · Cited by 7,772
Self-citationCalibrating Noise to Sensitivity in Private Data Analysis
Dwork, C., McSherry, F., Nissim, K., & Smith, A. (2006) · Lecture Notes in Computer Science · doi:10.1007/11681878_14 · Cited by 7,272
Fully homomorphic encryption using ideal lattices
Gentry, C. (2009) · Proceedings of the forty-first annual ACM symposium on Theory of computing · doi:10.1145/1536414.1536440 · Cited by 6,806
Deep Learning with Differential Privacy
Abadi, M., Chu, A., Goodfellow, I., McMahan, H. B., Mironov, I., Talwar, K., & Zhang, L. (2016) · Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/2976749.2978318 · Cited by 6,578
Practical Secure Aggregation for Privacy-Preserving Machine Learning
Bonawitz, K., Ivanov, V., Kreuter, B., Marcedone, A., McMahan, H. B., Patel, S., Ramage, D., Segal, A., & Seth, K. (2017) · Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/3133956.3133982 · Cited by 3,956
The Algorithmic Foundations of Differential Privacy
Dwork, C., & Roth, A. (2013) · doi:10.1561/9781601988195 · Cited by 3,856
L -diversity: Privacy beyond k -anonymity
Machanavajjhala, A., Kifer, D., Gehrke, J., & Venkitasubramaniam, M. (2007) · ACM Transactions on Knowledge Discovery from Data · doi:10.1145/1217299.1217302 · Cited by 3,617
t-Closeness: Privacy Beyond k-Anonymity and l-Diversity
Li, N., Li, T., & Venkatasubramanian, S. (2007) · 2007 IEEE 23rd International Conference on Data Engineering · doi:10.1109/icde.2007.367856 · Cited by 3,451
Model Inversion Attacks that Exploit Confidence Information and Basic Countermeasures
Fredrikson, M., Jha, S., & Ristenpart, T. (2015) · Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/2810103.2813677 · Cited by 2,961
Research works printed but not linked: 17
- [29][29] S. A. Ossia, A. Taheri, A. S. Shamsabadi, K. Katevas, H. Haddadi, and H. R. Rabiee, 'Deep private-feature extraction,' IEEE Transactions on Knowledge and Data Engineering , vol. 32, pp. 54-66, 2018. -
- [31][31] F. Mireshghallah, M. Taram, A. Jalali, D. Tullsen, and H. Esmaeilzadeh, 'Shredder: Learning noise distributions to protect inference privacy,' in Proceedings of the Twenty-Fifth International Conference on Architectural Support for Programming Languages and Operating Systems , ASPLOS '20, (New York, NY, USA), Association for Computing Machinery, March 2020. -
- [45][45] Z. Yang, E.-C. Chang, and Z. Liang, 'Adversarial neural network inversion via auxiliary knowledge alignment,' ArXiv , vol. abs/1902.08552, 2019. - · arXiv
- [56][56] X. Wu, M. Fredrikson, S. Jha, and J. F. Naughton, 'A methodology for formalizing modelinversion attacks,' in 2016 IEEE 29th Computer Security Foundations Symposium (CSF) , pp. 355-370, June 2016. -
- [70][70] P. Kairouz, S. Oh, and P. Viswanath, 'Extremal mechanisms for local differential privacy,' CoRR , vol. abs/1407.1338, 2014. - · arXiv
- [71][71] Ú. Erlingsson, A. Korolova, and V. Pihur, 'RAPPOR: randomized aggregatable privacypreserving ordinal response,' CoRR , vol. abs/1407.6981, 2014. - · arXiv
- [76][76] D. Kifer and A. Machanavajjhala, 'Pufferfish: A framework for mathematical privacy definitions,' ACM Trans. Database Syst. , vol. 39, Jan. 2014. -
- [78][78] M. E. Andrés, N. E. Bordenabe, K. Chatzikokolakis, and C. Palamidessi, 'Geoindistinguishability: Differential privacy for location-based systems,' in Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security , CCS '13, (New York, NY, USA), p. 901-914, Association for Computing Machinery, 2013. -
- [79][79] S. Goldwasser and S. Micali, 'Probabilistic encryption,' Journal of computer and system sciences , vol. 28, no. 2, pp. 270-299, 1984. -
- [110][110] P. Mohassel and P. Rindal, 'Aby3: A mixed protocol framework for machine learning,' in Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security , CCS '18, (New York, NY, USA), p. 35-52, Association for Computing Machinery, 2018. -
- [123][123] E. Bagdasaryan, O. Poursaeed, and V. Shmatikov, 'Differential privacy has disparate impact on model accuracy,' in Advances in Neural Information Processing Systems , pp. 15479-15488, 2019. -
- [125][125] B. Jayaraman and D. Evans, 'Evaluating differentially private machine learning in practice,' in 28th { USENIX } Security Symposium ( { USENIX } Security 19) , pp. 1895-1912, 2019. -
- [128][128] J. Wang, J. Zhang, W. Bao, X. Zhu, B. Cao, and P. S. Yu, 'Not just privacy,' Proceedings of the 24th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining , Jul 2018. -
- [136][136] M. S. Riazi, C. Weinert, O. Tkachenko, E. M. Songhori, T. Schneider, and F. Koushanfar, 'Chameleon: A hybrid secure computation framework for machine learning applications,' CoRR , vol. abs/1801.03239, 2018. - · arXiv
- [140][140] C. Juvekar, V. Vaikuntanathan, and A. Chandrakasan, 'Gazelle: A low latency framework for secure neural network inference,' in Proceedings of the 27th USENIX Conference on Security Symposium , SEC'18, (USA), p. 1651-1668, USENIX Association, 2018. -
- [153][153] F. Mo, A. S. Shamsabadi, K. Katevas, S. Demetriou, I. Leontiadis, A. Cavallaro, and H. Haddadi, 'Darknetz: Towards model privacy at the edge using trusted execution environments,' ArXiv , vol. abs/2004.05703, 2020. - · arXiv
- [160][160] C. Canella, D. Genkin, L. Giner, D. Gruss, M. Lipp, M. Minkin, D. Moghimi, F. Piessens, M. Schwarz, B. Sunar, J. Van Bulck, and Y. Yarom, 'Fallout: Leaking data on meltdownresistant cpus,' in Proceedings of the ACM SIGSAC Conference on Computer and Communications Security (CCS) , ACM, 2019. -
Cited by
Sorted by citations
Advances and Open Problems in Federated Learning
Kairouz, P., & McMahan, H. B. (2021) · Foundations and Trends in Machine Learning · doi:10.1561/2200000083 · Cited by 7,772
Self-citationMembership Inference Attacks on Machine Learning: A Survey
Hu, H., Salcic, Z. A., Sun, L., Dobbie, G., Yu, P. S., & Zhang, X. (2022) · ACM Computing Surveys · doi:10.1145/3523273 · Cited by 662
FedML: A Research Library and Benchmark for Federated Machine LearningPreprint
He, C., Li, S., So, J., Zeng, X., Zhang, M., Wang, H., Wang, X., Vepakomma, P., Singh, A., Qiu, H., et al. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2007.13518 · Cited by 668
Self-citationDifferential Privacy for Deep and Federated Learning: A Survey
Ouadrhiri, A. E., & Abdelhadi, A. (2022) · IEEE Access · doi:10.1109/access.2022.3151670 · Cited by 445
Federated Learning for Open Banking
Long, G., Tan, Y., Jiang, J. B., & Chengqi Zhang, B. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-63076-8_17 · Cited by 308
Socially Responsible AI Algorithms: Issues, Purposes, and Challenges
Cheng, L., Varshney, K. R., & Liu, H. (2021) · Journal of Artificial Intelligence Research · doi:10.1613/jair.1.12814 · Cited by 261
Quantifying Privacy Risks of Masked Language Models Using Membership Inference Attacks
Mireshghallah, F., Goyal, K., Uniyal, A., Berg-Kirkpatrick, T., & Shokri, R. (2022) · Conference on Empirical Methods in Natural Language Processing (EMNLP) · doi:10.18653/v1/2022.emnlp-main.570 · Cited by 217
Self-citationFedMultimodal: A Benchmark for Multimodal Federated Learning
Feng, T., Bose, D., Zhang, T., Hebbar, R., Ramakrishna, A., Gupta, R., Zhang, M., Avestimehr, S., & Narayanan, S. S. (2023) · ACM SIGKDD Conference on Knowledge Discovery and Data Mining (KDD) · doi:10.1145/3580305.3599825 · Cited by 98
Interference Suppression Using Deep Learning: Current Approaches and Open Challenges
Oyedare, T., Shah, V. K., Jakubisin, D. J., & Reed, J. H. (2022) · IEEE Access · doi:10.1109/access.2022.3185124 · Cited by 93
Farrand, T., Mireshghallah, F., Singh, S., & Trask, A. (2020) · PPMLP@CCS · doi:10.1145/3411501.3419419 · Cited by 105
Self-citationUnsupervised Deep Learning for IoT Time Series
Liu, Y., Zhou, Y., Yang, K., & Wang, X. (2023) · IEEE Internet of Things Journal · doi:10.1109/jiot.2023.3243391 · Cited by 81
Recent Advances of Differential Privacy in Centralized Deep Learning: A Systematic Survey
Demelius, L., Kern, R., & Trügler, A. (2025) · ACM Computing Surveys · doi:10.1145/3712000 · Cited by 83
Collaborative Intelligence: Challenges and Opportunities
Bajić, I. V., Lin, W., & Tian, Y. (2021) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp39728.2021.9413943 · Cited by 68
Generative AI model privacy: a survey
Liu, Y., Huang, J., Li, Y., Wang, D., & Xiao, B. (2024) · Artificial Intelligence Review · doi:10.1007/s10462-024-11024-6 · Cited by 74
Binarizing Split Learning for Data Privacy Enhancement and Computation Reduction
Pham, N. D., Abuadbba, A., Gao, Y., Phan, K. T., & Chilamkurti, N. (2023) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2023.3274391 · Cited by 61
Privacy-Preserving Deep Learning Based on Multiparty Secure Computation: A Survey
Zhang, Q., Xin, C., & Wu, H. (2021) · IEEE Internet of Things Journal · doi:10.1109/jiot.2021.3058638 · Cited by 53
Hashemi, H., Wang, Y., & Annavaram, M. (2021) · IEEE/ACM International Symposium on Microarchitecture (MICRO) · doi:10.1145/3466752.3480112 · Cited by 57
A Survey on Privacy in Graph Neural Networks: Attacks, Preservation, and Applications
Zhang, Y., Zhao, Y., Li, Z., Cheng, X., Wang, Y., Kotevska, O., Yu, P. S., & Derr, T. (2024) · IEEE Transactions on Knowledge and Data Engineering · doi:10.1109/tkde.2024.3454328 · Cited by 57
Not All Features Are Equal: Discovering Essential Features for Preserving Prediction Privacy
Mireshghallah, F., Taram, M., Jalali, A., Elthakeb, A. T., Tullsen, D. M., & Esmaeilzadeh, H. (2021) · International World Wide Web Conference (WWW) · doi:10.1145/3442381.3449965 · Cited by 55
Self-citationA survey on membership inference attacks and defenses in machine learning
Niu, J., Liu, P., Zhu, X., Shen, K., Wang, Y., Chi, H., Shen, Y., Jiang, X., Ma, J., & Zhang, Y. (2024) · Journal of Information and Intelligence · doi:10.1016/j.jiixd.2024.02.001 · Cited by 51
SoK: Cryptographic Neural-Network Computation
Ng, L. K. L., & Chow, S. S. M. (2023) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp46215.2023.10179483 · Cited by 46
Language Generation Models Can Cause Harm: So What Can We Do About It? An Actionable Survey
Kumar, S., Balachandran, V., Njoo, L., Anastasopoulos, A., & Tsvetkov, Y. (2023) · Proceedings of the 17th Conference of the European Chapter of the Association for Computational Linguistics · doi:10.18653/v1/2023.eacl-main.241 · Cited by 38
Scalable Differential Privacy with Sparse Network Finetuning
Luo, Z., Wu, D. J., Adeli, E., & Fei-Fei, L. (2021) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr46437.2021.00502 · Cited by 40
Malekzadeh, M., Borovykh, A., & Gündüz, D. (2021) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/3460120.3484533 · Cited by 38
Quality Inference in Federated Learning With Secure Aggregation
Pejó, B., & Biczók, G. (2023) · IEEE Transactions on Big Data · doi:10.1109/tbdata.2023.3280406 · Cited by 43
Mengara, O., Avila, A. R., & Falk, T. H. (2024) · IEEE Access · doi:10.1109/access.2024.3355816 · Cited by 35
Membership Inference on Word Embedding and BeyondPreprint
Mahloujifar, S., Inan, H. A., Chase, M., Ghosh, E., & Hasegawa, M. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2106.11384 · Cited by 52
Sundar, D. (2022) · International Journal of Artificial Intelligence Data Science and Machine Learning · doi:10.63282/3050-9262.ijaidsml-v3i1p113 · Cited by 28
Towards a Better Understanding of Evaluating Trustworthiness in AI Systems
Kemmerzell, N., Schreiner, A., Khalid, H., Schalk, M., & Bordoli, L. (2025) · ACM Computing Surveys · doi:10.1145/3721976 · Cited by 34
RM-NTT: An RRAM-Based Compute-in-Memory Number Theoretic Transform Accelerator
Park, Y., Wang, Z., Yoo, S., & Lu, W. D. (2022) · IEEE Journal on Exploratory Solid-State Computational Devices and Circuits · doi:10.1109/jxcdc.2022.3202517 · Cited by 26
Privacy Regularization: Joint Privacy-Utility Optimization in LanguageModels
Mireshghallah, F., Inan, H. A., Hasegawa, M., Rühle, V., Berg-Kirkpatrick, T., & Sim, R. (2021) · Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies (NAACL-HLT) · doi:10.18653/v1/2021.naacl-main.298 · Cited by 43
Self-citationA Machine Learning Model for Data Sanitization
Ahmed, U., Srivastava, G., & Lin, J. C. (2021) · Computer Networks · doi:10.1016/j.comnet.2021.107914 · Cited by 24
Wainakh, A., Zimmer, E., Subedi, S., Keim, J., Grube, T., Karuppayah, S., Guinea, A. S., & Mühlhäuser, M. (2022) · Sensors · doi:10.3390/s23010031 · Cited by 26
A comprehensive survey and taxonomy on privacy-preserving deep learning
Tran, A.-T., Luong, T.-D., & Huynh, V.-N. (2024) · Neurocomputing · doi:10.1016/j.neucom.2024.127345 · Cited by 21
DP-SGD vs PATE: Which Has Less Disparate Impact on Model Accuracy?Preprint
Uniyal, A., Naidu, R., Kotti, S., Singh, S., Kenfack, P. J., Mireshghallah, F., & Trask, A. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2106.12576 · Cited by 21
Self-citationMireshghallah, F., Shrivastava, V., Shokouhi, M., Berg-Kirkpatrick, T., Sim, R., & Dimitriadis, D. (2022) · Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies (NAACL-HLT) · doi:10.18653/v1/2022.naacl-main.252 · Cited by 23
Self-citationEnhancing Privacy Through Domain Adaptive Noise Injection For Speech Emotion Recognition
Feng, T., Hashemi, H., Annavaram, M., & Narayanan, S. S. (2022) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp43922.2022.9747265 · Cited by 19
Active learning inspired method in generative models
Lan, G., Xiao, S., Yang, J., Wen, J., Lu, W. B., & Gao, X. (2024) · Expert Systems with Applications · doi:10.1016/j.eswa.2024.123582 · Cited by 20
Private Inference for Deep Neural Networks: A Secure, Adaptive, and Efficient Realization
Cheng, K., Xi, N., Liu, X., Zhu, X., Gao, H., Zhang, Z., & Shen, Y. (2023) · IEEE Transactions on Computers · doi:10.1109/tc.2023.3305754 · Cited by 20
Enhancing Accuracy-Privacy Trade-Off in Differentially Private Split Learning
Pham, N. D., Phan, K. T., & Chilamkurti, N. (2024) · IEEE Transactions on Emerging Topics in Computational Intelligence · doi:10.1109/tetci.2024.3485723 · Cited by 24
Boulila, W., Ammar, A., Benjdira, B., & Koubâa, A. (2022) · International Conference of Smart Systems and Emerging Technologies (SMARTTECH) · doi:10.1109/smarttech54121.2022.00055 · Cited by 17
Kassem, K., Sperti, M., Cavallo, A., Vergani, A. M., Fassino, D., Moz, M., Liscio, A., Banali, R., Dahlweid, F.-M., Benetti, L., et al. (2024) · Artificial Intelligence in Medicine · doi:10.1016/j.artmed.2024.102841 · Cited by 17
Hierarchical Training of Deep Neural Networks Using Early Exiting
Sepehri, Y., Pad, P., Yüzügüler, A. C., Frossard, P., & Dunbar, L. A. (2024) · IEEE Transactions on Neural Networks and Learning Systems · doi:10.1109/tnnls.2024.3396628 · Cited by 18
Fairness and privacy preservation for facial images: GAN-based methods
Tian, H., Zhu, T., & Zhou, W. (2022) · Computers & Security · doi:10.1016/j.cose.2022.102902 · Cited by 16
Gittens, A., Yener, B., & Yung, M. M. (2022) · IEEE Access · doi:10.1109/access.2022.3218715 · Cited by 22
A Survey on Privacy Attacks Against Digital Twin Systems in AI-Robotics
Fernandez, I. A., Neupane, S., Chakraborty, T., Mitra, S., Mittal, S., Pillai, N., Chen, J., & Rahimi, S. (2024) · IEEE International Conference on Collaboration and Internet Computing (CIC) · doi:10.1109/cic62241.2024.00019 · Cited by 18
Moqurrab, S. A., Anjum, A., Khan, A., Ahmed, M., Ahmad, A., & Jeon, G. (2021) · ACM Transactions on Internet Technology · doi:10.1145/3421509 · Cited by 15
Defending Privacy Against More Knowledgeable Membership Inference Attackers
Yin, Y., Chen, K., Shou, L., & Chen, G. (2021) · ACM SIGKDD Conference on Knowledge Discovery and Data Mining (KDD) · doi:10.1145/3447548.3467444 · Cited by 15
Confidential Machine Learning Computation in Untrusted Environments: A Systems Security Perspective
Duy, K. D., Noh, T., Huh, S., & Lee, H. (2021) · IEEE Access · doi:10.1109/access.2021.3136889 · Cited by 15
Cellular Traffic Prediction via Byzantine-Robust Asynchronous Federated Learning
Ma, H., Yang, K., & Jiao, Y. (2025) · IEEE Transactions on Network Science and Engineering · doi:10.1109/tnse.2025.3545912 · Cited by 14
Layer-Wise Data-Free CNN Compression
Horton, M., Jin, Y., Farhadi, A., & Rastegari, M. (2022) · Proceedings - International Conference on Pattern Recognition/Proceedings/International Conference on Pattern Recognition · doi:10.1109/icpr56361.2022.9956237 · Cited by 17
Secure and Privacy-Preserving Human Interaction Recognition of Pervasive Healthcare Monitoring
Yang, C.-L., Tampubolon, H., Setyoko, A. S., Hua, K., Tanveer, M., & Wei, W. (2022) · IEEE Transactions on Network Science and Engineering · doi:10.1109/tnse.2022.3223281 · Cited by 13
Data encoding for healthcare data democratization and information leakage prevention
Thakur, A., Zhu, T., Abrol, V., Armstrong, J., Wang, Y., & Clifton, D. A. (2024) · Nature Communications · doi:10.1038/s41467-024-45777-z · Cited by 13
Ecology & computer audition: Applications of audio technology to monitor organisms and environment
Schuller, B. W., Akman, A., Chang, Y., Coppock, H., Gebhard, A., Kathan, A., Rituerto-González, E., Triantafyllopoulos, A., & Pokorny, F. B. (2023) · Heliyon · doi:10.1016/j.heliyon.2023.e23142 · Cited by 14
Alhindi, A., Al-Ahmadi, S. A., & Ismail, M. M. B. (2025) · International Journal of Information Security · doi:10.1007/s10207-025-01045-9 · Cited by 12
ISPPFL: An incentive scheme based privacy-preserving federated learning for avatar in metaverse
Bai, Y., Xing, G., Wu, H., Rao, Z., Peng, C., Rao, Y., Yang, W., Ma, C., Li, J., & Zhou, Y. (2024) · Computer Networks · doi:10.1016/j.comnet.2024.110654 · Cited by 11
Benchmarking Differentially Private Residual Networks for Medical ImageryPreprint
Singh, S., Sikka, H., Kotti, S., & Trask, A. (2020) · doi:10.31219/osf.io/v2ms6 · Cited by 11
Formal Methods for Autonomous Systems
Wongpiromsarn, T., Ghasemi, M., Cubuktepe, M., Bakirtzis, G., Carr, S., Karabag, M. O., Neary, C., Gohari, P., & Topcu, U. (2023) · Foundations and Trends® in Systems and Control · doi:10.1561/2600000029 · Cited by 17
PrivyNAS: Privacy-Aware Neural Architecture Search for Split Computing in Edge–Cloud Systems
Odema, M., & Faruque, M. A. A. (2023) · IEEE Internet of Things Journal · doi:10.1109/jiot.2023.3311761 · Cited by 11
DAPter: Preventing User Data Abuse in Deep Learning Inference Services
Wu, H., Tian, X., Gong, Y., Su, X., Li, M., & Xu, F. (2021) · International World Wide Web Conference (WWW) · doi:10.1145/3442381.3449907 · Cited by 10
Privacy-preserving visual analysis: training video obfuscation models without sensitive labels
Coninck, S. D., Wang, W.-C., Leroux, S., & Simoens, P. (2024) · Applied Intelligence · doi:10.1007/s10489-024-05489-9 · Cited by 9
Privacy-Preserving Autoencoder for Collaborative Object Detection
Azizian, B., & Bajić, I. V. (2024) · IEEE Transactions on Image Processing · doi:10.1109/tip.2024.3451938 · Cited by 9
Balancing Privacy and Utility in Split Learning: An Adversarial Channel Pruning-Based Approach
Alhindi, A., Al-Ahmadi, S. A., & Ismail, M. M. B. (2025) · IEEE Access · doi:10.1109/access.2025.3528575 · Cited by 9
DTS: A Simulator to Estimate the Training Time of Distributed Deep Neural Networks
Moore, W. J. R., Esposito, F., & Zuluaga, M. A. (2022) · Proceedings - International Symposium on Modeling, Analysis, and Simulation of Computer and Telecommunication Systems · doi:10.1109/mascots56607.2022.00011 · Cited by 9
Enabling Secure and Efficient Data Analytics Pipeline Evolution with Trusted Execution Environment
Gao, H., Yue, C., Dinh, T. T. A., Huang, Z., & Ooi, B. C. (2023) · Proceedings of the VLDB Endowment · doi:10.14778/3603581.3603589 · Cited by 9
Scalable Privacy in Multi-Task Image Compression
Alvar, S. R., & Bajić, I. V. (2021) · IEEE International Conference on Visual Communications and Image Processing (VCIP) · doi:10.1109/vcip53242.2021.9675357 · Cited by 9
Privacy Leakage in Text Classification A Data Extraction Approach
Elmahdy, A., Inan, H. A., & Sim, R. (2022) · Workshop on Privacy in Natural Language Processing (PrivateNLP) · doi:10.18653/v1/2022.privatenlp-1.3 · Cited by 20
GENEL VERİ KORUMA İLKELERİNİN YAPAY ZEKÂ KARŞISINDA UYGULANABİLİRLİĞİ SORUNU
BİLGİÇ, E. T. (2024) · Türkiye Adalet Akademisi Dergisi · doi:10.54049/taad.1418236 · Cited by 9
When Differential Privacy Meets Interpretability: A Case StudyPreprint
Naidu, R., Priyanshu, A., Kumar, A., Kotti, S., Wang, H., & Mireshghallah, F. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2106.13203 · Cited by 8
Self-citationPrivacy-Preserving Feature Coding for Machines
Azizian, B., & Bajić, I. V. (2022) · Picture Coding Symposium · doi:10.1109/pcs56426.2022.10018066 · Cited by 7
Kanwal, T., Moqurrab, S. A., Anjum, A., Khan, A., Rodrigues, J. J. P. C., & Jeon, G. (2021) · International Journal of Intelligent Systems · doi:10.1002/int.22533 · Cited by 7
Machine learning in agricultural economics
Baylis, K., Heckelei, T., & Storm, H. (2021) · Handbook of agricultural economics · doi:10.1016/bs.hesagr.2021.10.007 · Cited by 7
When Differential Privacy Meets Graph Neural Networks.Preprint
Sajadmanesh, S., & Gática-Pérez, D. (2020) · arXiv (Cornell University) · Cited by 7
Private and Efficient Learning With Hyperdimensional Computing
Khaleghi, B., Yu, X., Kang, J., Wang, X., & Rosing, T. (2024) · IEEE transactions on circuits and systems for artificial intelligence. · doi:10.1109/tcasai.2024.3481193 · Cited by 6
Adjustable privacy using autoencoder-based learning structure
Jamshidi, M. A., Veisi, H., Mojahedian, M. M., & Aref, M. R. (2023) · Neurocomputing · doi:10.1016/j.neucom.2023.127043 · Cited by 6
Task-Specific Knowledge Distillation with Differential Privacy in LLMs
Garg, S., & Torra, V. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-70890-9_19 · Cited by 7
A Systematic Review of Challenges and Techniques of Privacy-Preserving Machine Learning
Tiwari, K., Shukla, S., & George, J. P. (2021) · Lecture notes in networks and systems · doi:10.1007/978-981-16-4486-3_3 · Cited by 6
Privacy-Preserving Image Acquisition for Neural Vision Systems
Sepehri, Y., Pad, P., Kündig, C., Frossard, P., & Dunbar, L. A. (2022) · IEEE Transactions on Multimedia · doi:10.1109/tmm.2022.3207018 · Cited by 6
Real-Time Video Anonymization in Smart City Intersections
Angus, A., Duan, Z., Zussman, G., & Kostić, Z. (2022) · IEEE International Conference on Mobile Ad-Hoc and Sensor Systems (MASS) · doi:10.1109/mass56207.2022.00078 · Cited by 6
PMONN: an optical neural network for photonic integrated circuits based on micro-resonator
Ding, J., Zhu, L., Yu, M., Lu, L., & Hu, P. (2024) · Optics Express · doi:10.1364/oe.511245 · Cited by 6
Using Deep Learning Algorithm in Security Informatics
Tahril, R., Lasbahani, A., Jarrar, A., & Balouki, Y. (2024) · International Journal of Innovative Science and Research Technology (IJISRT) · doi:10.38124/ijisrt/ijisrt24apr2271 · Cited by 6
Xiang, Y., Li, T., Ren, W., Zhu, T., & Choo, K. R. (2023) · Engineering Applications of Artificial Intelligence · doi:10.1016/j.engappai.2023.107180 · Cited by 6
A comparative Study on AI-Driven Anonymization Techniques for Protecting Personal Data
-, M. P., -, A. K. U., -, M. R., & -, J. D. (2024) · International Journal For Multidisciplinary Research · doi:10.36948/ijfmr.2024.v06i04.24770 · Cited by 5
Privacy-preserving deep learning model with integer quantization and secure multi-party computation
Tran, A.-T., Luong, T. D., & Pham, X. S. (2024) · Annals of Operations Research · doi:10.1007/s10479-024-06151-w · Cited by 5
SoK Paper: Security Concerns in Quantum Machine Learning as a Service
Kundu, S., & Ghosh, S. (2024) · Hardware and Architectural Support for Security and Privacy · doi:10.1145/3696843.3696846 · Cited by 5
Azadmanesh, M., Ghahfarokhi, B. S., & Talouki, M. A. (2024) · Expert Systems with Applications · doi:10.1016/j.eswa.2024.125646 · Cited by 5
E3M: Zero-Shot Spatio-Temporal Video Grounding with Expectation-Maximization Multimodal Modulation
Bao, P., Shao, Z., Yang, W., Ng, B. P., & Kot, A. C. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-73010-8_14 · Cited by 5
AI Applications Resource Allocation in Computing Continuum: A Stackelberg Game Approach
Sala, R., Sedghani, H., Passacantando, M., Verticale, G., & Ardagna, D. (2024) · IEEE Transactions on Cloud Computing · doi:10.1109/tcc.2024.3521213 · Cited by 5
CLOVER: Carbon Optimization of Federated Learning over Heterogeneous Clients
Cho, C., Son, Y., Park, S., & Kim, Y. G. (2024) · International Symposium on Low Power Electronics and Design (ISLPED) · doi:10.1145/3665314.3670829 · Cited by 4
On the Privacy Risks of Deploying Recurrent Neural Networks in Machine Learning Models
Yang, Y., Gohari, P., & Topcu, U. (2023) · Proceedings on Privacy Enhancing Technologies · doi:10.56553/popets-2023-0005 · Cited by 6
Memorization of Named Entities in Fine-Tuned BERT Models
Diera, A., Lell, N., Garifullina, A., & Scherp, A. (2023) · Lecture notes in computer science · doi:10.1007/978-3-031-40837-3_16 · Cited by 4
Compressed Data Sharing Based On Information Bottleneck Model
Razeghi, B., Rezaeifar, S., Ferdowsi, S., Holotyak, T., & Voloshynovskiy, S. (2022) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp43922.2022.9747544 · Cited by 4
Federated Learning for Open BankingPreprint
Long, G., Tan, Y., Jiang, J. B., & Chengqi Zhang, B. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2108.10749 · Cited by 7
A Defense Framework for Privacy Risks in Remote Machine Learning Service
Bai, Y., Li, Y., Xie, M., & Fan, M. (2021) · Security and Communication Networks · doi:10.1155/2021/9924684 · Cited by 3
Refacing Defaced MRI with PixelCNN
Xiao, Y., Ashbee, W. S., Calhoun, V. D., & Plis, S. (2022) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn55064.2022.9891937 · Cited by 3
Detection of Covid‐19 disease by using privacy‐aware artificial intelligence system
İSMETOĞLU, A., & Canbay, Y. (2024) · Security and Privacy · doi:10.1002/spy2.434 · Cited by 3
Derin Öğrenmede Diferansiyel Mahremiyet
Canbay, Y., & Sağıroğlu, Ş. (2020) · ULUSLARARASI BİLGİ GÜVENLİĞİ MÜHENDİSLİĞİ DERGİSİ · doi:10.18640/ubgmd.750310 · Cited by 4
TEE-based Selective Testing of Local Workers in Federated Learning Systems
Zhang, W., & Muhr, T. (2021) · Conference on Privacy, Security and Trust · doi:10.1109/pst52912.2021.9647773 · Cited by 3
Rosa, G. L. D. M., Mohanram, P., Gilerson, A., & Schmitt, R. H. (2023) · Preprints.org · doi:10.20944/preprints202305.1563.v1 · Cited by 3
Neural Network Model Obfuscation through Adversarial Training
Sternby, J., Johansson, B., & Liljenstam, M. (2022) · IEEE/ACM International Symposium on Cluster, Cloud and Grid Computing (CCGrid) · doi:10.1109/ccgrid54584.2022.00092 · Cited by 2
Metadata
- Authors
- Mireshghallah, F., Taram, M., Vepakomma, P., Singh, A., Raskar, R., & Esmaeilzadeh, H.
- ORCID
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2020
- ISSN
- 2331-8422 (ISSN-L)
- arXiv
- 2004.12254
- OpenAlex
- W3018763859
- Cited by
- 106
- References
- 152
- Citations by year
- 2026: 1 · 2025: 6 · 2024: 26 · 2023: 19 · 2022: 22 · 2021: 26 · 2020: 6
- Type
- posted content
- Language
- en
- Open access
- green
- arxiv.org
- Locations
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Privacy-Preserving Technologies in Data
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Information Systems › Cloud Data Security Solutions
- Keywords
- inference attacks, deep neural network, sensitive data, data leakage, privacy-preserving techniques, crowdsourced data
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
