{"id":"https://openalex.org/W2803872338","doi":null,"title":"Generative Model: Membership Attack,Generalization and Diversity","display_name":"Generative Model: Membership Attack,Generalization and Diversity","publication_year":2018,"publication_date":"2018-05-24","ids":{"openalex":"https://openalex.org/W2803872338","mag":"2803872338"},"language":"en","primary_location":{"id":"mag:2803872338","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/1805.09898v1","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/abs/1805.09898v1","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5038958004","display_name":"Kin Sum Liu","orcid":"https://orcid.org/0000-0002-2670-2727","observed_orcids":["https://orcid.org/0000-0002-2670-2727"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kin Sum Liu","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-2670-2727","affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Bo Li","orcid":"https://orcid.org/0000-0001-9743-9447","observed_orcids":["https://orcid.org/0000-0001-9743-9447"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bo Li","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0001-9743-9447","affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5037226596","display_name":"Jie Gao","orcid":"https://orcid.org/0000-0001-5083-6082","observed_orcids":["https://orcid.org/0000-0001-5083-6082","https://orcid.org/0000-0001-6095-2968","https://orcid.org/0000-0003-0772-4530"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jie Gao","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-6580-0581","affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":14,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8202999830245972,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8202999830245972,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.17630000412464142,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.0010999999940395355,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/membership-inference-attacks","display_name":"membership inference attacks","score":0.8840000033378601},{"id":"https://openalex.org/keywords/generative-models","display_name":"generative models","score":0.7580000162124634},{"id":"https://openalex.org/keywords/variational-autoencoder","display_name":"variational autoencoder","score":0.8659999966621399},{"id":"https://openalex.org/keywords/generative-adversarial-networks","display_name":"generative adversarial networks","score":1.0},{"id":"https://openalex.org/keywords/training-data-privacy","display_name":"training data privacy","score":0.8289999961853027},{"id":"https://openalex.org/keywords/generalization","display_name":"generalization","score":0.671999990940094},{"id":"https://openalex.org/keywords/model-diversity","display_name":"model diversity","score":0.6399999856948853}],"concepts":[{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.7236015796661377},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.7234598398208618},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6970694661140442},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.6251433491706848},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.6124153733253479},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.6119634509086609},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5785077214241028},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5480988621711731},{"id":"https://openalex.org/C125411270","wikidata":"https://www.wikidata.org/wiki/Q18653","display_name":"Encoding (memory)","level":2,"score":0.4828267991542816},{"id":"https://openalex.org/C2778134712","wikidata":"https://www.wikidata.org/wiki/Q1047307","display_name":"Bundle","level":2,"score":0.4657967984676361},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.42536744475364685},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.4137137830257416},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.37235721945762634},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.337507963180542},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.19803497195243835},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.1403144896030426},{"id":"https://openalex.org/C192562407","wikidata":"https://www.wikidata.org/wiki/Q228736","display_name":"Materials science","level":0,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C159985019","wikidata":"https://www.wikidata.org/wiki/Q181790","display_name":"Composite material","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"mag:2803872338","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/1805.09898v1","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null}],"best_oa_location":{"id":"mag:2803872338","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/1805.09898v1","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":13,"referenced_works":["https://openalex.org/W1473189865","https://openalex.org/W1710476689","https://openalex.org/W1959608418","https://openalex.org/W2051267297","https://openalex.org/W2099471712","https://openalex.org/W2112796928","https://openalex.org/W2187089797","https://openalex.org/W2432004435","https://openalex.org/W2566832195","https://openalex.org/W2591882872","https://openalex.org/W2753738274","https://openalex.org/W2785838823","https://openalex.org/W2962879692"],"related_works":["https://openalex.org/W3004170295","https://openalex.org/W2948788074","https://openalex.org/W2965527189","https://openalex.org/W4407147440","https://openalex.org/W3071470454","https://openalex.org/W4388093464","https://openalex.org/W2887995258","https://openalex.org/W4226412627","https://openalex.org/W2617174679","https://openalex.org/W4281651084"],"abstract_inverted_index":{"In":[0],"this":[1],"paper":[2],"we":[3],"propose":[4],"a":[5,33,149],"new":[6],"membership":[7,27,79,100,163,181],"attack":[8,28,47],"method":[9],"called":[10],"co-membership":[11,46,165],"attacks":[12,80,166,182],"against":[13],"deep":[14],"generative":[15,90,154],"models":[16,155],"including":[17],"Variational":[18],"Autoencoders":[19],"(VAEs)":[20],"and":[21,153,175],"Generative":[22],"Adversarial":[23],"Networks":[24],"(GANs).":[25],"Specifically,":[26],"aims":[29],"to":[30,98,117,123,133,180,184],"check":[31],"whether":[32,49,135],"given":[34,51],"instance":[35],"x":[36,105,136],"was":[37,67,137],"used":[38,70,131],"in":[39,57,71,138],"the":[40,50,58,61,65,72,83,89,107,114,120,139],"training":[41,73,86,140],"data":[42,87,104,141],"or":[43,74,142],"not.":[44,143],"A":[45],"checks":[48],"bundle":[52,66],"of":[53,85,102,109,151],"n":[54],"instances":[55],"were":[56],"training,":[59],"with":[60],"prior":[62,162],"knowledge":[63],"that":[64],"either":[68],"entirely":[69],"none":[75],"at":[76],"all.":[77],"Successful":[78],"can":[81,167],"compromise":[82],"privacy":[84],"when":[88],"model":[91],"is":[92,97,130],"published.":[93],"Our":[94],"main":[95],"idea":[96],"cast":[99],"inference":[101],"target":[103],"as":[106],"optimization":[108],"another":[110],"neural":[111],"network":[112,160],"(called":[113],"attacker":[115,159],"network)":[116],"search":[118],"for":[119],"latent":[121],"encoding":[122],"reproduce":[124],"x.":[125],"The":[126],"final":[127],"reconstruction":[128],"error":[129],"directly":[132],"conclude":[134],"We":[144],"conduct":[145],"extensive":[146],"experiments":[147],"on":[148],"variety":[150],"datasets":[152],"showing":[156],"that:":[157],"our":[158],"outperforms":[161],"attacks;":[164,174],"be":[168],"substantially":[169],"more":[170,178],"powerful":[171],"than":[172],"single":[173],"VAEs":[176],"are":[177],"susceptible":[179],"compared":[183],"GANs.":[185]},"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":3}],"updated_date":"2026-11-05T12:25:35.769452","created_date":"2018-06-01T00:00:00"}