{"id":"https://openalex.org/W4391216629","doi":"https://doi.org/10.1109/dspp58763.2023.10405019","title":"GanNoise: Defending against black-box membership inference attacks by countering noise generation","display_name":"GanNoise: Defending against black-box membership inference attacks by countering noise generation","publication_year":2023,"publication_date":"2023-10-16","ids":{"openalex":"https://openalex.org/W4391216629","doi":"https://doi.org/10.1109/dspp58763.2023.10405019"},"language":"en","primary_location":{"id":"doi:10.1109/dspp58763.2023.10405019","doi":"https://doi.org/10.1109/dspp58763.2023.10405019","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/dspp58763.2023.10405019","pdf_url":null,"source":{"id":"https://openalex.org/S7407113742","display_name":"International Conference on Data Security and Privacy Protection (DSPP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 International Conference on Data Security and Privacy Protection (DSPP)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5049759917","display_name":"Jiaming Liang","orcid":"https://orcid.org/0009-0000-6007-9759","observed_orcids":["https://orcid.org/0009-0000-6007-9759"]},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiaming Liang","raw_affiliation_strings":["Guangzhou University, Guangzhou, China","Institute of Artificial Intelligence and Blockchain, Guangzhou University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]},{"raw_affiliation_string":"Institute of Artificial Intelligence and Blockchain, Guangzhou University, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010660404","display_name":"Teng Huang","orcid":"https://orcid.org/0000-0001-7261-6398","observed_orcids":["https://orcid.org/0000-0001-7261-6398","https://orcid.org/0000-0002-2062-6137"]},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Teng Huang","raw_affiliation_strings":["Guangzhou University, Guangzhou, China","Institute of Artificial Intelligence and Blockchain, Guangzhou University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]},{"raw_affiliation_string":"Institute of Artificial Intelligence and Blockchain, Guangzhou University, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101296458","display_name":"Zidan Luo","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zidan Luo","raw_affiliation_strings":["Guangzhou University, Guangzhou, China","Institute of Artificial Intelligence and Blockchain, Guangzhou University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]},{"raw_affiliation_string":"Institute of Artificial Intelligence and Blockchain, Guangzhou University, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100380818","display_name":"Dan Li","orcid":"https://orcid.org/0009-0000-0598-7375","observed_orcids":["https://orcid.org/0009-0000-0598-7375"]},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dan Li","raw_affiliation_strings":["Guangzhou University, Guangzhou, China","Institute of Artificial Intelligence and Blockchain, Guangzhou University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]},{"raw_affiliation_string":"Institute of Artificial Intelligence and Blockchain, Guangzhou University, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100778545","display_name":"Yunhao Li","orcid":"https://orcid.org/0000-0003-1704-3050","observed_orcids":["https://orcid.org/0000-0003-1704-3050"]},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yunhao Li","raw_affiliation_strings":["Guangzhou University, Guangzhou, China","Institute of Artificial Intelligence and Blockchain, Guangzhou University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]},{"raw_affiliation_string":"Institute of Artificial Intelligence and Blockchain, Guangzhou University, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103059787","display_name":"Ziyu Ding","orcid":"https://orcid.org/0009-0001-2139-8674","observed_orcids":["https://orcid.org/0009-0001-2139-8674"]},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ziyu Ding","raw_affiliation_strings":["Guangzhou University, Guangzhou, China","Institute of Artificial Intelligence and Blockchain, Guangzhou University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]},{"raw_affiliation_string":"Institute of Artificial Intelligence and Blockchain, Guangzhou University, China","institution_ids":["https://openalex.org/I37987034"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I37987034"],"apc_list":null,"apc_paid":null,"fwci":0.3314,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.53253921,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"32","last_page":"40"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5220000147819519,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5220000147819519,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.47679999470710754,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/membership-inference-attacks","display_name":"membership inference attacks","score":0.9539999961853027},{"id":"https://openalex.org/keywords/black-box-attacks","display_name":"black-box attacks","score":0.9240000247955322},{"id":"https://openalex.org/keywords/privacy-preserving-deep-learning","display_name":"privacy-preserving deep learning","score":0.7630000114440918},{"id":"https://openalex.org/keywords/noise-generation","display_name":"noise generation","score":0.6710000038146973},{"id":"https://openalex.org/keywords/generative-adversarial-networks","display_name":"generative adversarial networks","score":0.7950000166893005},{"id":"https://openalex.org/keywords/adversarial-regularization","display_name":"adversarial regularization","score":0.9509999752044678},{"id":"https://openalex.org/keywords/data-privacy","display_name":"data privacy","score":0.5070000290870667}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7896138429641724},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.7346280813217163},{"id":"https://openalex.org/C30038468","wikidata":"https://www.wikidata.org/wiki/Q4354775","display_name":"Memorization","level":2,"score":0.6644786596298218},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6366838216781616},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.5609405040740967},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5332742929458618},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5310191512107849},{"id":"https://openalex.org/C2776135515","wikidata":"https://www.wikidata.org/wiki/Q17143721","display_name":"Regularization (linguistics)","level":2,"score":0.5265657901763916},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.5073434710502625},{"id":"https://openalex.org/C125112378","wikidata":"https://www.wikidata.org/wiki/Q176640","display_name":"Randomness","level":2,"score":0.5054657459259033},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.4506325423717499},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.41423550248146057},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3740687370300293},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.32243573665618896},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C145420912","wikidata":"https://www.wikidata.org/wiki/Q853077","display_name":"Mathematics education","level":1,"score":0.0},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/dspp58763.2023.10405019","doi":"https://doi.org/10.1109/dspp58763.2023.10405019","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/dspp58763.2023.10405019","pdf_url":null,"source":{"id":"https://openalex.org/S7407113742","display_name":"International Conference on Data Security and Privacy Protection (DSPP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 International Conference on Data Security and Privacy Protection (DSPP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W1492347181","https://openalex.org/W2091432990","https://openalex.org/W2194775991","https://openalex.org/W2350778671","https://openalex.org/W2473418344","https://openalex.org/W2535690855","https://openalex.org/W2565516711","https://openalex.org/W2752929869","https://openalex.org/W2795435272","https://openalex.org/W2807096445","https://openalex.org/W2884943453","https://openalex.org/W2897830718","https://openalex.org/W2910603373","https://openalex.org/W2926319231","https://openalex.org/W2963446712","https://openalex.org/W2983140679","https://openalex.org/W3034428008","https://openalex.org/W3046102592","https://openalex.org/W3046208783","https://openalex.org/W3048775464","https://openalex.org/W3107725882","https://openalex.org/W3115042282","https://openalex.org/W3118608800","https://openalex.org/W3163860056","https://openalex.org/W3164762628","https://openalex.org/W3201892058","https://openalex.org/W3208464986","https://openalex.org/W4221162710","https://openalex.org/W4226190696","https://openalex.org/W4285310777","https://openalex.org/W4318680489","https://openalex.org/W6787471046","https://openalex.org/W6787972765","https://openalex.org/W6902428754"],"related_works":["https://openalex.org/W4383571138","https://openalex.org/W4406138570","https://openalex.org/W4416074901","https://openalex.org/W4414475508","https://openalex.org/W4401234636","https://openalex.org/W4294031608","https://openalex.org/W4285230500","https://openalex.org/W4386566820","https://openalex.org/W3206966921","https://openalex.org/W4288723611"],"abstract_inverted_index":{"In":[0,47],"recent":[1],"years,":[2],"data":[3,39,86],"privacy":[4,60],"in":[5,121],"deep":[6],"learning":[7],"has":[8],"seen":[9],"a":[10,52,74],"notable":[11],"surge":[12],"of":[13,38,44,65,94,105,123],"interest.":[14],"Pretrained":[15],"large-scale":[16],"data-driven":[17],"models":[18],"are":[19],"potential":[20],"to":[21,34,72,84],"be":[22],"attacked":[23],"risky":[24],"with":[25],"membership":[26],"inference":[27],"attacks.":[28],"However,":[29],"the":[30,36,42,63,95,103,106],"current":[31],"corresponding":[32],"defenses":[33],"prevent":[35],"leak":[37],"may":[40],"reduce":[41],"performance":[43],"pre-trained":[45],"models.":[46],"this":[48],"paper,":[49],"we":[50,78],"propose":[51],"novel":[53],"training":[54,97],"framework":[55,107],"called":[56],"GanNoise":[57],"that":[58,81],"preserves":[59],"by":[61],"maintaining":[62],"accuracy":[64],"classification":[66],"tasks.":[67],"Through":[68],"utilizing":[69],"adversarial":[70],"regularization":[71],"train":[73],"noise":[75,80],"generation":[76],"model,":[77],"generate":[79],"adds":[82],"randomness":[83],"private":[85],"during":[87],"model":[88],"training,":[89],"effectively":[90],"preventing":[91],"excessive":[92],"memorization":[93],"actual":[96],"data.":[98],"Our":[99],"experimental":[100],"results":[101],"illustrate":[102],"efficacy":[104],"against":[108],"existing":[109],"attack":[110],"schemes":[111],"on":[112],"various":[113],"datasets":[114],"while":[115],"outperforming":[116],"advanced":[117],"MIA":[118],"defense":[119],"solutions":[120],"terms":[122],"efficiency.":[124]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2024,"cited_by_count":2}],"updated_date":"2026-11-11T12:16:26.678958","created_date":"2024-01-26T00:00:00"}