{"id":"https://openalex.org/W7204906463","doi":"https://doi.org/10.5281/zenodo.22227570","title":"The Replay Tax: auditing the privacy cost of continual-learning strategies in object detection \u2014 per-image attack scores, splits, buffers and analysis code","display_name":"The Replay Tax: auditing the privacy cost of continual-learning strategies in object detection \u2014 per-image attack scores, splits, buffers and analysis code","publication_year":2026,"publication_date":"2026-09-01","ids":{"openalex":"https://openalex.org/W7204906463","doi":"https://doi.org/10.5281/zenodo.22227570"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.22227570","doi":"https://doi.org/10.5281/zenodo.22227570","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.22227570","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Dataset"},"parent_works":[],"lineage":["https://openalex.org/W7204906463"],"child_works_count":0,"type":"dataset","is_traditional":false,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.22227570","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5120705094","display_name":"Zeynel Kutlu","orcid":"https://orcid.org/0000-0001-7176-6028","observed_orcids":["https://orcid.org/0000-0001-7176-6028"]},"institutions":[{"id":"https://openalex.org/I12700597","display_name":"Sivas Cumhuriyet \u00dcniversitesi","ror":"https://ror.org/04f81fm77","country_code":"TR","type":"education","lineage":["https://openalex.org/I12700597"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Kutlu, Zeynel","raw_affiliation_strings":["Sivas Cumhuriyet \u00dcniversitesi"],"raw_orcid":"https://orcid.org/0000-0001-7176-6028","affiliations":[{"raw_affiliation_string":"Sivas Cumhuriyet \u00dcniversitesi","institution_ids":["https://openalex.org/I12700597"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078713793","display_name":"R\u0131dvan Ka\u011fan A\u011fca","orcid":"https://orcid.org/0000-0002-1264-1214","observed_orcids":["https://orcid.org/0000-0002-1264-1214"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"AGCA, RIDVAN KAGAN","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-1264-1214","affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5097685735","display_name":"Emrecan B\u0131ng\u00f6l","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"B\u0130NG\u00d6L, Emrecan","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0003-0733-5084","affiliations":[]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7426999807357788,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7426999807357788,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.19449999928474426,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.025299999862909317,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/replay-buffer","display_name":"replay buffer","score":0.5170000195503235},{"id":"https://openalex.org/keywords/continual-learning","display_name":"continual learning","score":0.8759999871253967},{"id":"https://openalex.org/keywords/object-detection","display_name":"object detection","score":0.7559999823570251},{"id":"https://openalex.org/keywords/membership-inference-attacks","display_name":"membership inference attacks","score":0.7879999876022339},{"id":"https://openalex.org/keywords/privacy-costs","display_name":"privacy costs","score":0.6389999985694885},{"id":"https://openalex.org/keywords/elastic-weight-consolidation","display_name":"elastic weight consolidation","score":0.7940000295639038},{"id":"https://openalex.org/keywords/learning-without-forgetting","display_name":"learning without forgetting","score":0.9950000047683716},{"id":"https://openalex.org/keywords/joint-training","display_name":"joint training","score":0.5289999842643738},{"id":"https://openalex.org/keywords/shadow-model","display_name":"shadow model","score":0.7300000190734863},{"id":"https://openalex.org/keywords/weapon-detection","display_name":"weapon detection","score":0.5389999747276306},{"id":"https://openalex.org/keywords/infrared-thermography","display_name":"infrared thermography","score":0.5659999847412109},{"id":"https://openalex.org/keywords/adversarial-attacks","display_name":"adversarial attacks","score":0.4259999990463257}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8012999892234802},{"id":"https://openalex.org/C61423126","wikidata":"https://www.wikidata.org/wiki/Q187432","display_name":"Scripting language","level":2,"score":0.6168000102043152},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.6086000204086304},{"id":"https://openalex.org/C40842320","wikidata":"https://www.wikidata.org/wiki/Q19423","display_name":"Buffer overflow","level":2,"score":0.5684999823570251},{"id":"https://openalex.org/C45235069","wikidata":"https://www.wikidata.org/wiki/Q278425","display_name":"Table (database)","level":2,"score":0.5185999870300293},{"id":"https://openalex.org/C2781238097","wikidata":"https://www.wikidata.org/wiki/Q175026","display_name":"Object (grammar)","level":2,"score":0.5148000121116638},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.49149999022483826},{"id":"https://openalex.org/C117797892","wikidata":"https://www.wikidata.org/wiki/Q286363","display_name":"Shadow (psychology)","level":2,"score":0.4413999915122986},{"id":"https://openalex.org/C2778689934","wikidata":"https://www.wikidata.org/wiki/Q1313396","display_name":"Headline","level":2,"score":0.4221000075340271},{"id":"https://openalex.org/C2776151529","wikidata":"https://www.wikidata.org/wiki/Q3045304","display_name":"Object detection","level":3,"score":0.38370001316070557},{"id":"https://openalex.org/C12590798","wikidata":"https://www.wikidata.org/wiki/Q3933199","display_name":"Replication (statistics)","level":2,"score":0.3828999996185303},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3758000135421753},{"id":"https://openalex.org/C145018004","wikidata":"https://www.wikidata.org/wiki/Q4985944","display_name":"Buffer (optical fiber)","level":2,"score":0.3677999973297119},{"id":"https://openalex.org/C2776004034","wikidata":"https://www.wikidata.org/wiki/Q1068755","display_name":"Check-in","level":2,"score":0.3659999966621399},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.35109999775886536},{"id":"https://openalex.org/C2779623668","wikidata":"https://www.wikidata.org/wiki/Q7652842","display_name":"SwIPe","level":2,"score":0.33970001339912415},{"id":"https://openalex.org/C11560541","wikidata":"https://www.wikidata.org/wiki/Q1756025","display_name":"Replay attack","level":3,"score":0.33149999380111694},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.32199999690055847},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.3197000026702881},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3190999925136566},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3149999976158142},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.30559998750686646},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.2980000078678131},{"id":"https://openalex.org/C186644900","wikidata":"https://www.wikidata.org/wiki/Q194152","display_name":"Parsing","level":2,"score":0.2833000123500824},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.2784999907016754},{"id":"https://openalex.org/C93518851","wikidata":"https://www.wikidata.org/wiki/Q180160","display_name":"Metadata","level":2,"score":0.2775999903678894},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.2728999853134155},{"id":"https://openalex.org/C80958533","wikidata":"https://www.wikidata.org/wiki/Q1047174","display_name":"Audit trail","level":3,"score":0.2685000002384186},{"id":"https://openalex.org/C88548561","wikidata":"https://www.wikidata.org/wiki/Q347599","display_name":"sort","level":2,"score":0.26649999618530273},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.2508000135421753},{"id":"https://openalex.org/C2777059624","wikidata":"https://www.wikidata.org/wiki/Q914359","display_name":"Cloud storage","level":3,"score":0.2500999867916107}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5281/zenodo.22227570","doi":"https://doi.org/10.5281/zenodo.22227570","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.22227570","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Dataset"},{"id":"doi:10.5281/zenodo.22227571","doi":"https://doi.org/10.5281/zenodo.22227571","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.22227571","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Dataset"}],"best_oa_location":{"id":"doi:10.5281/zenodo.22227570","doi":"https://doi.org/10.5281/zenodo.22227570","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.22227570","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Dataset"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7163749360","https://openalex.org/W7213995667","https://openalex.org/W4390353728","https://openalex.org/W4392903745","https://openalex.org/W3049142938","https://openalex.org/W6943744895","https://openalex.org/W7172345829","https://openalex.org/W6906368229","https://openalex.org/W4390874134","https://openalex.org/W7222610744"],"abstract_inverted_index":{"This":[0],"archive":[1,81,165],"is":[2],"the":[3,83,93,101,114,125,134,156,164,167,193,201,204,248,258,266,270],"replication":[4],"package":[5,231],"for":[6,87,105],"a":[7,49,52,56,60,73,221,253],"membership-inference":[8],"audit":[9,244],"of":[10,46,192,211,269],"continual-learning":[11],"strategies":[12],"in":[13,133,200,219],"object":[14],"detection.":[15],"Six":[16],"training":[17],"arms":[18],"(naive,":[19],"no":[20,225,228,263],"adaptation,":[21],"joint,":[22],"replay,":[23],"elastic":[24],"weight":[25],"consolidation,":[26],"learning":[27],"without":[28],"forgetting)":[29],"are":[30,139,144,181,273],"evaluated":[31],"across":[32],"two":[33,36,235],"datasets":[34,148],"and":[35,59,91,97,109,117,120,131,155,163,208,223,227,252],"detector":[37],"architectures":[38],"with":[39,76,262],"three":[40,44],"seeds":[41],"each,":[42],"under":[43],"adversaries":[45],"increasing":[47],"realism:":[48],"loss":[50],"threshold,":[51],"difficulty-calibrated":[53],"attack":[54,62,75,85],"against":[55],"reference":[57,264],"model,":[58],"label-free":[61],"that":[63,127],"observes":[64],"only":[65],"detection":[66],"confidences.":[67],"The":[68,80,136,178,230],"primary":[69],"cell":[70],"additionally":[71,182],"carries":[72],"likelihood-ratio":[74,115],"32":[77],"shadow":[78],"models.":[79],"contains":[82],"per-image":[84,206],"scores":[86,116,207],"every":[88,106,129,197],"arm,":[89],"seed":[90,186],"cell;":[92],"member,":[94],"non-member,":[95],"control":[96],"validation-fitting":[98],"split":[99],"listings;":[100],"exact":[102,174],"buffer":[103,107,236,245,255],"contents":[104],"size":[108],"seed;":[110],"per-arm":[111],"utility":[112],"measurements;":[113],"shadow-membership":[118],"tables;":[119],"all":[121],"analysis":[122,194],"code,":[123,195],"including":[124],"scripts":[126],"generate":[128],"table":[130],"figure":[132],"paper.":[135],"images":[137,226],"themselves":[138],"not":[140],"redistributed.":[141],"Both":[142],"corpora":[143],"third-party":[145],"public":[146],"research":[147],"(a":[149],"weapon-detection":[150],"corpus":[151],"on":[152,217],"Roboflow":[153],"Universe":[154],"Teledyne":[157],"FLIR":[158],"Free":[159],"ADAS":[160],"Thermal":[161],"Dataset),":[162],"supplies":[166],"file":[168],"lists":[169],"needed":[170],"to":[171,265],"reconstruct":[172],"our":[173],"splits":[175],"from":[176,184,203,247,257],"them.":[177],"replay":[179],"buffers":[180],"reproducible":[183],"their":[185],"alone.":[187],"A":[188],"verification":[189],"script,":[190],"independent":[191],"recomputes":[196],"headline":[198],"number":[199],"paper":[202],"raw":[205],"reports":[209],"37":[210,212],"claims":[213],"reproduced.":[214],"It":[215],"runs":[216],"CPU":[218],"about":[220],"minute":[222],"needs":[224],"GPU.":[229],"distinguishes":[232],"throughout":[233],"between":[234],"constructions,":[237],"because":[238],"they":[239],"give":[240],"different":[241],"answers:":[242],"an":[243],"drawn":[246,256],"audited":[249],"member":[250],"set,":[251],"deployment":[254],"whole":[259],"first":[260],"task":[261],"audit.":[267],"Arms":[268],"second":[271],"kind":[272],"tagged":[274],"replayU.":[275]},"counts_by_year":[],"updated_date":"2026-11-14T11:04:58.165337","created_date":"2026-09-02T00:00:00"}