{"id":"https://openalex.org/W4403889777","doi":"https://doi.org/10.1007/978-3-031-73741-1_16","title":"Balancing Transparency and Risk: An Overview of the Security and Privacy Risks of Open-Source Machine Learning Models","display_name":"Balancing Transparency and Risk: An Overview of the Security and Privacy Risks of Open-Source Machine Learning Models","publication_year":2024,"publication_date":"2024-10-30","ids":{"openalex":"https://openalex.org/W4403889777","doi":"https://doi.org/10.1007/978-3-031-73741-1_16"},"language":"en","primary_location":{"id":"doi:10.1007/978-3-031-73741-1_16","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-3-031-73741-1_16","pdf_url":"https://link.springer.com/content/pdf/10.1007/978-3-031-73741-1_16.pdf","source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/978-3-031-73741-1_16.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5016622690","display_name":"Dominik Hintersdorf","orcid":"https://orcid.org/0000-0003-4976-6894"},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technische Universit\u00e4t Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]},{"id":"https://openalex.org/I33256026","display_name":"German Research Centre for Artificial Intelligence","ror":"https://ror.org/01ayc5b57","country_code":"DE","type":"funder","lineage":["https://openalex.org/I33256026"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Dominik Hintersdorf","raw_affiliation_strings":["German Research Center for Artificial Intelligence (DFKI), Darmstadt, Germany","Technical University of Darmstadt, Darmstadt, Germany"],"raw_orcid":"https://orcid.org/0000-0003-4976-6894","affiliations":[{"raw_affiliation_string":"German Research Center for Artificial Intelligence (DFKI), Darmstadt, Germany","institution_ids":["https://openalex.org/I33256026"]},{"raw_affiliation_string":"Technical University of Darmstadt, Darmstadt, Germany","institution_ids":["https://openalex.org/I31512782"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060332657","display_name":"Lukas Struppek","orcid":"https://orcid.org/0000-0003-0626-3672"},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technische Universit\u00e4t Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]},{"id":"https://openalex.org/I33256026","display_name":"German Research Centre for Artificial Intelligence","ror":"https://ror.org/01ayc5b57","country_code":"DE","type":"funder","lineage":["https://openalex.org/I33256026"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Lukas Struppek","raw_affiliation_strings":["German Research Center for Artificial Intelligence (DFKI), Darmstadt, Germany","Technical University of Darmstadt, Darmstadt, Germany"],"raw_orcid":"https://orcid.org/0000-0003-0626-3672","affiliations":[{"raw_affiliation_string":"German Research Center for Artificial Intelligence (DFKI), Darmstadt, Germany","institution_ids":["https://openalex.org/I33256026"]},{"raw_affiliation_string":"Technical University of Darmstadt, Darmstadt, Germany","institution_ids":["https://openalex.org/I31512782"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5037636074","display_name":"Kristian Kersting","orcid":"https://orcid.org/0000-0002-2873-9152"},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technische Universit\u00e4t Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]},{"id":"https://openalex.org/I33256026","display_name":"German Research Centre for Artificial Intelligence","ror":"https://ror.org/01ayc5b57","country_code":"DE","type":"funder","lineage":["https://openalex.org/I33256026"]},{"id":"https://openalex.org/I4210125013","display_name":"Hessian Agency for Nature Conservation, Environment and Geology","ror":"https://ror.org/02y05ge92","country_code":"DE","type":"government","lineage":["https://openalex.org/I4210125013"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Kristian Kersting","raw_affiliation_strings":["Centre for Cognitive Science of TU Darmstadt, Darmstadt, Germany","German Research Center for Artificial Intelligence (DFKI), Darmstadt, Germany","Hessian Center for AI (hessian.AI), Darmstadt, Germany","Technical University of Darmstadt, Darmstadt, Germany"],"raw_orcid":"https://orcid.org/0000-0002-2873-9152","affiliations":[{"raw_affiliation_string":"Centre for Cognitive Science of TU Darmstadt, Darmstadt, Germany","institution_ids":["https://openalex.org/I31512782"]},{"raw_affiliation_string":"German Research Center for Artificial Intelligence (DFKI), Darmstadt, Germany","institution_ids":["https://openalex.org/I33256026"]},{"raw_affiliation_string":"Hessian Center for AI (hessian.AI), Darmstadt, Germany","institution_ids":["https://openalex.org/I4210125013"]},{"raw_affiliation_string":"Technical University of Darmstadt, Darmstadt, Germany","institution_ids":["https://openalex.org/I31512782"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5016622690","https://openalex.org/A5060332657"],"corresponding_institution_ids":["https://openalex.org/I31512782","https://openalex.org/I33256026"],"apc_list":{"value":5000,"currency":"EUR","value_usd":5392},"apc_paid":{"value":5000,"currency":"EUR","value_usd":5392},"fwci":null,"has_fulltext":true,"cited_by_count":9,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"269","last_page":"283"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.9937999844551086,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8714088201522827},{"id":"https://openalex.org/keywords/transparency","display_name":"Transparency (behavior)","score":0.7127788066864014},{"id":"https://openalex.org/keywords/open-source","display_name":"Open source","score":0.6277804970741272},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5049131512641907},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.09720641374588013}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8714088201522827},{"id":"https://openalex.org/C2780233690","wikidata":"https://www.wikidata.org/wiki/Q535347","display_name":"Transparency (behavior)","level":2,"score":0.7127788066864014},{"id":"https://openalex.org/C3018397939","wikidata":"https://www.wikidata.org/wiki/Q3644502","display_name":"Open source","level":3,"score":0.6277804970741272},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5049131512641907},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.09720641374588013},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/978-3-031-73741-1_16","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-3-031-73741-1_16","pdf_url":"https://link.springer.com/content/pdf/10.1007/978-3-031-73741-1_16.pdf","source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"}],"best_oa_location":{"id":"doi:10.1007/978-3-031-73741-1_16","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-3-031-73741-1_16","pdf_url":"https://link.springer.com/content/pdf/10.1007/978-3-031-73741-1_16.pdf","source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320315885","display_name":"Australian Government","ror":"https://ror.org/0314h5y94"},{"id":"https://openalex.org/F4320321114","display_name":"Bundesministerium f\u00fcr Bildung und Forschung","ror":"https://ror.org/04pz7b180"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4403889777.pdf","grobid_xml":"https://content.openalex.org/works/W4403889777.grobid-xml"},"referenced_works_count":38,"referenced_works":["https://openalex.org/W569478347","https://openalex.org/W2051267297","https://openalex.org/W2535690855","https://openalex.org/W2603766943","https://openalex.org/W2746600820","https://openalex.org/W2795435272","https://openalex.org/W2962770929","https://openalex.org/W2963378725","https://openalex.org/W2985913519","https://openalex.org/W2996800219","https://openalex.org/W3015625436","https://openalex.org/W3035616549","https://openalex.org/W3106412272","https://openalex.org/W3118479706","https://openalex.org/W3135367836","https://openalex.org/W3154155772","https://openalex.org/W3167334189","https://openalex.org/W3170677518","https://openalex.org/W3174908416","https://openalex.org/W3214430180","https://openalex.org/W3214437258","https://openalex.org/W4225369406","https://openalex.org/W4229820657","https://openalex.org/W4283311307","https://openalex.org/W4285224048","https://openalex.org/W4288057780","https://openalex.org/W4288057793","https://openalex.org/W4312768002","https://openalex.org/W4312933868","https://openalex.org/W4385572432","https://openalex.org/W4385679821","https://openalex.org/W4390871724","https://openalex.org/W4390872151","https://openalex.org/W4400477233","https://openalex.org/W4402916987","https://openalex.org/W4403487921","https://openalex.org/W6600134738","https://openalex.org/W6849141701"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W3081288631","https://openalex.org/W3152382318","https://openalex.org/W3004686567","https://openalex.org/W2738656338","https://openalex.org/W2603787370","https://openalex.org/W2555400967","https://openalex.org/W3214759741"],"abstract_inverted_index":{"Abstract":[0],"The":[1,131],"field":[2],"of":[3,19,33,52,58,74,79,116,128,133,161,173,183,189,201],"artificial":[4],"intelligence":[5],"(AI)":[6],"has":[7],"experienced":[8],"remarkable":[9],"progress":[10],"in":[11,24],"recent":[12],"years,":[13],"driven":[14],"by":[15,108],"the":[16,30,56,77,114,117,126,159,181,196],"widespread":[17],"adoption":[18,78],"open-source":[20,81,184],"machine":[21],"learning":[22],"models":[23,42,82],"both":[25],"research":[26],"and":[27,60,86,136,176,198],"industry.":[28],"Considering":[29],"resource-intensive":[31],"nature":[32],"training":[34,59],"on":[35],"vast":[36],"datasets,":[37],"many":[38],"applications":[39],"opt":[40],"for":[41,70],"that":[43,89],"have":[44],"already":[45],"been":[46],"trained.":[47],"Hence,":[48],"a":[49,67,71,95,140,170],"small":[50],"number":[51],"key":[53],"players":[54],"undertake":[55],"responsibility":[57],"publicly":[61],"releasing":[62],"large":[63],"pre-trained":[64],"models,":[65],"providing":[66],"crucial":[68],"foundation":[69],"wide":[72],"range":[73],"applications.":[75],"However,":[76],"these":[80,190],"carries":[83],"inherent":[84],"privacy":[85,135,175],"security":[87,137,177],"risks":[88],"are":[90],"often":[91],"overlooked.":[92],"To":[93],"provide":[94],"concrete":[96],"example,":[97],"an":[98],"inconspicuous":[99],"model":[100],"may":[101],"conceal":[102],"hidden":[103],"functionalities":[104],"that,":[105],"when":[106],"triggered":[107],"specific":[109],"input":[110],"patterns,":[111],"can":[112],"manipulate":[113],"behavior":[115],"system,":[118],"such":[119],"as":[120],"instructing":[121],"self-driving":[122],"cars":[123],"to":[124,151,194],"ignore":[125],"presence":[127],"other":[129],"vehicles.":[130],"implications":[132],"successful":[134],"attacks":[138],"encompass":[139],"broad":[141],"spectrum,":[142],"ranging":[143],"from":[144],"relatively":[145],"minor":[146],"damage":[147],"like":[148],"service":[149],"interruptions":[150],"highly":[152],"alarming":[153],"scenarios,":[154],"including":[155],"physical":[156],"harm":[157],"or":[158],"exposure":[160],"sensitive":[162],"user":[163],"data.":[164],"In":[165],"this":[166],"work,":[167],"we":[168,192],"present":[169],"comprehensive":[171],"overview":[172],"common":[174],"threats":[178],"associated":[179],"with":[180],"use":[182,200],"models.":[185],"By":[186],"raising":[187],"awareness":[188],"dangers,":[191],"strive":[193],"promote":[195],"responsible":[197],"secure":[199],"AI":[202],"systems.":[203]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}