{"id":"https://openalex.org/W4409909885","doi":"https://doi.org/10.1007/s10791-025-09551-z","title":"Towards auditing gradient privacy risks in image reconstruction attacks on deep learning models","display_name":"Towards auditing gradient privacy risks in image reconstruction attacks on deep learning models","publication_year":2025,"publication_date":"2025-04-30","ids":{"openalex":"https://openalex.org/W4409909885","doi":"https://doi.org/10.1007/s10791-025-09551-z"},"language":"en","primary_location":{"id":"doi:10.1007/s10791-025-09551-z","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10791-025-09551-z","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10791-025-09551-z.pdf","source":{"id":"https://openalex.org/S5407036663","display_name":"Discover Computing","issn_l":"2948-2992","issn":["2948-2992"],"is_oa":true,"is_in_doaj":true,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Discover Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://link.springer.com/content/pdf/10.1007/s10791-025-09551-z.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100767738","display_name":"Tao Huang","orcid":"https://orcid.org/0000-0002-8098-8906"},"institutions":[{"id":"https://openalex.org/I354108","display_name":"Minjiang University","ror":"https://ror.org/00s7tkw17","country_code":"CN","type":"education","lineage":["https://openalex.org/I354108"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Tao Huang","raw_affiliation_strings":["Fuzhou Institute of Oceanography, Fujian Provincial Key Laboratory of Information Processing and Intelligent Control, School of Computer and Big Data, Minjiang University, Fuzhou, 350108, China"],"affiliations":[{"raw_affiliation_string":"Fuzhou Institute of Oceanography, Fujian Provincial Key Laboratory of Information Processing and Intelligent Control, School of Computer and Big Data, Minjiang University, Fuzhou, 350108, China","institution_ids":["https://openalex.org/I354108"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101936886","display_name":"Xin Shi","orcid":"https://orcid.org/0000-0002-7699-9514"},"institutions":[{"id":"https://openalex.org/I354108","display_name":"Minjiang University","ror":"https://ror.org/00s7tkw17","country_code":"CN","type":"education","lineage":["https://openalex.org/I354108"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xin Shi","raw_affiliation_strings":["Fuzhou Institute of Oceanography, Fujian Provincial Key Laboratory of Information Processing and Intelligent Control, School of Computer and Big Data, Minjiang University, Fuzhou, 350108, China"],"affiliations":[{"raw_affiliation_string":"Fuzhou Institute of Oceanography, Fujian Provincial Key Laboratory of Information Processing and Intelligent Control, School of Computer and Big Data, Minjiang University, Fuzhou, 350108, China","institution_ids":["https://openalex.org/I354108"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111240419","display_name":"Qingyu Huang","orcid":null},"institutions":[{"id":"https://openalex.org/I354108","display_name":"Minjiang University","ror":"https://ror.org/00s7tkw17","country_code":"CN","type":"education","lineage":["https://openalex.org/I354108"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qingyu Huang","raw_affiliation_strings":["Fuzhou Institute of Oceanography, Fujian Provincial Key Laboratory of Information Processing and Intelligent Control, School of Computer and Big Data, Minjiang University, Fuzhou, 350108, China"],"affiliations":[{"raw_affiliation_string":"Fuzhou Institute of Oceanography, Fujian Provincial Key Laboratory of Information Processing and Intelligent Control, School of Computer and Big Data, Minjiang University, Fuzhou, 350108, China","institution_ids":["https://openalex.org/I354108"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036666786","display_name":"Ziyang Chen","orcid":"https://orcid.org/0000-0002-9361-0240"},"institutions":[{"id":"https://openalex.org/I354108","display_name":"Minjiang University","ror":"https://ror.org/00s7tkw17","country_code":"CN","type":"education","lineage":["https://openalex.org/I354108"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ziyang Chen","raw_affiliation_strings":["Fuzhou Institute of Oceanography, Fujian Provincial Key Laboratory of Information Processing and Intelligent Control, School of Computer and Big Data, Minjiang University, Fuzhou, 350108, China"],"affiliations":[{"raw_affiliation_string":"Fuzhou Institute of Oceanography, Fujian Provincial Key Laboratory of Information Processing and Intelligent Control, School of Computer and Big Data, Minjiang University, Fuzhou, 350108, China","institution_ids":["https://openalex.org/I354108"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083816120","display_name":"Liang Jiang","orcid":null},"institutions":[{"id":"https://openalex.org/I64449678","display_name":"Putian University","ror":"https://ror.org/00jmsxk74","country_code":"CN","type":"education","lineage":["https://openalex.org/I64449678"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Liang Jiang","raw_affiliation_strings":["Fujian Key Laboratory of Financial Information Processing, Putian University, Putian, 351100, China"],"affiliations":[{"raw_affiliation_string":"Fujian Key Laboratory of Financial Information Processing, Putian University, Putian, 351100, China","institution_ids":["https://openalex.org/I64449678"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055275609","display_name":"Chenhuang Wu","orcid":"https://orcid.org/0000-0001-8002-7630"},"institutions":[{"id":"https://openalex.org/I64449678","display_name":"Putian University","ror":"https://ror.org/00jmsxk74","country_code":"CN","type":"education","lineage":["https://openalex.org/I64449678"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chenhuang Wu","raw_affiliation_strings":["Fujian Key Laboratory of Financial Information Processing, Putian University, Putian, 351100, China"],"affiliations":[{"raw_affiliation_string":"Fujian Key Laboratory of Financial Information Processing, Putian University, Putian, 351100, China","institution_ids":["https://openalex.org/I64449678"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026055653","display_name":"Guolong Zheng","orcid":"https://orcid.org/0000-0002-1996-2635"},"institutions":[{"id":"https://openalex.org/I354108","display_name":"Minjiang University","ror":"https://ror.org/00s7tkw17","country_code":"CN","type":"education","lineage":["https://openalex.org/I354108"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guolong Zheng","raw_affiliation_strings":["Fuzhou Institute of Oceanography, Fujian Provincial Key Laboratory of Information Processing and Intelligent Control, School of Computer and Big Data, Minjiang University, Fuzhou, 350108, China"],"affiliations":[{"raw_affiliation_string":"Fuzhou Institute of Oceanography, Fujian Provincial Key Laboratory of Information Processing and Intelligent Control, School of Computer and Big Data, Minjiang University, Fuzhou, 350108, China","institution_ids":["https://openalex.org/I354108"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066602975","display_name":"Yang Xu","orcid":"https://orcid.org/0000-0002-8394-9224"},"institutions":[{"id":"https://openalex.org/I354108","display_name":"Minjiang University","ror":"https://ror.org/00s7tkw17","country_code":"CN","type":"education","lineage":["https://openalex.org/I354108"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xu Yang","raw_affiliation_strings":["Fuzhou Institute of Oceanography, Fujian Provincial Key Laboratory of Information Processing and Intelligent Control, School of Computer and Big Data, Minjiang University, Fuzhou, 350108, China"],"affiliations":[{"raw_affiliation_string":"Fuzhou Institute of Oceanography, Fujian Provincial Key Laboratory of Information Processing and Intelligent Control, School of Computer and Big Data, Minjiang University, Fuzhou, 350108, China","institution_ids":["https://openalex.org/I354108"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5064277907","display_name":"Wencheng Yang","orcid":"https://orcid.org/0000-0001-7800-2215"},"institutions":[{"id":"https://openalex.org/I185523456","display_name":"University of Southern Queensland","ror":"https://ror.org/04sjbnx57","country_code":"AU","type":"education","lineage":["https://openalex.org/I185523456"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Wencheng Yang","raw_affiliation_strings":["School of Mathematics, Physics and Computing, University of Southern Queensland, Brisbane, 4350, Australia"],"affiliations":[{"raw_affiliation_string":"School of Mathematics, Physics and Computing, University of Southern Queensland, Brisbane, 4350, Australia","institution_ids":["https://openalex.org/I185523456"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":9,"corresponding_author_ids":["https://openalex.org/A5100767738"],"corresponding_institution_ids":["https://openalex.org/I354108"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.03930125,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"28","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11636","display_name":"Artificial Intelligence in Healthcare and Education","score":0.9800999760627747,"subfield":{"id":"https://openalex.org/subfields/2718","display_name":"Health Informatics"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9545999765396118,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.7563900947570801},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.5942426919937134},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5573411583900452},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.4883415400981903},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.42746883630752563},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.384179949760437},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.3425406217575073},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.3301944434642792},{"id":"https://openalex.org/keywords/accounting","display_name":"Accounting","score":0.20533496141433716}],"concepts":[{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.7563900947570801},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5942426919937134},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5573411583900452},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.4883415400981903},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.42746883630752563},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.384179949760437},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.3425406217575073},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3301944434642792},{"id":"https://openalex.org/C121955636","wikidata":"https://www.wikidata.org/wiki/Q4116214","display_name":"Accounting","level":1,"score":0.20533496141433716}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/s10791-025-09551-z","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10791-025-09551-z","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10791-025-09551-z.pdf","source":{"id":"https://openalex.org/S5407036663","display_name":"Discover Computing","issn_l":"2948-2992","issn":["2948-2992"],"is_oa":true,"is_in_doaj":true,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Discover Computing","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1007/s10791-025-09551-z","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10791-025-09551-z","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10791-025-09551-z.pdf","source":{"id":"https://openalex.org/S5407036663","display_name":"Discover Computing","issn_l":"2948-2992","issn":["2948-2992"],"is_oa":true,"is_in_doaj":true,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Discover Computing","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2087396116","display_name":null,"funder_award_id":"China","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2802911279","display_name":null,"funder_award_id":"Young","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3317480652","display_name":null,"funder_award_id":"Science","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G391238517","display_name":null,"funder_award_id":", and","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4020255992","display_name":null,"funder_award_id":"Project","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5994120800","display_name":null,"funder_award_id":"Natural","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321878","display_name":"Natural Science Foundation of Fujian Province","ror":null},{"id":"https://openalex.org/F4320321893","display_name":"Department of Education, Fujian Province","ror":"https://ror.org/01d6wrk87"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4409909885.pdf","grobid_xml":"https://content.openalex.org/works/W4409909885.grobid-xml"},"referenced_works_count":19,"referenced_works":["https://openalex.org/W1981276685","https://openalex.org/W2194775991","https://openalex.org/W2583362313","https://openalex.org/W2591882872","https://openalex.org/W2801491268","https://openalex.org/W2887995258","https://openalex.org/W2964082701","https://openalex.org/W2990138404","https://openalex.org/W3000280594","https://openalex.org/W3001007330","https://openalex.org/W3013016060","https://openalex.org/W3044338123","https://openalex.org/W3150212014","https://openalex.org/W3195997474","https://openalex.org/W3211753216","https://openalex.org/W4205228770","https://openalex.org/W4220814249","https://openalex.org/W4240429504","https://openalex.org/W4245384076"],"related_works":["https://openalex.org/W4375867731","https://openalex.org/W2404937507","https://openalex.org/W3121186197","https://openalex.org/W2373849942","https://openalex.org/W151161666","https://openalex.org/W2030757640","https://openalex.org/W2118407572","https://openalex.org/W2071653420","https://openalex.org/W2260291664","https://openalex.org/W2360464208"],"abstract_inverted_index":{"As":[0],"artificial":[1],"intelligence":[2],"continues":[3],"to":[4,24,123,157,178,202,290],"drive":[5],"advancements":[6],"in":[7,11,28,53,65,104,241,261,317],"computer":[8,66,265],"vision,":[9],"particularly":[10],"areas":[12],"such":[13,133],"as":[14,134],"image":[15,108,126,321],"analysis,":[16],"object":[17],"detection,":[18],"and":[19,99,130,153,182,231,256,274],"facial":[20,135],"recognition,":[21],"the":[22,44,49,75,82,93,100,117,145,148,151,158,172,183,186,200,249,257,262,269,284,308],"ability":[23],"accurately":[25],"recognize":[26],"patterns":[27],"visual":[29,180],"data":[30,51,76,181,224,260,275,291],"has":[31],"become":[32],"a":[33,192,229,238,279,300],"central":[34],"focus":[35,215],"of":[36,95,150,161,170,185,234,264,286],"research.":[37],"However,":[38],"alongside":[39],"these":[40,296],"advances,":[41],"concerns":[42],"about":[43],"privacy":[45,101,165,194,218,243,302,309],"risks":[46,102,219,310],"associated":[47,311],"with":[48,312],"training":[50,105],"used":[52,316],"AI":[54],"models":[55,106,289,315],"have":[56],"also":[57],"gained":[58],"prominence.":[59],"Deep":[60],"learning":[61,121,288,314],"models,":[62],"frequently":[63],"employed":[64],"vision":[67],"tasks,":[68],"can":[69,115,143,206],"unintentionally":[70],"expose":[71],"sensitive":[72,208],"information":[73],"from":[74,119],"they":[77],"are":[78],"trained":[79],"on,":[80],"raising":[81],"need":[83],"for":[84,320],"comprehensive":[85],"research":[86],"into":[87],"privacy-preserving":[88],"techniques.":[89,245],"This":[90,189,246],"paper":[91,190,247],"explores":[92],"intersection":[94],"AI-driven":[96],"pattern":[97,318],"recognition":[98,319],"involved":[103],"on":[107,216,295],"data.":[109,209,322],"Existing":[110],"studies":[111],"show":[112],"that":[113,197,282],"attackers":[114,142],"exploit":[116],"gradients":[118,149],"deep":[120,287,313],"processes":[122],"reconstruct":[124,207],"original":[125,258],"data,":[127,141,155,253],"including":[128],"personal":[129],"identifiable":[131],"information,":[132],"features.":[136],"By":[137,267],"iteratively":[138],"adjusting":[139],"input":[140,259],"minimize":[144],"difference":[146],"between":[147,174,271],"random":[152],"stolen":[154],"leading":[156],"full":[159],"reconstruction":[160,292],"private":[162],"images.":[163],"Current":[164],"protection":[166,244],"methods":[167],"fall":[168],"short":[169],"explaining":[171],"relationship":[173],"an":[175],"attacker\u2019s":[176],"capacity":[177],"recover":[179],"structure":[184],"targeted":[187],"model.":[188],"introduces":[191],"novel":[193,280,301],"auditing":[195,303],"framework":[196],"directly":[198],"assesses":[199],"extent":[201],"which":[203,213],"gradient-based":[204],"attacks":[205],"Unlike":[210],"traditional":[211],"methods,":[212],"mainly":[214],"mitigating":[217],"through":[220],"model":[221,254],"regularization":[222],"or":[223],"obfuscation,":[225],"our":[226],"approach":[227],"provides":[228],"systematic":[230],"quantitative":[232],"evaluation":[233],"gradient":[235,272],"leakage,":[236],"filling":[237],"critical":[239],"gap":[240],"existing":[242],"investigates":[248],"relationships":[250],"among":[251],"reconstructed":[252],"gradients,":[255],"context":[263],"vision.":[266],"formalizing":[268],"connection":[270],"similarity":[273],"similarity,":[276],"we":[277,298],"propose":[278,299],"methodology":[281],"quantifies":[283],"vulnerability":[285],"attacks.":[293],"Building":[294],"insights,":[297],"method":[304],"aimed":[305],"at":[306],"evaluating":[307]},"counts_by_year":[],"updated_date":"2026-04-15T08:11:43.952461","created_date":"2025-10-10T00:00:00"}
