{"id":"https://openalex.org/W4408353799","doi":"https://doi.org/10.1109/icassp49660.2025.10889013","title":"Generating Is Believing: Membership Inference Attacks against Retrieval-Augmented Generation","display_name":"Generating Is Believing: Membership Inference Attacks against Retrieval-Augmented Generation","publication_year":2025,"publication_date":"2025-03-12","ids":{"openalex":"https://openalex.org/W4408353799","doi":"https://doi.org/10.1109/icassp49660.2025.10889013"},"language":"en","primary_location":{"id":"doi:10.1109/icassp49660.2025.10889013","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp49660.2025.10889013","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2025 - 2025 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100358334","display_name":"Yuying Li","orcid":"https://orcid.org/0000-0003-2045-7422"},"institutions":[{"id":"https://openalex.org/I75900474","display_name":"Hubei University","ror":"https://ror.org/03a60m280","country_code":"CN","type":"education","lineage":["https://openalex.org/I75900474"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuying Li","raw_affiliation_strings":["Hubei University,Key Laboratory of Intelligent Sensing System and Security (Ministry of Education), School of Artificial Intelligence,Wuhan,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hubei University,Key Laboratory of Intelligent Sensing System and Security (Ministry of Education), School of Artificial Intelligence,Wuhan,China","institution_ids":["https://openalex.org/I75900474"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000502468","display_name":"Gaoyang Liu","orcid":"https://orcid.org/0000-0003-3820-5012"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Gaoyang Liu","raw_affiliation_strings":["Huazhong University of Science and Technology,Hubei Key Laboratory of Smart Internet Technology,Wuhan,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology,Hubei Key Laboratory of Smart Internet Technology,Wuhan,China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100337659","display_name":"Chen Wang","orcid":"https://orcid.org/0000-0003-1963-4954"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chen Wang","raw_affiliation_strings":["Huazhong University of Science and Technology,Hubei Key Laboratory of Smart Internet Technology,Wuhan,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology,Hubei Key Laboratory of Smart Internet Technology,Wuhan,China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100397644","display_name":"Yang Yang","orcid":"https://orcid.org/0000-0002-6297-5722"},"institutions":[{"id":"https://openalex.org/I75900474","display_name":"Hubei University","ror":"https://ror.org/03a60m280","country_code":"CN","type":"education","lineage":["https://openalex.org/I75900474"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yang Yang","raw_affiliation_strings":["Hubei University,Key Laboratory of Intelligent Sensing System and Security (Ministry of Education), School of Artificial Intelligence,Wuhan,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hubei University,Key Laboratory of Intelligent Sensing System and Security (Ministry of Education), School of Artificial Intelligence,Wuhan,China","institution_ids":["https://openalex.org/I75900474"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.9937000274658203,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.9937000274658203,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.9908999800682068,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12761","display_name":"Data Stream Mining Techniques","score":0.9825999736785889,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7308464646339417},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.7241721153259277},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.4469256103038788},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.43225157260894775}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7308464646339417},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.7241721153259277},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.4469256103038788},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.43225157260894775}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icassp49660.2025.10889013","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp49660.2025.10889013","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2025 - 2025 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320311649","display_name":"Ministry of Education","ror":"https://ror.org/036nq5137"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":42,"referenced_works":["https://openalex.org/W2795435272","https://openalex.org/W2912924812","https://openalex.org/W2963339397","https://openalex.org/W3099700870","https://openalex.org/W4385565597","https://openalex.org/W4385570777","https://openalex.org/W4389519977","https://openalex.org/W4389520346","https://openalex.org/W4390872063","https://openalex.org/W4392902876","https://openalex.org/W4393147010","https://openalex.org/W4400526036","https://openalex.org/W4401042773","https://openalex.org/W4401857375","https://openalex.org/W4401863775","https://openalex.org/W4402670423","https://openalex.org/W4402727605","https://openalex.org/W4404782124","https://openalex.org/W4407278810","https://openalex.org/W6755207826","https://openalex.org/W6778883912","https://openalex.org/W6779857854","https://openalex.org/W6787335730","https://openalex.org/W6849413121","https://openalex.org/W6849803059","https://openalex.org/W6849921291","https://openalex.org/W6854866820","https://openalex.org/W6856096788","https://openalex.org/W6856709431","https://openalex.org/W6857316800","https://openalex.org/W6857884920","https://openalex.org/W6858095362","https://openalex.org/W6861356901","https://openalex.org/W6861580032","https://openalex.org/W6861581687","https://openalex.org/W6865198814","https://openalex.org/W6868873928","https://openalex.org/W6869046122","https://openalex.org/W6869329068","https://openalex.org/W6869548607","https://openalex.org/W6872667632","https://openalex.org/W6929472810"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Retrieval-Augmented":[0],"Generation":[1],"(RAG)":[2],"is":[3,102,111,116,199],"a":[4,99,114,124,143,153],"state-of-the-art":[5],"technique":[6],"that":[7,112,147,187],"mitigates":[8],"issues":[9],"such":[10,64],"as":[11,65],"hallucinations":[12],"and":[13,156],"knowledge":[14,24],"staleness":[15],"in":[16,31,117],"Large":[17],"Language":[18],"Models":[19],"(LLMs)":[20],"by":[21,52,84,134,160,201],"retrieving":[22],"relevant":[23],"from":[25],"an":[26,56],"external":[27,57,91,119],"database":[28],"to":[29,80,130,174],"assist":[30],"content":[32,158],"generation.":[33],"Existing":[34],"research":[35],"has":[36],"demonstrated":[37],"potential":[38,173],"privacy":[39,49,88,178],"risks":[40,50],"associated":[41],"with":[42,93],"the":[43,48,53,94,105,118,131,135,149,157,161,172,176,180,197],"LLMs":[44],"of":[45,55,89,96,104,127,179],"RAG.":[46],"However,":[47],"posed":[51],"integration":[54],"database,":[58,92,120],"which":[59],"often":[60],"contains":[61],"sensitive":[62],"data":[63],"medical":[66],"records":[67],"or":[68],"personal":[69],"identities,":[70],"have":[71],"remained":[72],"largely":[73],"unexplored.":[74],"In":[75],"this":[76,82],"paper,":[77],"we":[78,170],"aim":[79,95],"bridge":[81],"gap":[83],"focusing":[85],"on":[86],"membership":[87,177],"RAG\u2019s":[90,106],"determining":[97],"whether":[98],"given":[100,154],"sample":[101,115,155],"part":[103],"database.":[107,182],"Our":[108],"basic":[109],"idea":[110],"if":[113],"it":[121],"will":[122],"exhibit":[123],"high":[125],"degree":[126],"semantic":[128],"similarity":[129],"text":[132],"generated":[133,159],"RAG":[136,162,181],"system.":[137,163],"We":[138],"present":[139],"S<sup":[140,167,188],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[141,168,189],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">2</sup>MIA,":[142,169],"Membership":[144],"Inference":[145],"Attack":[146],"utilizes":[148],"Semantic":[150],"Similarity":[151],"between":[152],"With":[164],"our":[165],"proposed":[166],"demonstrate":[171,186],"breach":[175],"Extensive":[183],"experimental":[184],"results":[185],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">2</sup>MIA":[190],"outperforms":[191],"five":[192],"existing":[193],"MIAs,":[194],"even":[195],"when":[196],"system":[198],"protected":[200],"three":[202],"representative":[203],"defenses.":[204]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":5}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}