{"id":"https://openalex.org/W3122816307","doi":"https://doi.org/10.1109/sp46214.2022.9833623","title":"Property Inference from Poisoning","display_name":"Property Inference from Poisoning","publication_year":2022,"publication_date":"2022-05-01","ids":{"openalex":"https://openalex.org/W3122816307","doi":"https://doi.org/10.1109/sp46214.2022.9833623","mag":"3122816307"},"language":"en","primary_location":{"id":"doi:10.1109/sp46214.2022.9833623","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46214.2022.9833623","pdf_url":null,"source":{"id":"https://openalex.org/S4363606603","display_name":"2022 IEEE Symposium on Security and Privacy (SP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5049153799","display_name":"Saeed Mahloujifar","orcid":"https://orcid.org/0000-0001-6586-8378"},"institutions":[{"id":"https://openalex.org/I20089843","display_name":"Princeton University","ror":"https://ror.org/00hx57361","country_code":"US","type":"education","lineage":["https://openalex.org/I20089843"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Saeed Mahloujifar","raw_affiliation_strings":["Princeton University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Princeton University","institution_ids":["https://openalex.org/I20089843"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053661277","display_name":"Esha Ghosh","orcid":"https://orcid.org/0009-0002-6937-9197"},"institutions":[{"id":"https://openalex.org/I4210164937","display_name":"Microsoft Research (United Kingdom)","ror":"https://ror.org/05k87vq12","country_code":"GB","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210164937"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Esha Ghosh","raw_affiliation_strings":["Microsoft Research"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research","institution_ids":["https://openalex.org/I4210164937"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5016806686","display_name":"Melissa Chase","orcid":"https://orcid.org/0009-0003-8333-3942"},"institutions":[{"id":"https://openalex.org/I4210164937","display_name":"Microsoft Research (United Kingdom)","ror":"https://ror.org/05k87vq12","country_code":"GB","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210164937"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Melissa Chase","raw_affiliation_strings":["Microsoft Research"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research","institution_ids":["https://openalex.org/I4210164937"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":64,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1120","last_page":"1137"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9537000060081482,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.7517011761665344},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.742579460144043},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7360131144523621},{"id":"https://openalex.org/keywords/mnist-database","display_name":"MNIST database","score":0.7251689434051514},{"id":"https://openalex.org/keywords/generalization","display_name":"Generalization","score":0.629862904548645},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5351245403289795},{"id":"https://openalex.org/keywords/property","display_name":"Property (philosophy)","score":0.5207557678222656},{"id":"https://openalex.org/keywords/information-leakage","display_name":"Information leakage","score":0.4883860945701599},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4744744598865509},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.4667159914970398},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.4510461986064911},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.43771976232528687},{"id":"https://openalex.org/keywords/statistical-inference","display_name":"Statistical inference","score":0.4130031168460846},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3361471891403198},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.2846206724643707},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.13831543922424316},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.13257429003715515},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.10791036486625671}],"concepts":[{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.7517011761665344},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.742579460144043},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7360131144523621},{"id":"https://openalex.org/C190502265","wikidata":"https://www.wikidata.org/wiki/Q17069496","display_name":"MNIST database","level":3,"score":0.7251689434051514},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.629862904548645},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5351245403289795},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.5207557678222656},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.4883860945701599},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4744744598865509},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.4667159914970398},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.4510461986064911},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.43771976232528687},{"id":"https://openalex.org/C134261354","wikidata":"https://www.wikidata.org/wiki/Q938438","display_name":"Statistical inference","level":2,"score":0.4130031168460846},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3361471891403198},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.2846206724643707},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.13831543922424316},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.13257429003715515},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.10791036486625671},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/sp46214.2022.9833623","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46214.2022.9833623","pdf_url":null,"source":{"id":"https://openalex.org/S4363606603","display_name":"2022 IEEE Symposium on Security and Privacy (SP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":71,"referenced_works":["https://openalex.org/W1603920809","https://openalex.org/W1873763122","https://openalex.org/W1945616565","https://openalex.org/W1992926795","https://openalex.org/W2051267297","https://openalex.org/W2096733369","https://openalex.org/W2099942492","https://openalex.org/W2112507308","https://openalex.org/W2535690855","https://openalex.org/W2640329709","https://openalex.org/W2765913967","https://openalex.org/W2774423163","https://openalex.org/W2810065831","https://openalex.org/W2884943453","https://openalex.org/W2895435412","https://openalex.org/W2897830718","https://openalex.org/W2898998737","https://openalex.org/W2903356604","https://openalex.org/W2930926105","https://openalex.org/W2942689850","https://openalex.org/W2945237470","https://openalex.org/W2946930197","https://openalex.org/W2949506549","https://openalex.org/W2952604841","https://openalex.org/W2952847324","https://openalex.org/W2962797544","https://openalex.org/W2962835266","https://openalex.org/W2963343288","https://openalex.org/W2963351358","https://openalex.org/W2963353335","https://openalex.org/W2963422767","https://openalex.org/W2963456518","https://openalex.org/W2963844355","https://openalex.org/W2963888996","https://openalex.org/W2963952467","https://openalex.org/W2964135521","https://openalex.org/W2967985550","https://openalex.org/W2970115835","https://openalex.org/W2989993581","https://openalex.org/W2991196813","https://openalex.org/W3013068160","https://openalex.org/W3014026878","https://openalex.org/W3017335724","https://openalex.org/W3037024761","https://openalex.org/W3037974410","https://openalex.org/W3038527243","https://openalex.org/W3046102592","https://openalex.org/W3101678025","https://openalex.org/W3103245149","https://openalex.org/W3104224589","https://openalex.org/W3117572899","https://openalex.org/W3120740533","https://openalex.org/W3164762628","https://openalex.org/W3170901302","https://openalex.org/W3217759167","https://openalex.org/W4294597994","https://openalex.org/W4297788840","https://openalex.org/W4298140072","https://openalex.org/W6639246211","https://openalex.org/W6676935882","https://openalex.org/W6739088070","https://openalex.org/W6745621080","https://openalex.org/W6750462152","https://openalex.org/W6752600739","https://openalex.org/W6756840679","https://openalex.org/W6763077247","https://openalex.org/W6763393573","https://openalex.org/W6770874842","https://openalex.org/W6775482175","https://openalex.org/W6779726776","https://openalex.org/W6780416327"],"related_works":["https://openalex.org/W4386603768","https://openalex.org/W2950475743","https://openalex.org/W2886711096","https://openalex.org/W2750384547","https://openalex.org/W4380078352","https://openalex.org/W3046591097","https://openalex.org/W4389249638","https://openalex.org/W2733410219","https://openalex.org/W189451467","https://openalex.org/W3194633786"],"abstract_inverted_index":{"Property":[0],"inference":[1,31],"attacks":[2,59,77,97,223],"consider":[3],"an":[4],"adversary":[5,36,83],"who":[6],"has":[7,140],"access":[8],"to":[9,16,63,85,201],"a":[10,40,109],"trained":[11,226],"ML":[12],"model":[13,112,192],"and":[14,104,158,176,191,196,229],"tries":[15],"extract":[17],"some":[18,117],"global":[19],"statistics":[20],"of":[21,42,51,67,81,90,118,184,216],"the":[22,35,43,49,53,65,71,79,82,87,91,100,119,136,165,182,185,240],"training":[23,44,166,186],"data.":[24],"In":[25],"this":[26],"work,":[27],"we":[28,74,145,230],"study":[29,75],"property":[30],"in":[32,113,164,214],"scenarios":[33],"where":[34,78,116],"can":[37,98,130],"maliciously":[38],"control":[39],"part":[41],"data":[45,120,167,187],"(poisoning":[46],"data)":[47],"with":[48,181,206,227,234],"goal":[50,80],"increasing":[52],"leakage.":[54],"Previous":[55],"works":[56],"on":[57,61,149,224],"poisoning":[58,76,96,209,213],"focused":[60],"trying":[62],"decrease":[64],"accuracy":[66,205],"models.":[68],"Here,":[69],"for":[70,238],"first":[72],"time,":[73],"is":[84,242,254],"increase":[86],"information":[88,101],"leakage":[89,102],"model.":[92],"We":[93,198,219],"show":[94,231],"that":[95,127,170,178,232],"boost":[99],"significantly":[103],"should":[105],"be":[106,123],"considered":[107],"as":[108,133,135,168,174],"stronger":[110],"threat":[111],"sensitive":[114],"applications":[115],"sources":[121],"may":[122],"malicious.We":[124],"theoretically":[125],"prove":[126],"our":[128,148,217,222],"attack":[129,204,241],"always":[131],"succeed":[132],"long":[134],"learning":[137],"algorithm":[138],"used":[139],"good":[141],"generalization":[142],"properties.":[143],"Then":[144],"experimentally":[146],"evaluate":[147],"different":[150],"datasets":[151],"(Census":[152],"dataset,":[153,156],"Enron":[154],"email":[155],"MNIST":[157],"CelebA),":[159],"properties":[160,177],"(that":[161],"are":[162,171,179],"present":[163,173],"features,":[169,175],"not":[172],"uncorrelated":[180],"rest":[183],"or":[188],"classification":[189],"task)":[190],"architectures":[193],"(including":[194],"Resnet-18":[195],"Resnet-50).":[197],"were":[199],"able":[200],"achieve":[202],"high":[203],"relatively":[207],"low":[208],"rate,":[210],"namely,":[211],"2\u20133%":[212],"most":[215],"experiments.":[218],"also":[220],"evaluated":[221],"models":[225],"DP":[228],"even":[233],"very":[235],"small":[236],"values":[237],"$\\epsilon$,":[239],"still":[243],"quite":[244],"successful":[245],"<sup":[246,250],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[247,251],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">1</sup>":[248,252],".":[249],"Code":[253],"available":[255],"at":[256],"https://github.com/smahloujifar/PropertyInferenceFromPoisoning.git":[257]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":11},{"year":2024,"cited_by_count":26},{"year":2023,"cited_by_count":14},{"year":2022,"cited_by_count":7},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}