{"id":"https://openalex.org/W4364856190","doi":"https://doi.org/10.1109/tai.2023.3266419","title":"Capacity Abuse Attack of Deep Learning Models Without Need of Label Encodings","display_name":"Capacity Abuse Attack of Deep Learning Models Without Need of Label Encodings","publication_year":2023,"publication_date":"2023-04-11","ids":{"openalex":"https://openalex.org/W4364856190","doi":"https://doi.org/10.1109/tai.2023.3266419"},"language":"en","primary_location":{"id":"doi:10.1109/tai.2023.3266419","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tai.2023.3266419","pdf_url":null,"source":{"id":"https://openalex.org/S4210169448","display_name":"IEEE Transactions on Artificial Intelligence","issn_l":"2691-4581","issn":["2691-4581"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Artificial Intelligence","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5001184471","display_name":"Wenjian Luo","orcid":"https://orcid.org/0000-0002-8357-1655"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]},{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenjian Luo","raw_affiliation_strings":["Guangdong Provincial Key Laboratory of Novel Security Intelligence Technologies, School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, China","Peng Cheng Laboratory, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0002-8357-1655","affiliations":[{"raw_affiliation_string":"Guangdong Provincial Key Laboratory of Novel Security Intelligence Technologies, School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, China","institution_ids":["https://openalex.org/I204983213"]},{"raw_affiliation_string":"Peng Cheng Laboratory, Shenzhen, China","institution_ids":["https://openalex.org/I4210136793"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029027592","display_name":"Licai Zhang","orcid":"https://orcid.org/0000-0002-3399-2152"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Licai Zhang","raw_affiliation_strings":["Guangdong Provincial Key Laboratory of Novel Security Intelligence Technologies, School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Guangdong Provincial Key Laboratory of Novel Security Intelligence Technologies, School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101866995","display_name":"Yulin Wu","orcid":"https://orcid.org/0000-0001-7952-7136"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yulin Wu","raw_affiliation_strings":["Guangdong Provincial Key Laboratory of Novel Security Intelligence Technologies, School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0001-7952-7136","affiliations":[{"raw_affiliation_string":"Guangdong Provincial Key Laboratory of Novel Security Intelligence Technologies, School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103171964","display_name":"Chuanyi Liu","orcid":"https://orcid.org/0000-0002-9846-9709"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chuanyi Liu","raw_affiliation_strings":["Guangdong Provincial Key Laboratory of Novel Security Intelligence Technologies, School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Guangdong Provincial Key Laboratory of Novel Security Intelligence Technologies, School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086732255","display_name":"Peiyi Han","orcid":"https://orcid.org/0000-0002-3845-7749"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peiyi Han","raw_affiliation_strings":["Guangdong Provincial Key Laboratory of Novel Security Intelligence Technologies, School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0002-3845-7749","affiliations":[{"raw_affiliation_string":"Guangdong Provincial Key Laboratory of Novel Security Intelligence Technologies, School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5074864125","display_name":"Rongfei Zhuang","orcid":null},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Rongfei Zhuang","raw_affiliation_strings":["Guangdong Provincial Key Laboratory of Novel Security Intelligence Technologies, School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Guangdong Provincial Key Laboratory of Novel Security Intelligence Technologies, School of Computer Science and Technology, Harbin Institute of Technology, Shenzhen, China","institution_ids":["https://openalex.org/I204983213"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.4759,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.670887,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"5","issue":"2","first_page":"814","last_page":"826"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9483000040054321,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9424999952316284,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/mnist-database","display_name":"MNIST database","score":0.7787057161331177},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6881645917892456},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.6880143284797668},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.6126018762588501},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5161998867988586},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4818671643733978},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.47898197174072266},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.4563186764717102},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4484902024269104}],"concepts":[{"id":"https://openalex.org/C190502265","wikidata":"https://www.wikidata.org/wiki/Q17069496","display_name":"MNIST database","level":3,"score":0.7787057161331177},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6881645917892456},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.6880143284797668},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6126018762588501},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5161998867988586},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4818671643733978},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.47898197174072266},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.4563186764717102},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4484902024269104},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tai.2023.3266419","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tai.2023.3266419","pdf_url":null,"source":{"id":"https://openalex.org/S4210169448","display_name":"IEEE Transactions on Artificial Intelligence","issn_l":"2691-4581","issn":["2691-4581"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Artificial Intelligence","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.7300000190734863}],"awards":[{"id":"https://openalex.org/G8061681544","display_name":null,"funder_award_id":"JCYJ20220818102414030","funder_id":"https://openalex.org/F4320329791","funder_display_name":"Shenzhen Fundamental Research Program"}],"funders":[{"id":"https://openalex.org/F4320329791","display_name":"Shenzhen Fundamental Research Program","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":40,"referenced_works":["https://openalex.org/W1686810756","https://openalex.org/W2007339694","https://openalex.org/W2051267297","https://openalex.org/W2146292423","https://openalex.org/W2402144811","https://openalex.org/W2535690855","https://openalex.org/W2566079294","https://openalex.org/W2750384547","https://openalex.org/W2757528734","https://openalex.org/W2766736793","https://openalex.org/W2775795276","https://openalex.org/W2778284298","https://openalex.org/W2786233556","https://openalex.org/W2795435272","https://openalex.org/W2897830718","https://openalex.org/W2912023992","https://openalex.org/W2919115771","https://openalex.org/W2934843808","https://openalex.org/W2946363484","https://openalex.org/W2954996726","https://openalex.org/W2962835266","https://openalex.org/W2985580374","https://openalex.org/W3035616549","https://openalex.org/W3104224589","https://openalex.org/W3118608800","https://openalex.org/W3122816307","https://openalex.org/W3159834477","https://openalex.org/W3162893999","https://openalex.org/W3168455774","https://openalex.org/W3213185541","https://openalex.org/W4206426144","https://openalex.org/W4287511865","https://openalex.org/W6628547770","https://openalex.org/W6637373629","https://openalex.org/W6743688258","https://openalex.org/W6746849571","https://openalex.org/W6747553010","https://openalex.org/W6760759230","https://openalex.org/W6775078712","https://openalex.org/W6787972765"],"related_works":["https://openalex.org/W2950475743","https://openalex.org/W4386603768","https://openalex.org/W2886711096","https://openalex.org/W4380078352","https://openalex.org/W3046591097","https://openalex.org/W2590796488","https://openalex.org/W4389249638","https://openalex.org/W4380075502","https://openalex.org/W3194633786","https://openalex.org/W3000197790"],"abstract_inverted_index":{"In":[0,14],"recent":[1],"years,":[2],"machine":[3],"learning":[4,9],"(ML)":[5],"models,":[6,10],"especially":[7],"deep":[8],"have":[11],"become":[12],"commodities.":[13],"this":[15,163],"context,":[16],"data":[17,24,37,58,80,83,101,108],"centers":[18],"which":[19,60,177],"hold":[20],"a":[21,55,166],"lot":[22],"of":[23,57,161,198],"often":[25],"buy":[26],"ML":[27,30],"models":[28,43],"from":[29],"model":[31,145,194],"providers,":[32],"train":[33],"them":[34],"on":[35,205],"their":[36],"locally":[38],"and":[39,85,126,146,195,208,211,234],"use":[40],"the":[41,67,78,86,92,99,107,113,131,135,139,143,147,151,159,180,184,187,192,196,199,223,231,237],"trained":[42,144,193],"to":[44,109,133],"provide":[45],"intelligent":[46],"services.":[47],"Existing":[48],"work":[49],"has":[50],"shown":[51],"that":[52,75,215],"there":[53,70],"is":[54,91,128],"risk":[56],"leakage,":[59],"could":[61],"cause":[62],"incalculable":[63],"consequences.":[64],"Even":[65],"under":[66],"black-box":[68],"condition,":[69],"are":[71,116,203,220],"still":[72],"some":[73],"attacks":[74],"can":[76,178,228],"steal":[77,98],"private":[79],"held":[81],"by":[82,102,142,191,222],"centers,":[84],"capacity":[87,172],"abuse":[88,173],"attack":[89,94,169,174,226],"(CAA)":[90],"state-of-the-art":[93],"method.":[95],"CAA":[96,154],"attackers":[97],"training":[100,238],"labeling":[103],"malicious":[104],"samples":[105],"with":[106],"be":[110],"stolen.":[111],"However,":[112],"label":[114,148],"encodings":[115],"usually":[117],"mapped":[118],"into":[119],"other":[120],"output":[121,141,185],"forms,":[122],"such":[123],"as":[124],"categories,":[125],"it":[127],"impossible":[129],"for":[130],"adversary":[132],"know":[134],"mapping":[136,152,181,232],"relationship":[137,182,233],"between":[138,183],"form":[140,189],"encodings.":[149],"Without":[150],"relationship,":[153],"becomes":[155],"invalid.":[156],"Aiming":[157],"at":[158],"limitation":[160],"CAA,":[162],"study":[164],"proposes":[165],"novel":[167],"practical":[168],"method,":[170],"i.e.,":[171],"II":[175],"(CAAII),":[176],"find":[179,230],"in":[186],"arbitrary":[188],"returned":[190,221],"values":[197],"stolen":[200],"data.":[201,239],"Experiments":[202],"conducted":[204],"MNIST,":[206],"Fashion-MNIST,":[207],"CIFAR10":[209],"datasets,":[210],"experimental":[212],"results":[213],"show":[214],"no":[216],"matter":[217],"what":[218],"forms":[219],"model,":[224],"our":[225],"method":[227],"always":[229],"successfully":[235],"steals":[236]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}