{"id":"https://openalex.org/W4285196615","doi":"https://doi.org/10.1109/tdsc.2022.3180828","title":"Membership Inference Attacks Against Machine Learning Models via Prediction Sensitivity","display_name":"Membership Inference Attacks Against Machine Learning Models via Prediction Sensitivity","publication_year":2022,"publication_date":"2022-01-01","ids":{"openalex":"https://openalex.org/W4285196615","doi":"https://doi.org/10.1109/tdsc.2022.3180828"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2022.3180828","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2022.3180828","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5077462473","display_name":"Lan Liu","orcid":"https://orcid.org/0000-0002-0948-1627"},"institutions":[{"id":"https://openalex.org/I40963666","display_name":"Central China Normal University","ror":"https://ror.org/03x1jna21","country_code":"CN","type":"education","lineage":["https://openalex.org/I40963666"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lan Liu","raw_affiliation_strings":["National Engineering Research Center for Educational Big Data, Central China Normal University, Wuhan, Hubei, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Engineering Research Center for Educational Big Data, Central China Normal University, Wuhan, Hubei, China","institution_ids":["https://openalex.org/I40963666"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100731512","display_name":"Yi Wang","orcid":"https://orcid.org/0000-0002-7495-6334"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yi Wang","raw_affiliation_strings":["Hubei Key Laboratory of Smart Internet Technology, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hubei Key Laboratory of Smart Internet Technology, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5104666790","display_name":"Gaoyang Liu","orcid":"https://orcid.org/0000-0003-2566-9360"},"institutions":[{"id":"https://openalex.org/I18014758","display_name":"Simon Fraser University","ror":"https://ror.org/0213rcc28","country_code":"CA","type":"education","lineage":["https://openalex.org/I18014758"]},{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CA","CN"],"is_corresponding":false,"raw_author_name":"Gaoyang Liu","raw_affiliation_strings":["Hubei Key Laboratory of Smart Internet Technology, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China","School of Computing Science, Simon Fraser University, Burnaby,, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hubei Key Laboratory of Smart Internet Technology, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]},{"raw_affiliation_string":"School of Computing Science, Simon Fraser University, Burnaby,, Canada","institution_ids":["https://openalex.org/I18014758"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101861025","display_name":"Kai Peng","orcid":"https://orcid.org/0000-0001-9910-4237"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kai Peng","raw_affiliation_strings":["Hubei Key Laboratory of Smart Internet Technology, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0001-9910-4237","affiliations":[{"raw_affiliation_string":"Hubei Key Laboratory of Smart Internet Technology, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100337659","display_name":"Chen Wang","orcid":"https://orcid.org/0000-0003-1963-4954"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chen Wang","raw_affiliation_strings":["Hubei Key Laboratory of Smart Internet Technology, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0003-1963-4954","affiliations":[{"raw_affiliation_string":"Hubei Key Laboratory of Smart Internet Technology, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":5.1015,"has_fulltext":false,"cited_by_count":45,"citation_normalized_percentile":{"value":0.95987,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.972000002861023,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7362830638885498},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.6741812229156494},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6512926816940308},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6244661808013916},{"id":"https://openalex.org/keywords/sensitivity","display_name":"Sensitivity (control systems)","score":0.5221341252326965},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5158697366714478},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.5131662487983704},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.4771656095981598},{"id":"https://openalex.org/keywords/data-modeling","display_name":"Data modeling","score":0.46749722957611084},{"id":"https://openalex.org/keywords/jacobian-matrix-and-determinant","display_name":"Jacobian matrix and determinant","score":0.4601064920425415},{"id":"https://openalex.org/keywords/feature-vector","display_name":"Feature vector","score":0.45299670100212097},{"id":"https://openalex.org/keywords/sample","display_name":"Sample (material)","score":0.4507560133934021},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.37833595275878906},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.1272886097431183}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7362830638885498},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.6741812229156494},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6512926816940308},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6244661808013916},{"id":"https://openalex.org/C21200559","wikidata":"https://www.wikidata.org/wiki/Q7451068","display_name":"Sensitivity (control systems)","level":2,"score":0.5221341252326965},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5158697366714478},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.5131662487983704},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.4771656095981598},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.46749722957611084},{"id":"https://openalex.org/C200331156","wikidata":"https://www.wikidata.org/wiki/Q506041","display_name":"Jacobian matrix and determinant","level":2,"score":0.4601064920425415},{"id":"https://openalex.org/C83665646","wikidata":"https://www.wikidata.org/wiki/Q42139305","display_name":"Feature vector","level":2,"score":0.45299670100212097},{"id":"https://openalex.org/C198531522","wikidata":"https://www.wikidata.org/wiki/Q485146","display_name":"Sample (material)","level":2,"score":0.4507560133934021},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.37833595275878906},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.1272886097431183},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C28826006","wikidata":"https://www.wikidata.org/wiki/Q33521","display_name":"Applied mathematics","level":1,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0},{"id":"https://openalex.org/C43617362","wikidata":"https://www.wikidata.org/wiki/Q170050","display_name":"Chromatography","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C24326235","wikidata":"https://www.wikidata.org/wiki/Q126095","display_name":"Electronic engineering","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2022.3180828","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2022.3180828","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.4399999976158142,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G2077566469","display_name":"\u4f4d\u7f6e\u670d\u52a1\u4e2d\u57fa\u4e8e\u201c\u65f6-\u7a7a-\u793e\u4ea4\u201d\u5173\u8054\u6027\u7684\u8f68\u8ff9k\u533f\u540d\u5173\u952e\u6280\u672f\u7814\u7a76","funder_award_id":"61872416","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2616141538","display_name":null,"funder_award_id":"62002104","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7481879049","display_name":null,"funder_award_id":"62171189","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W2535690855","https://openalex.org/W2765094417","https://openalex.org/W2786622092","https://openalex.org/W2795435272","https://openalex.org/W2897417239","https://openalex.org/W2901232240","https://openalex.org/W2913608349","https://openalex.org/W2930926105","https://openalex.org/W2944442501","https://openalex.org/W2945237470","https://openalex.org/W2948030332","https://openalex.org/W2956128647","https://openalex.org/W2962821226","https://openalex.org/W2963378725","https://openalex.org/W2963844355","https://openalex.org/W2998183189","https://openalex.org/W3008580825","https://openalex.org/W3015481738","https://openalex.org/W3046102592","https://openalex.org/W3103245149","https://openalex.org/W3123057515","https://openalex.org/W3138758728","https://openalex.org/W3168146198","https://openalex.org/W3170901302","https://openalex.org/W3176065393","https://openalex.org/W3214437258","https://openalex.org/W6748230616","https://openalex.org/W6763077247","https://openalex.org/W6765055791","https://openalex.org/W6774484160"],"related_works":["https://openalex.org/W2007405763","https://openalex.org/W1486373823","https://openalex.org/W3136087161","https://openalex.org/W2053762185","https://openalex.org/W2119578520","https://openalex.org/W2018238589","https://openalex.org/W3158596343","https://openalex.org/W4285322112","https://openalex.org/W4292794239","https://openalex.org/W4385572030"],"abstract_inverted_index":{"Machine":[0],"learning":[1],"(ML)":[2],"has":[3,73],"achieved":[4],"huge":[5],"success":[6],"in":[7,98],"recent":[8],"years,":[9],"but":[10],"is":[11,61],"also":[12],"vulnerable":[13],"to":[14,41,48,115],"various":[15],"attacks.":[16,197],"In":[17,122],"this":[18,44,123],"article,":[19,124],"we":[20,125,149],"concentrate":[21],"on":[22,186],"membership":[23,163],"inference":[24,196],"attacks":[25],"and":[26,37,143],"propose":[27],"Aster,":[28],"which":[29,134],"merely":[30],"requires":[31],"the":[32,50,63,81,99,103,106,111,119,127,131,137,144,151,162,166,176],"target":[33,112,167,177],"model's":[34,168],"black-box":[35],"API":[36],"a":[38,67,93,154],"data":[39,65,83,170],"sample":[40,45,108],"determine":[42],"whether":[43],"was":[46],"used":[47],"train":[49],"given":[51],"ML":[52,70],"model":[53,71,113,178],"or":[54,179],"not.":[55],"The":[56,183],"key":[57],"idea":[58],"of":[59,66,80,105,165],"Aster":[60,159],"that":[62,79,90,190],"training":[64,94,157,169,181],"fully":[68],"trained":[69],"usually":[72],"lower":[74,155],"prediction":[75,104,128],"sensitivities":[76],"compared":[77],"with":[78,118,130,153,171],"non-training":[82],"(i.e.,":[84],"testing":[85],"data).":[86],"Less":[87],"sensitivity":[88,129],"means":[89],"when":[91],"perturbing":[92],"sample's":[95],"feature":[96,101],"value":[97],"corresponding":[100,145],"space,":[102],"perturbed":[107],"obtained":[109],"from":[110],"tends":[114],"be":[116],"consistent":[117],"original":[120],"prediction.":[121],"quantify":[126],"Jacobian":[132],"matrix":[133],"could":[135],"reflect":[136],"relationship":[138],"between":[139],"each":[140],"feature's":[141],"perturbation":[142],"prediction's":[146],"change.":[147],"Then":[148],"regard":[150],"samples":[152],"as":[156],"data.":[158,182],"can":[160],"breach":[161],"privacy":[164],"no":[172],"prior":[173],"knowledge":[174],"about":[175],"its":[180],"experiment":[184],"results":[185],"four":[187],"datasets":[188],"show":[189],"our":[191],"method":[192],"outperforms":[193],"three":[194],"state-of-the-art":[195]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":18},{"year":2024,"cited_by_count":13},{"year":2023,"cited_by_count":13}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}