{"id":"https://openalex.org/W4312331363","doi":"https://doi.org/10.1109/tdsc.2022.3222880","title":"Membership Inference Attacks Against Deep Learning Models via Logits Distribution","display_name":"Membership Inference Attacks Against Deep Learning Models via Logits Distribution","publication_year":2022,"publication_date":"2022-11-17","ids":{"openalex":"https://openalex.org/W4312331363","doi":"https://doi.org/10.1109/tdsc.2022.3222880"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2022.3222880","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2022.3222880","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5055842190","display_name":"Hongyang Yan","orcid":"https://orcid.org/0000-0002-1493-9671"},"institutions":[{"id":"https://openalex.org/I14243506","display_name":"Hong Kong Polytechnic University","ror":"https://ror.org/0030zas98","country_code":"HK","type":"education","lineage":["https://openalex.org/I14243506"]},{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN","HK"],"is_corresponding":false,"raw_author_name":"Hongyang Yan","raw_affiliation_strings":["Institute of Artificial Intelligence and Blockchain, Guangzhou University, Guangzhou, China","Department of Electronic and Information Engineering, Hong Kong Polytechnic University, Hong Kong, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Artificial Intelligence and Blockchain, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]},{"raw_affiliation_string":"Department of Electronic and Information Engineering, Hong Kong Polytechnic University, Hong Kong, China","institution_ids":["https://openalex.org/I14243506"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011984603","display_name":"Shuhao Li","orcid":"https://orcid.org/0000-0003-3465-4478"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shuhao Li","raw_affiliation_strings":["School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-3465-4478","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100455413","display_name":"Yajie Wang","orcid":"https://orcid.org/0000-0002-0962-4464"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yajie Wang","raw_affiliation_strings":["School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-0962-4464","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047829642","display_name":"Yaoyuan Zhang","orcid":"https://orcid.org/0000-0003-3732-0115"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yaoyuan Zhang","raw_affiliation_strings":["School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090688531","display_name":"Kashif Sharif","orcid":"https://orcid.org/0000-0001-7214-6568"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kashif Sharif","raw_affiliation_strings":["School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-7214-6568","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051088560","display_name":"Haibo Hu","orcid":"https://orcid.org/0000-0002-9008-2112"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haibo Hu","raw_affiliation_strings":["Institute of Artificial Intelligence and Blockchain, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-9008-2112","affiliations":[{"raw_affiliation_string":"Institute of Artificial Intelligence and Blockchain, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5026287089","display_name":"Yuanzhang Li","orcid":"https://orcid.org/0000-0002-1931-366X"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuanzhang Li","raw_affiliation_strings":["School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-1931-366X","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.2306,"has_fulltext":false,"cited_by_count":17,"citation_normalized_percentile":{"value":0.89707576,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":"20","issue":"5","first_page":"3799","last_page":"3808"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.9628999829292297,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8030871152877808},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.7706328630447388},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6016536355018616},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.6005731821060181},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5462474822998047},{"id":"https://openalex.org/keywords/data-modeling","display_name":"Data modeling","score":0.5126751661300659},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5029215216636658},{"id":"https://openalex.org/keywords/attack-model","display_name":"Attack model","score":0.48153334856033325},{"id":"https://openalex.org/keywords/shadow","display_name":"Shadow (psychology)","score":0.4427315592765808},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.19912543892860413}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8030871152877808},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.7706328630447388},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6016536355018616},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.6005731821060181},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5462474822998047},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.5126751661300659},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5029215216636658},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.48153334856033325},{"id":"https://openalex.org/C117797892","wikidata":"https://www.wikidata.org/wiki/Q286363","display_name":"Shadow (psychology)","level":2,"score":0.4427315592765808},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.19912543892860413},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2022.3222880","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2022.3222880","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1126671563","display_name":null,"funder_award_id":"62102107","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6454313764","display_name":null,"funder_award_id":"62072037","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7580715247","display_name":null,"funder_award_id":"61876019","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":55,"referenced_works":["https://openalex.org/W1473189865","https://openalex.org/W2535690855","https://openalex.org/W2566079294","https://openalex.org/W2623293810","https://openalex.org/W2623464795","https://openalex.org/W2786233556","https://openalex.org/W2795435272","https://openalex.org/W2884943453","https://openalex.org/W2887995258","https://openalex.org/W2897830718","https://openalex.org/W2899478368","https://openalex.org/W2930926105","https://openalex.org/W2946930197","https://openalex.org/W2963378725","https://openalex.org/W2963456518","https://openalex.org/W2965527189","https://openalex.org/W2989289980","https://openalex.org/W2998045710","https://openalex.org/W2998183189","https://openalex.org/W3004170295","https://openalex.org/W3022536969","https://openalex.org/W3045720734","https://openalex.org/W3046102592","https://openalex.org/W3046764764","https://openalex.org/W3048684575","https://openalex.org/W3081595899","https://openalex.org/W3096692244","https://openalex.org/W3103245149","https://openalex.org/W3106591537","https://openalex.org/W3110470025","https://openalex.org/W3111009493","https://openalex.org/W3115278118","https://openalex.org/W3118608800","https://openalex.org/W3138758728","https://openalex.org/W3154109599","https://openalex.org/W3170901302","https://openalex.org/W3189843092","https://openalex.org/W3212600502","https://openalex.org/W3214437258","https://openalex.org/W3214586949","https://openalex.org/W4308410483","https://openalex.org/W4308410741","https://openalex.org/W6628547770","https://openalex.org/W6747553010","https://openalex.org/W6749557519","https://openalex.org/W6752346538","https://openalex.org/W6756357915","https://openalex.org/W6760759230","https://openalex.org/W6763393573","https://openalex.org/W6776644305","https://openalex.org/W6782331252","https://openalex.org/W6787972765","https://openalex.org/W6790161207","https://openalex.org/W6804505112","https://openalex.org/W6804559052"],"related_works":["https://openalex.org/W4388150944","https://openalex.org/W2893218741","https://openalex.org/W4242235492","https://openalex.org/W2558319350","https://openalex.org/W4214858327","https://openalex.org/W4387796593","https://openalex.org/W2604394466","https://openalex.org/W2952603690","https://openalex.org/W2941205169","https://openalex.org/W4328053081"],"abstract_inverted_index":{"Deep":[0],"Learning(DL)":[1],"techniques":[2],"have":[3],"gained":[4],"significant":[5],"importance":[6],"in":[7,47,154,161],"the":[8,26,33,42,48,52,61,68,76,83,87,92,114,120,125,134,141,144,155,162,166,172,177,182,193],"recent":[9],"past":[10],"due":[11],"to":[12,21,60,112,118],"their":[13],"vast":[14],"applications.":[15],"However,":[16],"DL":[17],"is":[18,79,137,196],"still":[19],"prone":[20],"several":[22],"attacks,":[23],"such":[24],"as":[25],"Membership":[27],"Inference":[28],"Attack":[29],"(MIA),":[30],"based":[31,105],"on":[32,67,106],"memorability":[34],"of":[35,44,51,57,86,94,122,143,165,171],"training":[36,49],"data.":[37],"MIA":[38,65,195],"aims":[39],"at":[40],"determining":[41],"presence":[43,121],"specific":[45],"data":[46],"dataset":[50],"model":[53,56,78,129,136,157],"with":[54],"substitute":[55,69,77,115,135,156],"similar":[58,131,150],"structure":[59,85],"objective":[62,88,128,145,167],"model.":[63,89,168],"As":[64],"relies":[66],"model,":[70,146],"they":[71],"can":[72,180],"be":[73],"mitigated":[74],"if":[75,124],"not":[80],"clear":[81],"about":[82],"network":[84,201],"To":[90],"solve":[91],"challenge":[93],"shadow-model":[95],"construction,":[96],"this":[97],"work":[98],"presents":[99],"L-Leaks,":[100],"a":[101],"member":[102,163],"inference":[103],"attack":[104,183],"Logits.":[107],"L-Leaks":[108],"allow":[109],"an":[110],"adversary":[111],"use":[113],"model's":[116],"information":[117],"predict":[119],"membership":[123],"shadow":[126],"and":[127,203],"are":[130],"enough.":[132,151],"Here,":[133],"built":[138],"by":[139],"learning":[140],"logits":[142],"hence":[147],"making":[148],"it":[149],"This":[152],"results":[153],"having":[158],"sufficient":[159],"confidence":[160],"samples":[164],"The":[169],"evaluation":[170],"attack's":[173],"success":[174],"shows":[175,191],"that":[176,192],"proposed":[178,194],"technique":[179],"execute":[181],"more":[184],"accurately":[185],"than":[186],"existing":[187],"techniques.":[188],"It":[189],"also":[190],"significantly":[197],"robust":[198],"under":[199],"different":[200],"models":[202],"datasets.":[204]},"counts_by_year":[{"year":2025,"cited_by_count":11},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}