{"id":"https://openalex.org/W4386044014","doi":"https://doi.org/10.1109/tdsc.2023.3306748","title":"The Role of Class Information in Model Inversion Attacks Against Image Deep Learning Classifiers","display_name":"The Role of Class Information in Model Inversion Attacks Against Image Deep Learning Classifiers","publication_year":2023,"publication_date":"2023-08-21","ids":{"openalex":"https://openalex.org/W4386044014","doi":"https://doi.org/10.1109/tdsc.2023.3306748"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2023.3306748","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3306748","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5059567156","display_name":"Zhiyi Tian","orcid":"https://orcid.org/0000-0001-8905-0941"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Zhiyi Tian","raw_affiliation_strings":["Faculty of Engineering and Information Technology, University of Technology, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0001-8905-0941","affiliations":[{"raw_affiliation_string":"Faculty of Engineering and Information Technology, University of Technology, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026963407","display_name":"Lei Cui","orcid":"https://orcid.org/0000-0002-1932-1440"},"institutions":[{"id":"https://openalex.org/I152269853","display_name":"Qilu University of Technology","ror":"https://ror.org/04hyzq608","country_code":"CN","type":"education","lineage":["https://openalex.org/I152269853"]},{"id":"https://openalex.org/I154099455","display_name":"Shandong University","ror":"https://ror.org/0207yh398","country_code":"CN","type":"education","lineage":["https://openalex.org/I154099455"]},{"id":"https://openalex.org/I4210142748","display_name":"Shandong Academy of Sciences","ror":"https://ror.org/04y8d6y55","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210142748"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lei Cui","raw_affiliation_strings":["Key Laboratory of Computing Power Network and Information Security, Ministry of Education, Shandong Computer Science Center, Qilu University of Technology (Shandong Academy of Sciences), Jinan, Shandong, China","Shandong Provincial Key Laboratory of Computer Networks, Shandong Fundamental Research Center for Computer Science, Jinan, China"],"raw_orcid":"https://orcid.org/0000-0002-1932-1440","affiliations":[{"raw_affiliation_string":"Key Laboratory of Computing Power Network and Information Security, Ministry of Education, Shandong Computer Science Center, Qilu University of Technology (Shandong Academy of Sciences), Jinan, Shandong, China","institution_ids":["https://openalex.org/I152269853","https://openalex.org/I4210142748"]},{"raw_affiliation_string":"Shandong Provincial Key Laboratory of Computer Networks, Shandong Fundamental Research Center for Computer Science, Jinan, China","institution_ids":["https://openalex.org/I154099455"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061304518","display_name":"Chenhan Zhang","orcid":"https://orcid.org/0000-0002-2352-0485"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Chenhan Zhang","raw_affiliation_strings":["Faculty of Engineering and Information Technology, University of Technology, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0002-2352-0485","affiliations":[{"raw_affiliation_string":"Faculty of Engineering and Information Technology, University of Technology, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022611612","display_name":"Shuaishuai Tan","orcid":"https://orcid.org/0000-0002-8882-405X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shuaishuai Tan","raw_affiliation_strings":["China (Qianhai) Internet Exchange, Shenzhen, Guangdong, China"],"raw_orcid":"https://orcid.org/0000-0002-8882-405X","affiliations":[{"raw_affiliation_string":"China (Qianhai) Internet Exchange, Shenzhen, Guangdong, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005228053","display_name":"Shui Yu","orcid":"https://orcid.org/0000-0003-4485-6743"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Shui Yu","raw_affiliation_strings":["Faculty of Engineering and Information Technology, University of Technology, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0003-4485-6743","affiliations":[{"raw_affiliation_string":"Faculty of Engineering and Information Technology, University of Technology, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5023918894","display_name":"Yonghong Tian","orcid":"https://orcid.org/0000-0002-2978-5935"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yonghong Tian","raw_affiliation_strings":["School of EECS, Peking University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-2978-5935","affiliations":[{"raw_affiliation_string":"School of EECS, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.269,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.8305959,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"21","issue":"4","first_page":"2407","last_page":"2420"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.9879999756813049,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.972000002861023,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/inversion","display_name":"Inversion (geology)","score":0.9009494781494141},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6529737114906311},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5762792825698853},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.5309181809425354},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.49343886971473694},{"id":"https://openalex.org/keywords/pixel","display_name":"Pixel","score":0.4264526963233948},{"id":"https://openalex.org/keywords/prior-information","display_name":"Prior information","score":0.4195711016654968},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.3924616575241089},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.370399534702301},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.32052236795425415},{"id":"https://openalex.org/keywords/geology","display_name":"Geology","score":0.15155678987503052}],"concepts":[{"id":"https://openalex.org/C1893757","wikidata":"https://www.wikidata.org/wiki/Q3653001","display_name":"Inversion (geology)","level":3,"score":0.9009494781494141},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6529737114906311},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5762792825698853},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.5309181809425354},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.49343886971473694},{"id":"https://openalex.org/C160633673","wikidata":"https://www.wikidata.org/wiki/Q355198","display_name":"Pixel","level":2,"score":0.4264526963233948},{"id":"https://openalex.org/C3020402766","wikidata":"https://www.wikidata.org/wiki/Q104376712","display_name":"Prior information","level":2,"score":0.4195711016654968},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3924616575241089},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.370399534702301},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.32052236795425415},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.15155678987503052},{"id":"https://openalex.org/C109007969","wikidata":"https://www.wikidata.org/wiki/Q749565","display_name":"Structural basin","level":2,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2023.3306748","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3306748","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities","score":0.5699999928474426}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":51,"referenced_works":["https://openalex.org/W1686810756","https://openalex.org/W1834627138","https://openalex.org/W1915485278","https://openalex.org/W1945616565","https://openalex.org/W1959608418","https://openalex.org/W2051267297","https://openalex.org/W2112796928","https://openalex.org/W2125389028","https://openalex.org/W2133665775","https://openalex.org/W2145428065","https://openalex.org/W2194775991","https://openalex.org/W2294710185","https://openalex.org/W2295107390","https://openalex.org/W2750384547","https://openalex.org/W2796096336","https://openalex.org/W2912023992","https://openalex.org/W2962858109","https://openalex.org/W2963456518","https://openalex.org/W2963542245","https://openalex.org/W2963857521","https://openalex.org/W2969542116","https://openalex.org/W2970408908","https://openalex.org/W2985580374","https://openalex.org/W2989885118","https://openalex.org/W3000479830","https://openalex.org/W3034957837","https://openalex.org/W3034997257","https://openalex.org/W3035616549","https://openalex.org/W3035725276","https://openalex.org/W3111919937","https://openalex.org/W3118608800","https://openalex.org/W3177170788","https://openalex.org/W3178659068","https://openalex.org/W3191459272","https://openalex.org/W4229820657","https://openalex.org/W4307972630","https://openalex.org/W6628547770","https://openalex.org/W6637108112","https://openalex.org/W6637373629","https://openalex.org/W6640425456","https://openalex.org/W6640963894","https://openalex.org/W6678815747","https://openalex.org/W6741832134","https://openalex.org/W6743688258","https://openalex.org/W6750404860","https://openalex.org/W6764838729","https://openalex.org/W6773039429","https://openalex.org/W6784909784","https://openalex.org/W6787972765","https://openalex.org/W6803903061","https://openalex.org/W6803927942"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W3176659669","https://openalex.org/W4287115361","https://openalex.org/W3125192722","https://openalex.org/W2369413902","https://openalex.org/W2357255129","https://openalex.org/W2349875009","https://openalex.org/W2895927902","https://openalex.org/W2171475701","https://openalex.org/W2149563791"],"abstract_inverted_index":{"Model":[0,81],"inversion":[1,55,78,86,117,121,128,146,181,191,197],"attacks":[2,56],"can":[3,186],"reconstruct":[4],"the":[5,22,48,59,95,98,113,142,163,167,172,178,188],"training":[6],"samples":[7,24,118,129,192],"of":[8,21,50,61,97,115,174,180,190],"victim":[9,99,108],"deep":[10],"learning":[11],"models.":[12],"The":[13,84,183],"existing":[14],"efforts":[15],"heavily":[16],"rely":[17],"on":[18,67,154],"auxiliary":[19,103,156,168],"information":[20,36,52,69],"target":[23,26,35,63],"(prior":[25],"information)":[27],"to":[28,39,57,111,141,196],"achieve":[29],"their":[30],"adversarial":[31],"goals.":[32],"However,":[33],"prior":[34,62],"is":[37,160],"hard":[38],"obtain":[40],"in":[41,53,166],"practice.":[42],"In":[43],"this":[44],"paper,":[45],"we":[46,74,106],"explore":[47],"effect":[49],"class":[51,68,164],"model":[54,87,100,145],"reduce":[58],"reliance":[60],"information.":[64],"Our":[65,123],"contributions":[66],"exploitation":[70],"are":[71,133],"two-fold.":[72],"Firstly,":[73],"propose":[75],"a":[76],"supervised":[77],"model,":[79],"Supervised":[80],"Inversion":[82],"(SMI).":[83],"proposed":[85],"learns":[88],"pixel-level":[89],"features":[90,93],"and":[91,101],"data-to-class":[92],"from":[94],"rounded-outputs":[96,110],"labeled":[102],"dataset.":[104],"Secondly,":[105],"leverage":[107],"model's":[109],"guide":[112],"optimization":[114],"reconstructing":[116],"after":[119],"trained":[120],"model.":[122],"experimental":[124],"results":[125],"show":[126],"that":[127,162,176],"reconstructed":[130],"by":[131],"SMI":[132],"more":[134,138],"visually":[135],"plausible":[136],"with":[137],"details,":[139],"comparing":[140],"three":[143],"representative":[144],"attacks.":[147,198],"We":[148],"further":[149],"perform":[150],"an":[151],"extensive":[152],"study":[153],"various":[155],"dataset":[157,169],"settings.":[158],"It":[159],"found":[161],"combination":[165],"rather":[170],"than":[171],"number":[173],"classes":[175],"determines":[177],"quality":[179],"samples.":[182],"ground-truth":[184],"labels":[185],"improve":[187],"qualities":[189],"but":[193],"not":[194],"essential":[195]},"counts_by_year":[{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":2}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}