{"id":"https://openalex.org/W4387303170","doi":"https://doi.org/10.1109/tdsc.2023.3321565","title":"Source Inference Attacks: Beyond Membership Inference Attacks in Federated Learning","display_name":"Source Inference Attacks: Beyond Membership Inference Attacks in Federated Learning","publication_year":2023,"publication_date":"2023-10-03","ids":{"openalex":"https://openalex.org/W4387303170","doi":"https://doi.org/10.1109/tdsc.2023.3321565"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2023.3321565","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3321565","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5064530863","display_name":"Hongsheng Hu","orcid":"https://orcid.org/0000-0003-4455-4227"},"institutions":[{"id":"https://openalex.org/I154130895","display_name":"University of Auckland","ror":"https://ror.org/03b94tp07","country_code":"NZ","type":"education","lineage":["https://openalex.org/I154130895"]}],"countries":["NZ"],"is_corresponding":false,"raw_author_name":"Hongsheng Hu","raw_affiliation_strings":["The University of Auckland, Auckland, New Zealand"],"raw_orcid":"https://orcid.org/0000-0003-4455-4227","affiliations":[{"raw_affiliation_string":"The University of Auckland, Auckland, New Zealand","institution_ids":["https://openalex.org/I154130895"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076120553","display_name":"Xuyun Zhang","orcid":"https://orcid.org/0000-0001-7353-4159"},"institutions":[{"id":"https://openalex.org/I99043593","display_name":"Macquarie University","ror":"https://ror.org/01sf06y89","country_code":"AU","type":"education","lineage":["https://openalex.org/I99043593"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xuyun Zhang","raw_affiliation_strings":["Macquarie University, Macquarie Park, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0001-7353-4159","affiliations":[{"raw_affiliation_string":"Macquarie University, Macquarie Park, NSW, Australia","institution_ids":["https://openalex.org/I99043593"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088166627","display_name":"Zoran Sal\u010di\u0107","orcid":"https://orcid.org/0000-0001-7714-9848"},"institutions":[{"id":"https://openalex.org/I154130895","display_name":"University of Auckland","ror":"https://ror.org/03b94tp07","country_code":"NZ","type":"education","lineage":["https://openalex.org/I154130895"]}],"countries":["NZ"],"is_corresponding":false,"raw_author_name":"Zoran Salcic","raw_affiliation_strings":["The University of Auckland, Auckland, New Zealand"],"raw_orcid":"https://orcid.org/0000-0001-7714-9848","affiliations":[{"raw_affiliation_string":"The University of Auckland, Auckland, New Zealand","institution_ids":["https://openalex.org/I154130895"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015105117","display_name":"Lichao Sun","orcid":"https://orcid.org/0000-0003-1539-7939"},"institutions":[{"id":"https://openalex.org/I186143895","display_name":"Lehigh University","ror":"https://ror.org/012afjb06","country_code":"US","type":"education","lineage":["https://openalex.org/I186143895"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Lichao Sun","raw_affiliation_strings":["Lehigh University, Bethlehem, PA, USA"],"raw_orcid":"https://orcid.org/0000-0003-1539-7939","affiliations":[{"raw_affiliation_string":"Lehigh University, Bethlehem, PA, USA","institution_ids":["https://openalex.org/I186143895"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001746807","display_name":"Kim\u2010Kwang Raymond Choo","orcid":"https://orcid.org/0000-0001-9208-5336"},"institutions":[{"id":"https://openalex.org/I45438204","display_name":"The University of Texas at San Antonio","ror":"https://ror.org/01kd65564","country_code":"US","type":"education","lineage":["https://openalex.org/I45438204"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kim-Kwang Raymond Choo","raw_affiliation_strings":["The University of Texas at San Antonio, San Antonio, TX, USA"],"raw_orcid":"https://orcid.org/0000-0001-9208-5336","affiliations":[{"raw_affiliation_string":"The University of Texas at San Antonio, San Antonio, TX, USA","institution_ids":["https://openalex.org/I45438204"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5016115576","display_name":"Gillian Dobbie","orcid":"https://orcid.org/0000-0001-7245-0367"},"institutions":[{"id":"https://openalex.org/I154130895","display_name":"University of Auckland","ror":"https://ror.org/03b94tp07","country_code":"NZ","type":"education","lineage":["https://openalex.org/I154130895"]}],"countries":["NZ"],"is_corresponding":false,"raw_author_name":"Gillian Dobbie","raw_affiliation_strings":["The University of Auckland, Auckland, New Zealand"],"raw_orcid":"https://orcid.org/0000-0001-7245-0367","affiliations":[{"raw_affiliation_string":"The University of Auckland, Auckland, New Zealand","institution_ids":["https://openalex.org/I154130895"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.6015,"has_fulltext":false,"cited_by_count":35,"citation_normalized_percentile":{"value":0.95900875,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"21","issue":"4","first_page":"3012","last_page":"3029"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9894999861717224,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9580000042915344,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.7699608206748962},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7465879917144775},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.6632736921310425},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5341692566871643},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5246020555496216},{"id":"https://openalex.org/keywords/bayesian-inference","display_name":"Bayesian inference","score":0.4871242046356201},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.4865640699863434},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.39381614327430725},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.33102428913116455},{"id":"https://openalex.org/keywords/bayesian-probability","display_name":"Bayesian probability","score":0.2815500795841217}],"concepts":[{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.7699608206748962},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7465879917144775},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.6632736921310425},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5341692566871643},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5246020555496216},{"id":"https://openalex.org/C160234255","wikidata":"https://www.wikidata.org/wiki/Q812535","display_name":"Bayesian inference","level":3,"score":0.4871242046356201},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.4865640699863434},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.39381614327430725},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.33102428913116455},{"id":"https://openalex.org/C107673813","wikidata":"https://www.wikidata.org/wiki/Q812534","display_name":"Bayesian probability","level":2,"score":0.2815500795841217},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2023.3321565","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3321565","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6000000238418579,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":119,"referenced_works":["https://openalex.org/W1686810756","https://openalex.org/W1821462560","https://openalex.org/W1873763122","https://openalex.org/W1971991172","https://openalex.org/W2040228409","https://openalex.org/W2053637704","https://openalex.org/W2095705004","https://openalex.org/W2194775991","https://openalex.org/W2473418344","https://openalex.org/W2535690855","https://openalex.org/W2566079294","https://openalex.org/W2591882872","https://openalex.org/W2701059868","https://openalex.org/W2753772285","https://openalex.org/W2757528734","https://openalex.org/W2767079719","https://openalex.org/W2773194476","https://openalex.org/W2784621220","https://openalex.org/W2795435272","https://openalex.org/W2798657499","https://openalex.org/W2807006176","https://openalex.org/W2897830718","https://openalex.org/W2903890850","https://openalex.org/W2912213068","https://openalex.org/W2914805061","https://openalex.org/W2930926105","https://openalex.org/W2940810329","https://openalex.org/W2963378725","https://openalex.org/W2963456518","https://openalex.org/W2964162474","https://openalex.org/W2970408908","https://openalex.org/W2970606380","https://openalex.org/W2972570881","https://openalex.org/W2980216952","https://openalex.org/W2998732348","https://openalex.org/W3000479830","https://openalex.org/W3013435976","https://openalex.org/W3016632787","https://openalex.org/W3021654819","https://openalex.org/W3024264813","https://openalex.org/W3035453001","https://openalex.org/W3042943646","https://openalex.org/W3045720734","https://openalex.org/W3084415909","https://openalex.org/W3090107331","https://openalex.org/W3094542121","https://openalex.org/W3103245149","https://openalex.org/W3103989228","https://openalex.org/W3109695251","https://openalex.org/W3111919937","https://openalex.org/W3124806946","https://openalex.org/W3128515475","https://openalex.org/W3138815606","https://openalex.org/W3164712068","https://openalex.org/W3173298348","https://openalex.org/W3175192640","https://openalex.org/W3180608480","https://openalex.org/W3192324887","https://openalex.org/W3194761092","https://openalex.org/W3209696639","https://openalex.org/W4207073300","https://openalex.org/W4210485920","https://openalex.org/W4214858327","https://openalex.org/W4225004701","https://openalex.org/W4283650725","https://openalex.org/W4285119871","https://openalex.org/W4286895293","https://openalex.org/W4289147229","https://openalex.org/W4297846994","https://openalex.org/W4298221930","https://openalex.org/W4300427714","https://openalex.org/W4300991139","https://openalex.org/W4302012908","https://openalex.org/W4306830536","https://openalex.org/W4307964254","https://openalex.org/W4308361263","https://openalex.org/W4313187550","https://openalex.org/W4324007185","https://openalex.org/W4367047069","https://openalex.org/W4385412495","https://openalex.org/W4388887013","https://openalex.org/W6637373629","https://openalex.org/W6638214083","https://openalex.org/W6638523607","https://openalex.org/W6674330103","https://openalex.org/W6679909955","https://openalex.org/W6728757088","https://openalex.org/W6738383168","https://openalex.org/W6746082227","https://openalex.org/W6746388805","https://openalex.org/W6746720608","https://openalex.org/W6747855403","https://openalex.org/W6750182894","https://openalex.org/W6752029299","https://openalex.org/W6752600739","https://openalex.org/W6756756286","https://openalex.org/W6759226220","https://openalex.org/W6759238902","https://openalex.org/W6763048141","https://openalex.org/W6763393573","https://openalex.org/W6763736615","https://openalex.org/W6765541894","https://openalex.org/W6767676916","https://openalex.org/W6768632158","https://openalex.org/W6771533808","https://openalex.org/W6772689095","https://openalex.org/W6773039429","https://openalex.org/W6773817997","https://openalex.org/W6775482175","https://openalex.org/W6777101619","https://openalex.org/W6780224944","https://openalex.org/W6780438843","https://openalex.org/W6781475444","https://openalex.org/W6782794873","https://openalex.org/W6787335730","https://openalex.org/W6802409679","https://openalex.org/W6810027437","https://openalex.org/W6843021419","https://openalex.org/W6845733966"],"related_works":["https://openalex.org/W2055243143","https://openalex.org/W2787993192","https://openalex.org/W2898732673","https://openalex.org/W2158269427","https://openalex.org/W4381280689","https://openalex.org/W2372267530","https://openalex.org/W2969189870","https://openalex.org/W3015855446","https://openalex.org/W2965643117","https://openalex.org/W4303857162"],"abstract_inverted_index":{"Federated":[0],"learning":[1,11],"(FL)":[2],"is":[3,312],"a":[4,20,82,106,165,209,244],"popular":[5],"approach":[6],"to":[7,17,27,40,74,142,145,147,156,171,181,186,200,204,228,252,263,315],"facilitate":[8,182],"privacy-aware":[9],"machine":[10],"since":[12],"it":[13],"allows":[14],"multiple":[15,102],"clients":[16,236,295],"collaboratively":[18],"train":[19,105],"global":[21,53],"model":[22,54,239,297],"without":[23,212],"granting":[24],"others":[25],"access":[26],"their":[28],"private":[29],"data.":[30],"It":[31],"is,":[32],"however,":[33],"known":[34],"that":[35,80,118,230,306],"FL":[36,99,217,226,233],"can":[37,55,87,113,132,290],"be":[38,56,75,291],"vulnerable":[39],"<italic":[41,173],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[42,174],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">membership":[43],"inference":[44,71,111,167,176],"attacks</i>":[45],"(MIAs),":[46],"where":[47,101],"the":[48,52,59,66,69,115,129,134,137,148,153,188,197,202,206,215,235,253,265,275,278,294,300,307,316,319],"training":[49,83,189],"records":[50,117],"of":[51,68,128,277,286,309,318],"distinguished":[57],"from":[58,136,214],"testing":[60],"records.":[61],"Surprisingly,":[62],"research":[63],"focusing":[64],"on":[65,243,260],"investigation":[67],"source":[70,85,130,158,191,250],"problem":[72],"appears":[73],"lacking.":[76],"We":[77,219,255],"also":[78,256],"observe":[79],"identifying":[81],"record's":[84,190],"client":[86],"result":[88,133],"in":[89,160,208,223,231,268],"privacy":[90,159],"breaches":[91],"extending":[92],"beyond":[93],"MIAs.":[94],"For":[95],"example,":[96],"consider":[97],"an":[98,183,269,282,310],"application":[100],"hospitals":[103],"jointly":[104],"COVID-19":[107],"diagnosis":[108],"model,":[109],"membership":[110],"attackers":[112],"identify":[114,187],"medical":[116],"have":[119],"been":[120],"used":[121],"for":[122],"training,":[123],"and":[124],"any":[125],"additional":[126],"identification":[127],"hospital":[131,139],"patient":[135],"particular":[138],"more":[140],"prone":[141],"discrimination.":[143],"Seeking":[144],"contribute":[146],"literature":[149],"gap,":[150],"we":[151,163],"take":[152],"first":[154],"step":[155],"investigate":[157,264],"FL.":[161],"Specifically,":[162],"propose":[164],"new":[166],"attack":[168,207,283],"(hereafter":[169],"referred":[170],"as":[172],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">source":[175],"attack</i>":[177],"\u2013":[178],"SIA),":[179],"designed":[180],"honest-but-curious":[184],"server":[185,203],"client.":[192],"The":[193,271],"proposed":[194,279],"SIAs":[195,222],"leverage":[196],"Bayesian":[198],"theorem":[199],"allow":[201],"implement":[205],"non-intrusive":[210],"manner":[211],"deviating":[213],"defined":[216],"protocol.":[218],"then":[220],"evaluate":[221],"three":[224],"different":[225],"frameworks":[227],"show":[229],"existing":[232],"frameworks,":[234],"sharing":[237],"gradients,":[238],"parameters,":[240],"or":[241],"predictions":[242],"public":[245],"dataset":[246],"will":[247],"leak":[248],"such":[249],"information":[251],"server.":[254,301],"conduct":[257],"extensive":[258],"experiments":[259],"various":[261],"datasets":[262],"key":[266],"factors":[267],"SIA.":[270],"experimental":[272],"results":[273],"validate":[274],"efficacy":[276],"SIAs,":[280],"e.g.,":[281],"success":[284,308],"rate":[285],"67.1%":[287],"(baseline":[288],"10%)":[289],"achieved":[292],"when":[293],"share":[296],"parameters":[298],"with":[299],"Comprehensive":[302],"ablation":[303],"studies":[304],"demonstrate":[305],"SIA":[311],"directly":[313],"related":[314],"overfitting":[317],"local":[320],"models.":[321]},"counts_by_year":[{"year":2026,"cited_by_count":10},{"year":2025,"cited_by_count":16},{"year":2024,"cited_by_count":9}],"updated_date":"2026-07-25T15:57:00.446498","created_date":"2025-10-10T00:00:00"}