{"id":"https://openalex.org/W4224911292","doi":"https://doi.org/10.1109/tdsc.2023.3326230","title":"Perfectly Accurate Membership Inference by a Dishonest Central Server in Federated Learning","display_name":"Perfectly Accurate Membership Inference by a Dishonest Central Server in Federated Learning","publication_year":2023,"publication_date":"2023-10-20","ids":{"openalex":"https://openalex.org/W4224911292","doi":"https://doi.org/10.1109/tdsc.2023.3326230"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2023.3326230","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3326230","pdf_url":"https://ieeexplore.ieee.org/ielx7/8858/4358699/10288414.pdf","source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://ieeexplore.ieee.org/ielx7/8858/4358699/10288414.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5086958783","display_name":"Georg Pichler","orcid":"https://orcid.org/0000-0001-5696-4472"},"institutions":[{"id":"https://openalex.org/I145847075","display_name":"TU Wien","ror":"https://ror.org/04d836q62","country_code":"AT","type":"education","lineage":["https://openalex.org/I145847075"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Georg Pichler","raw_affiliation_strings":["Technische Universität Wien, Vienna, Austria"],"raw_orcid":"https://orcid.org/0000-0001-5696-4472","affiliations":[{"raw_affiliation_string":"Technische Universität Wien, Vienna, Austria","institution_ids":["https://openalex.org/I145847075"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114859809","display_name":"Marco Romanelli","orcid":"https://orcid.org/0000-0002-3810-4476"},"institutions":[{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Marco Romanelli","raw_affiliation_strings":["Tandon School of Engineering, New York University, Brooklyn, NY, USA"],"raw_orcid":"https://orcid.org/0000-0002-3810-4476","affiliations":[{"raw_affiliation_string":"Tandon School of Engineering, New York University, Brooklyn, NY, USA","institution_ids":["https://openalex.org/I57206974"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035529329","display_name":"Leonardo Rey Vega","orcid":"https://orcid.org/0000-0002-5578-0521"},"institutions":[{"id":"https://openalex.org/I151201029","display_name":"Consejo Nacional de Investigaciones Cient\u00edficas y T\u00e9cnicas","ror":"https://ror.org/03cqe8w59","country_code":"AR","type":"government","lineage":["https://openalex.org/I151201029","https://openalex.org/I4210123736","https://openalex.org/I4387155568"]},{"id":"https://openalex.org/I24354313","display_name":"Universidad de Buenos Aires","ror":"https://ror.org/0081fs513","country_code":"AR","type":"education","lineage":["https://openalex.org/I24354313"]}],"countries":["AR"],"is_corresponding":false,"raw_author_name":"Leonardo Rey Vega","raw_affiliation_strings":["CSC-CONICET, Universidad de Buenos Aires, Buenos Aires, Argentina"],"raw_orcid":"https://orcid.org/0000-0002-5578-0521","affiliations":[{"raw_affiliation_string":"CSC-CONICET, Universidad de Buenos Aires, Buenos Aires, Argentina","institution_ids":["https://openalex.org/I151201029","https://openalex.org/I24354313"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5071189599","display_name":"Pablo Piantanida","orcid":"https://orcid.org/0000-0002-8717-2117"},"institutions":[{"id":"https://openalex.org/I4210164802","display_name":"Mila - Quebec Artificial Intelligence Institute","ror":"https://ror.org/05c22rx21","country_code":"CA","type":"facility","lineage":["https://openalex.org/I4210164802"]},{"id":"https://openalex.org/I4403928267","display_name":"International Laboratory on Learning Systems","ror":"https://ror.org/02bkw1m29","country_code":null,"type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I277688954","https://openalex.org/I277688954","https://openalex.org/I4210107720","https://openalex.org/I4210164802","https://openalex.org/I4403928267","https://openalex.org/I49663120","https://openalex.org/I5023651","https://openalex.org/I9736820"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Pablo Piantanida","raw_affiliation_strings":["ILLS - International Laboratory on Learning Systems and MILA - Quebec AI Institute, CNRS, CentraleSupélec, Montreal, QC, Canada"],"raw_orcid":"https://orcid.org/0000-0002-8717-2117","affiliations":[{"raw_affiliation_string":"ILLS - International Laboratory on Learning Systems and MILA - Quebec AI Institute, CNRS, CentraleSupélec, Montreal, QC, Canada","institution_ids":["https://openalex.org/I4210164802","https://openalex.org/I4403928267"]}]}],"institutions":[],"countries_distinct_count":4,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.8357,"has_fulltext":true,"cited_by_count":14,"citation_normalized_percentile":{"value":0.87443356,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"21","issue":"4","first_page":"4290","last_page":"4296"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9901999831199646,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/mnist-database","display_name":"MNIST database","score":0.8610972166061401},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7804619073867798},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.7722144722938538},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.6634549498558044},{"id":"https://openalex.org/keywords/simple","display_name":"Simple (philosophy)","score":0.5572945475578308},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.5411955118179321},{"id":"https://openalex.org/keywords/function","display_name":"Function (biology)","score":0.5028168559074402},{"id":"https://openalex.org/keywords/sample","display_name":"Sample (material)","score":0.500974178314209},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.48942509293556213},{"id":"https://openalex.org/keywords/contrast","display_name":"Contrast (vision)","score":0.4771915674209595},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4028584361076355},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3721628785133362},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.17116603255271912}],"concepts":[{"id":"https://openalex.org/C190502265","wikidata":"https://www.wikidata.org/wiki/Q17069496","display_name":"MNIST database","level":3,"score":0.8610972166061401},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7804619073867798},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.7722144722938538},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.6634549498558044},{"id":"https://openalex.org/C2780586882","wikidata":"https://www.wikidata.org/wiki/Q7520643","display_name":"Simple (philosophy)","level":2,"score":0.5572945475578308},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.5411955118179321},{"id":"https://openalex.org/C14036430","wikidata":"https://www.wikidata.org/wiki/Q3736076","display_name":"Function (biology)","level":2,"score":0.5028168559074402},{"id":"https://openalex.org/C198531522","wikidata":"https://www.wikidata.org/wiki/Q485146","display_name":"Sample (material)","level":2,"score":0.500974178314209},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.48942509293556213},{"id":"https://openalex.org/C2776502983","wikidata":"https://www.wikidata.org/wiki/Q690182","display_name":"Contrast (vision)","level":2,"score":0.4771915674209595},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4028584361076355},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3721628785133362},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.17116603255271912},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C43617362","wikidata":"https://www.wikidata.org/wiki/Q170050","display_name":"Chromatography","level":1,"score":0.0},{"id":"https://openalex.org/C78458016","wikidata":"https://www.wikidata.org/wiki/Q840400","display_name":"Evolutionary biology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/tdsc.2023.3326230","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3326230","pdf_url":"https://ieeexplore.ieee.org/ielx7/8858/4358699/10288414.pdf","source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2203.16463","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2203.16463","pdf_url":"https://arxiv.org/pdf/2203.16463","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:HAL:hal-04491411v1","is_oa":false,"landing_page_url":"https://centralesupelec.hal.science/hal-04491411","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing, 2024, 72 (1), pp.1-8. ⟨10.1109/TDSC.2023.3326230⟩","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.1109/tdsc.2023.3326230","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3326230","pdf_url":"https://ieeexplore.ieee.org/ielx7/8858/4358699/10288414.pdf","source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.4699999988079071,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G5209393470","display_name":"Data Science, Artificial Intelligence and Society","funder_award_id":"ANR-17-CONV-0003","funder_id":"https://openalex.org/F4320320883","funder_display_name":"Agence Nationale de la Recherche"},{"id":"https://openalex.org/G6803667113","display_name":null,"funder_award_id":"ANR-17","funder_id":"https://openalex.org/F4320320883","funder_display_name":"Agence Nationale de la Recherche"}],"funders":[{"id":"https://openalex.org/F4320320883","display_name":"Agence Nationale de la Recherche","ror":"https://ror.org/00rbzpz17"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4224911292.pdf","grobid_xml":"https://content.openalex.org/works/W4224911292.grobid-xml"},"referenced_works_count":27,"referenced_works":["https://openalex.org/W1522301498","https://openalex.org/W2535690855","https://openalex.org/W2541884796","https://openalex.org/W2579186979","https://openalex.org/W2773194476","https://openalex.org/W2807096445","https://openalex.org/W2898291644","https://openalex.org/W2902229711","https://openalex.org/W2912218663","https://openalex.org/W2930926105","https://openalex.org/W3014541599","https://openalex.org/W3018397821","https://openalex.org/W3046183292","https://openalex.org/W3125967158","https://openalex.org/W3167815342","https://openalex.org/W3208177752","https://openalex.org/W3212079419","https://openalex.org/W4221149140","https://openalex.org/W4225544507","https://openalex.org/W4280575929","https://openalex.org/W6638891565","https://openalex.org/W6703420464","https://openalex.org/W6744467996","https://openalex.org/W6752600739","https://openalex.org/W6764838729","https://openalex.org/W6773039429","https://openalex.org/W6801139061"],"related_works":["https://openalex.org/W4386603768","https://openalex.org/W2950475743","https://openalex.org/W2886711096","https://openalex.org/W2750384547","https://openalex.org/W4380078352","https://openalex.org/W3046591097","https://openalex.org/W4389249638","https://openalex.org/W2733410219","https://openalex.org/W2734358244","https://openalex.org/W3194633786"],"abstract_inverted_index":{"Federated":[0],"Learning":[1],"is":[2,21,81],"expected":[3],"to":[4,65,83,96,139],"provide":[5],"strong":[6],"privacy":[7],"guarantees,":[8],"as":[9],"only":[10,57],"gradients":[11],"or":[12,28],"model":[13],"parameters":[14],"but":[15,47],"no":[16],"plain":[17],"text":[18],"training":[19,61,126],"data":[20],"ever":[22],"exchanged":[23],"either":[24],"between":[25,29],"the":[26,30,33,66,90,144],"clients":[27,31],"and":[32,88,110,146],"central":[34,77],"server.":[35,78],"In":[36,63],"this":[37,41,93],"paper,":[38],"we":[39,70],"challenge":[40],"claim":[42],"by":[43],"introducing":[44],"a":[45,59,72,75,125],"simple":[46],"still":[48],"very":[49],"effective":[50],"membership":[51],"inference":[52],"attack":[53],"algorithm,":[54],"which":[55],"relies":[56],"on":[58,102],"single":[60],"step.":[62],"contrast":[64],"popular":[67],"honest-but-curious":[68],"model,":[69],"investigate":[71],"framework":[73],"with":[74,85,106,128],"dishonest":[76],"Our":[79],"strategy":[80],"applicable":[82],"models":[84],"ReLU":[86],"activations":[87],"uses":[89],"properties":[91],"of":[92,130,134],"activation":[94],"function":[95],"achieve":[97],"perfect":[98,118],"accuracy.":[99],"Empirical":[100],"evaluation":[101],"visual":[103],"classification":[104],"tasks":[105],"MNIST,":[107],"CIFAR10,":[108],"CIFAR100":[109,145],"CelebA":[111,147],"datasets":[112,148],"show":[113],"that":[114],"our":[115,135],"method":[116,136],"provides":[117],"accuracy":[119],"in":[120,124,143],"identifying":[121],"one":[122],"sample":[123],"set":[127],"thousands":[129],"samples.":[131],"Occasional":[132],"failures":[133],"lead":[137],"us":[138],"discover":[140],"duplicate":[141],"images":[142]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2022-04-27T00:00:00"}