{"id":"https://openalex.org/W4385696518","doi":"https://doi.org/10.1109/tifs.2023.3303718","title":"TEAR: Exploring Temporal Evolution of Adversarial Robustness for Membership Inference Attacks Against Federated Learning","display_name":"TEAR: Exploring Temporal Evolution of Adversarial Robustness for Membership Inference Attacks Against Federated Learning","publication_year":2023,"publication_date":"2023-01-01","ids":{"openalex":"https://openalex.org/W4385696518","doi":"https://doi.org/10.1109/tifs.2023.3303718"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2023.3303718","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2023.3303718","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5104666790","display_name":"Gaoyang Liu","orcid":"https://orcid.org/0000-0003-2566-9360"},"institutions":[{"id":"https://openalex.org/I18014758","display_name":"Simon Fraser University","ror":"https://ror.org/0213rcc28","country_code":"CA","type":"education","lineage":["https://openalex.org/I18014758"]},{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CA","CN"],"is_corresponding":true,"raw_author_name":"Gaoyang Liu","raw_affiliation_strings":["Hubei Key Laboratory of Smart Internet Technology, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China","School of Electronic Information and Communications, Hubei Key Laboratory of Smart Internet Technology, Huazhong University of Science and Technology, Wuhan, China","School of Computing Science, Simon Fraser University, British Columbia, Canada"],"affiliations":[{"raw_affiliation_string":"Hubei Key Laboratory of Smart Internet Technology, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]},{"raw_affiliation_string":"School of Electronic Information and Communications, Hubei Key Laboratory of Smart Internet Technology, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]},{"raw_affiliation_string":"School of Computing Science, Simon Fraser University, British Columbia, Canada","institution_ids":["https://openalex.org/I18014758"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102532489","display_name":"Zehao Tian","orcid":null},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zehao Tian","raw_affiliation_strings":["Hubei Key Laboratory of Smart Internet Technology, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China","School of Electronic Information and Communications, Hubei Key Laboratory of Smart Internet Technology, Huazhong University of Science and Technology, Wuhan, China"],"affiliations":[{"raw_affiliation_string":"Hubei Key Laboratory of Smart Internet Technology, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]},{"raw_affiliation_string":"School of Electronic Information and Communications, Hubei Key Laboratory of Smart Internet Technology, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100326504","display_name":"Jian Chen","orcid":"https://orcid.org/0000-0003-3738-2092"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jian Chen","raw_affiliation_strings":["Hubei Key Laboratory of Smart Internet Technology, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China","School of Electronic Information and Communications, Hubei Key Laboratory of Smart Internet Technology, Huazhong University of Science and Technology, Wuhan, China"],"affiliations":[{"raw_affiliation_string":"Hubei Key Laboratory of Smart Internet Technology, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]},{"raw_affiliation_string":"School of Electronic Information and Communications, Hubei Key Laboratory of Smart Internet Technology, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100337659","display_name":"Chen Wang","orcid":"https://orcid.org/0000-0003-1963-4954"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chen Wang","raw_affiliation_strings":["Hubei Key Laboratory of Smart Internet Technology, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China","School of Electronic Information and Communications, Hubei Key Laboratory of Smart Internet Technology, Huazhong University of Science and Technology, Wuhan, China"],"affiliations":[{"raw_affiliation_string":"Hubei Key Laboratory of Smart Internet Technology, School of Electronic Information and Communications, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]},{"raw_affiliation_string":"School of Electronic Information and Communications, Hubei Key Laboratory of Smart Internet Technology, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5039311485","display_name":"Jiangchuan Liu","orcid":"https://orcid.org/0000-0001-6592-1984"},"institutions":[{"id":"https://openalex.org/I18014758","display_name":"Simon Fraser University","ror":"https://ror.org/0213rcc28","country_code":"CA","type":"education","lineage":["https://openalex.org/I18014758"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Jiangchuan Liu","raw_affiliation_strings":["School of Computing Science, Simon Fraser University, Burnaby, Canada","School of Computing Science, Simon Fraser University, British Columbia, Canada"],"affiliations":[{"raw_affiliation_string":"School of Computing Science, Simon Fraser University, Burnaby, Canada","institution_ids":["https://openalex.org/I18014758"]},{"raw_affiliation_string":"School of Computing Science, Simon Fraser University, British Columbia, Canada","institution_ids":["https://openalex.org/I18014758"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5104666790"],"corresponding_institution_ids":["https://openalex.org/I18014758","https://openalex.org/I47720641"],"apc_list":null,"apc_paid":null,"fwci":4.6718,"has_fulltext":false,"cited_by_count":27,"citation_normalized_percentile":{"value":0.95907311,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"18","issue":null,"first_page":"4996","last_page":"5010"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.9498000144958496,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8548763990402222},{"id":"https://openalex.org/keywords/overfitting","display_name":"Overfitting","score":0.8465374708175659},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.8112778663635254},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.804977536201477},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7824263572692871},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7034296989440918},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6660467982292175},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6392191648483276},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.4805189073085785},{"id":"https://openalex.org/keywords/data-modeling","display_name":"Data modeling","score":0.4440627694129944},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.43697959184646606},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.35548314452171326},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.17142227292060852},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.13967850804328918},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.08437910676002502}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8548763990402222},{"id":"https://openalex.org/C22019652","wikidata":"https://www.wikidata.org/wiki/Q331309","display_name":"Overfitting","level":3,"score":0.8465374708175659},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.8112778663635254},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.804977536201477},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7824263572692871},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7034296989440918},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6660467982292175},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6392191648483276},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.4805189073085785},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.4440627694129944},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.43697959184646606},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.35548314452171326},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.17142227292060852},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.13967850804328918},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.08437910676002502},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2023.3303718","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2023.3303718","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.46000000834465027,"display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G2616141538","display_name":null,"funder_award_id":"62002104","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2656589067","display_name":null,"funder_award_id":"62071192","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4137277356","display_name":null,"funder_award_id":"62272183","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7481879049","display_name":null,"funder_award_id":"62171189","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320334202","display_name":"Wuhan Yellow Crane Talents Program","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":92,"referenced_works":["https://openalex.org/W1945616565","https://openalex.org/W2004915866","https://openalex.org/W2053637704","https://openalex.org/W2095705004","https://openalex.org/W2243397390","https://openalex.org/W2473418344","https://openalex.org/W2535690855","https://openalex.org/W2626769593","https://openalex.org/W2734358244","https://openalex.org/W2767079719","https://openalex.org/W2788848944","https://openalex.org/W2795435272","https://openalex.org/W2884943453","https://openalex.org/W2900120080","https://openalex.org/W2930926105","https://openalex.org/W2932329902","https://openalex.org/W2945237470","https://openalex.org/W2948030332","https://openalex.org/W2950048339","https://openalex.org/W2956128647","https://openalex.org/W2963378725","https://openalex.org/W2963456518","https://openalex.org/W2963857521","https://openalex.org/W2971180473","https://openalex.org/W2983140679","https://openalex.org/W2995022099","https://openalex.org/W3009542902","https://openalex.org/W3010177353","https://openalex.org/W3010262580","https://openalex.org/W3013068160","https://openalex.org/W3015625436","https://openalex.org/W3043303805","https://openalex.org/W3045720734","https://openalex.org/W3046102592","https://openalex.org/W3047304572","https://openalex.org/W3094542121","https://openalex.org/W3097210233","https://openalex.org/W3100213383","https://openalex.org/W3103245149","https://openalex.org/W3138758728","https://openalex.org/W3138815606","https://openalex.org/W3155551741","https://openalex.org/W3163222347","https://openalex.org/W3169818958","https://openalex.org/W3170237968","https://openalex.org/W3170901302","https://openalex.org/W3173859330","https://openalex.org/W3174074918","https://openalex.org/W3176786489","https://openalex.org/W3180608480","https://openalex.org/W3194761092","https://openalex.org/W3202746938","https://openalex.org/W3209696639","https://openalex.org/W3210296142","https://openalex.org/W3214437258","https://openalex.org/W4205974944","https://openalex.org/W4207073300","https://openalex.org/W4213044365","https://openalex.org/W4214931017","https://openalex.org/W4226461837","https://openalex.org/W4285722492","https://openalex.org/W4287323182","https://openalex.org/W4287889169","https://openalex.org/W4288563649","https://openalex.org/W4307225838","https://openalex.org/W4308410741","https://openalex.org/W4312872760","https://openalex.org/W4318619660","https://openalex.org/W4367047069","https://openalex.org/W4387831771","https://openalex.org/W6640425456","https://openalex.org/W6651608069","https://openalex.org/W6663928093","https://openalex.org/W6674330103","https://openalex.org/W6728757088","https://openalex.org/W6755988804","https://openalex.org/W6758684365","https://openalex.org/W6763077247","https://openalex.org/W6763736615","https://openalex.org/W6765055791","https://openalex.org/W6767812273","https://openalex.org/W6774469542","https://openalex.org/W6774857738","https://openalex.org/W6775482175","https://openalex.org/W6780438843","https://openalex.org/W6790529436","https://openalex.org/W6794256918","https://openalex.org/W6796453306","https://openalex.org/W6802092787","https://openalex.org/W6802645065","https://openalex.org/W6810437874","https://openalex.org/W6840012785"],"related_works":["https://openalex.org/W4362597605","https://openalex.org/W1574414179","https://openalex.org/W4297676672","https://openalex.org/W4320018150","https://openalex.org/W4239582170","https://openalex.org/W2918664383","https://openalex.org/W106056076","https://openalex.org/W4320855730","https://openalex.org/W2135200719","https://openalex.org/W2573831620"],"abstract_inverted_index":{"Federated":[0],"learning":[1,7],"(FL)":[2],"is":[3,76,121,205],"a":[4,15,152,180,195],"privacy-preserving":[5],"machine":[6],"paradigm":[8],"that":[9,79,119,191],"enables":[10],"multiple":[11],"clients":[12],"to":[13,25,32,39,52,71,90,104,128,158,169,174,207],"train":[14,175],"unified":[16],"model":[17,178],"without":[18],"disclosing":[19],"their":[20],"private":[21],"data.":[22,149],"However,":[23],"susceptibility":[24],"membership":[26,73,172],"inference":[27,177,197],"attacks":[28],"(MIAs)":[29],"arises":[30],"due":[31],"the":[33,42,46,54,58,66,91,98,116,137,141,145,160,171,176,210],"natural":[34],"inclination":[35],"of":[36,97,140,212],"FL":[37,59,87,133],"models":[38],"overfit":[40],"on":[41,186],"training":[43,47,67,99,146],"data":[44,70],"during":[45],"process,":[48,100],"thereby":[49],"enabling":[50],"MIAs":[51,85],"exploit":[53],"subtle":[55],"differences":[56],"in":[57,107,179],"model\u2019s":[60,92],"parameters,":[61],"activations,":[62],"or":[63,95],"predictions":[64],"between":[65,144],"and":[68,147,204],"testing":[69],"infer":[72],"information.":[74],"It":[75],"worth":[77],"noting":[78],"most":[80],"if":[81],"not":[82],"all":[83],"existing":[84,202],"against":[86,131],"require":[88],"access":[89],"internal":[93],"information":[94],"modification":[96],"yielding":[101],"them":[102],"unlikely":[103],"be":[105,167],"performed":[106],"practice.":[108],"In":[109],"this":[110],"paper,":[111],"we":[112],"present":[113],"with":[114,200],"TEAR":[115,192],"first":[117],"evidence":[118],"it":[120],"possible":[122],"for":[123],"an":[124,132],"honest-but-curious":[125],"federated":[126],"client":[127],"perform":[129],"MIA":[130],"system,":[134],"by":[135],"exploring":[136],"Temporal":[138],"Evolution":[139],"Adversarial":[142],"Robustness":[143],"non-training":[148],"We":[150],"design":[151],"novel":[153],"adversarial":[154,163],"example":[155],"generation":[156],"method":[157],"quantify":[159],"target":[161],"sample\u2019s":[162],"robustness,":[164],"which":[165],"can":[166,193],"utilized":[168],"obtain":[170],"features":[173],"supervised":[181],"manner.":[182],"Extensive":[183],"experiment":[184],"results":[185],"five":[187],"realistic":[188],"datasets":[189],"demonstrate":[190],"achieve":[194],"strong":[196],"performance":[198],"compared":[199],"two":[201,213],"MIAs,":[203],"able":[206],"escape":[208],"from":[209],"protection":[211],"representative":[214],"defenses.":[215]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":12},{"year":2024,"cited_by_count":11}],"updated_date":"2026-04-09T08:11:56.329763","created_date":"2025-10-10T00:00:00"}