{"id":"https://openalex.org/W4399563768","doi":"https://doi.org/10.1109/tifs.2024.3413592","title":"Rethinking Membership Inference Attacks Against Transfer Learning","display_name":"Rethinking Membership Inference Attacks Against Transfer Learning","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4399563768","doi":"https://doi.org/10.1109/tifs.2024.3413592"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2024.3413592","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3413592","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101623391","display_name":"Cong Wu","orcid":"https://orcid.org/0000-0002-0930-0283"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Cong Wu","raw_affiliation_strings":["College of Computing and Data Science, Nanyang Technological University, Jurong West, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-0930-0283","affiliations":[{"raw_affiliation_string":"College of Computing and Data Science, Nanyang Technological University, Jurong West, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100394917","display_name":"Jing Chen","orcid":"https://orcid.org/0000-0002-7212-5297"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jing Chen","raw_affiliation_strings":["Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0002-7212-5297","affiliations":[{"raw_affiliation_string":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009510169","display_name":"Qianru Fang","orcid":"https://orcid.org/0000-0002-1876-4768"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qianru Fang","raw_affiliation_strings":["Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004999865","display_name":"Kun He","orcid":"https://orcid.org/0000-0003-3472-419X"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kun He","raw_affiliation_strings":["Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0003-3472-419X","affiliations":[{"raw_affiliation_string":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073603754","display_name":"Ziming Zhao","orcid":"https://orcid.org/0000-0002-4930-5556"},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ziming Zhao","raw_affiliation_strings":["Khoury College of Computer Sciences, Northeastern University, Boston, MA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Khoury College of Computer Sciences, Northeastern University, Boston, MA, USA","institution_ids":["https://openalex.org/I12912129"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109634667","display_name":"Hao Ren","orcid":null},"institutions":[{"id":"https://openalex.org/I24185976","display_name":"Sichuan University","ror":"https://ror.org/011ashp19","country_code":"CN","type":"education","lineage":["https://openalex.org/I24185976"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hao Ren","raw_affiliation_strings":["School of Cyber Science and Engineering, Sichuan University, Chengdu, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Sichuan University, Chengdu, China","institution_ids":["https://openalex.org/I24185976"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046950426","display_name":"Guowen Xu","orcid":"https://orcid.org/0000-0002-9764-9345"},"institutions":[{"id":"https://openalex.org/I168719708","display_name":"City University of Hong Kong","ror":"https://ror.org/03q8dnn23","country_code":"HK","type":"education","lineage":["https://openalex.org/I168719708"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Guowen Xu","raw_affiliation_strings":["Department of Computer Science, City University of Hong Kong, Hong Kong, China"],"raw_orcid":"https://orcid.org/0000-0002-9764-9345","affiliations":[{"raw_affiliation_string":"Department of Computer Science, City University of Hong Kong, Hong Kong, China","institution_ids":["https://openalex.org/I168719708"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100355692","display_name":"Yang Liu","orcid":"https://orcid.org/0000-0001-7300-9215"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Yang Liu","raw_affiliation_strings":["College of Computing and Data Science, Nanyang Technological University, Jurong West, Singapore"],"raw_orcid":"https://orcid.org/0000-0001-7300-9215","affiliations":[{"raw_affiliation_string":"College of Computing and Data Science, Nanyang Technological University, Jurong West, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100666554","display_name":"Yang Xiang","orcid":"https://orcid.org/0000-0001-5252-0831"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Yang Xiang","raw_affiliation_strings":["Digital Research, Swinburne University of Technology, Hawthorn, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0001-5252-0831","affiliations":[{"raw_affiliation_string":"Digital Research, Swinburne University of Technology, Hawthorn, VIC, Australia","institution_ids":["https://openalex.org/I57093077"]}]}],"institutions":[],"countries_distinct_count":5,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":17.3948,"has_fulltext":false,"cited_by_count":71,"citation_normalized_percentile":{"value":0.99413783,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"19","issue":null,"first_page":"6441","last_page":"6454"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9581999778747559,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9581999778747559,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.9451000094413757,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13702","display_name":"Machine Learning in Healthcare","score":0.926800012588501,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8109209537506104},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.6466249823570251},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.49371537566185},{"id":"https://openalex.org/keywords/transfer-of-learning","display_name":"Transfer of learning","score":0.4703049063682556},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.41866374015808105}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8109209537506104},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.6466249823570251},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.49371537566185},{"id":"https://openalex.org/C150899416","wikidata":"https://www.wikidata.org/wiki/Q1820378","display_name":"Transfer of learning","level":2,"score":0.4703049063682556},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.41866374015808105}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2024.3413592","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3413592","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities","score":0.5699999928474426}],"awards":[{"id":"https://openalex.org/G5215447159","display_name":null,"funder_award_id":"2021YFB2700200","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G7960939272","display_name":null,"funder_award_id":"62076187","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G801100328","display_name":null,"funder_award_id":"2022CXPT055","funder_id":"https://openalex.org/F4320333596","funder_display_name":"Key Technology Research and Development Program of Shandong"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320333596","display_name":"Key Technology Research and Development Program of Shandong","ror":null},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":78,"referenced_works":["https://openalex.org/W1483327747","https://openalex.org/W2043486661","https://openalex.org/W2108598243","https://openalex.org/W2165698076","https://openalex.org/W2183341477","https://openalex.org/W2194775991","https://openalex.org/W2532520288","https://openalex.org/W2535690855","https://openalex.org/W2564549723","https://openalex.org/W2778284298","https://openalex.org/W2786233556","https://openalex.org/W2795435272","https://openalex.org/W2884943453","https://openalex.org/W2913413968","https://openalex.org/W2930926105","https://openalex.org/W2946363484","https://openalex.org/W2962326827","https://openalex.org/W2963378725","https://openalex.org/W2963446712","https://openalex.org/W2963540401","https://openalex.org/W2983140679","https://openalex.org/W2985913519","https://openalex.org/W3007720613","https://openalex.org/W3038214419","https://openalex.org/W3040384242","https://openalex.org/W3043638540","https://openalex.org/W3046208783","https://openalex.org/W3046527848","https://openalex.org/W3071470454","https://openalex.org/W3084357355","https://openalex.org/W3086176239","https://openalex.org/W3088964528","https://openalex.org/W3095101874","https://openalex.org/W3096692244","https://openalex.org/W3097461694","https://openalex.org/W3103245149","https://openalex.org/W3104224589","https://openalex.org/W3106873467","https://openalex.org/W3115278118","https://openalex.org/W3118608800","https://openalex.org/W3128758033","https://openalex.org/W3138758728","https://openalex.org/W3150395569","https://openalex.org/W3202500832","https://openalex.org/W3203285340","https://openalex.org/W3214437258","https://openalex.org/W4206161712","https://openalex.org/W4288057780","https://openalex.org/W4296266687","https://openalex.org/W4306931546","https://openalex.org/W4308410741","https://openalex.org/W4308643316","https://openalex.org/W4312620418","https://openalex.org/W4367047069","https://openalex.org/W4380033533","https://openalex.org/W4383112908","https://openalex.org/W4385885222","https://openalex.org/W4386075834","https://openalex.org/W4386831200","https://openalex.org/W4387303170","https://openalex.org/W4387665628","https://openalex.org/W4389349949","https://openalex.org/W4390146935","https://openalex.org/W4390480931","https://openalex.org/W4392271351","https://openalex.org/W4392406331","https://openalex.org/W4394625871","https://openalex.org/W6637373629","https://openalex.org/W6746849571","https://openalex.org/W6747553010","https://openalex.org/W6754279747","https://openalex.org/W6775482175","https://openalex.org/W6776979042","https://openalex.org/W6781508659","https://openalex.org/W6781511523","https://openalex.org/W6782733353","https://openalex.org/W6787972765","https://openalex.org/W6861692419"],"related_works":["https://openalex.org/W2961085424","https://openalex.org/W4306674287","https://openalex.org/W3046775127","https://openalex.org/W3107602296","https://openalex.org/W4394896187","https://openalex.org/W3170094116","https://openalex.org/W4386462264","https://openalex.org/W4364306694","https://openalex.org/W4312192474","https://openalex.org/W4283697347"],"abstract_inverted_index":{"Transfer":[0],"learning,":[1,75],"successful":[2],"in":[3,32,42,50,54,96,115,154,192],"knowledge":[4],"translation":[5],"across":[6,151],"related":[7],"tasks,":[8,158],"faces":[9],"a":[10,69,79,97],"substantial":[11],"privacy":[12,59],"threat":[13],"from":[14],"membership":[15,144,190],"inference":[16,145,191],"attacks":[17],"(MIAs).":[18],"These":[19,127],"attacks,":[20],"despite":[21],"posing":[22],"significant":[23],"risk":[24,188],"to":[25,76,85,134,142,168,179],"ML":[26],"model\u2019s":[27,138,174],"training":[28,139,175],"data,":[29],"remain":[30],"limited-explored":[31],"transfer":[33,43,62,74,156,193],"learning.":[34,63,194],"The":[35],"interaction":[36],"between":[37,107,119],"teacher":[38,88,108,173],"and":[39,109,123,141],"student":[40,94,110,121,170],"models":[41],"learning":[44,157],"has":[45,166],"not":[46],"been":[47],"thoroughly":[48],"explored":[49],"MIAs,":[51],"potentially":[52],"resulting":[53],"an":[55,163],"under-examined":[56],"aspect":[57],"of":[58,189],"vulnerabilities":[60],"within":[61],"In":[64],"this":[65],"paper,":[66],"we":[67],"propose":[68],"new":[70],"MIA":[71],"vector":[72],"against":[73],"determine":[77],"whether":[78],"specific":[80],"data":[81,176],"point":[82],"was":[83],"used":[84],"train":[86],"the":[87,93,104,113,120,136,169,172,186],"model":[89,95,122],"while":[90],"only":[91,165],"accessing":[92],"white-box":[98],"setting.":[99],"Our":[100,148],"method":[101],"delves":[102],"into":[103],"intricate":[105],"relationship":[106],"models,":[111],"analyzing":[112],"discrepancies":[114],"hidden":[116],"layer":[117],"representations":[118],"its":[124],"shadow":[125,137],"counterpart.":[126],"identified":[128],"differences":[129],"are":[130],"then":[131],"adeptly":[132],"utilized":[133],"refine":[135],"process":[140],"inform":[143],"decisions":[146],"effectively.":[147],"method,":[149],"evaluated":[150],"four":[152],"datasets":[153],"diverse":[155],"reveals":[159],"that":[160],"even":[161],"when":[162],"attacker":[164],"access":[167],"model,":[171],"remains":[177],"susceptible":[178],"MIAs.":[180],"We":[181],"believe":[182],"our":[183],"work":[184],"unveils":[185],"unexplored":[187]},"counts_by_year":[{"year":2026,"cited_by_count":13},{"year":2025,"cited_by_count":44},{"year":2024,"cited_by_count":14}],"updated_date":"2026-07-17T09:13:05.818461","created_date":"2025-10-10T00:00:00"}