{"id":"https://openalex.org/W4405517522","doi":"https://doi.org/10.1109/tifs.2024.3518779","title":"Query-Efficient Model Inversion Attacks: An Information Flow View","display_name":"Query-Efficient Model Inversion Attacks: An Information Flow View","publication_year":2024,"publication_date":"2024-12-18","ids":{"openalex":"https://openalex.org/W4405517522","doi":"https://doi.org/10.1109/tifs.2024.3518779"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2024.3518779","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3518779","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5032708497","display_name":"Yixiao Xu","orcid":"https://orcid.org/0000-0001-9791-0980"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yixiao Xu","raw_affiliation_strings":["School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-9791-0980","affiliations":[{"raw_affiliation_string":"School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113587199","display_name":"Binxing Fang","orcid":null},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Binxing Fang","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","Cyberspace Institute of Advanced Technology, Guangzhou University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]},{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100716223","display_name":"Mohan Li","orcid":"https://orcid.org/0000-0002-2290-046X"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mohan Li","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","Cyberspace Institute of Advanced Technology, Guangzhou University, China"],"raw_orcid":"https://orcid.org/0000-0002-2290-046X","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]},{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100442739","display_name":"Xiaolei Liu","orcid":"https://orcid.org/0000-0001-8510-4025"},"institutions":[{"id":"https://openalex.org/I40246663","display_name":"Chinese Academy of Engineering","ror":"https://ror.org/00z3yke57","country_code":"CN","type":"other","lineage":["https://openalex.org/I40246663"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaolei Liu","raw_affiliation_strings":["Chinese Academy of Engineering Physics, Institute of Computer Application, Mianyang, China","Institute of Computer Application, Chinese Academy of Engineering Physics, Mianyang, China"],"raw_orcid":"https://orcid.org/0000-0001-8510-4025","affiliations":[{"raw_affiliation_string":"Chinese Academy of Engineering Physics, Institute of Computer Application, Mianyang, China","institution_ids":["https://openalex.org/I40246663"]},{"raw_affiliation_string":"Institute of Computer Application, Chinese Academy of Engineering Physics, Mianyang, China","institution_ids":["https://openalex.org/I40246663"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5056608045","display_name":"Zhihong Tian","orcid":"https://orcid.org/0000-0002-9409-5359"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhihong Tian","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","Cyberspace Institute of Advanced Technology, Guangzhou University, China"],"raw_orcid":"https://orcid.org/0000-0002-9409-5359","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]},{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, China","institution_ids":["https://openalex.org/I37987034"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.8335,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.78787682,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":97},"biblio":{"volume":"20","issue":null,"first_page":"1023","last_page":"1036"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9934999942779541,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9934999942779541,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9779000282287598,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9297999739646912,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7968710660934448},{"id":"https://openalex.org/keywords/inversion","display_name":"Inversion (geology)","score":0.5435959100723267},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3776610195636749},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.37506046891212463},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.3281872570514679},{"id":"https://openalex.org/keywords/geology","display_name":"Geology","score":0.13404580950737}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7968710660934448},{"id":"https://openalex.org/C1893757","wikidata":"https://www.wikidata.org/wiki/Q3653001","display_name":"Inversion (geology)","level":3,"score":0.5435959100723267},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3776610195636749},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.37506046891212463},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3281872570514679},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.13404580950737},{"id":"https://openalex.org/C109007969","wikidata":"https://www.wikidata.org/wiki/Q749565","display_name":"Structural basin","level":2,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2024.3518779","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3518779","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2057174261","display_name":null,"funder_award_id":"62272119","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2507929164","display_name":"\u9762\u5411\u5de5\u4e1a\u63a7\u5236\u7cfb\u7edf\u653b\u51fb\u6d4b\u8bd5\u7684\u667a\u80fd\u653b\u51fb\u8def\u5f84\u53d1\u73b0\u5173\u952e\u6280\u672f\u7814\u7a76","funder_award_id":"62072130","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2567655147","display_name":null,"funder_award_id":"62372126","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3039124674","display_name":null,"funder_award_id":"2023A1515030142","funder_id":"https://openalex.org/F4320320671","funder_display_name":"National Research Foundation"},{"id":"https://openalex.org/G3372974846","display_name":null,"funder_award_id":"No.2023A1515030142","funder_id":"https://openalex.org/F4320337111","funder_display_name":"Basic and Applied Basic Research Foundation of Guangdong Province"},{"id":"https://openalex.org/G5717793507","display_name":null,"funder_award_id":"62102379","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6064493666","display_name":null,"funder_award_id":"U2436208","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8184982392","display_name":null,"funder_award_id":"62272119,","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8812891240","display_name":null,"funder_award_id":"62372129","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320320671","display_name":"National Research Foundation","ror":"https://ror.org/05s0g1g46"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320337111","display_name":"Basic and Applied Basic Research Foundation of Guangdong Province","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":50,"referenced_works":["https://openalex.org/W1834627138","https://openalex.org/W2024922353","https://openalex.org/W2051267297","https://openalex.org/W2183341477","https://openalex.org/W2194775991","https://openalex.org/W2535690855","https://openalex.org/W2736282206","https://openalex.org/W2950306824","https://openalex.org/W2962858109","https://openalex.org/W2963446712","https://openalex.org/W2964184826","https://openalex.org/W2985068832","https://openalex.org/W2995022099","https://openalex.org/W3003301247","https://openalex.org/W3016719260","https://openalex.org/W3034600949","https://openalex.org/W3035574324","https://openalex.org/W3035616549","https://openalex.org/W3084230511","https://openalex.org/W3165327186","https://openalex.org/W3174807077","https://openalex.org/W3177170788","https://openalex.org/W3211326549","https://openalex.org/W4206426144","https://openalex.org/W4226117300","https://openalex.org/W4229820657","https://openalex.org/W4283791729","https://openalex.org/W4288057780","https://openalex.org/W4294993033","https://openalex.org/W4296338020","https://openalex.org/W4308433828","https://openalex.org/W4372269392","https://openalex.org/W4384499025","https://openalex.org/W4384519404","https://openalex.org/W4386231006","https://openalex.org/W4386766697","https://openalex.org/W4392450548","https://openalex.org/W4399563768","https://openalex.org/W6733862737","https://openalex.org/W6741832134","https://openalex.org/W6761100157","https://openalex.org/W6765779288","https://openalex.org/W6776993083","https://openalex.org/W6779093361","https://openalex.org/W6779823529","https://openalex.org/W6781511523","https://openalex.org/W6787335730","https://openalex.org/W6803903061","https://openalex.org/W6841059102","https://openalex.org/W6850491769"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Model":[0,207],"Inversion":[1,208],"Attacks":[2],"(MIAs)":[3],"pose":[4],"a":[5,137,170,182,225],"certain":[6],"threat":[7],"to":[8,19,31,72,110,114,135],"the":[9,24,32,36,41,53,62,74,77,81,102,125,141,152,155,160,185,188,192,200,205,241],"data":[10],"privacy":[11],"of":[12,23,38,76,84,127,144,154,173,187,195,227],"learning-based":[13],"systems,":[14],"as":[15],"they":[16],"enable":[17],"adversaries":[18],"reconstruct":[20],"identifiable":[21],"features":[22],"training":[25],"distribution":[26],"with":[27,45],"only":[28],"query":[29,236],"access":[30],"victim":[33],"model.":[34],"In":[35],"context":[37],"deep":[39],"learning,":[40],"primary":[42],"challenges":[43],"associated":[44],"MIAs":[46,123,175],"are":[47],"suboptimal":[48],"attack":[49,242],"success":[50,83,243],"rates":[51],"and":[52,108,158,165,191,218],"corresponding":[54],"high":[55],"computational":[56],"costs.":[57],"Prior":[58],"efforts":[59],"assumed":[60],"that":[61],"expansive":[63],"search":[64,78,156,189,216],"space":[65,157,190,217],"caused":[66],"these":[67,85,112,119],"limitations,":[68],"employing":[69],"generative":[70,196],"models":[71],"constrain":[73],"dimensions":[75],"space.":[79],"Despite":[80],"initial":[82],"generative-based":[86,174],"solutions,":[87],"recent":[88],"experiments":[89],"have":[90],"cast":[91],"doubt":[92],"on":[93,199],"this":[94,177],"fundamental":[95],"assumption,":[96],"leaving":[97],"two":[98,148],"open":[99],"questions":[100],"about":[101],"influential":[103],"factors":[104,113],"determining":[105],"MIA":[106],"performance":[107],"how":[109],"manipulate":[111],"improve":[115],"MIAs.":[116],"To":[117],"answer":[118],"questions,":[120],"we":[121,180,203],"reframe":[122],"from":[124],"perspective":[126],"information":[128,162],"flow.":[129],"This":[130],"new":[131],"formulation":[132],"allows":[133],"us":[134],"establish":[136],"lower":[138],"bound":[139],"for":[140],"error":[142],"probability":[143],"MIAs,":[145],"determined":[146],"by":[147,245],"critical":[149],"factors:":[150],"(1)":[151],"size":[153,186],"(2)":[159],"mutual":[161,221],"between":[163,184],"input":[164],"output":[166],"random":[167],"variables.":[168],"Through":[169],"detailed":[171],"analysis":[172],"within":[176],"theoretical":[178,201],"framework,":[179],"uncover":[181],"trade-off":[183],"generation":[193],"capability":[194],"models.":[197],"Based":[198],"conclusions,":[202],"introduce":[204],"Query-Efficient":[206],"Approach":[209],"(QE-MIA).":[210],"By":[211],"strategically":[212],"selecting":[213],"an":[214],"appropriate":[215],"introducing":[219],"additional":[220],"information,":[222],"QE-MIA":[223],"achieves":[224],"reduction":[226],"<inline-formula":[228,246],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[229,247],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">":[230,248],"<tex-math":[231,249],"notation=\"LaTeX\">$60\\%\\sim":[232],"70\\%$":[233],"</tex-math></inline-formula>":[234],"in":[235],"overhead":[237],"while":[238],"concurrently":[239],"enhancing":[240],"rate":[244],"notation=\"LaTeX\">$5\\%\\sim":[250],"25\\%$":[251],"</tex-math></inline-formula>.":[252]},"counts_by_year":[{"year":2025,"cited_by_count":3}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}