{"id":"https://openalex.org/W4409426645","doi":"https://doi.org/10.1109/tifs.2025.3560557","title":"TrapNet: Model Inversion Defense via Trapdoor","display_name":"TrapNet: Model Inversion Defense via Trapdoor","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4409426645","doi":"https://doi.org/10.1109/tifs.2025.3560557"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2025.3560557","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3560557","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5011383481","display_name":"Wanlun Ma","orcid":"https://orcid.org/0000-0002-6305-1740"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Wanlun Ma","raw_affiliation_strings":["School of Science, Computing and Engineering Technologies, Swinburne University of Technology, Melbourne, VIC, Australia","School of Science, Computing and Engineering Technologies, Swinburne University of Technology, Australia"],"raw_orcid":"https://orcid.org/0000-0002-6305-1740","affiliations":[{"raw_affiliation_string":"School of Science, Computing and Engineering Technologies, Swinburne University of Technology, Melbourne, VIC, Australia","institution_ids":["https://openalex.org/I57093077"]},{"raw_affiliation_string":"School of Science, Computing and Engineering Technologies, Swinburne University of Technology, Australia","institution_ids":["https://openalex.org/I57093077"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081805488","display_name":"Derui Wang","orcid":"https://orcid.org/0000-0003-1388-7715"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Derui Wang","raw_affiliation_strings":["Cybersecurity and Quantum Systems Group, CSIRO’s Data61, Eveleigh, NSW, Australia","Cybersecurity and Quantum Systems Group, CSIRO’s Data, Australia"],"raw_orcid":"https://orcid.org/0000-0003-1388-7715","affiliations":[{"raw_affiliation_string":"Cybersecurity and Quantum Systems Group, CSIRO’s Data61, Eveleigh, NSW, Australia","institution_ids":["https://openalex.org/I42894916"]},{"raw_affiliation_string":"Cybersecurity and Quantum Systems Group, CSIRO’s Data, Australia","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056243323","display_name":"Yiliao Song","orcid":"https://orcid.org/0000-0002-6633-2695"},"institutions":[{"id":"https://openalex.org/I5681781","display_name":"The University of Adelaide","ror":"https://ror.org/00892tw58","country_code":"AU","type":"education","lineage":["https://openalex.org/I5681781"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Yiliao Song","raw_affiliation_strings":["School of Computer and Mathematical Sciences, The University of Adelaide, Adelaide, SA, Australia","School of Computer and Mathematical Sciences, The University of Adelaide, Australia"],"raw_orcid":"https://orcid.org/0000-0002-6633-2695","affiliations":[{"raw_affiliation_string":"School of Computer and Mathematical Sciences, The University of Adelaide, Adelaide, SA, Australia","institution_ids":["https://openalex.org/I5681781"]},{"raw_affiliation_string":"School of Computer and Mathematical Sciences, The University of Adelaide, Australia","institution_ids":["https://openalex.org/I5681781"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009850797","display_name":"Minhui Xue","orcid":"https://orcid.org/0000-0002-9172-4252"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Minhui Xue","raw_affiliation_strings":["Cybersecurity and Quantum Systems Group, CSIRO’s Data61, Eveleigh, NSW, Australia","Cybersecurity and Quantum Systems Group, CSIRO’s Data, Australia"],"raw_orcid":"https://orcid.org/0000-0002-9172-4252","affiliations":[{"raw_affiliation_string":"Cybersecurity and Quantum Systems Group, CSIRO’s Data61, Eveleigh, NSW, Australia","institution_ids":["https://openalex.org/I42894916"]},{"raw_affiliation_string":"Cybersecurity and Quantum Systems Group, CSIRO’s Data, Australia","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076576641","display_name":"Sheng Wen","orcid":"https://orcid.org/0000-0003-0655-666X"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Sheng Wen","raw_affiliation_strings":["School of Science, Computing and Engineering Technologies, Swinburne University of Technology, Melbourne, VIC, Australia","School of Science, Computing and Engineering Technologies, Swinburne University of Technology, Australia"],"raw_orcid":"https://orcid.org/0000-0003-0655-666X","affiliations":[{"raw_affiliation_string":"School of Science, Computing and Engineering Technologies, Swinburne University of Technology, Melbourne, VIC, Australia","institution_ids":["https://openalex.org/I57093077"]},{"raw_affiliation_string":"School of Science, Computing and Engineering Technologies, Swinburne University of Technology, Australia","institution_ids":["https://openalex.org/I57093077"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101635376","display_name":"Zhengdao Li","orcid":"https://orcid.org/0000-0003-1534-3658"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhengdao Li","raw_affiliation_strings":["School of Artificial Intelligence, Guangzhou University, Guangzhou, China","School of Artificial Intelligence, Guangzhou University, China"],"raw_orcid":"https://orcid.org/0000-0003-1534-3658","affiliations":[{"raw_affiliation_string":"School of Artificial Intelligence, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]},{"raw_affiliation_string":"School of Artificial Intelligence, Guangzhou University, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100666554","display_name":"Yang Xiang","orcid":"https://orcid.org/0000-0001-5252-0831"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Yang Xiang","raw_affiliation_strings":["School of Science, Computing and Engineering Technologies, Swinburne University of Technology, Melbourne, VIC, Australia","School of Science, Computing and Engineering Technologies, Swinburne University of Technology, Australia"],"raw_orcid":"https://orcid.org/0000-0001-5252-0831","affiliations":[{"raw_affiliation_string":"School of Science, Computing and Engineering Technologies, Swinburne University of Technology, Melbourne, VIC, Australia","institution_ids":["https://openalex.org/I57093077"]},{"raw_affiliation_string":"School of Science, Computing and Engineering Technologies, Swinburne University of Technology, Australia","institution_ids":["https://openalex.org/I57093077"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":7.3419,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.96597586,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":"20","issue":null,"first_page":"4469","last_page":"4483"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9559000134468079,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9437999725341797,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7605542540550232},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.45979851484298706}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7605542540550232},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.45979851484298706}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2025.3560557","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3560557","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":55,"referenced_works":["https://openalex.org/W1834627138","https://openalex.org/W1969186119","https://openalex.org/W2047281923","https://openalex.org/W2051267297","https://openalex.org/W2194775991","https://openalex.org/W2325939864","https://openalex.org/W2535690855","https://openalex.org/W2611650229","https://openalex.org/W2963378725","https://openalex.org/W2963446712","https://openalex.org/W2963839617","https://openalex.org/W2966342255","https://openalex.org/W2985580374","https://openalex.org/W3010216907","https://openalex.org/W3034664137","https://openalex.org/W3035512170","https://openalex.org/W3035574324","https://openalex.org/W3035616549","https://openalex.org/W3177170788","https://openalex.org/W3191453585","https://openalex.org/W3197399603","https://openalex.org/W4205206005","https://openalex.org/W4214680449","https://openalex.org/W4225016446","https://openalex.org/W4226117300","https://openalex.org/W4229820657","https://openalex.org/W4233756358","https://openalex.org/W4290948187","https://openalex.org/W4312307529","https://openalex.org/W4313547874","https://openalex.org/W4320013936","https://openalex.org/W4324007135","https://openalex.org/W4365504037","https://openalex.org/W4367047222","https://openalex.org/W4382450048","https://openalex.org/W4384499025","https://openalex.org/W4386076651","https://openalex.org/W4392932155","https://openalex.org/W4402264526","https://openalex.org/W4404293760","https://openalex.org/W4405632792","https://openalex.org/W4406610709","https://openalex.org/W4407236106","https://openalex.org/W4407638341","https://openalex.org/W6628547770","https://openalex.org/W6713645886","https://openalex.org/W6732696085","https://openalex.org/W6739868092","https://openalex.org/W6748655329","https://openalex.org/W6748982356","https://openalex.org/W6760759230","https://openalex.org/W6773946081","https://openalex.org/W6776993083","https://openalex.org/W6803903061","https://openalex.org/W6838819192"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Model":[0],"inversion":[1,155],"(MI)":[2],"attacks,":[3,156],"for":[4],"which":[5],"effective":[6],"defense":[7],"strategies":[8],"are":[9],"still":[10],"lacking,":[11],"pose":[12],"significant":[13],"risks":[14],"to":[15,24,35,81,101,110,119,125],"privacy":[16],"by":[17],"reconstructing":[18],"private":[19,79],"training":[20],"data":[21],"through":[22],"access":[23,124],"well-trained":[25],"classifiers.":[26],"Addressing":[27],"this":[28,30,60],"concern,":[29],"study":[31],"introduces":[32],"TrapNet,":[33],"designed":[34],"defend":[36],"against":[37,152],"advanced":[38,148],"MI":[39,66],"attacks":[40],"while":[41,105],"maintaining":[42],"good":[43],"model":[44,107,154],"utility.":[45,108],"TrapNet":[46,62,70,114],"intentionally":[47],"injects":[48],"trapdoors":[49],"into":[50],"the":[51,55,78,111,146],"classification":[52],"manifold":[53],"of":[54],"protected":[56],"target":[57,121],"model.":[58],"In":[59,88],"way,":[61],"can":[63,115],"effectively":[64],"mislead":[65],"attack":[67],"optimization.":[68],"Specifically,":[69],"leverages":[71],"a":[72,92],"conditional":[73],"GAN":[74],"(cGAN)":[75],"trained":[76],"on":[77,132],"dataset":[80],"generate":[82],"diverse":[83],"and":[84,96,135,150,160],"realistic":[85],"trapdoor":[86,103],"samples.":[87],"addition,":[89],"we":[90],"propose":[91],"graph-matching":[93],"self-obfuscation":[94],"strategy":[95],"an":[97],"entropy":[98],"regularization":[99],"technique":[100],"optimize":[102],"injection":[104],"preserving":[106],"Compared":[109],"existing":[112,143],"defense,":[113],"provide":[116],"universal":[117],"protection":[118],"all":[120],"classes":[122],"without":[123],"any":[126],"auxiliary":[127],"public":[128],"data.":[129],"Extensive":[130],"experiments":[131],"CelebA,":[133],"VGG-Face,":[134],"VGG-Face2":[136],"datasets":[137],"demonstrate":[138],"TrapNet\u2019s":[139],"superior":[140],"performance":[141],"over":[142],"defenses,":[144],"including":[145],"most":[147],"NetGuard":[149],"BiDO,":[151],"state-of-the-art":[153],"i.e.,":[157],"PLG-MI,":[158],"LOMMA,":[159],"Plug&Play.":[161]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5}],"updated_date":"2026-07-30T17:31:21.811387","created_date":"2025-10-10T00:00:00"}