{"id":"https://openalex.org/W4410986334","doi":"https://doi.org/10.1109/tifs.2025.3574977","title":"Resisting Bag-Based Attribute Profiling by Adding Adversarial Items to Existing Media Profiles","display_name":"Resisting Bag-Based Attribute Profiling by Adding Adversarial Items to Existing Media Profiles","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4410986334","doi":"https://doi.org/10.1109/tifs.2025.3574977"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2025.3574977","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3574977","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://repository.ubn.ru.nl/bitstream/handle/2066/320590/1/320590.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5081854217","display_name":"Zhuoran Liu","orcid":"https://orcid.org/0000-0003-0049-7080"},"institutions":[{"id":"https://openalex.org/I145872427","display_name":"Radboud University Nijmegen","ror":"https://ror.org/016xsfp80","country_code":"NL","type":"education","lineage":["https://openalex.org/I145872427"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Zhuoran Liu","raw_affiliation_strings":["Institute for Computing and Information Sciences, Radboud University, Nijmegen, The Netherlands"],"raw_orcid":"https://orcid.org/0000-0003-0049-7080","affiliations":[{"raw_affiliation_string":"Institute for Computing and Information Sciences, Radboud University, Nijmegen, The Netherlands","institution_ids":["https://openalex.org/I145872427"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058084433","display_name":"Zhengyu Zhao","orcid":"https://orcid.org/0000-0003-0745-4294"},"institutions":[{"id":"https://openalex.org/I87445476","display_name":"Xi'an Jiaotong University","ror":"https://ror.org/017zhmm22","country_code":"CN","type":"education","lineage":["https://openalex.org/I87445476"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhengyu Zhao","raw_affiliation_strings":["School of Cyber Science and Engineering, Xi&#x2019;an Jiaotong University, Xi&#x2019;an, China","Xi&#x2019;an Jiaotong University, China"],"raw_orcid":"https://orcid.org/0000-0003-0745-4294","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Xi&#x2019;an Jiaotong University, Xi&#x2019;an, China","institution_ids":["https://openalex.org/I87445476"]},{"raw_affiliation_string":"Xi&#x2019;an Jiaotong University, China","institution_ids":["https://openalex.org/I87445476"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5063223989","display_name":"Martha Larson","orcid":"https://orcid.org/0000-0002-1430-4721"},"institutions":[{"id":"https://openalex.org/I145872427","display_name":"Radboud University Nijmegen","ror":"https://ror.org/016xsfp80","country_code":"NL","type":"education","lineage":["https://openalex.org/I145872427"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Martha Larson","raw_affiliation_strings":["Institute for Computing and Information Sciences, Radboud University, Nijmegen, The Netherlands"],"raw_orcid":"https://orcid.org/0000-0002-1430-4721","affiliations":[{"raw_affiliation_string":"Institute for Computing and Information Sciences, Radboud University, Nijmegen, The Netherlands","institution_ids":["https://openalex.org/I145872427"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.04757211,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"20","issue":null,"first_page":"6205","last_page":"6219"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.992900013923645,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8241207599639893},{"id":"https://openalex.org/keywords/profiling","display_name":"Profiling (computer programming)","score":0.7942377328872681},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7528345584869385},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3967725932598114},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.3657373785972595},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.33305609226226807},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.12188085913658142}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8241207599639893},{"id":"https://openalex.org/C187191949","wikidata":"https://www.wikidata.org/wiki/Q1138496","display_name":"Profiling (computer programming)","level":2,"score":0.7942377328872681},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7528345584869385},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3967725932598114},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.3657373785972595},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.33305609226226807},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.12188085913658142}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tifs.2025.3574977","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3574977","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},{"id":"pmh:oai:repository.ubn.ru.nl:2066/320590","is_oa":true,"landing_page_url":"https://hdl.handle.net/2066/320590","pdf_url":"https://repository.ubn.ru.nl/bitstream/handle/2066/320590/1/320590.pdf","source":{"id":"https://openalex.org/S4306401067","display_name":"Radboud Repository (Radboud University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I145872427","host_organization_name":"Radboud University Nijmegen","host_organization_lineage":["https://openalex.org/I145872427"],"host_organization_lineage_names":[],"type":"repository"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article / Letter to editor"}],"best_oa_location":{"id":"pmh:oai:repository.ubn.ru.nl:2066/320590","is_oa":true,"landing_page_url":"https://hdl.handle.net/2066/320590","pdf_url":"https://repository.ubn.ru.nl/bitstream/handle/2066/320590/1/320590.pdf","source":{"id":"https://openalex.org/S4306401067","display_name":"Radboud Repository (Radboud University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I145872427","host_organization_name":"Radboud University Nijmegen","host_organization_lineage":["https://openalex.org/I145872427"],"host_organization_lineage_names":[],"type":"repository"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article / Letter to editor"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4410986334.pdf","grobid_xml":"https://content.openalex.org/works/W4410986334.grobid-xml"},"referenced_works_count":70,"referenced_works":["https://openalex.org/W1494198834","https://openalex.org/W1950412479","https://openalex.org/W1989085630","https://openalex.org/W2051267297","https://openalex.org/W2064390898","https://openalex.org/W2099001231","https://openalex.org/W2103133870","https://openalex.org/W2107933610","https://openalex.org/W2108598243","https://openalex.org/W2153803020","https://openalex.org/W2159196732","https://openalex.org/W2169863498","https://openalex.org/W2194775991","https://openalex.org/W2285252196","https://openalex.org/W2347880541","https://openalex.org/W2480709345","https://openalex.org/W2513928994","https://openalex.org/W2540823975","https://openalex.org/W2560886373","https://openalex.org/W2603766943","https://openalex.org/W2604776663","https://openalex.org/W2605289356","https://openalex.org/W2607219512","https://openalex.org/W2616898157","https://openalex.org/W2640329709","https://openalex.org/W2741234481","https://openalex.org/W2743065247","https://openalex.org/W2770975812","https://openalex.org/W2774644650","https://openalex.org/W2781896769","https://openalex.org/W2886520477","https://openalex.org/W2890964092","https://openalex.org/W2962847335","https://openalex.org/W2963857521","https://openalex.org/W2969542116","https://openalex.org/W2996851481","https://openalex.org/W3007305010","https://openalex.org/W3018757597","https://openalex.org/W3103836116","https://openalex.org/W3173873552","https://openalex.org/W3201577120","https://openalex.org/W3204266507","https://openalex.org/W3209984917","https://openalex.org/W3216260999","https://openalex.org/W4248167275","https://openalex.org/W4250089123","https://openalex.org/W4293861233","https://openalex.org/W4376456710","https://openalex.org/W4384948753","https://openalex.org/W4387885777","https://openalex.org/W4393929524","https://openalex.org/W6628547770","https://openalex.org/W6637373629","https://openalex.org/W6640425456","https://openalex.org/W6685943642","https://openalex.org/W6695221996","https://openalex.org/W6720249124","https://openalex.org/W6744580074","https://openalex.org/W6747701563","https://openalex.org/W6748475379","https://openalex.org/W6750884629","https://openalex.org/W6755477022","https://openalex.org/W6757871085","https://openalex.org/W6763673678","https://openalex.org/W6780116240","https://openalex.org/W6787052717","https://openalex.org/W6797833107","https://openalex.org/W6810094423","https://openalex.org/W6849420946","https://openalex.org/W6857601782"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W2482350142","https://openalex.org/W4246396837","https://openalex.org/W3126451824","https://openalex.org/W1561927205","https://openalex.org/W3191453585","https://openalex.org/W4297672492","https://openalex.org/W4310988119","https://openalex.org/W4285226279","https://openalex.org/W4288019534"],"abstract_inverted_index":{"Bag-based":[0],"classification":[1],"is":[2,32,101,116],"a":[3,10,14,35,39,50,76,224],"supervised":[4],"machine":[5],"learning":[6],"method":[7],"that":[8,43,137],"makes":[9],"prediction":[11],"based":[12],"on":[13,62,123],"bag":[15,51],"of":[16,38,52,75,158,192,200,220,227],"items.":[17],"Unfortunately,":[18],"it":[19,106],"can":[20,126],"be":[21,128],"misused":[22],"as":[23,142],"an":[24,215],"attribute":[25,37,87],"profiling":[26,63,88,115,222],"attack,":[27],"where":[28],"the":[29,68,90,96,108,156,159,167,190,198,218],"attacker\u2019s":[30],"objective":[31],"to":[33,67,94,141,147,152,196,217],"infer":[34],"privacy-sensitive":[36],"target":[40],"user":[41],"from":[42],"user\u2019s":[44],"shared":[45,122],"social":[46,124],"media":[47,125],"profile,":[48],"i.e.,":[49,71],"images":[53],"or":[54],"other":[55],"media.":[56],"Despite":[57],"this":[58,80,132],"threat,":[59],"existing":[60,91,148],"studies":[61],"attacks":[64],"are":[65],"limited":[66],"item-level":[69],"perspective,":[70],"attack":[72,110],"and":[73,183,208,223],"defense":[74],"single":[77],"item.":[78],"In":[79],"work,":[81],"we":[82,134],"move":[83],"obfuscation":[84],"defenses":[85,136],"against":[86,113],"beyond":[89],"single-item":[92],"research":[93],"study":[95,135,226],"multi-item,":[97],"bag-based":[98,114,160,203,221],"case,":[99],"which":[100,150],"more":[102],"practically":[103],"relevant":[104],"because":[105],"considers":[107],"full":[109],"surface.":[111],"Defense":[112],"difficult,":[117],"because,":[118],"in":[119,166],"general,":[120],"content":[121],"never":[127],"completely":[129],"deleted.":[130],"For":[131],"reason,":[133],"involve":[138],"extensions,":[139],"referred":[140],"<italic":[143],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[144],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">pivoting":[145],"additions</i>,":[146],"profiles,":[149],"aim":[151],"change":[153],"(i.e.,":[154],"pivot)":[155],"output":[157],"classifier":[161],"without":[162],"removing":[163],"items":[164],"contained":[165],"original":[168],"profile.":[169],"We":[170,187],"propose":[171],"three":[172,201],"different":[173],"pivoting":[174,194],"additions:":[175],"Adversarial":[176],"Noise":[177],"(AdvN),":[178],"Adversarially":[179],"Perturbed":[180],"Items":[181,185],"(AdvPI),":[182],"Natural":[184],"(NatI).":[186],"experimentally":[188],"demonstrate":[189],"ability":[191],"these":[193],"additions":[195],"compromise":[197],"performance":[199],"deep":[202],"classifiers,":[204],"representing":[205],"late-,":[206],"intermediate-":[207],"early-fusion":[209],"approaches.":[210],"Overall,":[211],"our":[212],"work":[213],"provides":[214],"introduction":[216],"risk":[219],"systematic":[225],"defenses.":[228]},"counts_by_year":[],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}