{"id":"https://openalex.org/W7163906169","doi":"https://doi.org/10.1109/tifs.2026.3700870","title":"MU-MIA: Machine Unlearning for Membership Inference Attacks","display_name":"MU-MIA: Machine Unlearning for Membership Inference Attacks","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7163906169","doi":"https://doi.org/10.1109/tifs.2026.3700870"},"language":null,"primary_location":{"id":"doi:10.1109/tifs.2026.3700870","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2026.3700870","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5138105110","display_name":"Hongming Yang","orcid":null},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hongming Yang","raw_affiliation_strings":["School of Cyberspace Science, Harbin Institute of Technology, Harbin, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyberspace Science, Harbin Institute of Technology, Harbin, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091556887","display_name":"Guopu Zhu","orcid":"https://orcid.org/0000-0001-7956-5343"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guopu Zhu","raw_affiliation_strings":["School of Cyberspace Science, Harbin Institute of Technology, Harbin, China"],"raw_orcid":"https://orcid.org/0000-0001-7956-5343","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science, Harbin Institute of Technology, Harbin, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101860050","display_name":"Long Sun","orcid":"https://orcid.org/0000-0002-2555-7556"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Long Sun","raw_affiliation_strings":["School of Cyberspace Science, Harbin Institute of Technology, Harbin, China"],"raw_orcid":"https://orcid.org/0009-0001-6293-4453","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science, Harbin Institute of Technology, Harbin, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138142276","display_name":"Wei Jiang","orcid":"https://orcid.org/0009-0008-4776-1938"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wei Jiang","raw_affiliation_strings":["School of Cyberspace Science, Harbin Institute of Technology, Harbin, China"],"raw_orcid":"https://orcid.org/0009-0008-4776-1938","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science, Harbin Institute of Technology, Harbin, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100430876","display_name":"Xi Zhang","orcid":"https://orcid.org/0000-0003-3415-5345"},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinpeng Zhang","raw_affiliation_strings":["School of Computer Science, Fudan University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-0212-3501","affiliations":[{"raw_affiliation_string":"School of Computer Science, Fudan University, Shanghai, China","institution_ids":["https://openalex.org/I24943067"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5138175080","display_name":"Tao Xiang","orcid":"https://orcid.org/0000-0002-9439-4623"},"institutions":[{"id":"https://openalex.org/I158842170","display_name":"Chongqing University","ror":"https://ror.org/023rhb549","country_code":"CN","type":"education","lineage":["https://openalex.org/I158842170"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tao Xiang","raw_affiliation_strings":["School of Computer Science, Chongqing University, Chongqing, China"],"raw_orcid":"https://orcid.org/0000-0002-9439-4623","affiliations":[{"raw_affiliation_string":"School of Computer Science, Chongqing University, Chongqing, China","institution_ids":["https://openalex.org/I158842170"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.72503361,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"21","issue":null,"first_page":"5514","last_page":"5529"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7049000263214111,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7049000263214111,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.048900000751018524,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.025599999353289604,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5550000071525574},{"id":"https://openalex.org/keywords/electronic-mail","display_name":"Electronic mail","score":0.263700008392334},{"id":"https://openalex.org/keywords/data-modeling","display_name":"Data modeling","score":0.25839999318122864},{"id":"https://openalex.org/keywords/algorithm-design","display_name":"Algorithm design","score":0.2547000050544739}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.840399980545044},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5550000071525574},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5029000043869019},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.34850001335144043},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3398999869823456},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2976999878883362},{"id":"https://openalex.org/C3020028006","wikidata":"https://www.wikidata.org/wiki/Q9158","display_name":"Electronic mail","level":2,"score":0.263700008392334},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.25839999318122864},{"id":"https://openalex.org/C106516650","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm design","level":2,"score":0.2547000050544739},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.24770000576972961}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2026.3700870","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2026.3700870","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.46391627192497253,"display_name":"Reduced inequalities","id":"https://metadata.un.org/sdg/10"}],"awards":[{"id":"https://openalex.org/G1961232708","display_name":null,"funder_award_id":"U22B2047","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3031358711","display_name":null,"funder_award_id":"62532016","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5681518","display_name":null,"funder_award_id":"62472128","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6130330936","display_name":null,"funder_award_id":"62572079","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0,85,107],"widespread":[1],"deployment":[2],"of":[3,97,112,118,152,179],"deep":[4],"learning":[5],"models":[6],"across":[7,188],"various":[8],"applications":[9],"has":[10],"raised":[11],"significant":[12,39],"concerns":[13],"regarding":[14],"data":[15,168],"privacy.":[16],"Membership":[17],"inference":[18,82],"attacks":[19],"(MIAs),":[20],"a":[21,29,74,101,132,158],"major":[22],"privacy":[23],"threat,":[24],"aim":[25],"to":[26,41,91],"determine":[27],"whether":[28],"specific":[30,98],"sample":[31,120],"is":[32,110,155],"used":[33],"during":[34,121,169],"model":[35,61,68,192],"training,":[36],"thereby":[37,173],"posing":[38],"risks":[40],"sensitive":[42],"information.":[43],"Most":[44],"existing":[45,204],"MIA":[46,186],"methods":[47],"rely":[48],"on":[49],"the":[50,56,60,94,119,148,163,170,175,180,184,195],"model\u2019s":[51,95],"final":[52],"state":[53],"output,":[54],"overlooking":[55],"process":[57],"by":[58],"which":[59,138,161],"memorizes":[62],"training":[63],"samples.":[64],"To":[65,124],"better":[66],"exploit":[67],"memorization":[69,96],"for":[70,104,165],"MIAs,":[71],"we":[72,130],"propose":[73],"novel":[75],"attack":[76,83,154,206],"method":[77,87,187,202],"called":[78],"machine":[79,89,122,149],"unlearning-based":[80],"membership":[81],"(MU-MIA).":[84],"proposed":[86,185],"introduces":[88],"unlearning":[90,150,171],"incrementally":[92],"reduce":[93],"samples,":[99,129],"generating":[100],"forgetting":[102,108,145],"trajectory":[103,109],"each":[105,144],"sample.":[106],"composed":[111],"temporal":[113,141],"variations":[114],"in":[115],"different":[116,189],"metrics":[117],"unlearning.":[123],"distinguish":[125],"member":[126],"from":[127],"non-member":[128],"design":[131],"BiLSTM-based":[133],"binary":[134],"classifier":[135],"with":[136],"attention,":[137],"captures":[139],"discriminative":[140],"patterns":[142],"within":[143],"trajectory.":[146],"Moreover,":[147],"phase":[151],"our":[153,201],"conducted":[156],"under":[157],"zero-shot":[159],"setting,":[160],"eliminates":[162],"need":[164],"any":[166],"real":[167],"process,":[172],"improving":[174],"practicality":[176],"and":[177,191,194],"generalizability":[178],"attack.":[181],"We":[182],"evaluate":[183],"datasets":[190],"architectures,":[193],"comparative":[196],"experimental":[197],"results":[198],"show":[199],"that":[200],"outperforms":[203],"baseline":[205],"methods.":[207]},"counts_by_year":[],"updated_date":"2026-06-12T06:20:11.936012","created_date":"2026-06-09T00:00:00"}