{"id":"https://openalex.org/W4409659448","doi":"https://doi.org/10.1109/tnnls.2025.3554217","title":"Neural Honeypoint: An Active Defense Framework Against Model Inversion Attacks","display_name":"Neural Honeypoint: An Active Defense Framework Against Model Inversion Attacks","publication_year":2025,"publication_date":"2025-04-22","ids":{"openalex":"https://openalex.org/W4409659448","doi":"https://doi.org/10.1109/tnnls.2025.3554217","pmid":"https://pubmed.ncbi.nlm.nih.gov/40261774"},"language":"en","primary_location":{"id":"doi:10.1109/tnnls.2025.3554217","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnnls.2025.3554217","pdf_url":null,"source":{"id":"https://openalex.org/S4210175523","display_name":"IEEE Transactions on Neural Networks and Learning Systems","issn_l":"2162-237X","issn":["2162-237X","2162-2388"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Neural Networks and Learning Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","pubmed"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5032708497","display_name":"Yixiao Xu","orcid":"https://orcid.org/0000-0001-9791-0980"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yixiao Xu","raw_affiliation_strings":["School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-9791-0980","affiliations":[{"raw_affiliation_string":"School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100716223","display_name":"Mohan Li","orcid":"https://orcid.org/0000-0002-2290-046X"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mohan Li","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangdong Key Laboratory of Industrial Control System Security and Huangpu Research School, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-2290-046X","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangdong Key Laboratory of Industrial Control System Security and Huangpu Research School, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091368858","display_name":"Binxing Fang","orcid":"https://orcid.org/0000-0003-0305-2132"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Binxing Fang","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangdong Key Laboratory of Industrial Control System Security and Huangpu Research School, Guangzhou University, Guangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangdong Key Laboratory of Industrial Control System Security and Huangpu Research School, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100390839","display_name":"Yuan Liu","orcid":"https://orcid.org/0000-0002-0246-0778"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuan Liu","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangdong Key Laboratory of Industrial Control System Security and Huangpu Research School, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-0246-0778","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangdong Key Laboratory of Industrial Control System Security and Huangpu Research School, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5056608045","display_name":"Zhihong Tian","orcid":"https://orcid.org/0000-0002-9409-5359"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhihong Tian","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangdong Key Laboratory of Industrial Control System Security and Huangpu Research School, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-9409-5359","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangdong Key Laboratory of Industrial Control System Security and Huangpu Research School, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":5.584,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.95320361,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":99},"biblio":{"volume":"36","issue":"9","first_page":"16186","last_page":"16197"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9422000050544739,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/inversion","display_name":"Inversion (geology)","score":0.4692765772342682},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.45306310057640076},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.37127912044525146},{"id":"https://openalex.org/keywords/geology","display_name":"Geology","score":0.17627078294754028},{"id":"https://openalex.org/keywords/seismology","display_name":"Seismology","score":0.09659680724143982}],"concepts":[{"id":"https://openalex.org/C1893757","wikidata":"https://www.wikidata.org/wiki/Q3653001","display_name":"Inversion (geology)","level":3,"score":0.4692765772342682},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.45306310057640076},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.37127912044525146},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.17627078294754028},{"id":"https://openalex.org/C165205528","wikidata":"https://www.wikidata.org/wiki/Q83371","display_name":"Seismology","level":1,"score":0.09659680724143982},{"id":"https://openalex.org/C77928131","wikidata":"https://www.wikidata.org/wiki/Q193343","display_name":"Tectonics","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tnnls.2025.3554217","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnnls.2025.3554217","pdf_url":null,"source":{"id":"https://openalex.org/S4210175523","display_name":"IEEE Transactions on Neural Networks and Learning Systems","issn_l":"2162-237X","issn":["2162-237X","2162-2388"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Neural Networks and Learning Systems","raw_type":"journal-article"},{"id":"pmid:40261774","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/40261774","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE transactions on neural networks and learning systems","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2567655147","display_name":null,"funder_award_id":"62372126","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5050773963","display_name":null,"funder_award_id":"2023A1515030142","funder_id":"https://openalex.org/F4320337111","funder_display_name":"Basic and Applied Basic Research Foundation of Guangdong Province"},{"id":"https://openalex.org/G6064493666","display_name":null,"funder_award_id":"U2436208","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8812891240","display_name":null,"funder_award_id":"62372129","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320337111","display_name":"Basic and Applied Basic Research Foundation of Guangdong Province","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":35,"referenced_works":["https://openalex.org/W1834627138","https://openalex.org/W2024922353","https://openalex.org/W2051267297","https://openalex.org/W2183341477","https://openalex.org/W2473418344","https://openalex.org/W2508512712","https://openalex.org/W2985580374","https://openalex.org/W2997357271","https://openalex.org/W3003301247","https://openalex.org/W3016719260","https://openalex.org/W3034600949","https://openalex.org/W3035574324","https://openalex.org/W3035616549","https://openalex.org/W3112464176","https://openalex.org/W3134837785","https://openalex.org/W3176546664","https://openalex.org/W3177170788","https://openalex.org/W3197399603","https://openalex.org/W4205270295","https://openalex.org/W4225014117","https://openalex.org/W4226117300","https://openalex.org/W4229820657","https://openalex.org/W4285167337","https://openalex.org/W4286375281","https://openalex.org/W4296338020","https://openalex.org/W4319863510","https://openalex.org/W4327662239","https://openalex.org/W4362514754","https://openalex.org/W4372269392","https://openalex.org/W4381785896","https://openalex.org/W4384499025","https://openalex.org/W4386044014","https://openalex.org/W4386076048","https://openalex.org/W4390881876","https://openalex.org/W4402401682"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Learning-based":[0],"systems":[1],"have":[2],"been":[3],"proved":[4],"to":[5,41,82,89,92,146,214,226],"be":[6],"vulnerable":[7],"against":[8,107],"model":[9,25,181,184,190],"inversion":[10,64,191,221],"attacks":[11,230],"(MIAs),":[12],"where":[13],"attackers":[14,115],"steal":[15],"private":[16],"information":[17,49],"of":[18,71,120,197,211],"training":[19,171],"data":[20,93],"by":[21,35,46,133,193],"querying":[22],"the":[23,31,43,48,56,69,72,124,134,155,159,170,179,195,209],"target":[24],"using":[26],"synthetic":[27],"samples.":[28],"To":[29,95],"alleviate":[30],"urgent":[32],"threat":[33],"introduced":[34],"MIAs,":[36],"existing":[37,77],"advancements":[38],"are":[39],"proposed":[40],"increase":[42],"attack":[44,57,84,148],"overhead":[45],"limiting":[47],"available.":[50],"Although":[51],"these":[52,176],"methods":[53,80],"successfully":[54],"reduced":[55],"success":[58],"rate":[59],"(ASR)":[60],"for":[61,166],"a":[62,118],"one-time":[63],"attempt,":[65],"they":[66],"usually":[67],"compromise":[68],"usability":[70],"protected":[73,167,180],"model.":[74],"More":[75],"importantly,":[76],"MIA":[78,114],"defense":[79,105,140],"fail":[81],"capture":[83,147,220],"attempts,":[85],"which":[86,223],"can":[87,137,188,218],"lead":[88],"persistent":[90],"threats":[91],"privacy.":[94],"bridge":[96],"this":[97],"gap,":[98],"we":[99],"propose":[100],"Neural":[101,151,206],"Honeypoint,":[102],"an":[103],"active":[104,139],"framework":[106],"MIAs.":[108],"The":[109],"key":[110],"insight":[111],"is":[112],"that":[113,205],"will":[116,130],"make":[117],"series":[119],"forward":[121],"steps":[122],"in":[123,169,231],"feature":[125],"space":[126],"while":[127],"benign":[128],"users":[129],"not.":[131],"Motivated":[132],"observation,":[135],"defenders":[136,187,225],"deploy":[138],"devices":[141],"(honeypoints)":[142],"on":[143],"critical":[144],"paths":[145],"behaviors.":[149],"Specifically,":[150],"Honeypoint":[152,207],"first":[153],"models":[154],"attackers'":[156],"capabilities":[157],"from":[158],"frequency":[160],"domain":[161],"and":[162,228],"designs":[163],"specialized":[164],"honeypoints":[165,177],"classes":[168],"dataset.":[172],"Subsequently,":[173],"it":[174,217],"deploys":[175],"into":[178],"via":[182],"backdoor-like":[183],"fine-tuning.":[185],"Then,":[186],"distinguish":[189],"examples":[192],"comparing":[194],"similarity":[196],"input":[198],"features":[199],"with":[200],"deployed":[201],"honeypoints.":[202],"Experiments":[203],"show":[204],"reduces":[208],"ASRs":[210],"advanced":[212],"MIAs":[213],"0%~2%.":[215],"Furthermore,":[216],"effectively":[219],"queries,":[222],"helps":[224],"detect":[227],"block":[229],"time.":[232]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":1}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}