{"id":"https://openalex.org/W3071470454","doi":"https://doi.org/10.1145/3372297.3417238","title":"GAN-Leaks: A Taxonomy of Membership Inference Attacks against Generative Models","display_name":"GAN-Leaks: A Taxonomy of Membership Inference Attacks against Generative Models","publication_year":2020,"publication_date":"2020-10-30","ids":{"openalex":"https://openalex.org/W3071470454","doi":"https://doi.org/10.1145/3372297.3417238","mag":"3071470454"},"language":"en","primary_location":{"id":"doi:10.1145/3372297.3417238","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3372297.3417238","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/1909.03935","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5077770549","display_name":"Dingfan Chen","orcid":"https://orcid.org/0000-0001-7279-6624"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Dingfan Chen","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029174306","display_name":"Ning Yu","orcid":"https://orcid.org/0000-0001-6084-3630"},"institutions":[{"id":"https://openalex.org/I4210109712","display_name":"Max Planck Institute for Informatics","ror":"https://ror.org/01w19ak89","country_code":"DE","type":"facility","lineage":["https://openalex.org/I149899117","https://openalex.org/I4210109712"]},{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["DE","US"],"is_corresponding":false,"raw_author_name":"Ning Yu","raw_affiliation_strings":["University of Maryland & Max Planck Institute for Informatics, College Park, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Maryland & Max Planck Institute for Informatics, College Park, Germany","institution_ids":["https://openalex.org/I4210109712","https://openalex.org/I66946132"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100354592","display_name":"Yang Zhang","orcid":"https://orcid.org/0000-0001-8135-369X"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Yang Zhang","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5003887059","display_name":"Mario Fritz","orcid":"https://orcid.org/0000-0001-8949-9896"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Mario Fritz","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany","institution_ids":["https://openalex.org/I4210128801"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":286,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"343","last_page":"362"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.98089998960495,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9596999883651733,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/discriminative-model","display_name":"Discriminative model","score":0.7975395917892456},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7862840890884399},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.7736737728118896},{"id":"https://openalex.org/keywords/generative-grammar","display_name":"Generative grammar","score":0.736598789691925},{"id":"https://openalex.org/keywords/generative-model","display_name":"Generative model","score":0.6366719603538513},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.580991804599762},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5704666376113892},{"id":"https://openalex.org/keywords/taxonomy","display_name":"Taxonomy (biology)","score":0.542428731918335},{"id":"https://openalex.org/keywords/modalities","display_name":"Modalities","score":0.5019700527191162},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.4971659481525421},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.48864179849624634},{"id":"https://openalex.org/keywords/data-modeling","display_name":"Data modeling","score":0.4264032244682312},{"id":"https://openalex.org/keywords/data-type","display_name":"Data type","score":0.41088300943374634},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3617440462112427},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.3411712646484375},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.09435418248176575}],"concepts":[{"id":"https://openalex.org/C97931131","wikidata":"https://www.wikidata.org/wiki/Q5282087","display_name":"Discriminative model","level":2,"score":0.7975395917892456},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7862840890884399},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.7736737728118896},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.736598789691925},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.6366719603538513},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.580991804599762},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5704666376113892},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.542428731918335},{"id":"https://openalex.org/C2779903281","wikidata":"https://www.wikidata.org/wiki/Q6888026","display_name":"Modalities","level":2,"score":0.5019700527191162},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.4971659481525421},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.48864179849624634},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.4264032244682312},{"id":"https://openalex.org/C138958017","wikidata":"https://www.wikidata.org/wiki/Q190087","display_name":"Data type","level":2,"score":0.41088300943374634},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3617440462112427},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3411712646484375},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.09435418248176575},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1145/3372297.3417238","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3372297.3417238","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:1909.03935","is_oa":true,"landing_page_url":"http://arxiv.org/abs/1909.03935","pdf_url":"https://arxiv.org/pdf/1909.03935","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:figshare.com:article/24613218","is_oa":true,"landing_page_url":"https://figshare.com/articles/conference_contribution/GAN-Leaks_A_Taxonomy_of_Membership_Inference_Attacks_against_Generative_Models/24613218","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference contribution"},{"id":"doi:10.60882/cispa.24613218.v1","is_oa":true,"landing_page_url":"https://doi.org/10.60882/cispa.24613218.v1","pdf_url":null,"source":{"id":"https://openalex.org/S7407050916","display_name":"CISPA Helmholtz Center","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"ConferenceProceeding"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:1909.03935","is_oa":true,"landing_page_url":"http://arxiv.org/abs/1909.03935","pdf_url":"https://arxiv.org/pdf/1909.03935","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[{"score":0.6499999761581421,"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":125,"referenced_works":["https://openalex.org/W44899178","https://openalex.org/W569478347","https://openalex.org/W1473189865","https://openalex.org/W1522301498","https://openalex.org/W1583912456","https://openalex.org/W1686810756","https://openalex.org/W1782590233","https://openalex.org/W1834627138","https://openalex.org/W1873763122","https://openalex.org/W1895577753","https://openalex.org/W1909320841","https://openalex.org/W1959608418","https://openalex.org/W1985511977","https://openalex.org/W2004068758","https://openalex.org/W2027595342","https://openalex.org/W2051267297","https://openalex.org/W2051434435","https://openalex.org/W2097117768","https://openalex.org/W2099471712","https://openalex.org/W2099942492","https://openalex.org/W2109426455","https://openalex.org/W2114013702","https://openalex.org/W2117539524","https://openalex.org/W2119874464","https://openalex.org/W2143612262","https://openalex.org/W2163605009","https://openalex.org/W2166742463","https://openalex.org/W2167532065","https://openalex.org/W2184045248","https://openalex.org/W2194775991","https://openalex.org/W2198253679","https://openalex.org/W2284050935","https://openalex.org/W2301937176","https://openalex.org/W2339754110","https://openalex.org/W2396881363","https://openalex.org/W2461943168","https://openalex.org/W2473418344","https://openalex.org/W2475287302","https://openalex.org/W2519091744","https://openalex.org/W2521090836","https://openalex.org/W2532520288","https://openalex.org/W2535690855","https://openalex.org/W2584032004","https://openalex.org/W2593390416","https://openalex.org/W2593493160","https://openalex.org/W2593729559","https://openalex.org/W2604918751","https://openalex.org/W2608178897","https://openalex.org/W2617174679","https://openalex.org/W2630997112","https://openalex.org/W2724212798","https://openalex.org/W2739748921","https://openalex.org/W2752520290","https://openalex.org/W2768959015","https://openalex.org/W2781500801","https://openalex.org/W2786233556","https://openalex.org/W2789226849","https://openalex.org/W2795435272","https://openalex.org/W2799061466","https://openalex.org/W2799148064","https://openalex.org/W2799803467","https://openalex.org/W2801495938","https://openalex.org/W2883649754","https://openalex.org/W2885332456","https://openalex.org/W2890139949","https://openalex.org/W2893749619","https://openalex.org/W2908109788","https://openalex.org/W2923095117","https://openalex.org/W2930926105","https://openalex.org/W2945237470","https://openalex.org/W2949382160","https://openalex.org/W2950635152","https://openalex.org/W2950802180","https://openalex.org/W2951368041","https://openalex.org/W2952085278","https://openalex.org/W2952716587","https://openalex.org/W2952745707","https://openalex.org/W2961396908","https://openalex.org/W2962695743","https://openalex.org/W2962719787","https://openalex.org/W2962760235","https://openalex.org/W2962770929","https://openalex.org/W2962785568","https://openalex.org/W2962793481","https://openalex.org/W2962835968","https://openalex.org/W2962879692","https://openalex.org/W2963073614","https://openalex.org/W2963121829","https://openalex.org/W2963139417","https://openalex.org/W2963373786","https://openalex.org/W2963378725","https://openalex.org/W2963420272","https://openalex.org/W2963456518","https://openalex.org/W2963567641","https://openalex.org/W2963626105","https://openalex.org/W2963684088","https://openalex.org/W2963942586","https://openalex.org/W2963981733","https://openalex.org/W2964020555","https://openalex.org/W2964022804","https://openalex.org/W2964121744","https://openalex.org/W2964167449","https://openalex.org/W2964308564","https://openalex.org/W2965267010","https://openalex.org/W2965527189","https://openalex.org/W2983140679","https://openalex.org/W2995154278","https://openalex.org/W3005522790","https://openalex.org/W3034916338","https://openalex.org/W3035570181","https://openalex.org/W3035574324","https://openalex.org/W3046208783","https://openalex.org/W3103245149","https://openalex.org/W3104110119","https://openalex.org/W3107669106","https://openalex.org/W3118608800","https://openalex.org/W4226348722","https://openalex.org/W4288103499","https://openalex.org/W4289761690","https://openalex.org/W4294643831","https://openalex.org/W4295521014","https://openalex.org/W4297798428","https://openalex.org/W4297818800","https://openalex.org/W4301206121","https://openalex.org/W4320013936"],"related_works":["https://openalex.org/W4396941953","https://openalex.org/W2093104230","https://openalex.org/W2987280934","https://openalex.org/W4390874210","https://openalex.org/W4384918963","https://openalex.org/W4365211920","https://openalex.org/W2128027845","https://openalex.org/W3014948380","https://openalex.org/W4386184937","https://openalex.org/W4394728283"],"abstract_inverted_index":{"Deep":[0],"learning":[1],"has":[2],"achieved":[3],"overwhelming":[4],"success,":[5,41],"spanning":[6],"from":[7,31],"discriminative":[8],"models":[9,17,51,69],"to":[10,34,123],"generative":[11,16,50,68,128],"models.":[12,80,129],"In":[13,57,101],"particular,":[14],"deep":[15,67,127],"have":[18,52],"facilitated":[19],"a":[20,26,115,133,166],"new":[21],"level":[22],"of":[23,28,45,87,118,126,162,174],"performance":[24,144,164],"in":[25,114,145],"myriad":[27],"areas,":[29],"ranging":[30],"media":[32],"manipulation":[33],"sanitized":[35],"dataset":[36],"generation.":[37],"Despite":[38],"the":[39,42,74,84,105,142,159,172],"great":[40],"potential":[43],"risks":[44],"privacy":[46],"breach":[47],"caused":[48],"by":[49,165],"not":[53,92],"been":[54],"analyzed":[55],"systematically.":[56],"this":[58],"paper,":[59],"we":[60,82,103,131],"focus":[61],"on":[62],"membership":[63,88],"inference":[64,89],"attack":[65,108,136,143,150,163],"against":[66],"that":[70,110,170],"reveals":[71],"information":[72],"about":[73],"training":[75,155,181],"data":[76,152],"used":[77],"for":[78],"victim":[79],"Specifically,":[81],"present":[83],"first":[85,106],"taxonomy":[86],"attacks,":[90],"encompassing":[91],"only":[93],"existing":[94],"attacks":[95,176],"but":[96],"also":[97],"our":[98],"novel":[99],"ones.":[100],"addition,":[102],"propose":[104],"generic":[107],"model":[109,178],"can":[111],"be":[112],"instantiated":[113],"large":[116],"range":[117],"settings":[119],"and":[120,154,180,192],"is":[121],"applicable":[122],"various":[124,175],"kinds":[125],"Moreover,":[130],"provide":[132],"theoretically":[134],"grounded":[135],"calibration":[137],"technique,":[138],"which":[139],"consistently":[140],"boosts":[141],"all":[146],"cases,":[147],"across":[148],"different":[149],"settings,":[151],"modalities,":[153],"configurations.":[156],"We":[157],"complement":[158],"systematic":[160],"analysis":[161],"comprehensive":[167],"experimental":[168],"study,":[169],"investigates":[171],"effectiveness":[173],"w.r.t.":[177],"type":[179],"configurations,":[182],"over":[183],"three":[184],"diverse":[185],"application":[186],"scenarios":[187],"(i.e.,":[188],"images,":[189],"medical":[190],"data,":[191],"location":[193],"data).":[194]},"counts_by_year":[{"year":2026,"cited_by_count":16},{"year":2025,"cited_by_count":46},{"year":2024,"cited_by_count":55},{"year":2023,"cited_by_count":54},{"year":2022,"cited_by_count":49},{"year":2021,"cited_by_count":49},{"year":2020,"cited_by_count":15},{"year":2019,"cited_by_count":2}],"updated_date":"2026-07-21T08:15:58.654021","created_date":"2025-10-10T00:00:00"}