{"id":"https://openalex.org/W4308643121","doi":"https://doi.org/10.1145/3548606.3560581","title":"QuerySnout","display_name":"QuerySnout","publication_year":2022,"publication_date":"2022-11-07","ids":{"openalex":"https://openalex.org/W4308643121","doi":"https://doi.org/10.1145/3548606.3560581"},"language":"en","primary_location":{"id":"doi:10.1145/3548606.3560581","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3548606.3560581","pdf_url":null,"source":{"id":"https://openalex.org/S4363608815","display_name":"Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2211.05249","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102884393","display_name":"Ana-Maria Cre\u0163u","orcid":"https://orcid.org/0000-0002-9009-7381"},"institutions":[{"id":"https://openalex.org/I47508984","display_name":"Imperial College London","ror":"https://ror.org/041kmwe10","country_code":"GB","type":"education","lineage":["https://openalex.org/I47508984"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Ana-Maria Cretu","raw_affiliation_strings":["Imperial College London, London, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Imperial College London, London, United Kingdom","institution_ids":["https://openalex.org/I47508984"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073216192","display_name":"Florimond Houssiau","orcid":"https://orcid.org/0000-0001-7412-4389"},"institutions":[{"id":"https://openalex.org/I4210128584","display_name":"The Alan Turing Institute","ror":"https://ror.org/035dkdb55","country_code":"GB","type":"facility","lineage":["https://openalex.org/I4210128584"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Florimond Houssiau","raw_affiliation_strings":["The Alan Turing Institute, London, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Alan Turing Institute, London, United Kingdom","institution_ids":["https://openalex.org/I4210128584"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011747084","display_name":"Antoine Cully","orcid":"https://orcid.org/0000-0002-3190-7073"},"institutions":[{"id":"https://openalex.org/I47508984","display_name":"Imperial College London","ror":"https://ror.org/041kmwe10","country_code":"GB","type":"education","lineage":["https://openalex.org/I47508984"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Antoine Cully","raw_affiliation_strings":["Imperial College London, London, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Imperial College London, London, United Kingdom","institution_ids":["https://openalex.org/I47508984"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5078253058","display_name":"Yves-Alexandre de Montjoye","orcid":"https://orcid.org/0000-0002-2559-5616"},"institutions":[{"id":"https://openalex.org/I47508984","display_name":"Imperial College London","ror":"https://ror.org/041kmwe10","country_code":"GB","type":"education","lineage":["https://openalex.org/I47508984"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Yves-Alexandre de Montjoye","raw_affiliation_strings":["Imperial College London, London, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Imperial College London, London, United Kingdom","institution_ids":["https://openalex.org/I47508984"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.8303,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.74715081,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"623","last_page":"637"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8599516153335571},{"id":"https://openalex.org/keywords/multiset","display_name":"Multiset","score":0.7995380163192749},{"id":"https://openalex.org/keywords/differential-privacy","display_name":"Differential privacy","score":0.6841628551483154},{"id":"https://openalex.org/keywords/variety","display_name":"Variety (cybernetics)","score":0.5533419251441956},{"id":"https://openalex.org/keywords/scope","display_name":"Scope (computer science)","score":0.46134358644485474},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4413143992424011},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.4389733076095581},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.33522865176200867},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.3223811984062195},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.22183743119239807}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8599516153335571},{"id":"https://openalex.org/C2779623528","wikidata":"https://www.wikidata.org/wiki/Q864377","display_name":"Multiset","level":2,"score":0.7995380163192749},{"id":"https://openalex.org/C23130292","wikidata":"https://www.wikidata.org/wiki/Q5275358","display_name":"Differential privacy","level":2,"score":0.6841628551483154},{"id":"https://openalex.org/C136197465","wikidata":"https://www.wikidata.org/wiki/Q1729295","display_name":"Variety (cybernetics)","level":2,"score":0.5533419251441956},{"id":"https://openalex.org/C2778012447","wikidata":"https://www.wikidata.org/wiki/Q1034415","display_name":"Scope (computer science)","level":2,"score":0.46134358644485474},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4413143992424011},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.4389733076095581},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.33522865176200867},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.3223811984062195},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.22183743119239807},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3548606.3560581","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3548606.3560581","pdf_url":null,"source":{"id":"https://openalex.org/S4363608815","display_name":"Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2211.05249","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2211.05249","pdf_url":"https://arxiv.org/pdf/2211.05249","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:spiral.imperial.ac.uk:10044/1/101286","is_oa":false,"landing_page_url":"http://hdl.handle.net/10044/1/101286","pdf_url":null,"source":{"id":"https://openalex.org/S4306401396","display_name":"Spiral (Imperial College London)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I47508984","host_organization_name":"Imperial College London","host_organization_lineage":["https://openalex.org/I47508984"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"CCS '22: 2022 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"Conference Paper"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2211.05249","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2211.05249","pdf_url":"https://arxiv.org/pdf/2211.05249","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.5799999833106995,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":35,"referenced_works":["https://openalex.org/W1446333884","https://openalex.org/W1932198206","https://openalex.org/W2027595342","https://openalex.org/W2040228409","https://openalex.org/W2052242504","https://openalex.org/W2096870293","https://openalex.org/W2099259603","https://openalex.org/W2110868467","https://openalex.org/W2124765629","https://openalex.org/W2132591512","https://openalex.org/W2138520657","https://openalex.org/W2198253679","https://openalex.org/W2282821441","https://openalex.org/W2288538544","https://openalex.org/W2535690855","https://openalex.org/W2630394794","https://openalex.org/W2765424254","https://openalex.org/W2782088664","https://openalex.org/W2890928591","https://openalex.org/W2962711307","https://openalex.org/W2962835266","https://openalex.org/W3007097899","https://openalex.org/W3029238545","https://openalex.org/W3035168593","https://openalex.org/W3101630362","https://openalex.org/W3103557498","https://openalex.org/W3155915750","https://openalex.org/W3159571701","https://openalex.org/W3213132294","https://openalex.org/W4210424113","https://openalex.org/W4248861293","https://openalex.org/W4299943684","https://openalex.org/W6657138077","https://openalex.org/W6724612407","https://openalex.org/W6836725202"],"related_works":["https://openalex.org/W4300455649","https://openalex.org/W2296588302","https://openalex.org/W4328119206","https://openalex.org/W2033245919","https://openalex.org/W4252409532","https://openalex.org/W2006067547","https://openalex.org/W3143753676","https://openalex.org/W2954483618","https://openalex.org/W9228044","https://openalex.org/W2770810599"],"abstract_inverted_index":{"Although":[0],"query-based":[1,115],"systems":[2,94,340],"(QBS)":[3],"have":[4],"become":[5],"one":[6,135],"of":[7,22,68,72,143,161,180,208,239,323,330,339],"the":[8,20,26,55,66,92,107,125,158,162,195,201,206,221,230,244,259,263,288,321,337],"main":[9],"solutions":[10,33,49],"to":[11,25,41,84,87,91,110,149,152,156,176,183,185,193,200,213,219,225,249,273,282,316,332,335,344],"share":[12],"data":[13,346],"anonymously,":[14],"building":[15],"QBSes":[16,59,79,274,302,315],"that":[17,275],"robustly":[18],"protect":[19],"privacy":[21,37,56,73],"individuals":[23],"contributing":[24],"dataset":[27,223,228],"is":[28],"a":[29,69,121,128,141,147,172,178,189,226,237,256,277,283,324],"hard":[30],"problem.":[31],"Theoretical":[32],"relying":[34],"on":[35,134,171,287],"differential":[36],"guarantees":[38],"are":[39,97],"difficult":[40],"implement":[42],"correctly":[43],"with":[44,146],"reasonable":[45],"accuracy,":[46],"while":[47],"ad-hoc":[48],"might":[50],"contain":[51],"unknown":[52],"vulnerabilities.":[53],"Evaluating":[54],"provided":[57],"by":[58,64,210,247,255,307],"must":[60],"thus":[61],"be":[62,88,271,305,317,333],"done":[63],"evaluating":[65],"accuracy":[67],"wide":[70],"range":[71],"attacks.":[74],"However,":[75],"existing":[76],"attacks":[77,245,261,300],"against":[78,301],"require":[80,276],"time":[81],"and":[82,96,124,139,188,236,279,298,349],"expertise":[83],"develop,":[85],"need":[86],"manually":[89],"tailored":[90],"specific":[93],"attacked,":[95],"limited":[98],"in":[99,114,154,347,350],"scope.":[100],"In":[101],"this":[102,328],"paper,":[103],"we":[104],"develop":[105],"QuerySnout,":[106],"first":[108],"method":[109],"automatically":[111,318],"discover":[112],"vulnerabilities":[113],"systems.":[116],"QuerySnout":[117,165,209,248,269,281],"takes":[118],"as":[119,127],"input":[120],"target":[122,163],"record":[123],"QBS":[126,285],"black":[129],"box,":[130],"analyzes":[131],"its":[132],"behavior":[133],"or":[136,224,252],"more":[137],"datasets,":[138,235],"outputs":[140],"multiset":[142,179],"queries":[144,181,202],"together":[145],"rule":[148],"combine":[150],"answers":[151,199],"them":[153],"order":[155],"reveal":[157],"sensitive":[159,196],"attribute":[160,197],"record.":[164],"uses":[166],"evolutionary":[167],"search":[168],"techniques":[169],"based":[170,286],"novel":[173],"mutation":[174],"operator":[175],"find":[177],"susceptible":[182],"lead":[184],"an":[186,308],"attack,":[187],"machine":[190],"learning":[191],"classifier":[192],"infer":[194],"from":[198,229,262],"selected.":[203],"We":[204,242,265,326],"showcase":[205],"versatility":[207],"applying":[211],"it":[212],"two":[214],"attack":[215],"scenarios":[216],"(assuming":[217],"access":[218,343],"either":[220],"private":[222],"different":[227],"same":[231],"distribution),":[232],"three":[233],"real-world":[234],"variety":[238],"protection":[240],"mechanisms.":[241],"show":[243,267,295],"found":[246,306],"consistently":[250],"equate":[251],"outperform,":[253],"sometimes":[254],"large":[257],"margin,":[258],"best":[260],"literature.":[264],"finally":[266],"how":[268,296],"can":[270,303],"extended":[272],"budget,":[278],"apply":[280],"simple":[284],"Laplace":[289],"mechanism.":[290],"Taken":[291],"together,":[292],"our":[293],"results":[294],"powerful":[297],"accurate":[299],"already":[304],"automated":[309],"system,":[310],"allowing":[311],"for":[312],"highly":[313],"complex":[314],"tested":[319],"\"at":[320],"pressing":[322],"button\".":[325],"believe":[327],"line":[329],"research":[331],"crucial":[334],"improve":[336],"robustness":[338],"providing":[341],"privacy-preserving":[342],"personal":[345],"theory":[348],"practice.":[351]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-03T08:13:44.112507","created_date":"2022-11-13T00:00:00"}