{"id":"https://openalex.org/W4400120609","doi":"https://doi.org/10.1145/3634737.3659429","title":"POSTER: Double-Dip: Thwarting Label-Only Membership Inference Attacks with Transfer Learning and Randomization","display_name":"POSTER: Double-Dip: Thwarting Label-Only Membership Inference Attacks with Transfer Learning and Randomization","publication_year":2024,"publication_date":"2024-06-28","ids":{"openalex":"https://openalex.org/W4400120609","doi":"https://doi.org/10.1145/3634737.3659429"},"language":"en","primary_location":{"id":"doi:10.1145/3634737.3659429","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3634737.3659429","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5023144708","display_name":"Arezoo Rajabi","orcid":"https://orcid.org/0000-0001-9050-0129"},"institutions":[{"id":"https://openalex.org/I201448701","display_name":"University of Washington","ror":"https://ror.org/00cvxb145","country_code":"US","type":"education","lineage":["https://openalex.org/I201448701"]},{"id":"https://openalex.org/I58610484","display_name":"Seattle University","ror":"https://ror.org/02jqc0m91","country_code":"US","type":"education","lineage":["https://openalex.org/I58610484"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Arezoo Rajabi","raw_affiliation_strings":["University of Washington, Seattle, United States of America"],"raw_orcid":"https://orcid.org/0000-0001-9050-0129","affiliations":[{"raw_affiliation_string":"University of Washington, Seattle, United States of America","institution_ids":["https://openalex.org/I201448701","https://openalex.org/I58610484"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5093868333","display_name":"Reeya Pimple","orcid":null},"institutions":[{"id":"https://openalex.org/I201448701","display_name":"University of Washington","ror":"https://ror.org/00cvxb145","country_code":"US","type":"education","lineage":["https://openalex.org/I201448701"]},{"id":"https://openalex.org/I58610484","display_name":"Seattle University","ror":"https://ror.org/02jqc0m91","country_code":"US","type":"education","lineage":["https://openalex.org/I58610484"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Reeya Pimple","raw_affiliation_strings":["University of Washington, Seattle, USA"],"raw_orcid":"https://orcid.org/0000-0002-2405-5482","affiliations":[{"raw_affiliation_string":"University of Washington, Seattle, USA","institution_ids":["https://openalex.org/I201448701","https://openalex.org/I58610484"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079386538","display_name":"Janardhanan Aiswarya","orcid":"https://orcid.org/0000-0002-0142-2569"},"institutions":[{"id":"https://openalex.org/I201448701","display_name":"University of Washington","ror":"https://ror.org/00cvxb145","country_code":"US","type":"education","lineage":["https://openalex.org/I201448701"]},{"id":"https://openalex.org/I58610484","display_name":"Seattle University","ror":"https://ror.org/02jqc0m91","country_code":"US","type":"education","lineage":["https://openalex.org/I58610484"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Aiswarya Janardhanan","raw_affiliation_strings":["University of Washington, Seattle, USA"],"raw_orcid":"https://orcid.org/0000-0002-0142-2569","affiliations":[{"raw_affiliation_string":"University of Washington, Seattle, USA","institution_ids":["https://openalex.org/I201448701","https://openalex.org/I58610484"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002145492","display_name":"Surudhi Asokraj","orcid":"https://orcid.org/0000-0001-8559-241X"},"institutions":[{"id":"https://openalex.org/I201448701","display_name":"University of Washington","ror":"https://ror.org/00cvxb145","country_code":"US","type":"education","lineage":["https://openalex.org/I201448701"]},{"id":"https://openalex.org/I58610484","display_name":"Seattle University","ror":"https://ror.org/02jqc0m91","country_code":"US","type":"education","lineage":["https://openalex.org/I58610484"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Surudhi Asokraj","raw_affiliation_strings":["University of Washington, Seattle, USA"],"raw_orcid":"https://orcid.org/0000-0001-8559-241X","affiliations":[{"raw_affiliation_string":"University of Washington, Seattle, USA","institution_ids":["https://openalex.org/I201448701","https://openalex.org/I58610484"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052064870","display_name":"Bhaskar Ramasubramanian","orcid":"https://orcid.org/0000-0002-2166-7838"},"institutions":[{"id":"https://openalex.org/I52669646","display_name":"Western Washington University","ror":"https://ror.org/05wn7r715","country_code":"US","type":"education","lineage":["https://openalex.org/I52669646"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Bhaskar Ramasubramanian","raw_affiliation_strings":["Western Washington University, Bellingham, United States of America"],"raw_orcid":"https://orcid.org/0000-0002-2166-7838","affiliations":[{"raw_affiliation_string":"Western Washington University, Bellingham, United States of America","institution_ids":["https://openalex.org/I52669646"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5079723268","display_name":"Radha Poovendran","orcid":"https://orcid.org/0000-0003-0269-8097"},"institutions":[{"id":"https://openalex.org/I201448701","display_name":"University of Washington","ror":"https://ror.org/00cvxb145","country_code":"US","type":"education","lineage":["https://openalex.org/I201448701"]},{"id":"https://openalex.org/I58610484","display_name":"Seattle University","ror":"https://ror.org/02jqc0m91","country_code":"US","type":"education","lineage":["https://openalex.org/I58610484"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Radha Poovendran","raw_affiliation_strings":["Department of Electrical and Computer Engineering, University of Washington, Seattle, United States of America"],"raw_orcid":"https://orcid.org/0000-0003-0269-8097","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, University of Washington, Seattle, United States of America","institution_ids":["https://openalex.org/I201448701","https://openalex.org/I58610484"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1937","last_page":"1939"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9937999844551086,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.9912999868392944,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6950153112411499},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.642343282699585},{"id":"https://openalex.org/keywords/randomization","display_name":"Randomization","score":0.6003574728965759},{"id":"https://openalex.org/keywords/transfer-of-learning","display_name":"Transfer of learning","score":0.5118064284324646},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.458556592464447},{"id":"https://openalex.org/keywords/transfer","display_name":"Transfer (computing)","score":0.44803592562675476},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.38323187828063965},{"id":"https://openalex.org/keywords/medicine","display_name":"Medicine","score":0.1004713773727417},{"id":"https://openalex.org/keywords/randomized-controlled-trial","display_name":"Randomized controlled trial","score":0.09488913416862488}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6950153112411499},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.642343282699585},{"id":"https://openalex.org/C204243189","wikidata":"https://www.wikidata.org/wiki/Q1363085","display_name":"Randomization","level":3,"score":0.6003574728965759},{"id":"https://openalex.org/C150899416","wikidata":"https://www.wikidata.org/wiki/Q1820378","display_name":"Transfer of learning","level":2,"score":0.5118064284324646},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.458556592464447},{"id":"https://openalex.org/C2776175482","wikidata":"https://www.wikidata.org/wiki/Q1195816","display_name":"Transfer (computing)","level":2,"score":0.44803592562675476},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.38323187828063965},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.1004713773727417},{"id":"https://openalex.org/C168563851","wikidata":"https://www.wikidata.org/wiki/Q1436668","display_name":"Randomized controlled trial","level":2,"score":0.09488913416862488},{"id":"https://openalex.org/C141071460","wikidata":"https://www.wikidata.org/wiki/Q40821","display_name":"Surgery","level":1,"score":0.0},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3634737.3659429","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3634737.3659429","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":9,"referenced_works":["https://openalex.org/W2108598243","https://openalex.org/W2194775991","https://openalex.org/W2473418344","https://openalex.org/W2535690855","https://openalex.org/W2963542245","https://openalex.org/W3015625436","https://openalex.org/W3041133507","https://openalex.org/W4299301436","https://openalex.org/W4321993631"],"related_works":["https://openalex.org/W2520316949","https://openalex.org/W2055243143","https://openalex.org/W3201126466","https://openalex.org/W2120509628","https://openalex.org/W3215259711","https://openalex.org/W2348760775","https://openalex.org/W1978318333","https://openalex.org/W2974762004","https://openalex.org/W4361961354","https://openalex.org/W4361950035"],"abstract_inverted_index":{"Transfer":[0],"learning":[1],"(TL)":[2],"has":[3],"been":[4],"demonstrated":[5],"to":[6,27,33,49,56,67,78,136,156,162],"improve":[7],"DNN":[8],"model":[9],"performance":[10],"when":[11],"faced":[12],"with":[13,75],"a":[14,25,52,150,163],"scarcity":[15],"of":[16,22,30,40,71,92,105,110,116,130,145,170,173],"training":[17,58],"samples.":[18],"However,":[19],"the":[20,57,69,168],"suitability":[21],"TL":[23,72],"as":[24],"solution":[26],"reduce":[28],"vulnerability":[29],"overfitted":[31,82],"DNNs":[32,83],"privacy":[34,41],"attacks":[35,42,46],"is":[36,153],"unexplored.":[37],"A":[38],"class":[39],"called":[43],"membership":[44],"inference":[45],"(MIAs)":[47],"aim":[48],"determine":[50],"whether":[51],"given":[53],"sample":[54],"belongs":[55],"dataset":[59],"(member)":[60],"or":[61],"not":[62],"(nonmember).":[63],"We":[64],"introduce":[65],"Double-Dip":[66,117,174],"investigate":[68],"use":[70],"(Stage-1)":[73],"combined":[74],"randomization":[76],"(Stage-2)":[77],"thwart":[79],"MIAs":[80],"on":[81],"without":[84],"degrading":[85],"classification":[86,128,181],"accuracy.":[87],"Our":[88,113],"study":[89],"examines":[90],"roles":[91],"shared":[93],"feature":[94],"space":[95],"and":[96,101,108,166,179,185],"parameter":[97],"values":[98],"between":[99],"source":[100],"target":[102],"models,":[103],"number":[104],"frozen":[106],"layers,":[107],"complexity":[109],"pretrained":[111],"models.":[112],"preliminary":[114],"evaluations":[115],"demonstrate":[118],"that":[119],"Stage-1":[120],"reduces":[121],"adversary":[122,134,147],"success":[123,144],"while":[124],"also":[125,175],"significantly":[126],"increasing":[127],"accuracy":[129,182],"nonmembers":[131],"against":[132],"an":[133,146],"attempting":[135],"carry":[137],"out":[138,149],"SOTA":[139],"label-only":[140,151],"MIAs.":[141],"After":[142],"Stage-2,":[143],"carrying":[148],"MIA":[152],"further":[154],"reduced":[155],"near":[157],"50%,":[158],"bringing":[159],"it":[160],"closer":[161],"random":[164],"guess":[165],"showing":[167],"effectiveness":[169],"Double-Dip.":[171],"Stage-2":[172],"achieves":[176],"lower":[177],"ASR":[178],"higher":[180],"than":[183],"regularization":[184],"differential":[186],"privacy-based":[187],"methods.":[188]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}