{"id":"https://openalex.org/W4403792152","doi":"https://doi.org/10.1145/3664647.3681170","title":"Unveiling Structural Memorization: Structural Membership Inference Attack for Text-to-Image Diffusion Models","display_name":"Unveiling Structural Memorization: Structural Membership Inference Attack for Text-to-Image Diffusion Models","publication_year":2024,"publication_date":"2024-10-26","ids":{"openalex":"https://openalex.org/W4403792152","doi":"https://doi.org/10.1145/3664647.3681170"},"language":"en","primary_location":{"id":"doi:10.1145/3664647.3681170","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3664647.3681170","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 32nd ACM International Conference on Multimedia","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Qiao Li","orcid":"https://orcid.org/0009-0004-1915-2570"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiao Li","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences & School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0004-1915-2570","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences & School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026971108","display_name":"Xiaomeng Fu","orcid":null},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaomeng Fu","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences & School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-7195-0765","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences & School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018114609","display_name":"Xi Wang","orcid":"https://orcid.org/0000-0002-6642-8160"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210119392","display_name":"Institute of Microelectronics","ror":"https://ror.org/02s6gs133","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210119392"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xi Wang","raw_affiliation_strings":["Institute of Microelectronics of the Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-6642-8160","affiliations":[{"raw_affiliation_string":"Institute of Microelectronics of the Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210119392"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100327026","display_name":"Jin Liu","orcid":"https://orcid.org/0000-0001-9106-8630"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jin Liu","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences & School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-9106-8630","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences & School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004694827","display_name":"Xingyu Gao","orcid":"https://orcid.org/0000-0002-4660-8092"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210119392","display_name":"Institute of Microelectronics","ror":"https://ror.org/02s6gs133","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210119392"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xingyu Gao","raw_affiliation_strings":["Institute of Microelectronics of the Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-4660-8092","affiliations":[{"raw_affiliation_string":"Institute of Microelectronics of the Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210119392"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031794241","display_name":"Jiao Dai","orcid":"https://orcid.org/0000-0003-3559-8009"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiao Dai","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-3559-8009","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5082300353","display_name":"Jizhong Han","orcid":"https://orcid.org/0000-0003-1107-3873"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jizhong Han","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-1107-3873","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.778,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.87625318,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"10554","last_page":"10562"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.9667999744415283,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.9667999744415283,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13702","display_name":"Machine Learning in Healthcare","score":0.9539999961853027,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.9372000098228455,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.6809644103050232},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6611838340759277},{"id":"https://openalex.org/keywords/memorization","display_name":"Memorization","score":0.6514146327972412},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.5824553370475769},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5473605990409851},{"id":"https://openalex.org/keywords/diffusion","display_name":"Diffusion","score":0.5071926116943359},{"id":"https://openalex.org/keywords/natural-language-processing","display_name":"Natural language processing","score":0.34552937746047974},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.13522323966026306},{"id":"https://openalex.org/keywords/cognitive-psychology","display_name":"Cognitive psychology","score":0.11333483457565308}],"concepts":[{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.6809644103050232},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6611838340759277},{"id":"https://openalex.org/C30038468","wikidata":"https://www.wikidata.org/wiki/Q4354775","display_name":"Memorization","level":2,"score":0.6514146327972412},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.5824553370475769},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5473605990409851},{"id":"https://openalex.org/C69357855","wikidata":"https://www.wikidata.org/wiki/Q163214","display_name":"Diffusion","level":2,"score":0.5071926116943359},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.34552937746047974},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.13522323966026306},{"id":"https://openalex.org/C180747234","wikidata":"https://www.wikidata.org/wiki/Q23373","display_name":"Cognitive psychology","level":1,"score":0.11333483457565308},{"id":"https://openalex.org/C97355855","wikidata":"https://www.wikidata.org/wiki/Q11473","display_name":"Thermodynamics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3664647.3681170","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3664647.3681170","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 32nd ACM International Conference on Multimedia","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W2133665775","https://openalex.org/W2535690855","https://openalex.org/W2930926105","https://openalex.org/W2965527189","https://openalex.org/W3071470454","https://openalex.org/W3096692244","https://openalex.org/W3103245149","https://openalex.org/W3106873467","https://openalex.org/W3138815606","https://openalex.org/W4306820534","https://openalex.org/W4312933868","https://openalex.org/W4313142698","https://openalex.org/W4319300158","https://openalex.org/W4386072096","https://openalex.org/W4391264435","https://openalex.org/W7053499095"],"related_works":["https://openalex.org/W3093895509","https://openalex.org/W3163481960","https://openalex.org/W2323394100","https://openalex.org/W280704926","https://openalex.org/W2476068070","https://openalex.org/W4323971310","https://openalex.org/W2893372175","https://openalex.org/W1972827106","https://openalex.org/W4283526844","https://openalex.org/W2787003449"],"abstract_inverted_index":{"With":[0],"the":[1,24,40,92,110,121,128,133,150,154,183],"rapid":[2],"advancements":[3],"of":[4,36,62,96,135,143,156,185],"large-scale":[5],"text-to-image":[6,105,176],"diffusion":[7,29,97,129,147,177],"models,":[8,41],"various":[9,206],"practical":[10],"applications":[11],"have":[12],"emerged,":[13],"bringing":[14],"significant":[15],"convenience":[16],"to":[17,27,51,73,107,120,141,152,189],"society.":[18],"However,":[19,99],"model":[20],"developers":[21],"may":[22],"misuse":[23],"unauthorized":[25],"data":[26,32],"train":[28],"models.":[30,98,178],"These":[31],"are":[33,137],"at":[34],"risk":[35],"being":[37],"memorized":[38],"by":[39],"thus":[42],"potentially":[43],"violating":[44],"citizens'":[45],"privacy":[46,79],"rights.":[47],"Therefore,":[48,117],"in":[49,113],"order":[50],"judge":[52],"whether":[53],"a":[54,60,63,76,168],"specific":[55],"image":[56],"is":[57,71,101],"utilized":[58],"as":[59,75,88],"member":[61,157],"model's":[64],"training":[65,115,160],"set,":[66],"Membership":[67],"Inference":[68],"Attack":[69],"(MIA)":[70],"proposed":[72],"serve":[74],"tool":[77],"for":[78,104,175],"protection.":[80],"Current":[81],"MIA":[82,172],"methods":[83],"predominantly":[84],"utilize":[85],"pixel-wise":[86],"comparisons":[87],"distinguishing":[89],"clues,":[90],"considering":[91],"pixel-level":[93,111,191],"memorization":[94],"characteristic":[95],"it":[100],"practically":[102],"impossible":[103],"models":[106,148],"memorize":[108],"all":[109],"information":[112],"massive":[114],"sets.":[116,161],"we":[118,166],"move":[119],"more":[122],"advanced":[123],"structure-level":[124],"memorization.":[125],"Observations":[126],"on":[127,163],"process":[130],"show":[131],"that":[132,146],"structures":[134,155],"members":[136],"better":[138],"preserved":[139],"compared":[140],"those":[142],"nonmembers,":[144],"indicating":[145],"possess":[149],"capability":[151],"remember":[153],"images":[158],"from":[159],"Drawing":[162],"these":[164],"insights,":[165],"propose":[167],"simple":[169],"yet":[170],"effective":[171],"method":[173],"tailored":[174],"Extensive":[179],"experimental":[180],"results":[181],"validate":[182],"efficacy":[184],"our":[186,193],"approach.":[187],"Compared":[188],"current":[190],"baselines,":[192],"approach":[194],"not":[195],"only":[196],"achieves":[197],"state-of-the-art":[198],"performance":[199],"but":[200],"also":[201],"demonstrates":[202],"remarkable":[203],"robustness":[204],"against":[205],"distortions.":[207]},"counts_by_year":[{"year":2025,"cited_by_count":5}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}