{"id":"https://openalex.org/W4415311347","doi":"https://doi.org/10.1145/3719027.3744818","title":"Membership Inference Attacks as Privacy Tools: Reliability, Disparity and Ensemble","display_name":"Membership Inference Attacks as Privacy Tools: Reliability, Disparity and Ensemble","publication_year":2025,"publication_date":"2025-11-19","ids":{"openalex":"https://openalex.org/W4415311347","doi":"https://doi.org/10.1145/3719027.3744818"},"language":"en","primary_location":{"id":"doi:10.1145/3719027.3744818","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3719027.3744818","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"preprint","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2506.13972","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Zhiqi Wang","orcid":"https://orcid.org/0009-0008-7056-596X"},"institutions":[{"id":"https://openalex.org/I165799507","display_name":"Rensselaer Polytechnic Institute","ror":"https://ror.org/01rtyzb94","country_code":"US","type":"education","lineage":["https://openalex.org/I165799507"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhiqi Wang","raw_affiliation_strings":["Rensselaer Polytechnic Institute, Troy, NY, USA"],"raw_orcid":"https://orcid.org/0009-0008-7056-596X","affiliations":[{"raw_affiliation_string":"Rensselaer Polytechnic Institute, Troy, NY, USA","institution_ids":["https://openalex.org/I165799507"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5106582293","display_name":"Chengyu Zhang","orcid":"https://orcid.org/0009-0005-2851-0840"},"institutions":[{"id":"https://openalex.org/I165799507","display_name":"Rensselaer Polytechnic Institute","ror":"https://ror.org/01rtyzb94","country_code":"US","type":"education","lineage":["https://openalex.org/I165799507"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chengyu Zhang","raw_affiliation_strings":["Rensselaer Polytechnic Institute, Troy, NY, USA"],"raw_orcid":"https://orcid.org/0009-0005-2851-0840","affiliations":[{"raw_affiliation_string":"Rensselaer Polytechnic Institute, Troy, NY, USA","institution_ids":["https://openalex.org/I165799507"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yuetian Chen","orcid":"https://orcid.org/0000-0003-2125-1119"},"institutions":[{"id":"https://openalex.org/I165799507","display_name":"Rensselaer Polytechnic Institute","ror":"https://ror.org/01rtyzb94","country_code":"US","type":"education","lineage":["https://openalex.org/I165799507"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yuetian Chen","raw_affiliation_strings":["Rensselaer Polytechnic Institute, Troy, NY, USA"],"raw_orcid":"https://orcid.org/0000-0003-2125-1119","affiliations":[{"raw_affiliation_string":"Rensselaer Polytechnic Institute, Troy, NY, USA","institution_ids":["https://openalex.org/I165799507"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010677582","display_name":"Nathalie Baracaldo","orcid":"https://orcid.org/0000-0001-9469-045X"},"institutions":[{"id":"https://openalex.org/I4210085935","display_name":"IBM Research - Almaden","ror":"https://ror.org/005w8dd04","country_code":"US","type":"facility","lineage":["https://openalex.org/I1341412227","https://openalex.org/I4210085935","https://openalex.org/I4210114115"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nathalie Baracaldo","raw_affiliation_strings":["IBM Research - Almaden, San Jose, CA, USA"],"raw_orcid":"https://orcid.org/0000-0001-9469-045X","affiliations":[{"raw_affiliation_string":"IBM Research - Almaden, San Jose, CA, USA","institution_ids":["https://openalex.org/I4210085935"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053049612","display_name":"Swanand Kadhe","orcid":"https://orcid.org/0000-0003-2006-1030"},"institutions":[{"id":"https://openalex.org/I4210085935","display_name":"IBM Research - Almaden","ror":"https://ror.org/005w8dd04","country_code":"US","type":"facility","lineage":["https://openalex.org/I1341412227","https://openalex.org/I4210085935","https://openalex.org/I4210114115"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Swanand R Kadhe","raw_affiliation_strings":["IBM Research - Almaden, San Jose, CA, USA"],"raw_orcid":"https://orcid.org/0000-0003-2006-1030","affiliations":[{"raw_affiliation_string":"IBM Research - Almaden, San Jose, CA, USA","institution_ids":["https://openalex.org/I4210085935"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100743046","display_name":"Lei Yu","orcid":"https://orcid.org/0000-0001-5968-0344"},"institutions":[{"id":"https://openalex.org/I165799507","display_name":"Rensselaer Polytechnic Institute","ror":"https://ror.org/01rtyzb94","country_code":"US","type":"education","lineage":["https://openalex.org/I165799507"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Lei Yu","raw_affiliation_strings":["Rensselaer Polytechnic Institute, Troy, NY, USA"],"raw_orcid":"https://orcid.org/0000-0001-5968-0344","affiliations":[{"raw_affiliation_string":"Rensselaer Polytechnic Institute, Troy, NY, USA","institution_ids":["https://openalex.org/I165799507"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.40598331,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1724","last_page":"1738"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9264000058174133,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9264000058174133,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.6606000065803528},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.5033000111579895},{"id":"https://openalex.org/keywords/reliability","display_name":"Reliability (semiconductor)","score":0.478300005197525},{"id":"https://openalex.org/keywords/privacy-protection","display_name":"Privacy protection","score":0.4214000105857849},{"id":"https://openalex.org/keywords/completeness","display_name":"Completeness (order theory)","score":0.3709000051021576},{"id":"https://openalex.org/keywords/stability","display_name":"Stability (learning theory)","score":0.3580999970436096}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7615000009536743},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.6606000065803528},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.5033000111579895},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.478300005197525},{"id":"https://openalex.org/C3017597292","wikidata":"https://www.wikidata.org/wiki/Q25052250","display_name":"Privacy protection","level":2,"score":0.4214000105857849},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.41510000824928284},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3995000123977661},{"id":"https://openalex.org/C17231256","wikidata":"https://www.wikidata.org/wiki/Q5156540","display_name":"Completeness (order theory)","level":2,"score":0.3709000051021576},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3582000136375427},{"id":"https://openalex.org/C112972136","wikidata":"https://www.wikidata.org/wiki/Q7595718","display_name":"Stability (learning theory)","level":2,"score":0.3580999970436096},{"id":"https://openalex.org/C509729295","wikidata":"https://www.wikidata.org/wiki/Q7246032","display_name":"Privacy software","level":3,"score":0.34139999747276306},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3377000093460083},{"id":"https://openalex.org/C45942800","wikidata":"https://www.wikidata.org/wiki/Q245652","display_name":"Ensemble learning","level":2,"score":0.3124000132083893},{"id":"https://openalex.org/C158600405","wikidata":"https://www.wikidata.org/wiki/Q5054566","display_name":"Causal inference","level":2,"score":0.2840999960899353},{"id":"https://openalex.org/C2780009758","wikidata":"https://www.wikidata.org/wiki/Q6804172","display_name":"Measure (data warehouse)","level":2,"score":0.25699999928474426},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2567000091075897}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3719027.3744818","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3719027.3744818","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2506.13972","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2506.13972","pdf_url":"https://arxiv.org/pdf/2506.13972","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2506.13972","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2506.13972","pdf_url":"https://arxiv.org/pdf/2506.13972","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Membership":[0],"inference":[1],"attacks":[2,168],"(MIAs)":[3],"pose":[4],"a":[5,107,172],"significant":[6,119],"threat":[7],"to":[8,49,56,146],"the":[9,64,81,88,148,163],"privacy":[10,22,58,95,131,179],"of":[11,80,92,150,165],"machine":[12,26],"learning":[13],"models":[14],"and":[15,25,42,76,90,113,126,175],"are":[16],"widely":[17],"used":[18],"as":[19,39,94],"tools":[20],"for":[21,87,130,155,178],"assessment,":[23],"auditing,":[24],"unlearning.":[27],"While":[28],"prior":[29],"MIA":[30],"research":[31],"has":[32],"primarily":[33],"focused":[34],"on":[35,111],"performance":[36],"metrics":[37,52],"such":[38],"AUC,":[40],"accuracy,":[41],"TPR@low":[43],"FPR\u2014either":[44],"by":[45],"developing":[46],"new":[47],"methods":[48,75],"enhance":[50],"these":[51,104,135],"or":[53],"using":[54],"them":[55],"evaluate":[57],"solutions\u2014we":[59],"found":[60],"that":[61],"it":[62],"overlooks":[63],"disparities":[65,105,120],"among":[66],"different":[67],"attacks.":[68],"These":[69],"disparities,":[70],"both":[71],"between":[72,77],"distinct":[73,144],"attack":[74],"multiple":[78],"instantiations":[79],"same":[82],"method,":[83],"have":[84],"crucial":[85],"implications":[86,129],"reliability":[89],"completeness":[91],"MIAs":[93,152],"evaluation":[96],"tools.":[97],"In":[98],"this":[99],"paper,":[100],"we":[101,137],"systematically":[102],"investigate":[103],"through":[106],"novel":[108],"framework":[109,141,159],"based":[110],"coverage":[112],"stability":[114],"analysis.":[115],"Extensive":[116],"experiments":[117],"reveal":[118],"in":[121],"MIAs,":[122],"their":[123,127,156],"potential":[124],"causes,":[125],"broader":[128],"evaluation.":[132,180],"To":[133],"address":[134],"challenges,":[136],"propose":[138],"an":[139],"ensemble":[140],"with":[142],"three":[143],"strategies":[145],"harness":[147],"strengths":[149],"state-of-the-art":[151],"while":[153],"accounting":[154],"disparities.":[157],"This":[158],"not":[160],"only":[161],"enables":[162],"construction":[164],"more":[166,173],"powerful":[167],"but":[169],"also":[170],"provides":[171],"robust":[174],"comprehensive":[176],"methodology":[177]},"counts_by_year":[],"updated_date":"2026-07-03T08:13:44.112507","created_date":"2025-10-18T00:00:00"}