{"id":"https://openalex.org/W4409311673","doi":"https://doi.org/10.1145/3720480","title":"Guarding the Privacy of Label-Only Access to Neural Network Classifiers via iDP Verification","display_name":"Guarding the Privacy of Label-Only Access to Neural Network Classifiers via iDP Verification","publication_year":2025,"publication_date":"2025-04-09","ids":{"openalex":"https://openalex.org/W4409311673","doi":"https://doi.org/10.1145/3720480"},"language":"en","primary_location":{"id":"doi:10.1145/3720480","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3720480","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3720480","source":{"id":"https://openalex.org/S4210216081","display_name":"Proceedings of the ACM on Programming Languages","issn_l":"2475-1421","issn":["2475-1421"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Programming Languages","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3720480","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5052680647","display_name":"Anan Kabaha","orcid":"https://orcid.org/0000-0002-0969-6169"},"institutions":[{"id":"https://openalex.org/I174306211","display_name":"Technion \u2013 Israel Institute of Technology","ror":"https://ror.org/03qryx823","country_code":"IL","type":"education","lineage":["https://openalex.org/I174306211"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Anan Kabaha","raw_affiliation_strings":["Technion, Haifa, Israel"],"raw_orcid":"https://orcid.org/0000-0002-0969-6169","affiliations":[{"raw_affiliation_string":"Technion, Haifa, Israel","institution_ids":["https://openalex.org/I174306211"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5001910580","display_name":"Dana Drachsler-Cohen","orcid":"https://orcid.org/0000-0001-6644-5377"},"institutions":[{"id":"https://openalex.org/I174306211","display_name":"Technion \u2013 Israel Institute of Technology","ror":"https://ror.org/03qryx823","country_code":"IL","type":"education","lineage":["https://openalex.org/I174306211"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Dana Drachsler Cohen","raw_affiliation_strings":["Technion, Haifa, Israel"],"raw_orcid":"https://orcid.org/0000-0001-6644-5377","affiliations":[{"raw_affiliation_string":"Technion, Haifa, Israel","institution_ids":["https://openalex.org/I174306211"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I174306211"],"apc_list":null,"apc_paid":null,"fwci":1.0988,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.82232747,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":"9","issue":"OOPSLA1","first_page":"1184","last_page":"1212"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5844346880912781},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5522935390472412},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.42450982332229614},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.36738157272338867},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.34275758266448975}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5844346880912781},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5522935390472412},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.42450982332229614},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.36738157272338867},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.34275758266448975}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3720480","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3720480","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3720480","source":{"id":"https://openalex.org/S4210216081","display_name":"Proceedings of the ACM on Programming Languages","issn_l":"2475-1421","issn":["2475-1421"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Programming Languages","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3720480","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3720480","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3720480","source":{"id":"https://openalex.org/S4210216081","display_name":"Proceedings of the ACM on Programming Languages","issn_l":"2475-1421","issn":["2475-1421"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Programming Languages","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5767045157","display_name":null,"funder_award_id":"2605/20","funder_id":"https://openalex.org/F4320322252","funder_display_name":"Israel Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320322252","display_name":"Israel Science Foundation","ror":"https://ror.org/04sazxf24"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4409311673.pdf","grobid_xml":"https://content.openalex.org/works/W4409311673.grobid-xml"},"referenced_works_count":61,"referenced_works":["https://openalex.org/W2112796928","https://openalex.org/W2138140494","https://openalex.org/W2150593711","https://openalex.org/W2194775991","https://openalex.org/W2473418344","https://openalex.org/W2535690855","https://openalex.org/W2582825155","https://openalex.org/W2594311007","https://openalex.org/W2594877703","https://openalex.org/W2739273495","https://openalex.org/W2799040448","https://openalex.org/W2887995258","https://openalex.org/W2892430965","https://openalex.org/W2896069478","https://openalex.org/W2911975451","https://openalex.org/W2911978475","https://openalex.org/W2957311447","https://openalex.org/W2963054787","https://openalex.org/W2963456518","https://openalex.org/W2964881778","https://openalex.org/W2989772244","https://openalex.org/W2999193264","https://openalex.org/W3038954512","https://openalex.org/W3040384242","https://openalex.org/W3094683669","https://openalex.org/W3102834148","https://openalex.org/W3104896058","https://openalex.org/W3108851260","https://openalex.org/W3114953370","https://openalex.org/W3125577182","https://openalex.org/W3204984335","https://openalex.org/W3205478695","https://openalex.org/W3211753216","https://openalex.org/W3214437258","https://openalex.org/W3214899300","https://openalex.org/W4200025412","https://openalex.org/W4206840646","https://openalex.org/W4213052788","https://openalex.org/W4225128042","https://openalex.org/W4254191750","https://openalex.org/W4292120278","https://openalex.org/W4312307529","https://openalex.org/W4312392365","https://openalex.org/W4315779442","https://openalex.org/W4315784658","https://openalex.org/W4379534244","https://openalex.org/W4382024108","https://openalex.org/W4390411533","https://openalex.org/W4390872063","https://openalex.org/W4391568841","https://openalex.org/W4392168585","https://openalex.org/W4393160749","https://openalex.org/W4394717730","https://openalex.org/W4396214268","https://openalex.org/W4396657238","https://openalex.org/W4399872358","https://openalex.org/W4400121015","https://openalex.org/W4402765456","https://openalex.org/W6888840370","https://openalex.org/W6907693833","https://openalex.org/W6948157933"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Neural":[0],"networks":[1,194,249],"are":[2,240],"susceptible":[3],"to":[4,28,34,44,57,83,90,110,132,143,229,257],"privacy":[5,23,279],"attacks":[6],"that":[7,64,97,123,270,316],"can":[8,78,272],"extract":[9],"private":[10],"information":[11],"of":[12,121,193,215,295,308],"the":[13,49,84,95,112,119,138,145,165,202,213,219,222,231,255,328],"training":[14,19,40,60,260,288,314],"set.":[15,41,61],"To":[16,136],"cope,":[17],"several":[18,158],"algorithms":[20,289,315],"guarantee":[21,280],"differential":[22],"(DP)":[24],"by":[25,330],"adding":[26],"noise":[27,36,72,102,130],"their":[29,133],"computation.":[30],"However,":[31,93],"DP":[32,53,56,259,287,313],"requires":[33],"add":[35,129],"considering":[37],"every":[38,178],"possible":[39],"This":[42],"leads":[43],"a":[45,58,87,168,174,184,191,196,206,276],"significant":[46],"decrease":[47,89,294,307],"in":[48,218,263,322],"network\u2019s":[50],"accuracy.":[51,92],"Individual":[52],"(iDP)":[54],"restricts":[55],"given":[59],"We":[62,242,268],"observe":[63],"some":[65],"inputs":[66,96,122],"deterministically":[67],"satisfy":[68,98,126],"iDP":[69,80,99,113,266],"without":[70,100,183],"any":[71,101],".":[73,198,333],"By":[74],"identifying":[75,94],"them,":[76],"we":[77,152],"provide":[79,265,273],"label-only":[81,146],"access":[82,147],"network":[85,175,179,220],"with":[86,148,275,291],"minor":[88],"its":[91],"is":[103,109,284],"highly":[104],"challenging.":[105],"Our":[106],"key":[107],"idea":[108],"compute":[111,137],"deterministic":[114],"bound":[115],"(iDP-DB),":[116],"which":[117,141,156,262,283],"overapproximates":[118],"set":[120,192],"do":[124],"not":[125],"iDP,":[127],"and":[128,176,221,234,247,253,321],"only":[131],"predicted":[134],"labels.":[135],"tightest":[139],"iDP-DB,":[140],"enables":[142],"guard":[144],"minimal":[149],"accuracy":[150,293,306,329],"decrease,":[151],"propose":[153],"LUCID":[154,244,271,303],",":[155],"leverages":[157],"formal":[159],"verification":[160],"techniques.":[161],"First,":[162],"it":[163,189,200,211],"encodes":[164,224],"problem":[166],"as":[167,226],"mixed-integer":[169],"linear":[170,227,236],"program,":[171],"defined":[172],"over":[173,177],"trained":[180],"identically":[181],"but":[182],"unique":[185],"data":[186],"point.":[187],"Second,":[188],"abstracts":[190],"using":[195],"hyper-network":[197],"Third,":[199],"eliminates":[201],"overapproximation":[203],"error":[204],"via":[205],"novel":[207],"branch-and-bound":[208],"technique.":[209],"Fourth,":[210],"bounds":[212],"differences":[214],"matching":[216],"neurons":[217],"hyper-network,":[223],"them":[225],"constraints":[228],"prune":[230],"search":[232],"space,":[233],"employs":[235],"relaxation":[237],"if":[238],"they":[239],"small.":[241],"evaluate":[243],"on":[245],"fully-connected":[246],"convolutional":[248],"for":[250,286],"four":[251],"datasets":[252],"compare":[254],"results":[256],"existing":[258,312],"algorithms,":[261],"particular":[264,323],"guarantees.":[267],"show":[269],"classifiers":[274],"perfect":[277],"individuals\u2019":[278],"(0-iDP)":[281],"\u2013":[282,290],"infeasible":[285],"an":[292,305],"1.4%.":[296],"For":[297],"more":[298],"relaxed":[299],"\u03b5":[300,318,324],"-iDP":[301,325],"guarantees,":[302,320,326],"has":[304],"1.2%.":[309],"In":[310],"contrast,":[311],"obtain":[317],"-DP":[319],"reduce":[327],"12.7":[331],"%":[332]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-08-24T07:32:12.397491","created_date":"2025-10-10T00:00:00"}