{"id":"https://openalex.org/W2899461894","doi":"https://doi.org/10.1587/transinf.2017icp0013","title":"Model Inversion Attacks for Online Prediction Systems: Without Knowledge of Non-Sensitive Attributes","display_name":"Model Inversion Attacks for Online Prediction Systems: Without Knowledge of Non-Sensitive Attributes","publication_year":2018,"publication_date":"2018-10-31","ids":{"openalex":"https://openalex.org/W2899461894","doi":"https://doi.org/10.1587/transinf.2017icp0013","mag":"2899461894"},"language":"en","primary_location":{"id":"doi:10.1587/transinf.2017icp0013","is_oa":true,"landing_page_url":"https://doi.org/10.1587/transinf.2017icp0013","pdf_url":null,"source":{"id":"https://openalex.org/S2486202937","display_name":"IEICE Transactions on Information and Systems","issn_l":"0916-8532","issn":["0916-8532","1745-1361"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4320800604","host_organization_name":"Institute of Electronics, Information and Communication Engineers","host_organization_lineage":["https://openalex.org/P4320800604"],"host_organization_lineage_names":["Institute of Electronics, Information and Communication Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEICE Transactions on Information and Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://doi.org/10.1587/transinf.2017icp0013","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5052844875","display_name":"Seira Hidano","orcid":"https://orcid.org/0009-0006-0571-7168"},"institutions":[{"id":"https://openalex.org/I4210164495","display_name":"KDDI Research (Japan)","ror":"https://ror.org/05qsqt662","country_code":"JP","type":"company","lineage":["https://openalex.org/I4210164495"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Seira HIDANO","raw_affiliation_strings":["KDDI Research, Inc"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KDDI Research, Inc","institution_ids":["https://openalex.org/I4210164495"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085794030","display_name":"Takao Murakami","orcid":"https://orcid.org/0000-0002-5110-1261"},"institutions":[{"id":"https://openalex.org/I73613424","display_name":"National Institute of Advanced Industrial Science and Technology","ror":"https://ror.org/01703db54","country_code":"JP","type":"government","lineage":["https://openalex.org/I73613424"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Takao MURAKAMI","raw_affiliation_strings":["National Institute of Advanced Industrial Science and Technology (AIST)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Institute of Advanced Industrial Science and Technology (AIST)","institution_ids":["https://openalex.org/I73613424"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045165395","display_name":"Shuichi Katsumata","orcid":"https://orcid.org/0000-0002-8496-0476"},"institutions":[{"id":"https://openalex.org/I73613424","display_name":"National Institute of Advanced Industrial Science and Technology","ror":"https://ror.org/01703db54","country_code":"JP","type":"government","lineage":["https://openalex.org/I73613424"]},{"id":"https://openalex.org/I74801974","display_name":"The University of Tokyo","ror":"https://ror.org/057zh3y96","country_code":"JP","type":"education","lineage":["https://openalex.org/I74801974"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Shuichi KATSUMATA","raw_affiliation_strings":["National Institute of Advanced Industrial Science and Technology (AIST)","University of Tokyo"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Institute of Advanced Industrial Science and Technology (AIST)","institution_ids":["https://openalex.org/I73613424"]},{"raw_affiliation_string":"University of Tokyo","institution_ids":["https://openalex.org/I74801974"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054965256","display_name":"Shinsaku Kiyomoto","orcid":"https://orcid.org/0000-0003-0268-0532"},"institutions":[{"id":"https://openalex.org/I4210164495","display_name":"KDDI Research (Japan)","ror":"https://ror.org/05qsqt662","country_code":"JP","type":"company","lineage":["https://openalex.org/I4210164495"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Shinsaku KIYOMOTO","raw_affiliation_strings":["KDDI Research, Inc"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KDDI Research, Inc","institution_ids":["https://openalex.org/I4210164495"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5047836988","display_name":"Goichiro Hanaoka","orcid":"https://orcid.org/0000-0001-6617-2962"},"institutions":[{"id":"https://openalex.org/I73613424","display_name":"National Institute of Advanced Industrial Science and Technology","ror":"https://ror.org/01703db54","country_code":"JP","type":"government","lineage":["https://openalex.org/I73613424"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Goichiro HANAOKA","raw_affiliation_strings":["National Institute of Advanced Industrial Science and Technology (AIST)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Institute of Advanced Industrial Science and Technology (AIST)","institution_ids":["https://openalex.org/I73613424"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.3104,"has_fulltext":false,"cited_by_count":22,"citation_normalized_percentile":{"value":0.85666438,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":"E101.D","issue":"11","first_page":"2665","last_page":"2676"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.8654613494873047},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8501299619674683},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6024654507637024},{"id":"https://openalex.org/keywords/inversion","display_name":"Inversion (geology)","score":0.567186176776886},{"id":"https://openalex.org/keywords/attack-model","display_name":"Attack model","score":0.5412473678588867},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.444989413022995},{"id":"https://openalex.org/keywords/adversary-model","display_name":"Adversary model","score":0.41620054841041565}],"concepts":[{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.8654613494873047},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8501299619674683},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6024654507637024},{"id":"https://openalex.org/C1893757","wikidata":"https://www.wikidata.org/wiki/Q3653001","display_name":"Inversion (geology)","level":3,"score":0.567186176776886},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.5412473678588867},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.444989413022995},{"id":"https://openalex.org/C7606001","wikidata":"https://www.wikidata.org/wiki/Q4686702","display_name":"Adversary model","level":3,"score":0.41620054841041565},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C109007969","wikidata":"https://www.wikidata.org/wiki/Q749565","display_name":"Structural basin","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1587/transinf.2017icp0013","is_oa":true,"landing_page_url":"https://doi.org/10.1587/transinf.2017icp0013","pdf_url":null,"source":{"id":"https://openalex.org/S2486202937","display_name":"IEICE Transactions on Information and Systems","issn_l":"0916-8532","issn":["0916-8532","1745-1361"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4320800604","host_organization_name":"Institute of Electronics, Information and Communication Engineers","host_organization_lineage":["https://openalex.org/P4320800604"],"host_organization_lineage_names":["Institute of Electronics, Information and Communication Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEICE Transactions on Information and Systems","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1587/transinf.2017icp0013","is_oa":true,"landing_page_url":"https://doi.org/10.1587/transinf.2017icp0013","pdf_url":null,"source":{"id":"https://openalex.org/S2486202937","display_name":"IEICE Transactions on Information and Systems","issn_l":"0916-8532","issn":["0916-8532","1745-1361"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4320800604","host_organization_name":"Institute of Electronics, Information and Communication Engineers","host_organization_lineage":["https://openalex.org/P4320800604"],"host_organization_lineage_names":["Institute of Electronics, Information and Communication Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEICE Transactions on Information and Systems","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.5,"id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G3404222787","display_name":"\u6a5f\u68b0\u5b66\u7fd2\u3078\u306e\u5fdc\u7528\u3092\u76ee\u6307\u3057\u305f\u5b89\u5168\u304b\u3064\u9ad8\u52b9\u7387\u306a\u9ad8\u6a5f\u80fd\u6697\u53f7\u306e\u7814\u7a76","funder_award_id":"17J05603","funder_id":"https://openalex.org/F4320334764","funder_display_name":"Japan Society for the Promotion of Science"}],"funders":[{"id":"https://openalex.org/F4320334764","display_name":"Japan Society for the Promotion of Science","ror":"https://ror.org/00hhkn466"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":31,"referenced_works":["https://openalex.org/W1473189865","https://openalex.org/W1488996941","https://openalex.org/W1515782956","https://openalex.org/W1547859334","https://openalex.org/W1853481526","https://openalex.org/W1968998685","https://openalex.org/W2009415795","https://openalex.org/W2051267297","https://openalex.org/W2054141820","https://openalex.org/W2080206036","https://openalex.org/W2095577883","https://openalex.org/W2100235918","https://openalex.org/W2112507308","https://openalex.org/W2123147099","https://openalex.org/W2128155976","https://openalex.org/W2144906988","https://openalex.org/W2151298633","https://openalex.org/W2159094788","https://openalex.org/W2171267091","https://openalex.org/W2226173891","https://openalex.org/W2293768274","https://openalex.org/W2296452361","https://openalex.org/W2509109313","https://openalex.org/W2512472178","https://openalex.org/W2513180554","https://openalex.org/W2565701092","https://openalex.org/W2810995976","https://openalex.org/W2895805829","https://openalex.org/W2964068664","https://openalex.org/W3111818035","https://openalex.org/W4236045902"],"related_works":["https://openalex.org/W2212585693","https://openalex.org/W4362599004","https://openalex.org/W2034199088","https://openalex.org/W2111145992","https://openalex.org/W3110049015","https://openalex.org/W2906998334","https://openalex.org/W4283462274","https://openalex.org/W4327500323","https://openalex.org/W2593956379","https://openalex.org/W2750282889"],"abstract_inverted_index":{"The":[0,214],"number":[1],"of":[2,18,28,89,112,127,133,159,200,216,224,234,260,274,295,314,320,364,378,414,422],"IT":[3],"services":[4],"that":[5,58,82,288,390,409],"use":[6,328,392],"machine":[7],"learning":[8],"(ML)":[9],"algorithms":[10],"are":[11,20,46,51,238],"continuously":[12],"and":[13,131,338,400],"rapidly":[14],"growing,":[15],"while":[16,282],"many":[17],"them":[19],"used":[21,137,355],"in":[22,40,48,163,228,333,346],"practice":[23],"to":[24,36,53,84,101,108,119,138,156,197,206,220,241,264,348,370],"make":[25],"some":[26],"type":[27,363],"predictions":[29],"from":[30],"personal":[31,44],"data.":[32],"Not":[33],"surprisingly,":[34],"due":[35],"this":[37,217,245],"sudden":[38],"boom":[39],"ML,":[41],"the":[42,78,97,104,115,120,122,128,134,140,144,152,160,176,182,195,201,207,211,222,229,242,258,265,270,293,299,329,343,350,376,415,420],"way":[43,337],"data":[45,330,341,433],"handled":[47],"ML":[49,75,129,344,352,359,365,388],"systems":[50,76,389],"starting":[52],"raise":[54,147],"serious":[55],"privacy":[56,149],"concerns":[57],"were":[59],"previously":[60],"unconsidered.":[61],"Recently,":[62],"Fredrikson":[63,275],"et":[64,276],"al.":[65,277],"[USENIX":[66],"2014]":[67],"[CCS":[68],"2015]":[69],"proposed":[70],"a":[71,90,235,250,279,304,315,324,334,357,361,402],"novel":[72,336],"attack":[73,81,100,145,212,273,426],"against":[74],"called":[77],"model":[79,98,225,252,271,285,353,366,372,406,424],"inversion":[80,99,226,253,272,286,373,407,425],"aims":[83],"infer":[85,289,311],"sensitive":[86,290,312],"attribute":[87,203],"values":[88,136,162,187,204],"target":[91,116,236,316,358],"user.":[92],"In":[93,178],"their":[94],"work,":[95],"for":[96,194,405],"be":[102,192],"successful,":[103],"adversary":[105,153,196],"is":[106,154,166,173,219],"required":[107,155],"obtain":[109,198],"two":[110,431],"types":[111],"information":[113,262],"concerning":[114],"user":[117,237,317],"prior":[118,205],"attack:":[121],"output":[123],"value":[124],"(i.e.,":[125],"prediction)":[126],"system":[130,345],"all":[132,158,199],"non-sensitive":[135,161,202,232,296,321,379,416],"learn":[139],"output.":[141],"Therefore,":[142],"although":[143],"does":[146,410],"new":[148],"concerns,":[150],"since":[151],"know":[157],"advance,":[164],"it":[165,190],"not":[167,239,411],"completely":[168],"clear":[169],"how":[170,308],"much":[171],"risk":[172,223],"incurred":[174],"by":[175],"attack.":[177],"particular,":[179],"even":[180],"though":[181],"users":[183],"may":[184,191],"regard":[185],"these":[186],"as":[188,278],"non-sensitive,":[189],"difficult":[193],"attack,":[208,301],"hence":[209],"making":[210],"invalid.":[213],"goal":[215],"paper":[218],"quantify":[221],"attacks":[227,287,374,408],"case":[230],"when":[231],"attributes":[233,291,313],"available":[240,263],"adversary.":[243,266],"To":[244],"end,":[246],"we":[247,302,309,327,386],"first":[248],"propose":[249,401],"general":[251,305,384],"(GMI)":[254],"framework,":[255],"which":[256,367],"models":[257,395],"amount":[259],"auxiliary":[261],"Our":[267],"framework":[268,399],"captures":[269],"special":[280,362],"case,":[281],"also":[283],"capturing":[284],"without":[292,318,375],"knowledge":[294,319,377,413],"attributes.":[297,322,380,417],"For":[298],"latter":[300],"provide":[303],"methodology":[306],"on":[307],"can":[310],"At":[323],"high":[325],"level,":[326],"poisoning":[331],"paradigm":[332],"conceptually":[335],"inject":[339],"malicious":[340],"into":[342,356,396],"order":[347],"modify":[349],"internal":[351],"being":[354],"model;":[360],"allows":[368],"one":[369],"perform":[371],"Finally,":[381],"following":[382],"our":[383,397,423],"methodology,":[385],"cast":[387],"internally":[391],"linear":[393],"regression":[394],"GMI":[398],"concrete":[403],"algorithm":[404],"require":[412],"We":[418],"show":[419],"effectiveness":[421],"through":[427],"experimental":[428],"evaluation":[429],"using":[430],"real":[432],"sets.":[434]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}