{"id":"https://openalex.org/W7137874487","doi":"https://doi.org/10.1609/aaai.v40i1.36972","title":"SIDE: Surrogate Conditional Data Extraction from Diffusion Models","display_name":"SIDE: Surrogate Conditional Data Extraction from Diffusion Models","publication_year":2026,"publication_date":"2026-03-14","ids":{"openalex":"https://openalex.org/W7137874487","doi":"https://doi.org/10.1609/aaai.v40i1.36972"},"language":"en","primary_location":{"id":"doi:10.1609/aaai.v40i1.36972","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v40i1.36972","pdf_url":"https://ojs.aaai.org/index.php/AAAI/article/download/36972/40934","source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://ojs.aaai.org/index.php/AAAI/article/download/36972/40934","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5129718152","display_name":"Yunhao Chen","orcid":null},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yunhao Chen","raw_affiliation_strings":["Fudan University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fudan University","institution_ids":["https://openalex.org/I24943067"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129737291","display_name":"Shujie Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shujie Wang","raw_affiliation_strings":["Fudan University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fudan University","institution_ids":["https://openalex.org/I24943067"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085848346","display_name":"Difan Zou","orcid":"https://orcid.org/0000-0002-6544-2593"},"institutions":[{"id":"https://openalex.org/I889458895","display_name":"University of Hong Kong","ror":"https://ror.org/02zhqgq86","country_code":"HK","type":"education","lineage":["https://openalex.org/I889458895"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Difan Zou","raw_affiliation_strings":["University of Hong Kong"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Hong Kong","institution_ids":["https://openalex.org/I889458895"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5129702008","display_name":"Xingjun Ma","orcid":null},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xingjun Ma","raw_affiliation_strings":["Fudan University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fudan University","institution_ids":["https://openalex.org/I24943067"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"40","issue":"1","first_page":"128","last_page":"136"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.738099992275238,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.738099992275238,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.057100001722574234,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.032999999821186066,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/probabilistic-logic","display_name":"Probabilistic logic","score":0.6753000020980835},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.5945000052452087},{"id":"https://openalex.org/keywords/generative-model","display_name":"Generative model","score":0.5041999816894531},{"id":"https://openalex.org/keywords/discriminative-model","display_name":"Discriminative model","score":0.4171000123023987},{"id":"https://openalex.org/keywords/conditional-probability","display_name":"Conditional probability","score":0.38679999113082886},{"id":"https://openalex.org/keywords/statistical-model","display_name":"Statistical model","score":0.37689998745918274},{"id":"https://openalex.org/keywords/baseline","display_name":"Baseline (sea)","score":0.36629998683929443},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.36090001463890076}],"concepts":[{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.6753000020980835},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6660000085830688},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.5945000052452087},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.5041999816894531},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4758000075817108},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.475600004196167},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4593999981880188},{"id":"https://openalex.org/C97931131","wikidata":"https://www.wikidata.org/wiki/Q5282087","display_name":"Discriminative model","level":2,"score":0.4171000123023987},{"id":"https://openalex.org/C44492722","wikidata":"https://www.wikidata.org/wiki/Q327069","display_name":"Conditional probability","level":2,"score":0.38679999113082886},{"id":"https://openalex.org/C114289077","wikidata":"https://www.wikidata.org/wiki/Q3284399","display_name":"Statistical model","level":2,"score":0.37689998745918274},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.36629998683929443},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.36090001463890076},{"id":"https://openalex.org/C31170391","wikidata":"https://www.wikidata.org/wiki/Q188619","display_name":"Hierarchy","level":2,"score":0.34950000047683716},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.33980000019073486},{"id":"https://openalex.org/C55037315","wikidata":"https://www.wikidata.org/wiki/Q5421151","display_name":"Experimental data","level":2,"score":0.31700000166893005},{"id":"https://openalex.org/C2777466982","wikidata":"https://www.wikidata.org/wiki/Q5227287","display_name":"Data extraction","level":3,"score":0.3068000078201294},{"id":"https://openalex.org/C189119545","wikidata":"https://www.wikidata.org/wiki/Q5128022","display_name":"Probabilistic classification","level":4,"score":0.30160000920295715},{"id":"https://openalex.org/C2781002164","wikidata":"https://www.wikidata.org/wiki/Q6822311","display_name":"Meta learning (computer science)","level":3,"score":0.2937000095844269},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.2750999927520752},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.273499995470047},{"id":"https://openalex.org/C32230216","wikidata":"https://www.wikidata.org/wiki/Q7882499","display_name":"Uncertainty quantification","level":2,"score":0.25760000944137573},{"id":"https://openalex.org/C87007009","wikidata":"https://www.wikidata.org/wiki/Q210832","display_name":"Statistical hypothesis testing","level":2,"score":0.25679999589920044}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1609/aaai.v40i1.36972","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v40i1.36972","pdf_url":"https://ojs.aaai.org/index.php/AAAI/article/download/36972/40934","source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},{"id":"pmh:oai:ojs.aaai.org:article/36972","is_oa":false,"landing_page_url":"https://ojs.aaai.org/index.php/AAAI/article/view/36972","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"2159-5399","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.1609/aaai.v40i1.36972","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v40i1.36972","pdf_url":"https://ojs.aaai.org/index.php/AAAI/article/download/36972/40934","source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.7977473735809326,"id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G5650502627","display_name":null,"funder_award_id":"62276067","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321851","display_name":"Fudan University","ror":"https://ror.org/013q1eq08"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7137874487.pdf","grobid_xml":"https://content.openalex.org/works/W7137874487.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"As":[0],"diffusion":[1],"probabilistic":[2],"models":[3,44],"(DPMs)":[4],"become":[5],"central":[6],"to":[7,36,48,70],"Generative":[8],"AI":[9],"(GenAI),":[10],"understanding":[11],"their":[12],"memorization":[13],"behavior":[14],"is":[15],"essential":[16],"for":[17,137,152],"evaluating":[18],"risks":[19],"such":[20],"as":[21,142],"data":[22,37,94],"leakage,":[23],"copyright":[24],"infringement,":[25],"and":[26,84,146],"trustworthiness.":[27],"While":[28],"prior":[29],"research":[30],"finds":[31],"conditional":[32,105],"DPMs":[33],"highly":[34],"susceptible":[35],"extraction":[38,73],"attacks":[39,102],"using":[40],"explicit":[41,126],"prompts,":[42],"unconditional":[43,98],"are":[45],"often":[46],"assumed":[47],"be":[49],"safe.":[50],"We":[51],"challenge":[52],"this":[53],"view":[54],"by":[55],"introducing":[56],"Surrogate":[57],"condItional":[58],"Data":[59],"Extraction":[60],"(SIDE),":[61],"a":[62,112,143,148],"general":[63],"framework":[64,115],"that":[65,88,121],"constructs":[66],"data-driven":[67],"surrogate":[68],"conditions":[69],"enable":[71],"targeted":[72],"from":[74,95],"any":[75],"DPM.":[76],"Through":[77],"extensive":[78],"experiments":[79],"on":[80,104,117],"CIFAR-10,":[81],"CelebA,":[82],"ImageNet,":[83],"LAION-5B,":[85],"we":[86,110],"show":[87],"SIDE":[89],"can":[90],"successfully":[91],"extract":[92],"training":[93],"so-called":[96],"safe":[97],"models,":[99],"outperforming":[100],"baseline":[101],"even":[103],"models.":[106],"Complementing":[107],"these":[108],"findings,":[109],"present":[111],"unified":[113],"theoretical":[114],"based":[116],"informative":[118],"labels,":[119],"demonstrating":[120],"all":[122],"forms":[123],"of":[124],"conditioning,":[125],"or":[127],"surrogate,":[128],"amplify":[129],"memorization.":[130],"Our":[131],"work":[132],"redefines":[133],"the":[134],"threat":[135],"landscape":[136],"DPMs,":[138],"establishing":[139],"precise":[140],"conditioning":[141],"fundamental":[144],"vulnerability":[145],"setting":[147],"new,":[149],"stronger":[150],"benchmark":[151],"model":[153],"privacy":[154],"evaluation.":[155]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2026-03-18T00:00:00"}