{"id":"https://openalex.org/W7138303930","doi":"https://doi.org/10.1609/aaai.v40i25.39212","title":"InfoDecom: Decomposing Information for Defending Against Privacy Leakage in Split Inference","display_name":"InfoDecom: Decomposing Information for Defending Against Privacy Leakage in Split Inference","publication_year":2026,"publication_date":"2026-03-14","ids":{"openalex":"https://openalex.org/W7138303930","doi":"https://doi.org/10.1609/aaai.v40i25.39212"},"language":null,"primary_location":{"id":"doi:10.1609/aaai.v40i25.39212","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v40i25.39212","pdf_url":"https://ojs.aaai.org/index.php/AAAI/article/download/39212/43173","source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://ojs.aaai.org/index.php/AAAI/article/download/39212/43173","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5031379362","display_name":"Ruijun Deng","orcid":"https://orcid.org/0000-0003-1663-0464"},"institutions":[{"id":"https://openalex.org/I4210164862","display_name":"Artificial Intelligence in Medicine (Canada)","ror":"https://ror.org/05p590m36","country_code":"CA","type":"company","lineage":["https://openalex.org/I4210164862"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Ruijun Deng","raw_affiliation_strings":["College of Computer Science and Artificial Intelligence, Fudan University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Artificial Intelligence, Fudan University","institution_ids":["https://openalex.org/I4210164862"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129687727","display_name":"Zhihui Lu","orcid":null},"institutions":[{"id":"https://openalex.org/I4210164862","display_name":"Artificial Intelligence in Medicine (Canada)","ror":"https://ror.org/05p590m36","country_code":"CA","type":"company","lineage":["https://openalex.org/I4210164862"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Zhihui Lu","raw_affiliation_strings":["College of Computer Science and Artificial Intelligence, Fudan University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Artificial Intelligence, Fudan University","institution_ids":["https://openalex.org/I4210164862"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5129665210","display_name":"Qiang Duan","orcid":null},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Qiang Duan","raw_affiliation_strings":["Pennsylvania State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University","institution_ids":["https://openalex.org/I130769515"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"40","issue":"25","first_page":"20737","last_page":"20745"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.430400013923645,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.430400013923645,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.41670000553131104,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.014999999664723873,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.7297999858856201},{"id":"https://openalex.org/keywords/information-leakage","display_name":"Information leakage","score":0.5181000232696533},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5037999749183655},{"id":"https://openalex.org/keywords/raw-data","display_name":"Raw data","score":0.44999998807907104},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.42489999532699585},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.41850000619888306},{"id":"https://openalex.org/keywords/artificial-noise","display_name":"Artificial noise","score":0.41510000824928284},{"id":"https://openalex.org/keywords/leakage","display_name":"Leakage (economics)","score":0.37880000472068787}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.753000020980835},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.7297999858856201},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.5181000232696533},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5055999755859375},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5037999749183655},{"id":"https://openalex.org/C132964779","wikidata":"https://www.wikidata.org/wiki/Q2110223","display_name":"Raw data","level":2,"score":0.44999998807907104},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.42489999532699585},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.41850000619888306},{"id":"https://openalex.org/C2780909371","wikidata":"https://www.wikidata.org/wiki/Q4801092","display_name":"Artificial noise","level":4,"score":0.41510000824928284},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4124999940395355},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4025000035762787},{"id":"https://openalex.org/C2777042071","wikidata":"https://www.wikidata.org/wiki/Q6509304","display_name":"Leakage (economics)","level":2,"score":0.37880000472068787},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.3709999918937683},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.362199991941452},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.33649998903274536},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.32910001277923584},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.325300008058548},{"id":"https://openalex.org/C3017597292","wikidata":"https://www.wikidata.org/wiki/Q25052250","display_name":"Privacy protection","level":2,"score":0.28540000319480896},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.2827000021934509},{"id":"https://openalex.org/C180198813","wikidata":"https://www.wikidata.org/wiki/Q121182","display_name":"Information system","level":2,"score":0.27250000834465027},{"id":"https://openalex.org/C52622258","wikidata":"https://www.wikidata.org/wiki/Q131222","display_name":"Information theory","level":2,"score":0.26339998841285706},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.26339998841285706}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1609/aaai.v40i25.39212","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v40i25.39212","pdf_url":"https://ojs.aaai.org/index.php/AAAI/article/download/39212/43173","source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1609/aaai.v40i25.39212","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v40i25.39212","pdf_url":"https://ojs.aaai.org/index.php/AAAI/article/download/39212/43173","source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.7552636861801147,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7138303930.pdf","grobid_xml":"https://content.openalex.org/works/W7138303930.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Split":[0],"inference":[1],"(SI)":[2],"enables":[3],"users":[4],"to":[5,38,42,79,112,127],"access":[6],"deep":[7],"learning":[8],"(DL)":[9],"services":[10],"without":[11],"directly":[12],"transmitting":[13],"raw":[14],"data.":[15,85],"However,":[16],"recent":[17],"studies":[18],"reveal":[19],"that":[20,100,119],"data":[21,33],"reconstruction":[22],"attacks":[23],"(DRAs)":[24],"can":[25],"recover":[26],"the":[27,31,36,39,61,83],"original":[28],"inputs":[29],"from":[30,35],"smashed":[32,84],"sent":[34],"client":[37],"server,":[40],"leading":[41],"significant":[43],"privacy":[44],"leakage.":[45],"While":[46],"various":[47],"defenses":[48,75],"have":[49],"been":[50],"proposed,":[51],"they":[52],"often":[53],"result":[54],"in":[55,82,90],"substantial":[56],"utility":[57],"degradation,":[58],"particularly":[59],"when":[60],"client-side":[62],"model":[63],"is":[64],"shallow.":[65],"We":[66],"identify":[67],"a":[68,97,122],"key":[69],"cause":[70],"of":[71],"this":[72,88],"trade-off:":[73],"existing":[74,128],"apply":[76],"excessive":[77],"perturbation":[78],"redundant":[80,105],"information":[81,106],"To":[86],"address":[87],"issue":[89],"computer":[91],"vision":[92],"tasks,":[93],"we":[94],"propose":[95],"InfoDecom,":[96],"defense":[98],"framework":[99],"first":[101],"decomposes":[102],"and":[103,107],"removes":[104],"then":[108],"injects":[109],"noise":[110],"calibrated":[111],"provide":[113],"theoretically":[114],"guaranteed":[115],"privacy.":[116],"Experiments":[117],"demonstrate":[118],"InfoDecom":[120],"achieves":[121],"superior":[123],"utility-privacy":[124],"trade-off":[125],"compared":[126],"baselines.":[129]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2026-03-18T00:00:00"}