{"id":"https://openalex.org/W2965527189","doi":"https://doi.org/10.2478/popets-2019-0067","title":"Monte Carlo and Reconstruction Membership Inference Attacks against Generative Models","display_name":"Monte Carlo and Reconstruction Membership Inference Attacks against Generative Models","publication_year":2019,"publication_date":"2019-07-30","ids":{"openalex":"https://openalex.org/W2965527189","doi":"https://doi.org/10.2478/popets-2019-0067","mag":"2965527189"},"language":"en","primary_location":{"id":"doi:10.2478/popets-2019-0067","is_oa":true,"landing_page_url":"https://doi.org/10.2478/popets-2019-0067","pdf_url":null,"source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.2478/popets-2019-0067","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5065513658","display_name":"Benjamin Hilprecht","orcid":"https://orcid.org/0000-0003-4935-7118"},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technische Universit\u00e4t Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Benjamin Hilprecht","raw_affiliation_strings":["TU Darmstadt , Darmstadt , Germany","SAP SE Karlsruhe, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"TU Darmstadt , Darmstadt , Germany","institution_ids":["https://openalex.org/I31512782"]},{"raw_affiliation_string":"SAP SE Karlsruhe, Germany","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069383644","display_name":"Martin H\u00e4rterich","orcid":null},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technische Universit\u00e4t Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Martin H\u00e4rterich","raw_affiliation_strings":["SAP SE , Karlsruhe , Germany","TU Darmstadt Darmstadt, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SAP SE , Karlsruhe , Germany","institution_ids":[]},{"raw_affiliation_string":"TU Darmstadt Darmstadt, Germany","institution_ids":["https://openalex.org/I31512782"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5033918281","display_name":"Daniel Bernau","orcid":null},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technische Universit\u00e4t Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Daniel Bernau","raw_affiliation_strings":["SAP SE , Karlsruhe , Germany","TU Darmstadt Darmstadt, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SAP SE , Karlsruhe , Germany","institution_ids":[]},{"raw_affiliation_string":"TU Darmstadt Darmstadt, Germany","institution_ids":["https://openalex.org/I31512782"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5065513658"],"corresponding_institution_ids":["https://openalex.org/I31512782"],"apc_list":null,"apc_paid":null,"fwci":9.9843,"has_fulltext":false,"cited_by_count":151,"citation_normalized_percentile":{"value":0.98421905,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":"2019","issue":"4","first_page":"232","last_page":"249"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.9947999715805054,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.8375052809715271},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7314910888671875},{"id":"https://openalex.org/keywords/generative-grammar","display_name":"Generative grammar","score":0.6942710876464844},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6379462480545044},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5182681083679199},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5009925365447998},{"id":"https://openalex.org/keywords/generative-model","display_name":"Generative model","score":0.4951545298099518},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4402962923049927},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.4365174174308777},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.14543968439102173}],"concepts":[{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.8375052809715271},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7314910888671875},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.6942710876464844},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6379462480545044},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5182681083679199},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5009925365447998},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.4951545298099518},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4402962923049927},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.4365174174308777},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.14543968439102173},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.2478/popets-2019-0067","is_oa":true,"landing_page_url":"https://doi.org/10.2478/popets-2019-0067","pdf_url":null,"source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:0b18998ddda4482b9c8d22e024da3eed","is_oa":false,"landing_page_url":"https://doaj.org/article/0b18998ddda4482b9c8d22e024da3eed","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings on Privacy Enhancing Technologies, Vol 2019, Iss 4, Pp 232-249 (2019)","raw_type":"article"},{"id":"pmh:oai:zenodo.org:3413074","is_oa":true,"landing_page_url":"https://zenodo.org/record/3413074","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings on Privacy Enhancing Technologies 2019(4) 232\u2013249","raw_type":"info:eu-repo/semantics/conferencePaper"}],"best_oa_location":{"id":"doi:10.2478/popets-2019-0067","is_oa":true,"landing_page_url":"https://doi.org/10.2478/popets-2019-0067","pdf_url":null,"source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.5899999737739563}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W1968411139","https://openalex.org/W2051267297","https://openalex.org/W2095577883","https://openalex.org/W2095705004","https://openalex.org/W2099471712","https://openalex.org/W2101234009","https://openalex.org/W2118020555","https://openalex.org/W2124386111","https://openalex.org/W2146097215","https://openalex.org/W2161969291","https://openalex.org/W2173520492","https://openalex.org/W2402144811","https://openalex.org/W2461943168","https://openalex.org/W2535690855","https://openalex.org/W2593729559","https://openalex.org/W2750384547","https://openalex.org/W2786254735","https://openalex.org/W2803872338","https://openalex.org/W2887995258","https://openalex.org/W2952745707","https://openalex.org/W2953384591","https://openalex.org/W2963223306","https://openalex.org/W2963857374","https://openalex.org/W3118608800"],"related_works":["https://openalex.org/W4365211920","https://openalex.org/W3014948380","https://openalex.org/W4380551139","https://openalex.org/W2280377497","https://openalex.org/W3174044702","https://openalex.org/W4238433571","https://openalex.org/W2967848559","https://openalex.org/W4283803360","https://openalex.org/W4317695495","https://openalex.org/W4387506531"],"abstract_inverted_index":{"Abstract":[0],"We":[1,84,154],"present":[2],"two":[3,109,131,157],"information":[4,205],"leakage":[5,206],"attacks":[6,105,132,158,207],"that":[7,129],"outperform":[8],"previous":[9,34,71,138],"work":[10,72,139,193],"on":[11,25,108,122,140],"membership":[12,21,67,75,82,93,163],"inference":[13,22,68,76,94,164],"against":[14,204],"generative":[15,30,38,110],"models.":[16],"The":[17,58,104],"first":[18],"attack":[19,60,165],"allows":[20],"without":[23],"assumptions":[24],"the":[26,29,49,97,130,146,156,162,195],"type":[27,166],"of":[28,48,99,197],"model.":[31],"Contrary":[32],"to":[33,54,95,137,173],"evaluation":[35],"metrics":[36],"for":[37,86,102],"models,":[39],"like":[40],"Kernel":[41],"Density":[42],"Estimation,":[43],"it":[44],"only":[45,150],"considers":[46,74],"samples":[47],"model":[50,111,181],"which":[51],"are":[52,106],"close":[53],"training":[55],"data":[56,142,175],"records.":[57],"second":[59],"specifically":[61],"targets":[62],"Variational":[63,118],"Autoencoders,":[64],"achieving":[65],"high":[66],"accuracy.":[69],"Furthermore,":[70],"mostly":[73],"adversaries":[77],"who":[78,90],"perform":[79,91],"single":[80],"record":[81],"inference.":[83],"argue":[85],"considering":[87],"regulatory":[88],"actors":[89],"set":[92],"identify":[96],"use":[98,196],"specific":[100],"datasets":[101],"training.":[103],"evaluated":[107],"architectures,":[112],"Generative":[113],"Adversarial":[114],"Networks":[115],"(GANs)":[116],"and":[117,178],"Autoen-coders":[119],"(VAEs),":[120],"trained":[121],"standard":[123],"image":[124],"datasets.":[125],"Our":[126],"results":[127],"show":[128],"yield":[133],"success":[134],"rates":[135],"superior":[136],"most":[141],"sets":[143],"while":[144,208],"at":[145],"same":[147],"time":[148],"having":[149],"very":[151],"mild":[152],"assumptions.":[153],"envision":[155],"in":[159,183],"combination":[160],"with":[161],"formalization":[167],"as":[168,186],"especially":[169],"useful.":[170],"For":[171],"example,":[172],"enforce":[174],"privacy":[176],"standards":[177],"automatically":[179],"assessing":[180],"quality":[182],"machine":[184],"learning":[185],"a":[187],"service":[188],"setups.":[189],"In":[190],"practice,":[191],"our":[192],"motivates":[194],"GANs":[198],"since":[199],"they":[200],"prove":[201],"less":[202],"vulnerable":[203],"producing":[209],"detailed":[210],"samples.":[211]},"counts_by_year":[{"year":2026,"cited_by_count":13},{"year":2025,"cited_by_count":26},{"year":2024,"cited_by_count":23},{"year":2023,"cited_by_count":25},{"year":2022,"cited_by_count":28},{"year":2021,"cited_by_count":24},{"year":2020,"cited_by_count":10},{"year":2019,"cited_by_count":2}],"updated_date":"2026-08-18T07:49:30.821534","created_date":"2019-08-13T00:00:00"}