{"id":"https://openalex.org/W3216713600","doi":"https://doi.org/10.2478/popets-2022-0014","title":"Zen and the art of model adaptation: Low-utility-cost attack mitigations in collaborative machine learning","display_name":"Zen and the art of model adaptation: Low-utility-cost attack mitigations in collaborative machine learning","publication_year":2021,"publication_date":"2021-11-20","ids":{"openalex":"https://openalex.org/W3216713600","doi":"https://doi.org/10.2478/popets-2022-0014","mag":"3216713600"},"language":"en","primary_location":{"id":"doi:10.2478/popets-2022-0014","is_oa":true,"landing_page_url":"https://doi.org/10.2478/popets-2022-0014","pdf_url":"https://petsymposium.org/popets/2022/popets-2022-0014.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://petsymposium.org/popets/2022/popets-2022-0014.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5035735692","display_name":"Dmitrii Usynin","orcid":"https://orcid.org/0000-0003-0179-6138"},"institutions":[{"id":"https://openalex.org/I47508984","display_name":"Imperial College London","ror":"https://ror.org/041kmwe10","country_code":"GB","type":"education","lineage":["https://openalex.org/I47508984"]},{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE","GB"],"is_corresponding":false,"raw_author_name":"Dmitrii Usynin","raw_affiliation_strings":["Department of Computing , Imperial College London ; Department of Diagnostic and Interventional Radiology , Technical University of Munich"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computing , Imperial College London ; Department of Diagnostic and Interventional Radiology , Technical University of Munich","institution_ids":["https://openalex.org/I47508984","https://openalex.org/I62916508"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006461848","display_name":"Daniel Rueckert","orcid":"https://orcid.org/0000-0002-5683-5889"},"institutions":[{"id":"https://openalex.org/I47508984","display_name":"Imperial College London","ror":"https://ror.org/041kmwe10","country_code":"GB","type":"education","lineage":["https://openalex.org/I47508984"]},{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE","GB"],"is_corresponding":false,"raw_author_name":"Daniel Rueckert","raw_affiliation_strings":["Institute for Artificial Intelligence in Medicine , Technical University of Munich ; Department of Computing , Imperial College London"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute for Artificial Intelligence in Medicine , Technical University of Munich ; Department of Computing , Imperial College London","institution_ids":["https://openalex.org/I47508984","https://openalex.org/I62916508"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016715565","display_name":"Jonathan Passerat\u2010Palmbach","orcid":"https://orcid.org/0000-0003-3178-9502"},"institutions":[{"id":"https://openalex.org/I4210102518","display_name":"ConsenSys (United States)","ror":"https://ror.org/01a2p6r88","country_code":"US","type":"company","lineage":["https://openalex.org/I4210102518"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jonathan Passerat-Palmbach","raw_affiliation_strings":["Department of Computing , Imperial College London ; ConsenSys Health, New York , NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computing , Imperial College London ; ConsenSys Health, New York , NY, USA","institution_ids":["https://openalex.org/I4210102518"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5000554104","display_name":"Georgios Kaissis","orcid":"https://orcid.org/0000-0001-8382-8062"},"institutions":[{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Georgios Kaissis","raw_affiliation_strings":["Institute for Artificial Intelligence in Medicine , Technical University of Munich ; Department of Computing , Imperial College London , Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute for Artificial Intelligence in Medicine , Technical University of Munich ; Department of Computing , Imperial College London , Germany","institution_ids":["https://openalex.org/I62916508"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.9104,"has_fulltext":true,"cited_by_count":7,"citation_normalized_percentile":{"value":0.80210851,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":97},"biblio":{"volume":"2022","issue":"1","first_page":"274","last_page":"290"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9973000288009644,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11636","display_name":"Artificial Intelligence in Healthcare and Education","score":0.9915000200271606,"subfield":{"id":"https://openalex.org/subfields/2718","display_name":"Health Informatics"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7790364623069763},{"id":"https://openalex.org/keywords/adaptation","display_name":"Adaptation (eye)","score":0.7041928768157959},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5583046674728394},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.5265593528747559},{"id":"https://openalex.org/keywords/hyperparameter","display_name":"Hyperparameter","score":0.495900958776474},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.4946410357952118},{"id":"https://openalex.org/keywords/collaborative-model","display_name":"Collaborative model","score":0.49422386288642883},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4816388189792633},{"id":"https://openalex.org/keywords/bridge","display_name":"Bridge (graph theory)","score":0.4620117247104645},{"id":"https://openalex.org/keywords/architecture","display_name":"Architecture","score":0.4184258282184601},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.3343117833137512},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.09543341398239136}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7790364623069763},{"id":"https://openalex.org/C139807058","wikidata":"https://www.wikidata.org/wiki/Q352374","display_name":"Adaptation (eye)","level":2,"score":0.7041928768157959},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5583046674728394},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.5265593528747559},{"id":"https://openalex.org/C8642999","wikidata":"https://www.wikidata.org/wiki/Q4171168","display_name":"Hyperparameter","level":2,"score":0.495900958776474},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.4946410357952118},{"id":"https://openalex.org/C2779017730","wikidata":"https://www.wikidata.org/wiki/Q5145845","display_name":"Collaborative model","level":2,"score":0.49422386288642883},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4816388189792633},{"id":"https://openalex.org/C100776233","wikidata":"https://www.wikidata.org/wiki/Q2532492","display_name":"Bridge (graph theory)","level":2,"score":0.4620117247104645},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.4184258282184601},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3343117833137512},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.09543341398239136},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.0},{"id":"https://openalex.org/C169760540","wikidata":"https://www.wikidata.org/wiki/Q207011","display_name":"Neuroscience","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C126322002","wikidata":"https://www.wikidata.org/wiki/Q11180","display_name":"Internal medicine","level":1,"score":0.0},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.2478/popets-2022-0014","is_oa":true,"landing_page_url":"https://doi.org/10.2478/popets-2022-0014","pdf_url":"https://petsymposium.org/popets/2022/popets-2022-0014.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:56cd977fda7b4e01ba8ccebbda7d6e6e","is_oa":true,"landing_page_url":"https://doaj.org/article/56cd977fda7b4e01ba8ccebbda7d6e6e","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings on Privacy Enhancing Technologies, Vol 2022, Iss 1, Pp 274-290 (2022)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.2478/popets-2022-0014","is_oa":true,"landing_page_url":"https://doi.org/10.2478/popets-2022-0014","pdf_url":"https://petsymposium.org/popets/2022/popets-2022-0014.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320314731","display_name":"UK Research and Innovation","ror":"https://ror.org/001aqnf71"},{"id":"https://openalex.org/F4320320283","display_name":"Imperial College London","ror":"https://ror.org/041kmwe10"},{"id":"https://openalex.org/F4320323383","display_name":"Technische Universit\u00e4t M\u00fcnchen","ror":"https://ror.org/02kkvpp62"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3216713600.pdf","grobid_xml":"https://content.openalex.org/works/W3216713600.grobid-xml"},"referenced_works_count":64,"referenced_works":["https://openalex.org/W44936433","https://openalex.org/W200517375","https://openalex.org/W1473189865","https://openalex.org/W1968411139","https://openalex.org/W2027595342","https://openalex.org/W2064076387","https://openalex.org/W2083847133","https://openalex.org/W2141504882","https://openalex.org/W2163605009","https://openalex.org/W2287140434","https://openalex.org/W2435473771","https://openalex.org/W2473418344","https://openalex.org/W2535690855","https://openalex.org/W2620512600","https://openalex.org/W2701059868","https://openalex.org/W2768347741","https://openalex.org/W2774423163","https://openalex.org/W2788633781","https://openalex.org/W2793398195","https://openalex.org/W2798657499","https://openalex.org/W2801491268","https://openalex.org/W2811323882","https://openalex.org/W2891168584","https://openalex.org/W2893554781","https://openalex.org/W2895805829","https://openalex.org/W2900120080","https://openalex.org/W2903470619","https://openalex.org/W2904190483","https://openalex.org/W2912023992","https://openalex.org/W2914328083","https://openalex.org/W2924551358","https://openalex.org/W2930926105","https://openalex.org/W2945237470","https://openalex.org/W2946930197","https://openalex.org/W2963378725","https://openalex.org/W2963952467","https://openalex.org/W2964162474","https://openalex.org/W2970408908","https://openalex.org/W2972594657","https://openalex.org/W2973232880","https://openalex.org/W2977527445","https://openalex.org/W2989885118","https://openalex.org/W2990741518","https://openalex.org/W2995022099","https://openalex.org/W2999251207","https://openalex.org/W2999428511","https://openalex.org/W3000479830","https://openalex.org/W3014541599","https://openalex.org/W3033488952","https://openalex.org/W3033511014","https://openalex.org/W3034428008","https://openalex.org/W3035616549","https://openalex.org/W3045700442","https://openalex.org/W3046102592","https://openalex.org/W3082155494","https://openalex.org/W3094874121","https://openalex.org/W3100897712","https://openalex.org/W3103245149","https://openalex.org/W3109695251","https://openalex.org/W3127133996","https://openalex.org/W3127843656","https://openalex.org/W3165750456","https://openalex.org/W4205228770","https://openalex.org/W4287332481"],"related_works":["https://openalex.org/W2140186469","https://openalex.org/W4390421286","https://openalex.org/W4280563792","https://openalex.org/W4318719684","https://openalex.org/W4389724018","https://openalex.org/W4318559728","https://openalex.org/W3183136280","https://openalex.org/W2775233965","https://openalex.org/W3114716045","https://openalex.org/W4360995913"],"abstract_inverted_index":{"Abstract":[0],"In":[1,70],"this":[2],"study,":[3],"we":[4,59,72],"aim":[5],"to":[6,43,86,134],"bridge":[7],"the":[8,11,27,37,74,87,104,122,136],"gap":[9],"between":[10,139],"theoretical":[12],"understanding":[13],"of":[14,29,76,83,90,106],"attacks":[15,84,110],"against":[16,39],"collaborative":[17,67],"machine":[18],"learning":[19,32,68],"workflows":[20],"and":[21,34,56,93,119,130,142],"their":[22],"practical":[23,63],"ramifications":[24],"by":[25,79],"considering":[26],"effects":[28],"model":[30,47,65,77,91,115,128,140],"architecture,":[31],"setting":[33],"hyperparameters":[35],"on":[36,53],"resilience":[38],"attacks.":[40],"We":[41],"refer":[42],"such":[44],"mitigations":[45],"as":[46],"adaptation":[48,78,116,129],".":[49],"Through":[50],"extensive":[51],"experimentation":[52],"both,":[54],"benchmark":[55],"real-life":[57],"datasets,":[58],"establish":[60],"a":[61,81],"more":[62],"threat":[64],"for":[66],"scenarios.":[69],"particular,":[71],"evaluate":[73],"impact":[75],"implementing":[80],"range":[82],"belonging":[85],"broader":[88],"categories":[89],"inversion":[92],"membership":[94],"inference.":[95],"Our":[96],"experiments":[97],"yield":[98],"two":[99],"noteworthy":[100],"outcomes:":[101],"they":[102,120],"demonstrate":[103],"difficulty":[105],"actually":[107],"conducting":[108],"successful":[109],"under":[111],"realistic":[112],"settings":[113],"when":[114],"is":[117],"employed":[118],"highlight":[121],"challenge":[123],"inherent":[124],"in":[125],"successfully":[126],"combining":[127],"formal":[131],"privacy-preserving":[132],"techniques":[133],"retain":[135],"optimal":[137],"balance":[138],"utility":[141],"attack":[143],"resilience.":[144]},"counts_by_year":[{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":4}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}