{"id":"https://openalex.org/W3188079459","doi":"https://doi.org/10.24963/ijcai.2021/432","title":"Against Membership Inference Attack: Pruning is All You Need","display_name":"Against Membership Inference Attack: Pruning is All You Need","publication_year":2021,"publication_date":"2021-08-01","ids":{"openalex":"https://openalex.org/W3188079459","doi":"https://doi.org/10.24963/ijcai.2021/432","mag":"3188079459"},"language":"en","primary_location":{"id":"doi:10.24963/ijcai.2021/432","is_oa":true,"landing_page_url":"https://doi.org/10.24963/ijcai.2021/432","pdf_url":"https://www.ijcai.org/proceedings/2021/0432.pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirtieth International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.ijcai.org/proceedings/2021/0432.pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101674028","display_name":"Yijue Wang","orcid":"https://orcid.org/0000-0002-9977-6065"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yijue Wang","raw_affiliation_strings":["University of Connecticut"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Connecticut","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083601595","display_name":"Chenghong Wang","orcid":"https://orcid.org/0000-0001-7837-5791"},"institutions":[{"id":"https://openalex.org/I170897317","display_name":"Duke University","ror":"https://ror.org/00py81415","country_code":"US","type":"education","lineage":["https://openalex.org/I170897317"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chenghong Wang","raw_affiliation_strings":["Duke University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Duke University","institution_ids":["https://openalex.org/I170897317"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009344627","display_name":"Zigeng Wang","orcid":"https://orcid.org/0000-0001-5611-2165"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zigeng Wang","raw_affiliation_strings":["University of Connecticut"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Connecticut","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070625162","display_name":"Shanglin Zhou","orcid":"https://orcid.org/0000-0002-6409-7716"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shanglin Zhou","raw_affiliation_strings":["University of Connecticut"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Connecticut","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100338967","display_name":"Hang Liu","orcid":"https://orcid.org/0000-0002-5246-8399"},"institutions":[{"id":"https://openalex.org/I108468826","display_name":"Stevens Institute of Technology","ror":"https://ror.org/02z43xh36","country_code":"US","type":"education","lineage":["https://openalex.org/I108468826"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hang Liu","raw_affiliation_strings":["Stevens Institute of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Stevens Institute of Technology","institution_ids":["https://openalex.org/I108468826"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051393532","display_name":"Jinbo Bi","orcid":"https://orcid.org/0000-0001-6996-4092"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jinbo Bi","raw_affiliation_strings":["University of Connecticut"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Connecticut","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030060072","display_name":"Caiwen Ding","orcid":"https://orcid.org/0000-0003-0891-1231"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Caiwen Ding","raw_affiliation_strings":["University of Connecticut"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Connecticut","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5034177039","display_name":"Sanguthevar Rajasekaran","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sanguthevar Rajasekaran","raw_affiliation_strings":["University of Connecticut"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Connecticut","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":40,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"3141","last_page":"3147"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9861000180244446,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8136532306671143},{"id":"https://openalex.org/keywords/pruning","display_name":"Pruning","score":0.8005818128585815},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.6943563222885132},{"id":"https://openalex.org/keywords/subnetwork","display_name":"Subnetwork","score":0.6729421615600586},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5299445390701294},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5253419280052185},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.4807164967060089},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.45147979259490967},{"id":"https://openalex.org/keywords/baseline","display_name":"Baseline (sea)","score":0.44415083527565},{"id":"https://openalex.org/keywords/popularity","display_name":"Popularity","score":0.4418449401855469},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.41013550758361816},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.1694035530090332}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8136532306671143},{"id":"https://openalex.org/C108010975","wikidata":"https://www.wikidata.org/wiki/Q500094","display_name":"Pruning","level":2,"score":0.8005818128585815},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.6943563222885132},{"id":"https://openalex.org/C2780186347","wikidata":"https://www.wikidata.org/wiki/Q11414","display_name":"Subnetwork","level":2,"score":0.6729421615600586},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5299445390701294},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5253419280052185},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.4807164967060089},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.45147979259490967},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.44415083527565},{"id":"https://openalex.org/C2780586970","wikidata":"https://www.wikidata.org/wiki/Q1357284","display_name":"Popularity","level":2,"score":0.4418449401855469},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.41013550758361816},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.1694035530090332},{"id":"https://openalex.org/C111368507","wikidata":"https://www.wikidata.org/wiki/Q43518","display_name":"Oceanography","level":1,"score":0.0},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.0},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C6557445","wikidata":"https://www.wikidata.org/wiki/Q173113","display_name":"Agronomy","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.24963/ijcai.2021/432","is_oa":true,"landing_page_url":"https://doi.org/10.24963/ijcai.2021/432","pdf_url":"https://www.ijcai.org/proceedings/2021/0432.pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirtieth International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.24963/ijcai.2021/432","is_oa":true,"landing_page_url":"https://doi.org/10.24963/ijcai.2021/432","pdf_url":"https://www.ijcai.org/proceedings/2021/0432.pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirtieth International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4285149376","display_name":"RAISE: Big Data Tools: From Bioinformatics To Materials Genomics","funder_award_id":"1743418","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7641761490","display_name":"EAGER: Type II: Deep Learning and Combinatorial Algorithms for Inorganic Crystal Structure Prediction","funder_award_id":"1843025","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3188079459.pdf","grobid_xml":"https://content.openalex.org/works/W3188079459.grobid-xml"},"referenced_works_count":25,"referenced_works":["https://openalex.org/W2160815625","https://openalex.org/W2163605009","https://openalex.org/W2194775991","https://openalex.org/W2294710185","https://openalex.org/W2473418344","https://openalex.org/W2535690855","https://openalex.org/W2798170643","https://openalex.org/W2798657499","https://openalex.org/W2805003733","https://openalex.org/W2884943453","https://openalex.org/W2912023992","https://openalex.org/W2932329902","https://openalex.org/W2950943617","https://openalex.org/W2963378725","https://openalex.org/W2964020641","https://openalex.org/W2970277060","https://openalex.org/W2971977646","https://openalex.org/W2980658239","https://openalex.org/W3034234149","https://openalex.org/W3040156639","https://openalex.org/W3101704102","https://openalex.org/W4287828539","https://openalex.org/W4288103499","https://openalex.org/W4320013936","https://openalex.org/W4385245566"],"related_works":["https://openalex.org/W2060724872","https://openalex.org/W2082094785","https://openalex.org/W2202198356","https://openalex.org/W3087203342","https://openalex.org/W2377184161","https://openalex.org/W228984114","https://openalex.org/W4226360758","https://openalex.org/W2151093953","https://openalex.org/W4366555309","https://openalex.org/W2964217848"],"abstract_inverted_index":{"The":[0],"large":[1],"model":[2,46,102],"size,":[3],"high":[4],"computational":[5,49],"operations,":[6],"and":[7,48,59,77,108,116],"vulnerability":[8],"against":[9,42],"membership":[10],"inference":[11],"attack":[12,99],"(MIA)":[13],"have":[14],"impeded":[15],"deep":[16,19],"learning":[17],"or":[18],"neural":[20],"networks":[21],"(DNNs)":[22],"popularity,":[23],"especially":[24],"on":[25],"mobile":[26],"devices.":[27],"To":[28],"address":[29],"the":[30,35,63,82,98,114],"challenge,":[31],"we":[32,54,60],"envision":[33],"that":[34,62,70,97,112],"weight":[36],"pruning":[37,57],"technique":[38],"will":[39],"help":[40],"DNNs":[41],"MIA":[43,76],"while":[44],"reducing":[45],"storage":[47],"operation.":[50],"In":[51],"this":[52],"work,":[53],"propose":[55],"a":[56,68],"algorithm,":[58],"show":[61],"proposed":[64],"algorithm":[65],"can":[66,71],"find":[67],"subnetwork":[69],"prevent":[72],"privacy":[73],"leakage":[74],"from":[75],"achieves":[78],"competitive":[79],"accuracy":[80,100],"with":[81,91],"original":[83],"DNNs.":[84],"We":[85],"also":[86],"verify":[87],"our":[88],"theoretical":[89],"insights":[90],"experiments.":[92],"Our":[93],"experimental":[94],"results":[95],"illustrate":[96],"using":[101],"compression":[103],"is":[104],"up":[105],"to":[106],"13.6%":[107],"10%":[109],"lower":[110],"than":[111],"of":[113],"baseline":[115],"Min-Max":[117],"game,":[118],"accordingly.":[119]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":14},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":8},{"year":2021,"cited_by_count":3}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}