{"id":"https://openalex.org/W4285604426","doi":"https://doi.org/10.24963/ijcai.2022/736","title":"Measuring Data Leakage in Machine-Learning Models with Fisher Information (Extended Abstract)","display_name":"Measuring Data Leakage in Machine-Learning Models with Fisher Information (Extended Abstract)","publication_year":2022,"publication_date":"2022-07-01","ids":{"openalex":"https://openalex.org/W4285604426","doi":"https://doi.org/10.24963/ijcai.2022/736"},"language":"en","primary_location":{"id":"doi:10.24963/ijcai.2022/736","is_oa":true,"landing_page_url":"https://doi.org/10.24963/ijcai.2022/736","pdf_url":"https://www.ijcai.org/proceedings/2022/0736.pdf","source":{"id":"https://openalex.org/S4363608755","display_name":"Proceedings of the Thirty-First International Joint Conference on Artificial Intelligence","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirty-First International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://www.ijcai.org/proceedings/2022/0736.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5087325198","display_name":"Awni Hannun","orcid":"https://orcid.org/0000-0003-3080-4002"},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Awni Hannun","raw_affiliation_strings":["Zoom AI","Meta AI Research"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zoom AI","institution_ids":[]},{"raw_affiliation_string":"Meta AI Research","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069524591","display_name":"Chuan Guo","orcid":"https://orcid.org/0000-0002-4539-0634"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chuan Guo","raw_affiliation_strings":["Meta AI Research"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Meta AI Research","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5109065097","display_name":"Laurens van der Maaten","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Laurens van der Maaten","raw_affiliation_strings":["Meta AI Research"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Meta AI Research","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5087325198"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":14,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"5284","last_page":"5288"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11612","display_name":"Stochastic Gradient Optimization Techniques","score":0.9886000156402588,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fisher-information","display_name":"Fisher information","score":0.8682883977890015},{"id":"https://openalex.org/keywords/information-leakage","display_name":"Information leakage","score":0.7232329249382019},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.661567211151123},{"id":"https://openalex.org/keywords/a-priori-and-a-posteriori","display_name":"A priori and a posteriori","score":0.6196416616439819},{"id":"https://openalex.org/keywords/fisher-kernel","display_name":"Fisher kernel","score":0.5402324795722961},{"id":"https://openalex.org/keywords/leakage","display_name":"Leakage (economics)","score":0.5324479341506958},{"id":"https://openalex.org/keywords/differential-privacy","display_name":"Differential privacy","score":0.5237229466438293},{"id":"https://openalex.org/keywords/information-loss","display_name":"Information loss","score":0.5207764506340027},{"id":"https://openalex.org/keywords/scoring-algorithm","display_name":"Scoring algorithm","score":0.5061253905296326},{"id":"https://openalex.org/keywords/information-theory","display_name":"Information theory","score":0.46632272005081177},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4595670998096466},{"id":"https://openalex.org/keywords/data-modeling","display_name":"Data modeling","score":0.4234154224395752},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4128456711769104},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.38162481784820557},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.23897382616996765},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.22578883171081543},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.2064571976661682}],"concepts":[{"id":"https://openalex.org/C29406490","wikidata":"https://www.wikidata.org/wiki/Q1420659","display_name":"Fisher information","level":2,"score":0.8682883977890015},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.7232329249382019},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.661567211151123},{"id":"https://openalex.org/C75553542","wikidata":"https://www.wikidata.org/wiki/Q178161","display_name":"A priori and a posteriori","level":2,"score":0.6196416616439819},{"id":"https://openalex.org/C207798031","wikidata":"https://www.wikidata.org/wiki/Q8563425","display_name":"Fisher kernel","level":5,"score":0.5402324795722961},{"id":"https://openalex.org/C2777042071","wikidata":"https://www.wikidata.org/wiki/Q6509304","display_name":"Leakage (economics)","level":2,"score":0.5324479341506958},{"id":"https://openalex.org/C23130292","wikidata":"https://www.wikidata.org/wiki/Q5275358","display_name":"Differential privacy","level":2,"score":0.5237229466438293},{"id":"https://openalex.org/C2988416141","wikidata":"https://www.wikidata.org/wiki/Q6031139","display_name":"Information loss","level":2,"score":0.5207764506340027},{"id":"https://openalex.org/C83282275","wikidata":"https://www.wikidata.org/wiki/Q7435350","display_name":"Scoring algorithm","level":2,"score":0.5061253905296326},{"id":"https://openalex.org/C52622258","wikidata":"https://www.wikidata.org/wiki/Q131222","display_name":"Information theory","level":2,"score":0.46632272005081177},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4595670998096466},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.4234154224395752},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4128456711769104},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.38162481784820557},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.23897382616996765},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.22578883171081543},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.2064571976661682},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.0},{"id":"https://openalex.org/C139719470","wikidata":"https://www.wikidata.org/wiki/Q39680","display_name":"Macroeconomics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C31510193","wikidata":"https://www.wikidata.org/wiki/Q1192553","display_name":"Facial recognition system","level":3,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C181367576","wikidata":"https://www.wikidata.org/wiki/Q6394184","display_name":"Kernel Fisher discriminant analysis","level":4,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.24963/ijcai.2022/736","is_oa":true,"landing_page_url":"https://doi.org/10.24963/ijcai.2022/736","pdf_url":"https://www.ijcai.org/proceedings/2022/0736.pdf","source":{"id":"https://openalex.org/S4363608755","display_name":"Proceedings of the Thirty-First International Joint Conference on Artificial Intelligence","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirty-First International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.24963/ijcai.2022/736","is_oa":true,"landing_page_url":"https://doi.org/10.24963/ijcai.2022/736","pdf_url":"https://www.ijcai.org/proceedings/2022/0736.pdf","source":{"id":"https://openalex.org/S4363608755","display_name":"Proceedings of the Thirty-First International Joint Conference on Artificial Intelligence","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirty-First International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4285604426.pdf","grobid_xml":"https://content.openalex.org/works/W4285604426.grobid-xml"},"referenced_works_count":29,"referenced_works":["https://openalex.org/W56293434","https://openalex.org/W1473189865","https://openalex.org/W1873763122","https://openalex.org/W1999602050","https://openalex.org/W2027595342","https://openalex.org/W2119883478","https://openalex.org/W2123820077","https://openalex.org/W2136114025","https://openalex.org/W2461943168","https://openalex.org/W2535690855","https://openalex.org/W2588878038","https://openalex.org/W2603766943","https://openalex.org/W2785487418","https://openalex.org/W2786233556","https://openalex.org/W2795435272","https://openalex.org/W2903718010","https://openalex.org/W2943912735","https://openalex.org/W2946930197","https://openalex.org/W2947018541","https://openalex.org/W2950103651","https://openalex.org/W2950943617","https://openalex.org/W2964318098","https://openalex.org/W3003536863","https://openalex.org/W4206180546","https://openalex.org/W4234281613","https://openalex.org/W4294658142","https://openalex.org/W6657138077","https://openalex.org/W6803771590","https://openalex.org/W6829548690"],"related_works":["https://openalex.org/W4294328901","https://openalex.org/W3185610468","https://openalex.org/W2952582351","https://openalex.org/W2042150869","https://openalex.org/W4200428397","https://openalex.org/W4401063807","https://openalex.org/W2007786416","https://openalex.org/W3184588375","https://openalex.org/W4285604426","https://openalex.org/W3130456129"],"abstract_inverted_index":{"Machine-learning":[0],"models":[1],"contain":[2],"information":[3,12,38,53,70,88,107,119,126],"about":[4,57],"the":[5,16,24,28,35,51,55,58,61,83,91,96],"data":[6,30],"they":[7],"were":[8],"trained":[9],"on.":[10],"This":[11],"leaks":[13],"either":[14],"through":[15,20,90],"model":[17,56],"itself":[18],"or":[19,80],"predictions":[21],"made":[22],"by":[23],"model.":[25,99],"Consequently,":[26],"when":[27],"training":[29],"contains":[31],"sensitive":[32],"attributes,":[33,79],"assessing":[34],"amount":[36],"of":[37,54,66,125],"leakage":[39,49,73],"is":[40],"paramount.":[41],"We":[42,85,100],"propose":[43],"a":[44,63,122],"method":[45],"to":[46,76,104],"quantify":[47],"this":[48],"using":[50],"Fisher":[52,69,87,106,118],"data.":[59],"Unlike":[60],"worst-case":[62],"priori":[64],"guarantees":[65],"differential":[67],"privacy,":[68],"loss":[71,89,108,120],"measures":[72],"with":[74],"respect":[75],"specific":[77],"examples,":[78],"sub-populations":[81],"within":[82],"dataset.":[84],"motivate":[86],"Cramer-Rao":[92],"bound":[93],"and":[94],"delineate":[95],"implied":[97],"threat":[98],"provide":[101],"efficient":[102],"methods":[103],"compute":[105],"for":[109],"output-perturbed":[110],"generalized":[111],"linear":[112],"models.":[113],"Finally,":[114],"we":[115],"empirically":[116],"validate":[117],"as":[121],"useful":[123],"measure":[124],"leakage.":[127]},"counts_by_year":[{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}