{"id":"https://openalex.org/W7124679614","doi":"https://doi.org/10.34133/icomputing.0270","title":"Probing Privacy Risks in Deep Neural Networks: A Jacobian Rank-Based Analysis of Intermediate Layers","display_name":"Probing Privacy Risks in Deep Neural Networks: A Jacobian Rank-Based Analysis of Intermediate Layers","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7124679614","doi":"https://doi.org/10.34133/icomputing.0270"},"language":"en","primary_location":{"id":"doi:10.34133/icomputing.0270","is_oa":true,"landing_page_url":"https://doi.org/10.34133/icomputing.0270","pdf_url":null,"source":{"id":"https://openalex.org/S4387281904","display_name":"Intelligent Computing","issn_l":"2771-5892","issn":["2771-5892"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Intelligent Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://doi.org/10.34133/icomputing.0270","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5123325056","display_name":"Sheng Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I2799736854","display_name":"Nanjing Institute of Technology","ror":"https://ror.org/00n6txq60","country_code":"CN","type":"education","lineage":["https://openalex.org/I2799736854"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Sheng Liu","raw_affiliation_strings":["School of Science and Big Data, \rNanjing Institute of Technology, Nanjing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Science and Big Data, \rNanjing Institute of Technology, Nanjing, China","institution_ids":["https://openalex.org/I2799736854"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026357928","display_name":"X. Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I2799736854","display_name":"Nanjing Institute of Technology","ror":"https://ror.org/00n6txq60","country_code":"CN","type":"education","lineage":["https://openalex.org/I2799736854"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xuefeng Zhang","raw_affiliation_strings":["School of Science and Big Data, \rNanjing Institute of Technology, Nanjing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Science and Big Data, \rNanjing Institute of Technology, Nanjing, China","institution_ids":["https://openalex.org/I2799736854"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123308449","display_name":"Tao Huang","orcid":null},"institutions":[{"id":"https://openalex.org/I354108","display_name":"Minjiang University","ror":"https://ror.org/00s7tkw17","country_code":"CN","type":"education","lineage":["https://openalex.org/I354108"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tao Huang","raw_affiliation_strings":["School of Computer and Big Data, \rMinjiang University, Fuzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-9067-2270","affiliations":[{"raw_affiliation_string":"School of Computer and Big Data, \rMinjiang University, Fuzhou, China","institution_ids":["https://openalex.org/I354108"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026055653","display_name":"Guolong Zheng","orcid":"https://orcid.org/0000-0002-1996-2635"},"institutions":[{"id":"https://openalex.org/I354108","display_name":"Minjiang University","ror":"https://ror.org/00s7tkw17","country_code":"CN","type":"education","lineage":["https://openalex.org/I354108"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guolong Zheng","raw_affiliation_strings":["School of Computer and Big Data, \rMinjiang University, Fuzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer and Big Data, \rMinjiang University, Fuzhou, China","institution_ids":["https://openalex.org/I354108"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123317849","display_name":"Wencheng Yang","orcid":null},"institutions":[{"id":"https://openalex.org/I185523456","display_name":"University of Southern Queensland","ror":"https://ror.org/04sjbnx57","country_code":"AU","type":"education","lineage":["https://openalex.org/I185523456"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Wencheng Yang","raw_affiliation_strings":["School of Mathematics, Physics and Computing, \rUniversity of Southern Queensland, Toowoomba, Queensland, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Mathematics, Physics and Computing, \rUniversity of Southern Queensland, Toowoomba, Queensland, Australia","institution_ids":["https://openalex.org/I185523456"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5036828563","display_name":"J. Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I185523456","display_name":"University of Southern Queensland","ror":"https://ror.org/04sjbnx57","country_code":"AU","type":"education","lineage":["https://openalex.org/I185523456"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Ji Zhang","raw_affiliation_strings":["School of Mathematics, Physics and Computing, \rUniversity of Southern Queensland, Toowoomba, Queensland, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Mathematics, Physics and Computing, \rUniversity of Southern Queensland, Toowoomba, Queensland, Australia","institution_ids":["https://openalex.org/I185523456"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.069234,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"5","issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5932000279426575,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5932000279426575,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.13279999792575836,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.03849999979138374,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/jacobian-matrix-and-determinant","display_name":"Jacobian matrix and determinant","score":0.6718999743461609},{"id":"https://openalex.org/keywords/generalization","display_name":"Generalization","score":0.5831999778747559},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5688999891281128},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.5149999856948853},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5105999708175659},{"id":"https://openalex.org/keywords/rank","display_name":"Rank (graph theory)","score":0.5012999773025513},{"id":"https://openalex.org/keywords/information-sensitivity","display_name":"Information sensitivity","score":0.4936000108718872},{"id":"https://openalex.org/keywords/residual","display_name":"Residual","score":0.48069998621940613}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7366999983787537},{"id":"https://openalex.org/C200331156","wikidata":"https://www.wikidata.org/wiki/Q506041","display_name":"Jacobian matrix and determinant","level":2,"score":0.6718999743461609},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.5831999778747559},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5688999891281128},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.5149999856948853},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5105999708175659},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5037000179290771},{"id":"https://openalex.org/C164226766","wikidata":"https://www.wikidata.org/wiki/Q7293202","display_name":"Rank (graph theory)","level":2,"score":0.5012999773025513},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.4936000108718872},{"id":"https://openalex.org/C155512373","wikidata":"https://www.wikidata.org/wiki/Q287450","display_name":"Residual","level":2,"score":0.48069998621940613},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.45500001311302185},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4498000144958496},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.42570000886917114},{"id":"https://openalex.org/C2780148112","wikidata":"https://www.wikidata.org/wiki/Q1432581","display_name":"Proxy (statistics)","level":2,"score":0.3774000108242035},{"id":"https://openalex.org/C204323151","wikidata":"https://www.wikidata.org/wiki/Q905424","display_name":"Range (aeronautics)","level":2,"score":0.36169999837875366},{"id":"https://openalex.org/C21200559","wikidata":"https://www.wikidata.org/wiki/Q7451068","display_name":"Sensitivity (control systems)","level":2,"score":0.35109999775886536},{"id":"https://openalex.org/C75291252","wikidata":"https://www.wikidata.org/wiki/Q1315756","display_name":"TRACE (psycholinguistics)","level":2,"score":0.3416000008583069},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.33980000019073486},{"id":"https://openalex.org/C25343380","wikidata":"https://www.wikidata.org/wiki/Q277521","display_name":"Relation (database)","level":2,"score":0.32600000500679016},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2842999994754791},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.27379998564720154},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.2614000141620636},{"id":"https://openalex.org/C148220186","wikidata":"https://www.wikidata.org/wiki/Q7111912","display_name":"Outcome (game theory)","level":2,"score":0.2578999996185303},{"id":"https://openalex.org/C2775941552","wikidata":"https://www.wikidata.org/wiki/Q25212305","display_name":"Isolation (microbiology)","level":2,"score":0.25519999861717224},{"id":"https://openalex.org/C86037889","wikidata":"https://www.wikidata.org/wiki/Q4330127","display_name":"Learning to rank","level":3,"score":0.2538999915122986}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.34133/icomputing.0270","is_oa":true,"landing_page_url":"https://doi.org/10.34133/icomputing.0270","pdf_url":null,"source":{"id":"https://openalex.org/S4387281904","display_name":"Intelligent Computing","issn_l":"2771-5892","issn":["2771-5892"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Intelligent Computing","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:c9d42fd8b78d4dca9eee6acb0bdb590c","is_oa":true,"landing_page_url":"https://doaj.org/article/c9d42fd8b78d4dca9eee6acb0bdb590c","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Intelligent Computing, Vol 5 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.34133/icomputing.0270","is_oa":true,"landing_page_url":"https://doi.org/10.34133/icomputing.0270","pdf_url":null,"source":{"id":"https://openalex.org/S4387281904","display_name":"Intelligent Computing","issn_l":"2771-5892","issn":["2771-5892"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Intelligent Computing","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W925742927","https://openalex.org/W2109426455","https://openalex.org/W2473418344","https://openalex.org/W2535690855","https://openalex.org/W2572504188","https://openalex.org/W2757455114","https://openalex.org/W2791697444","https://openalex.org/W2795435272","https://openalex.org/W2808844959","https://openalex.org/W2911978475","https://openalex.org/W2912023992","https://openalex.org/W2930926105","https://openalex.org/W2962864294","https://openalex.org/W2964343357","https://openalex.org/W2967268087","https://openalex.org/W3016632787","https://openalex.org/W3048087777","https://openalex.org/W3093151833","https://openalex.org/W3138815606","https://openalex.org/W3147249397","https://openalex.org/W3171142526","https://openalex.org/W3172312230","https://openalex.org/W3184556681","https://openalex.org/W3204214744","https://openalex.org/W3207137622","https://openalex.org/W3215243466","https://openalex.org/W4244983850","https://openalex.org/W4285605911","https://openalex.org/W4288057780","https://openalex.org/W4308410483","https://openalex.org/W4312705808","https://openalex.org/W4391462029"],"related_works":[],"abstract_inverted_index":{"Deep":[0],"learning":[1,205],"models":[2,135],"are":[3,29,174],"known":[4],"to":[5,8,80,114,123,189],"be":[6],"vulnerable":[7],"privacy":[9,24,54,90,179],"attacks":[10],"that":[11,66,166],"can":[12],"reconstruct":[13],"or":[14,33],"infer":[15],"sensitive":[16],"information":[17,37],"from":[18,40,121],"the":[19,35,41,58,67,70,81,95,98,156,175,197,208],"training":[20],"data.":[21],"While":[22],"many":[23],"assessment":[25],"methods":[26],"exist,":[27],"they":[28],"often":[30],"computationally":[31],"prohibitive":[32],"overlook":[34],"considerable":[36],"leakage":[38],"occurring":[39],"model\u2019s":[42,82],"intermediate":[43,75],"layers.":[44],"This":[45,181],"paper":[46],"introduces":[47],"an":[48,74,184],"efficient,":[49],"attack-independent":[50],"framework":[51],"for":[52,89,187,210],"quantifying":[53],"risks":[55],"by":[56],"analyzing":[57],"sensitivity":[59],"of":[60,69,73,97,132,159,178,199],"these":[61],"internal":[62],"representations.":[63],"We":[64],"discover":[65],"rank":[68,100,106,111],"Jacobian":[71,99],"matrix":[72],"layer\u2019s":[76,118],"output":[77],"with":[78],"respect":[79],"input":[83],"serves":[84],"as":[85],"a":[86,117,129,144],"robust":[87],"proxy":[88],"vulnerability.":[91],"Specifically,":[92],"we":[93,142],"analyze":[94],"dynamics":[96],"throughout":[101],"training,":[102],"proposing":[103],"2":[104],"metrics,":[105],"recovery":[107,112],"(RR)":[108],"and":[109,136,146,155,202],"normalized":[110],"(NRR),":[113],"specifically":[115],"quantify":[116],"dynamic":[119],"transition":[120],"generalization":[122],"memorization.":[124],"Through":[125],"extensive":[126],"experiments":[127],"on":[128],"diverse":[130],"range":[131],"computer":[133],"vision":[134],"datasets,":[137],"including":[138],"modern":[139],"residual":[140],"networks,":[141],"demonstrate":[143],"strong":[145],"consistent":[147],"positive":[148],"correlation":[149],"between":[150],"our":[151],"proposed":[152],"rank-based":[153],"metrics":[154],"success":[157],"rates":[158],"membership":[160],"inference":[161],"attacks.":[162],"Our":[163],"findings":[164],"reveal":[165],"deeper":[167],"layers,":[168],"which":[169],"exhibit":[170],"considerably":[171],"higher":[172],"RR,":[173],"primary":[176],"sources":[177],"leakage.":[180],"work":[182],"provides":[183],"actionable":[185],"methodology":[186],"developers":[188],"identify":[190],"high-risk":[191],"layers":[192],"in":[193],"real":[194],"time,":[195],"facilitating":[196],"development":[198],"more":[200],"secure":[201],"privacy-preserving":[203],"machine":[204],"systems":[206],"without":[207],"need":[209],"expensive":[211],"adversarial":[212],"simulations.":[213]},"counts_by_year":[],"updated_date":"2026-07-31T08:31:51.225901","created_date":"2026-01-20T00:00:00"}