{"id":"https://openalex.org/W7133342927","doi":"https://doi.org/10.48550/arxiv.2603.00811","title":"Curation Leaks: Membership Inference Attacks against Data Curation for Machine Learning","display_name":"Curation Leaks: Membership Inference Attacks against Data Curation for Machine Learning","publication_year":2026,"publication_date":"2026-02-28","ids":{"openalex":"https://openalex.org/W7133342927","doi":"https://doi.org/10.48550/arxiv.2603.00811"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.00811","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.00811","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.00811","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5099136974","display_name":"Dariush Wahdany","orcid":null},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Wahdany, Dariush","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054655342","display_name":"Matthew Jagielski","orcid":"https://orcid.org/0000-0002-9749-0696"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jagielski, Matthew","raw_affiliation_strings":["Anthropic"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Anthropic","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044067668","display_name":"Adam Dziedzic","orcid":"https://orcid.org/0000-0001-9786-2296"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Dziedzic, Adam","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5039583147","display_name":"Franziska Boenisch","orcid":"https://orcid.org/0000-0002-2111-2234"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Boenisch, Franziska","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security","institution_ids":["https://openalex.org/I4210128801"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.301800012588501,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.301800012588501,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.2671000063419342,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.1200999990105629,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/data-curation","display_name":"Data curation","score":0.9153000116348267},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5942000150680542},{"id":"https://openalex.org/keywords/selection","display_name":"Selection (genetic algorithm)","score":0.49570000171661377},{"id":"https://openalex.org/keywords/private-information-retrieval","display_name":"Private information retrieval","score":0.48660001158714294},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.3959999978542328},{"id":"https://openalex.org/keywords/digital-curation","display_name":"Digital curation","score":0.39309999346733093},{"id":"https://openalex.org/keywords/named-entity-recognition","display_name":"Named-entity recognition","score":0.38609999418258667},{"id":"https://openalex.org/keywords/information-sensitivity","display_name":"Information sensitivity","score":0.3709000051021576}],"concepts":[{"id":"https://openalex.org/C91632574","wikidata":"https://www.wikidata.org/wiki/Q15088675","display_name":"Data curation","level":2,"score":0.9153000116348267},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7394999861717224},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5942000150680542},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.49570000171661377},{"id":"https://openalex.org/C99221444","wikidata":"https://www.wikidata.org/wiki/Q1532069","display_name":"Private information retrieval","level":2,"score":0.48660001158714294},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.47870001196861267},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.47699999809265137},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.41200000047683716},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.3959999978542328},{"id":"https://openalex.org/C2775953033","wikidata":"https://www.wikidata.org/wiki/Q5276060","display_name":"Digital curation","level":2,"score":0.39309999346733093},{"id":"https://openalex.org/C2779135771","wikidata":"https://www.wikidata.org/wiki/Q403574","display_name":"Named-entity recognition","level":3,"score":0.38609999418258667},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.3709000051021576},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.36500000953674316},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.33649998903274536},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.3091999888420105},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3091000020503998},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.29319998621940613},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.2906000018119812},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.29019999504089355},{"id":"https://openalex.org/C93959086","wikidata":"https://www.wikidata.org/wiki/Q6888345","display_name":"Model selection","level":2,"score":0.2842000126838684},{"id":"https://openalex.org/C121426985","wikidata":"https://www.wikidata.org/wiki/Q591763","display_name":"Private sector","level":2,"score":0.26249998807907104},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.25679999589920044}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.00811","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.00811","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.00811","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.00811","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"In":[0],"machine":[1,31],"learning,":[2],"curation":[3,21,100,114,123,178,201,212],"is":[4,41,52,66,75,83],"used":[5,53],"to":[6,43,55,77,190],"select":[7],"the":[8,49,57,90,120,125,128,132,144,161,170,187,192],"most":[9],"valuable":[10],"data":[11,51,156,163,177,193],"for":[12,29,211],"improving":[13],"both":[14],"model":[15,47,65,82],"accuracy":[16],"and":[17,131,147,179],"computational":[18],"efficiency.":[19],"Recently,":[20],"has":[22,87],"also":[23],"been":[24],"explored":[25],"as":[26],"a":[27,81,214],"solution":[28],"private":[30,50,91,105,145,162,198],"learning:":[32],"rather":[33],"than":[34],"training":[35,188],"directly":[36],"on":[37,70,153],"sensitive":[38],"data,":[39],"which":[40],"known":[42],"leak":[44,104,157],"information":[45,142,159],"through":[46],"predictions,":[48],"only":[54],"guide":[56],"selection":[58,126,194],"of":[59,122,127,176,200],"useful":[60],"public":[61,72,155],"data.":[62,73,92],"The":[63],"resulting":[64],"then":[67],"trained":[68,134,151],"solely":[69],"curated":[71,129,154],"It":[74],"tempting":[76],"assume":[78],"that":[79,96,138,148,164,181,207],"such":[80],"privacy-preserving":[84],"because":[85],"it":[86],"never":[88],"seen":[89],"Yet,":[93],"we":[94,108],"show":[95,180],"without":[97],"further":[98],"protection,":[99],"pipelines":[101],"can":[102],"still":[103],"information.":[106],"Specifically,":[107],"introduce":[109],"novel":[110],"attacks":[111],"against":[112],"popular":[113],"methods,":[115],"targeting":[116],"every":[117],"major":[118],"step:":[119],"computation":[121],"scores,":[124],"subset,":[130],"final":[133],"model.":[135],"We":[136],"demonstrate":[137],"each":[139],"stage":[140],"reveals":[141],"about":[143,160],"dataset":[146],"even":[149],"models":[150],"exclusively":[152],"membership":[158],"guided":[165],"curation.":[166],"These":[167],"findings":[168],"highlight":[169],"previously":[171],"overlooked":[172],"inherent":[173],"privacy":[174,182,209],"risks":[175],"assessment":[183],"must":[184],"extend":[185],"beyond":[186],"procedure":[189],"include":[191],"process.":[195],"Our":[196],"differentially":[197],"adaptations":[199],"methods":[202],"effectively":[203],"mitigate":[204],"leakage,":[205],"indicating":[206],"formal":[208],"guarantees":[210],"are":[213],"promising":[215],"direction.":[216]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-03-04T00:00:00"}