{"id":"https://openalex.org/W7150841601","doi":"https://doi.org/10.48550/arxiv.2604.02780","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","display_name":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","publication_year":2026,"publication_date":"2026-04-03","ids":{"openalex":"https://openalex.org/W7150841601","doi":"https://doi.org/10.48550/arxiv.2604.02780"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.02780","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.02780","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.02780","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5133015256","display_name":"Ruize Gao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gao, Ruize","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133034923","display_name":"Kaiwen Zhou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhou, Kaiwen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133039674","display_name":"Yongqiang Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Yongqiang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5133017364","display_name":"Feng Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Feng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9950000047683716,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9950000047683716,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.0005000000237487257,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.0005000000237487257,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.9175999760627747},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.7569000124931335},{"id":"https://openalex.org/keywords/perspective","display_name":"Perspective (graphical)","score":0.6948999762535095},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6653000116348267},{"id":"https://openalex.org/keywords/point","display_name":"Point (geometry)","score":0.45730000734329224},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.30630001425743103},{"id":"https://openalex.org/keywords/causal-inference","display_name":"Causal inference","score":0.3050000071525574}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.9175999760627747},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.7569000124931335},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.6948999762535095},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6916000247001648},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6653000116348267},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5497999787330627},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.45730000734329224},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.35339999198913574},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.30630001425743103},{"id":"https://openalex.org/C158600405","wikidata":"https://www.wikidata.org/wiki/Q5054566","display_name":"Causal inference","level":2,"score":0.3050000071525574},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.2913999855518341},{"id":"https://openalex.org/C13662910","wikidata":"https://www.wikidata.org/wiki/Q193139","display_name":"Trajectory","level":2,"score":0.2603999972343445},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.25999999046325684},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.25920000672340393},{"id":"https://openalex.org/C2780757406","wikidata":"https://www.wikidata.org/wiki/Q465837","display_name":"Skyline","level":2,"score":0.2567000091075897},{"id":"https://openalex.org/C61797465","wikidata":"https://www.wikidata.org/wiki/Q1188986","display_name":"Term (time)","level":2,"score":0.25060001015663147}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.02780","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.02780","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.02780","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.02780","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5297796130180359}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Membership":[0],"inference":[1,154,174],"attacks":[2],"(MIAs)":[3],"aim":[4],"to":[5],"determine":[6],"whether":[7],"a":[8,15,52,112,117,142,152],"specific":[9],"data":[10],"point":[11],"was":[12],"part":[13],"of":[14,27,72],"model's":[16],"training":[17],"set,":[18],"serving":[19],"as":[20],"effective":[21,103],"tools":[22],"for":[23,48,186],"evaluating":[24],"privacy":[25],"leakage":[26],"vision":[28,49,191],"models.":[29,192],"However,":[30],"existing":[31],"MIAs":[32,47],"implicitly":[33],"assume":[34],"honest":[35],"query":[36],"inputs,":[37],"and":[38,91,107,150,172],"their":[39,131],"adversarial":[40,55,57,98,159,187],"robustness":[41],"remains":[42],"unexplored.":[43],"We":[44,93,109],"show":[45,163],"that":[46,97,123,156,164],"models":[50],"expose":[51],"previously":[53],"overlooked":[54],"surface:":[56],"membership":[58,99,188],"manipulation,":[59],"where":[60],"imperceptible":[61],"perturbations":[62],"can":[63],"reliably":[64,124],"push":[65],"non-member":[66],"images":[67],"into":[68],"the":[69,80,182],"\"member\"":[70],"region":[71],"state-of-the-art":[73],"MIAs.":[74],"In":[75],"this":[76,85,138],"paper,":[77],"we":[78,140],"provide":[79],"first":[81,183],"unified":[82],"perspective":[83],"on":[84,137],"phenomenon":[86],"by":[87,95],"analyzing":[88],"its":[89],"mechanism":[90],"implications.":[92],"begin":[94],"demonstrating":[96],"fabrication":[100,165],"is":[101,166],"consistently":[102],"across":[104],"diverse":[105],"architectures":[106],"datasets.":[108],"then":[110],"reveal":[111],"distinctive":[113],"geometric":[114],"signature":[115],"-":[116,122],"characteristic":[118],"gradient-norm":[119],"collapse":[120],"trajectory":[121],"separates":[125],"fabricated":[126],"from":[127],"true":[128],"members":[129],"despite":[130],"nearly":[132],"identical":[133],"semantic":[134],"representations.":[135],"Building":[136],"insight,":[139],"introduce":[141],"principled":[143],"detection":[144,171],"strategy":[145],"grounded":[146],"in":[147,190],"gradient-geometry":[148],"signals":[149],"develop":[151],"robust":[153,173],"framework":[155,185],"substantially":[157],"mitigates":[158],"manipulation.":[160],"Extensive":[161],"experiments":[162],"broadly":[167],"effective,":[168],"while":[169],"our":[170],"strategies":[175],"significantly":[176],"enhance":[177],"resilience.":[178],"This":[179],"work":[180],"establishes":[181],"comprehensive":[184],"manipulation":[189]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-04-07T00:00:00"}