{"id":"https://openalex.org/W4315784647","doi":"https://doi.org/10.56553/popets-2023-0012","title":"Exploring Model Inversion Attacks in the Black-box Setting","display_name":"Exploring Model Inversion Attacks in the Black-box Setting","publication_year":2023,"publication_date":"2023-01-01","ids":{"openalex":"https://openalex.org/W4315784647","doi":"https://doi.org/10.56553/popets-2023-0012"},"language":"en","primary_location":{"id":"doi:10.56553/popets-2023-0012","is_oa":true,"landing_page_url":"http://dx.doi.org/10.56553/popets-2023-0012","pdf_url":"https://petsymposium.org/popets/2023/popets-2023-0012.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://petsymposium.org/popets/2023/popets-2023-0012.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5047172111","display_name":"Antreas Dionysiou","orcid":"https://orcid.org/0000-0002-6517-8462"},"institutions":[{"id":"https://openalex.org/I34771391","display_name":"University of Cyprus","ror":"https://ror.org/02qjrjx09","country_code":"CY","type":"education","lineage":["https://openalex.org/I34771391"]}],"countries":["CY"],"is_corresponding":true,"raw_author_name":"Antreas Dionysiou","raw_affiliation_strings":["University of Cyprus","University of Cyprus Nicosia, Cyprus"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Cyprus","institution_ids":["https://openalex.org/I34771391"]},{"raw_affiliation_string":"University of Cyprus Nicosia, Cyprus","institution_ids":["https://openalex.org/I34771391"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021954539","display_name":"Vassilis Vassiliades","orcid":"https://orcid.org/0000-0002-1336-5629"},"institutions":[{"id":"https://openalex.org/I4210105896","display_name":"Cyprus Research and Innovation Center (Cyprus)","ror":"https://ror.org/01ha10g31","country_code":"CY","type":"company","lineage":["https://openalex.org/I4210105896"]}],"countries":["CY"],"is_corresponding":false,"raw_author_name":"Vassilis Vassiliades","raw_affiliation_strings":["CYENS Centre of Excellence","CYENS Centre of Excellence Nicosia, Cyprus"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CYENS Centre of Excellence","institution_ids":[]},{"raw_affiliation_string":"CYENS Centre of Excellence Nicosia, Cyprus","institution_ids":["https://openalex.org/I4210105896"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102849919","display_name":"\u0397\u03bb\u03af\u03b1\u03c2 \u0391\u03b8\u03b1\u03bd\u03b1\u03c3\u03cc\u03c0\u03bf\u03c5\u03bb\u03bf\u03c2","orcid":"https://orcid.org/0000-0002-8759-3261"},"institutions":[{"id":"https://openalex.org/I34771391","display_name":"University of Cyprus","ror":"https://ror.org/02qjrjx09","country_code":"CY","type":"education","lineage":["https://openalex.org/I34771391"]}],"countries":["CY"],"is_corresponding":false,"raw_author_name":"Elias Athanasopoulos","raw_affiliation_strings":["University of Cyprus","University of Cyprus Nicosia, Cyprus"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Cyprus","institution_ids":["https://openalex.org/I34771391"]},{"raw_affiliation_string":"University of Cyprus Nicosia, Cyprus","institution_ids":["https://openalex.org/I34771391"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5047172111"],"corresponding_institution_ids":["https://openalex.org/I34771391"],"apc_list":null,"apc_paid":null,"fwci":0.8336,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":{"value":0.77068478,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":"2023","issue":"1","first_page":"190","last_page":"206"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9941999912261963,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9941999912261963,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12055","display_name":"Boron Compounds in Chemistry","score":0.970300018787384,"subfield":{"id":"https://openalex.org/subfields/2741","display_name":"Radiology, Nuclear Medicine and Imaging"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},{"id":"https://openalex.org/T11775","display_name":"COVID-19 diagnosis using AI","score":0.9334999918937683,"subfield":{"id":"https://openalex.org/subfields/2741","display_name":"Radiology, Nuclear Medicine and Imaging"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.8096113204956055},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7116896510124207},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.6193777322769165},{"id":"https://openalex.org/keywords/white-box","display_name":"White box","score":0.5888895988464355},{"id":"https://openalex.org/keywords/inversion","display_name":"Inversion (geology)","score":0.5772978067398071},{"id":"https://openalex.org/keywords/ground-truth","display_name":"Ground truth","score":0.5635867118835449},{"id":"https://openalex.org/keywords/box-model","display_name":"Box model","score":0.4975643455982208},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4882824420928955},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.47092169523239136},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.46488189697265625},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.43996235728263855},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.4235539436340332}],"concepts":[{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.8096113204956055},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7116896510124207},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.6193777322769165},{"id":"https://openalex.org/C180932941","wikidata":"https://www.wikidata.org/wiki/Q997233","display_name":"White box","level":2,"score":0.5888895988464355},{"id":"https://openalex.org/C1893757","wikidata":"https://www.wikidata.org/wiki/Q3653001","display_name":"Inversion (geology)","level":3,"score":0.5772978067398071},{"id":"https://openalex.org/C146849305","wikidata":"https://www.wikidata.org/wiki/Q370766","display_name":"Ground truth","level":2,"score":0.5635867118835449},{"id":"https://openalex.org/C2992995325","wikidata":"https://www.wikidata.org/wiki/Q4951592","display_name":"Box model","level":2,"score":0.4975643455982208},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4882824420928955},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.47092169523239136},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.46488189697265625},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.43996235728263855},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.4235539436340332},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.0},{"id":"https://openalex.org/C49204034","wikidata":"https://www.wikidata.org/wiki/Q52139","display_name":"Climatology","level":1,"score":0.0},{"id":"https://openalex.org/C109007969","wikidata":"https://www.wikidata.org/wiki/Q749565","display_name":"Structural basin","level":2,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.56553/popets-2023-0012","is_oa":true,"landing_page_url":"http://dx.doi.org/10.56553/popets-2023-0012","pdf_url":"https://petsymposium.org/popets/2023/popets-2023-0012.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},{"id":"pmh:oai:zenodo.org:8123496","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2023-0012","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"PETS, Privacy Enhancing Technologies Symposium, Lausanne, Switzerland, 10-15 July 2023","raw_type":"info:eu-repo/semantics/conferencePaper"}],"best_oa_location":{"id":"doi:10.56553/popets-2023-0012","is_oa":true,"landing_page_url":"http://dx.doi.org/10.56553/popets-2023-0012","pdf_url":"https://petsymposium.org/popets/2023/popets-2023-0012.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.5199999809265137,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G3035660556","display_name":"Secure and Privacy-preserving Indoor Robotics for Healthcare Environments","funder_award_id":"101007673","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G5356549776","display_name":null,"funder_award_id":"830929","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G992966723","display_name":null,"funder_award_id":"739578","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320332084","display_name":"Deputy Ministry of Research, Innovation and Digital Policy","ror":null}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4315784647.pdf"},"referenced_works_count":56,"referenced_works":["https://openalex.org/W6908809","https://openalex.org/W19399978","https://openalex.org/W106535599","https://openalex.org/W164388623","https://openalex.org/W758372786","https://openalex.org/W1473189865","https://openalex.org/W1522301498","https://openalex.org/W1738827650","https://openalex.org/W1834627138","https://openalex.org/W1845345803","https://openalex.org/W1959608418","https://openalex.org/W1986107904","https://openalex.org/W1997011019","https://openalex.org/W2000081525","https://openalex.org/W2051267297","https://openalex.org/W2103560185","https://openalex.org/W2112036188","https://openalex.org/W2127218421","https://openalex.org/W2132530542","https://openalex.org/W2138537392","https://openalex.org/W2157364932","https://openalex.org/W2160744452","https://openalex.org/W2208154600","https://openalex.org/W2462548332","https://openalex.org/W2467604901","https://openalex.org/W2504108613","https://openalex.org/W2512472178","https://openalex.org/W2535690855","https://openalex.org/W2590796488","https://openalex.org/W2739858255","https://openalex.org/W2750384547","https://openalex.org/W2766736793","https://openalex.org/W2797210984","https://openalex.org/W2807096445","https://openalex.org/W2892552174","https://openalex.org/W2895805829","https://openalex.org/W2897830718","https://openalex.org/W2899461894","https://openalex.org/W2904474291","https://openalex.org/W2948978827","https://openalex.org/W2951220338","https://openalex.org/W2951368041","https://openalex.org/W2962687375","https://openalex.org/W2962835266","https://openalex.org/W2964318098","https://openalex.org/W2985580374","https://openalex.org/W2989885118","https://openalex.org/W3035616549","https://openalex.org/W3048684575","https://openalex.org/W3099206234","https://openalex.org/W3112906095","https://openalex.org/W3129504140","https://openalex.org/W3204937802","https://openalex.org/W4288102801","https://openalex.org/W4295312788","https://openalex.org/W6893603746"],"related_works":["https://openalex.org/W2727407240","https://openalex.org/W4206598047","https://openalex.org/W4323355340","https://openalex.org/W2285795935","https://openalex.org/W2047881532","https://openalex.org/W1984273188","https://openalex.org/W4281760885","https://openalex.org/W2896078964","https://openalex.org/W4312601715","https://openalex.org/W2997982138"],"abstract_inverted_index":{"Model":[0,118],"Inversion":[1],"(MI)":[2],"attacks,":[3,227],"that":[4,122,224],"aim":[5],"to":[6,21,98,237],"recover":[7],"semantically":[8],"meaningful":[9],"reconstructions":[10,209],"for":[11,59,127,135,229],"each":[12],"target":[13],"class,":[14],"have":[15],"been":[16],"extensively":[17],"studied":[18],"and":[19,52,68,101,167,214,228],"demonstrated":[20],"be":[22,74],"successful":[23],"in":[24,38,96,106,173,191,234,242],"the":[25,29,61,99,107,179,192,243],"white-box":[26,244],"setting.":[27,109,245],"On":[28],"other":[30],"hand,":[31],"black-box":[32,70,108,125,225],"MI":[33,71,104,129,226],"attacks":[34,72,105,130],"demonstrate":[35,206],"low":[36],"performance":[37],"terms":[39],"of":[40,103,162,171,181],"both":[41],"effectiveness,":[42],"i.e.,":[43,54],"reconstructing":[44],"samples":[45],"which":[46],"are":[47,232],"identifiable":[48],"as":[49,80],"their":[50,212],"ground-truth,":[51,213],"efficiency,":[53],"time":[55],"or":[56,65],"queries":[57],"required":[58],"completing":[60],"attack":[62,166],"process.":[63],"Whether":[64],"not":[66],"effective":[67,153],"efficient":[69,140],"can":[73],"conducted":[75],"on":[76,131,144,157],"complex":[77,230],"targets,":[78],"such":[79],"Convolutional":[81],"Neural":[82],"Networks":[83],"(CNNs),":[84],"currently":[85],"remains":[86],"unclear.":[87],"In":[88,110,194],"this":[89,111,182],"paper,":[90],"we":[91,113,184,196],"present":[92],"a":[93,120,169,174,199],"feasibility":[94],"study":[95,201],"regards":[97],"effectiveness":[100],"efficiency":[102],"context,":[112],"introduce":[114],"Deep-BMI":[115],"(Deep":[116],"Black-box":[117],"Inversion),":[119],"framework":[121],"supports":[123],"various":[124],"optimizers":[126],"conducting":[128],"deep":[132],"CNNs":[133],"used":[134],"image":[136],"recognition.":[137],"Deep-BMI\u2019s":[138],"most":[139,152],"optimizer":[141,154],"is":[142,155],"based":[143,156],"an":[145,158,164],"adaptive":[146],"hill":[147],"climbing":[148],"algorithm,":[149],"whereas":[150],"its":[151],"evolutionary":[159],"algorithm":[160],"capable":[161],"performing":[163],"all-class":[165],"returning":[168],"diversity":[170],"images":[172],"single":[175],"run.":[176],"For":[177],"assessing":[178],"severity":[180],"threat,":[183],"utilize":[185],"all":[186],"three":[187],"evaluation":[188],"approaches":[189],"found":[190],"literature.":[193],"particular,":[195],"(a)":[197],"conduct":[198],"user":[200],"with":[202,211],"human":[203],"participants,":[204],"(b)":[205],"our":[207,221],"actual":[208],"along":[210],"(c)":[215],"use":[216],"relevant":[217],"quantitative":[218],"metrics.":[219],"Surprisingly,":[220],"results":[222],"suggest":[223],"models,":[231],"comparable,":[233],"some":[235],"cases,":[236],"those":[238],"reported":[239],"so":[240],"far":[241]},"counts_by_year":[{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":1}],"updated_date":"2026-05-17T08:19:37.847499","created_date":"2025-10-10T00:00:00"}