{"id":"https://openalex.org/W4400020742","doi":"https://doi.org/10.56553/popets-2024-0085","title":"Investigating the Effect of Misalignment on Membership Privacy in the White-box Setting","display_name":"Investigating the Effect of Misalignment on Membership Privacy in the White-box Setting","publication_year":2024,"publication_date":"2024-06-25","ids":{"openalex":"https://openalex.org/W4400020742","doi":"https://doi.org/10.56553/popets-2024-0085"},"language":"en","primary_location":{"id":"doi:10.56553/popets-2024-0085","is_oa":true,"landing_page_url":"http://dx.doi.org/10.56553/popets-2024-0085","pdf_url":"https://petsymposium.org/popets/2024/popets-2024-0085.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://petsymposium.org/popets/2024/popets-2024-0085.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102884393","display_name":"Ana-Maria Cre\u0163u","orcid":"https://orcid.org/0000-0002-9009-7381"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ana-Maria Cretu","raw_affiliation_strings":["EPFL"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"EPFL","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026453537","display_name":"Daniel N. Jones","orcid":"https://orcid.org/0000-0003-1534-3076"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Daniel Jones","raw_affiliation_strings":["M365 Research"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"M365 Research","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078253058","display_name":"Yves-Alexandre de Montjoye","orcid":"https://orcid.org/0000-0002-2559-5616"},"institutions":[{"id":"https://openalex.org/I47508984","display_name":"Imperial College London","ror":"https://ror.org/041kmwe10","country_code":"GB","type":"education","lineage":["https://openalex.org/I47508984"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Yves-Alexandre de Montjoye","raw_affiliation_strings":["Imperial College London"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Imperial College London","institution_ids":["https://openalex.org/I47508984"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5076686201","display_name":"Shruti Tople","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shruti Tople","raw_affiliation_strings":["Azure Research"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Azure Research","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.8488,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.83660862,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":97},"biblio":{"volume":"2024","issue":"3","first_page":"407","last_page":"430"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10068","display_name":"Technology Adoption and User Behaviour","score":0.2651999890804291,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10068","display_name":"Technology Adoption and User Behaviour","score":0.2651999890804291,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/white","display_name":"White (mutation)","score":0.6849348545074463},{"id":"https://openalex.org/keywords/white-box","display_name":"White box","score":0.470766544342041},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.46391287446022034},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.3818683624267578},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.37029147148132324},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3403455913066864},{"id":"https://openalex.org/keywords/chemistry","display_name":"Chemistry","score":0.05736401677131653}],"concepts":[{"id":"https://openalex.org/C56273599","wikidata":"https://www.wikidata.org/wiki/Q3122841","display_name":"White (mutation)","level":3,"score":0.6849348545074463},{"id":"https://openalex.org/C180932941","wikidata":"https://www.wikidata.org/wiki/Q997233","display_name":"White box","level":2,"score":0.470766544342041},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.46391287446022034},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.3818683624267578},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.37029147148132324},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3403455913066864},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.05736401677131653},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.56553/popets-2024-0085","is_oa":true,"landing_page_url":"http://dx.doi.org/10.56553/popets-2024-0085","pdf_url":"https://petsymposium.org/popets/2024/popets-2024-0085.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},{"id":"pmh:oai:infoscience.epfl.ch:20.500.14299/251982","is_oa":true,"landing_page_url":"https://infoscience.epfl.ch/handle/20.500.14299/251982","pdf_url":"https://infoscience.epfl.ch/bitstreams/d5dede5d-2d29-4a61-ade8-9adc6794d308/download","source":{"id":"https://openalex.org/S4306400487","display_name":"Infoscience (Ecole Polytechnique F\u00e9d\u00e9rale de Lausanne)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"research article"}],"best_oa_location":{"id":"doi:10.56553/popets-2024-0085","is_oa":true,"landing_page_url":"http://dx.doi.org/10.56553/popets-2024-0085","pdf_url":"https://petsymposium.org/popets/2024/popets-2024-0085.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.6399999856948853}],"awards":[{"id":"https://openalex.org/G521268540","display_name":"PETRAS 2","funder_award_id":"EP/S035362/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"}],"funders":[{"id":"https://openalex.org/F4320320283","display_name":"Imperial College London","ror":"https://ror.org/041kmwe10"},{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4400020742.pdf","grobid_xml":"https://content.openalex.org/works/W4400020742.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W4233030723","https://openalex.org/W2093526602","https://openalex.org/W2605535459","https://openalex.org/W2931662336","https://openalex.org/W2077865380","https://openalex.org/W2796653146","https://openalex.org/W4286828408","https://openalex.org/W3020471965"],"abstract_inverted_index":{"Machine":[0],"learning":[1],"models":[2,91,119,225,257],"have":[3],"been":[4,56],"shown":[5],"to":[6,25,34,51,61,129,147,156,164,173,285],"leak":[7],"sensitive":[8],"information":[9,281],"about":[10],"their":[11],"training":[12],"datasets.":[13],"Models":[14],"are":[15,100,214],"increasingly":[16],"deployed":[17],"on":[18],"devices,":[19],"raising":[20],"concerns":[21],"that":[22,200,221,269,277],"white-box":[23,53,192,252],"access":[24,36],"the":[26,30,44,49,52,81,89,98,108,113,122,131,143,148,153,158,167,176,180,223,228,235,242,259,273,278],"model":[27,144,163,209],"parameters":[28],"increases":[29,272],"attack":[31,274],"surface":[32,275],"compared":[33],"black-box":[35,50,65],"which":[37],"only":[38,66,215],"provides":[39],"query":[40],"access.":[41],"Directly":[42],"extending":[43],"shadow":[45,82,90,118,149,162,183,208,224,256],"modelling":[46,83,150],"technique":[47],"from":[48,207],"setting":[54],"has":[55],"shown,":[57],"in":[58,95,102,117,142],"general,":[59],"not":[60],"perform":[62,187],"better":[63],"than":[64],"attacks.":[67,289],"A":[68],"potential":[69],"reason":[70],"is":[71,155],"misalignment,":[72,210],"a":[73,125,161,188,246],"known":[74],"characteristic":[75],"of":[76,112,115,124,160,166,191,250],"deep":[77],"neural":[78],"networks.":[79],"In":[80],"context,":[84,151],"misalignment":[85,116,178],"means":[86],"that,":[87],"while":[88,211],"learn":[92],"similar":[93],"features":[94,99],"each":[96],"layer,":[97],"located":[101],"different":[103,126],"positions.":[104],"We":[105,134,219],"here":[106],"present":[107],"first":[109],"systematic":[110],"analysis":[111,198],"causes":[114],"and":[120,182,231,276],"show":[121,170,220],"use":[123],"weight":[127],"initialisation":[128],"be":[130,283],"main":[132],"cause.":[133],"then":[135],"extend":[136],"several":[137],"re-alignment":[138,171],"techniques,":[139],"previously":[140],"developed":[141],"fusion":[145],"literature,":[146],"where":[152],"goal":[154],"re-align":[157],"layers":[159],"those":[165],"target":[168,181],"model.We":[169],"techniques":[172],"significantly":[174,217],"reduce":[175],"measured":[177],"between":[179],"models.":[184],"Finally,":[185],"we":[186],"comprehensive":[189],"evaluation":[190],"membership":[193],"inference":[194],"attacks":[195],"(MIA).":[196],"Our":[197],"reveals":[199],"internal":[201],"layer":[202],"activation-based":[203],"MIAs":[204,213],"suffer":[205],"strongly":[206,226],"gradient-based":[212],"sometimes":[216],"affected.":[218],"re-aligning":[222],"improves":[227,258],"former's":[229],"performance":[230],"can":[232,282],"also":[233],"improve":[234],"latter's":[236],"performance,":[237],"although":[238],"less":[239],"frequently.":[240],"On":[241],"CIFAR10":[243],"dataset":[244],"with":[245],"false":[247],"positive":[248,261],"rate":[249,262],"1%,":[251],"MIA":[253],"using":[254],"re-aligned":[255],"true":[260],"by":[263],"4.5%.Taken":[264],"together,":[265],"our":[266],"results":[267],"highlight":[268],"on-device":[270],"deployment":[271],"newly":[279],"available":[280],"used":[284],"build":[286],"more":[287],"powerful":[288]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-02T09:51:11.867554","created_date":"2025-10-10T00:00:00"}