{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,28]],"date-time":"2025-03-28T02:51:20Z","timestamp":1743130280565,"version":"3.40.3"},"publisher-location":"Cham","reference-count":32,"publisher":"Springer Nature Switzerland","isbn-type":[{"type":"print","value":"9783031541285"},{"type":"electronic","value":"9783031541292"}],"license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024]]},"DOI":"10.1007\/978-3-031-54129-2_39","type":"book-chapter","created":{"date-parts":[[2024,3,11]],"date-time":"2024-03-11T22:03:15Z","timestamp":1710194595000},"page":"665-682","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Can Inputs\u2019 Reconstruction Information Be Coded into\u00a0Machine Learning Model\u2019s Outputs?"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-0749-3613","authenticated-orcid":false,"given":"Kazuki","family":"Iwahana","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8077-3251","authenticated-orcid":false,"given":"Osamu","family":"Saisho","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8694-312X","authenticated-orcid":false,"given":"Takayuki","family":"Miura","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4602-7570","authenticated-orcid":false,"given":"Akira","family":"Ito","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,3,12]]},"reference":[{"key":"39_CR1","doi-asserted-by":"crossref","unstructured":"An, S., et al.: Mirror: model inversion for deep learning network with high fidelity. In: Proceedings of the 29th Network and Distributed System Security Symposium (2022)","DOI":"10.14722\/ndss.2022.24335"},{"issue":"3","key":"39_CR2","doi-asserted-by":"publisher","first-page":"137","DOI":"10.1504\/IJSN.2015.071829","volume":"10","author":"G Ateniese","year":"2015","unstructured":"Ateniese, G., Mancini, L.V., Spognardi, A., Villani, A., Vitali, D., Felici, G.: Hacking smart machines with smarter ones: How to extract meaningful data from machine learning classifiers. Int. J. Secur. Netw. 10(3), 137\u2013150 (2015)","journal-title":"Int. J. Secur. Netw."},{"key":"39_CR3","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102679","volume":"117","author":"C Berry","year":"2022","unstructured":"Berry, C., Komninos, N.: Efficient optimisation framework for convolutional neural networks with secure multiparty computation. Comput. Secur. 117, 102679 (2022). https:\/\/doi.org\/10.1016\/j.cose.2022.102679","journal-title":"Comput. Secur."},{"key":"39_CR4","unstructured":"European Commission: Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation) (Text with EEA relevance) (2016)"},{"key":"39_CR5","unstructured":"Fredrikson, M., Lantz, E., Jha, S., Lin, S.M., Page, D., Ristenpart, T.: Privacy in pharmacogenetics: an end-to-end case study of personalized warfarin dosing. In: Proceedings of USENIX Security Symposium 2014, pp. 17\u201332. USENIX Association (2014)"},{"key":"39_CR6","unstructured":"Geiping, J., Bauermeister, H., Dr\u00f6ge, H., Moeller, M.: Inverting gradients-how easy is it to break privacy in federated learning? In: Advances in Neural Information Processing Systems, vol. 33, pp. 16937\u201316947 (2020)"},{"key":"39_CR7","unstructured":"Haim, N., Vardi, G., Yehudai, G., Shamir, O., Irani, M.: Reconstructing training data from trained neural networks. In: Koyejo, S., Mohamed, S., Agarwal, A., Belgrave, D., Cho, K., Oh, A. (eds.) Advances in Neural Information Processing Systems, vol. 35, pp. 22911\u201322924. Curran Associates, Inc. (2022)"},{"key":"39_CR8","unstructured":"Huang, Y., Gupta, S., Song, Z., Li, K., Arora, S.: Evaluating gradient inversion attacks and defenses in federated learning. In: Advances in Neural Information Processing Systems, vol. 34, pp. 7232\u20137241 (2021)"},{"key":"39_CR9","unstructured":"Huang, Y., Gupta, S., Song, Z., Li, K., Arora, S.: Evaluating gradient inversion attacks and defenses in federated learning. In: Advances in Neural Information Processing Systems (2021)"},{"key":"39_CR10","doi-asserted-by":"crossref","unstructured":"Hussain, S.U., Javaheripi, M., Samragh, M., Koushanfar, F.: Coinn: Crypto\/ML codesign for oblivious inference via neural networks. In: Proceedings of CCS, pp. 3266\u20133281. ACM (2021)","DOI":"10.1145\/3460120.3484797"},{"key":"39_CR11","unstructured":"Jagielski, M., Carlini, N., Berthelot, D., Kurakin, A., Papernot, N.: High accuracy and high fidelity extraction of neural networks. In: Proceedings of USENIX Security, pp. 1345\u20131362. USENIX Association (2020)"},{"key":"39_CR12","doi-asserted-by":"crossref","unstructured":"Juuti, M., Szyller, S., Marchal, S., Asokan, N.: Prada: Protecting against DNN model stealing attacks. In: Proceedings of EuroS &P 2019, pp. 512\u2013527. IEEE (2019)","DOI":"10.1109\/EuroSP.2019.00044"},{"key":"39_CR13","unstructured":"Kingma, D.P., Welling, M.: Auto-encoding variational Bayes. arXiv preprint arXiv:1312.6114 (2013)"},{"key":"39_CR14","doi-asserted-by":"crossref","unstructured":"Kumar, A., Tourani, R., Vij, M., Srikanteswara, S.: Sclera: a framework for privacy-preserving MLAAS at the pervasive edge. In: Proceedings of IEEE PerCom 2022 Workshops, pp. 175\u2013180 (2022)","DOI":"10.1109\/PerComWorkshops53856.2022.9767528"},{"key":"39_CR15","doi-asserted-by":"crossref","unstructured":"Malekzadeh, M., Borovykh, A., G\u00fcnd\u00fcz, D.: Honest-but-curious nets: sensitive attributes of private inputs can be secretly coded into the classifiers\u2019 outputs. In: Proceedings of CCS, pp. 825\u2013844. ACM (2021)","DOI":"10.1145\/3460120.3484533"},{"key":"39_CR16","doi-asserted-by":"crossref","unstructured":"Parisot, M.P., Pejo, B., Spagnuelo, D.: Property inference attacks on convolutional neural networks: influence and implications of target model\u2019s complexity. arXiv preprint arXiv:2104.13061 (2021)","DOI":"10.5220\/0010555607150721"},{"key":"39_CR17","doi-asserted-by":"crossref","unstructured":"Ranzato, M., Huang, F.J., Boureau, Y.L., LeCun, Y.: Unsupervised learning of invariant feature hierarchies with applications to object recognition. In: Proceedings of CVPR, pp. 1\u20138. IEEE Computer Society (2007)","DOI":"10.1109\/CVPR.2007.383157"},{"key":"39_CR18","doi-asserted-by":"crossref","unstructured":"Rumelhart, D.E., McClelland, J.L.: Learning Internal Representations by Error Propagation, pp. 318\u2013362 (1987)","DOI":"10.7551\/mitpress\/4943.003.0128"},{"key":"39_CR19","doi-asserted-by":"crossref","unstructured":"Salem, A., Zhang, Y., Humbert, M., Berrang, P., Fritz, M., Backes, M.: ML-leaks: model and data independent membership inference attacks and defenses on machine learning models. In: Proceedings of NDSS 2019. The Internet Society (2019)","DOI":"10.14722\/ndss.2019.23119"},{"key":"39_CR20","unstructured":"Shen, T., et al.: SOTER: guarding black-box inference for general neural networks at the edge. In: Proceedings of USENIX ATC, pp. 723\u2013738. USENIX Association (2022)"},{"key":"39_CR21","doi-asserted-by":"crossref","unstructured":"Shokri, R., Stronati, M., Song, C., Shmatikov, V.: Membership inference attacks against machine learning models. In: Proceedings of IEEE S &P 2018, pp. 3\u201318. IEEE Computer Society (2017)","DOI":"10.1109\/SP.2017.41"},{"key":"39_CR22","unstructured":"Song, C., Shmatikov, V.: Overlearning reveals sensitive attributes. In: Proceedings of ICLR (2020)"},{"key":"39_CR23","unstructured":"Tram\u00e9r, F., Zhang, F., Juels, A.: Stealing machine learning models via prediction APIs. In: Proceedings of USENIX Security 2016, pp. 601\u2013618. USENIX Association (2016)"},{"issue":"4","key":"39_CR24","doi-asserted-by":"publisher","first-page":"600","DOI":"10.1109\/TIP.2003.819861","volume":"13","author":"Z Wang","year":"2004","unstructured":"Wang, Z., Bovik, A.C., Sheikh, H.R., Simoncelli, E.P.: Image quality assessment: from error visibility to structural similarity. IEEE Trans. Image Process. 13(4), 600\u2013612 (2004)","journal-title":"IEEE Trans. Image Process."},{"key":"39_CR25","doi-asserted-by":"publisher","unstructured":"Yang, Z., Zhang, J., Chang, E.C., Liang, Z.: Neural network inversion in adversarial setting via background knowledge alignment. In: Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security. CCS \u201919, pp. 225\u2013240. Association for Computing Machinery, New York, NY, USA (2019). https:\/\/doi.org\/10.1145\/3319535.3354261","DOI":"10.1145\/3319535.3354261"},{"key":"39_CR26","doi-asserted-by":"crossref","unstructured":"Yin, H., Mallya, A., Vahdat, A., Alvarez, J.M., Kautz, J., Molchanov, P.: See through gradients: Image batch recovery via gradinversion. In: Proceedings of CVPR, pp. 16332\u201316341. IEEE Computer Society (2021)","DOI":"10.1109\/CVPR46437.2021.01607"},{"key":"39_CR27","doi-asserted-by":"crossref","unstructured":"Yin, H., Mallya, A., Vahdat, A., Alvarez, J.M., Kautz, J., Molchanov, P.: See through gradients: image batch recovery via gradinversion. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 16337\u201316346 (2021)","DOI":"10.1109\/CVPR46437.2021.01607"},{"key":"39_CR28","doi-asserted-by":"crossref","unstructured":"Yin, H., et al.: Dreaming to distill: data-free knowledge transfer via deepinversion. In: The IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), June 2020","DOI":"10.1109\/CVPR42600.2020.00874"},{"key":"39_CR29","doi-asserted-by":"crossref","unstructured":"Zhang, R., Isola, P., Efros, A.A., Shechtman, E., Wang, O.: The unreasonable effectiveness of deep features as a perceptual metric. In: Proceedings of CVPR 2018, pp. 586\u2013595. IEEE Computer Society (2018)","DOI":"10.1109\/CVPR.2018.00068"},{"key":"39_CR30","doi-asserted-by":"crossref","unstructured":"Zhang, Y., Jia, R., Pei, H., Wang, W., Li, B., Song, D.: The secret revealer: generative model-inversion attacks against deep neural networks. In: Proceedings of CVPR, pp. 250\u2013258. IEEE Computer Society (2020)","DOI":"10.1109\/CVPR42600.2020.00033"},{"key":"39_CR31","doi-asserted-by":"publisher","unstructured":"Zhao, B.Z.H., et al.: On the (in)feasibility of attribute inference attacks on machine learning models. In: 2021 IEEE European Symposium on Security and Privacy (EuroS &P), pp. 232\u2013251 (2021). https:\/\/doi.org\/10.1109\/EuroSP51992.2021.00025","DOI":"10.1109\/EuroSP51992.2021.00025"},{"key":"39_CR32","unstructured":"Zhu, L., Liu, Z., Han, S.: Deep leakage from gradients. In: Advances in Neural Information Processing Systems, vol. 32 (2019)"}],"container-title":["Lecture Notes in Computer Science","Computer Security. ESORICS 2023 International Workshops"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-54129-2_39","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,11]],"date-time":"2024-03-11T22:08:26Z","timestamp":1710194906000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-54129-2_39"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"ISBN":["9783031541285","9783031541292"],"references-count":32,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-54129-2_39","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2024]]},"assertion":[{"value":"12 March 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"Our code is publicly available via GitHub ().","order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Code Availability"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"The Hague","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"The Netherlands","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2023","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"25 September 2023","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"29 September 2023","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"28","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2023","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/esorics2023.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Easychair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"478","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"93","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"19% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3-4","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"10","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"No","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}