{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,1]],"date-time":"2025-11-01T02:52:06Z","timestamp":1761965526444,"version":"3.40.3"},"publisher-location":"Cham","reference-count":38,"publisher":"Springer Nature Switzerland","isbn-type":[{"type":"print","value":"9783031696503"},{"type":"electronic","value":"9783031696510"}],"license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024]]},"DOI":"10.1007\/978-3-031-69651-0_22","type":"book-chapter","created":{"date-parts":[[2024,9,12]],"date-time":"2024-09-12T07:30:40Z","timestamp":1726126240000},"page":"329-343","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Combinations of\u00a0AI Models and\u00a0XAI Metrics Vulnerable to\u00a0Record Reconstruction Risk"],"prefix":"10.1007","author":[{"given":"Ryotaro","family":"Toma","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0903-8430","authenticated-orcid":false,"given":"Hiroaki","family":"Kikuchi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,9,13]]},"reference":[{"issue":"5","key":"22_CR1","doi-asserted-by":"publisher","first-page":"206","DOI":"10.1038\/s42256-019-0048-x","volume":"1","author":"C Rudin","year":"2019","unstructured":"Rudin, C.: Stop explaining black box machine learning models for high stakes decisions and use interpretable models instead. Nat. Mach. Intell. 1(5), 206\u2013215 (2019)","journal-title":"Nat. Mach. Intell."},{"key":"22_CR2","unstructured":"Zest AI Insights. https:\/\/www.zest.ai\/insights\/why-zaml-makes-your-ml-platform-better. Accessed 19 Apr 2024"},{"issue":"3","key":"22_CR3","doi-asserted-by":"publisher","first-page":"551","DOI":"10.3390\/biomedicines10030551","volume":"10","author":"A Sakai","year":"2022","unstructured":"Sakai, A., et al.: Medical professional enhancement using explainable artificial intelligence in fetal cardiac ultrasound screening. Biomedicines 10(3), 551 (2022)","journal-title":"Biomedicines"},{"key":"22_CR4","unstructured":"Chen, J., Song, L., Wainwright, M., Jordan, M.: Learning to explain: an information-theoretic perspective on model interpretation. In: 35th International Conference on Machine Learning, Stockholm, Sweden, pp. 882\u2013891. PMLR (2018)"},{"key":"22_CR5","unstructured":"Amazon SageMaker Documentation. https:\/\/docs.aws.amazon.com\/sagemaker\/latest\/dg\/clarify-model-explainability.html. Accessed 19 Apr 2024"},{"key":"22_CR6","unstructured":"Azure Machine Learning Documentation. https:\/\/learn.microsoft.com\/en-us\/azure\/machine-learning\/how-to-machine-learning-interpretability. Accessed 19 Apr 2024"},{"key":"22_CR7","doi-asserted-by":"crossref","unstructured":"Luo, X., Jiang, Y., Xiao, X.: Feature inference attack on Shapley values. In: 2022 ACM SIGSAC Conference on Computer and Communications Security (CCS 2022), Los Angeles, CA, USA, pp. 2233\u20132247. Association for Computing Machinery (2022)","DOI":"10.1145\/3548606.3560573"},{"key":"22_CR8","doi-asserted-by":"crossref","unstructured":"Ribeiro, M., Singh, S., Guestrin, C.: \u201cWhy should I trust you?\u201d: explaining the predictions of any classifier. In: 22nd ACM SIGKDD International Conference on Knowledge Discovery and Data Mining (KDD 2016), San Francisco, California, USA, pp. 1135\u20131144. Association for Computing Machinery (2016)","DOI":"10.1145\/2939672.2939778"},{"key":"22_CR9","doi-asserted-by":"publisher","unstructured":"Becker, B., Kohavi, R.: Adult. UCI Machine Learning Repository (1996). https:\/\/doi.org\/10.24432\/C5XW20","DOI":"10.24432\/C5XW20"},{"key":"22_CR10","doi-asserted-by":"publisher","first-page":"22","DOI":"10.1016\/j.dss.2014.03.001","volume":"62","author":"S Moro","year":"2014","unstructured":"Moro, S., Cortez, P., Rita, P.: A data-driven approach to predict the success of bank telemarketing. Decis. Support Syst. 62, 22\u201331 (2014)","journal-title":"Decis. Support Syst."},{"issue":"2","key":"22_CR11","doi-asserted-by":"publisher","first-page":"2473","DOI":"10.1016\/j.eswa.2007.12.020","volume":"36","author":"I Yeh","year":"2009","unstructured":"Yeh, I., Lien, C.: The comparisons of data mining techniques for the predictive accuracy of probability of default of credit card clients. Expert Syst. Appl. 36(2), 2473\u20132480 (2009)","journal-title":"Expert Syst. Appl."},{"key":"22_CR12","doi-asserted-by":"crossref","unstructured":"Shapley, L.: 17. A value for n-person games. Contrib. Theory Games (AM-28) II, 307\u2013318 (1953)","DOI":"10.1515\/9781400881970-018"},{"key":"22_CR13","unstructured":"Covert, I., Lundberg, S., Lee, S.: Understanding global feature contributions with additive importance measures. In: 34th International Conference on Neural Information Processing Systems (NIPS 2020), Vancouver, BC, Canada, pp. 17212\u201317223. Curran Associates Inc. (2020)"},{"issue":"177","key":"22_CR14","first-page":"1","volume":"20","author":"A Fisher","year":"2019","unstructured":"Fisher, A., Rudin, C., Dominici, F.: All models are wrong, but many are useful: learning a variable\u2019s importance by studying an entire class of prediction models simultaneously. J. Mach. Learn. Res. 20(177), 1\u201381 (2019)","journal-title":"J. Mach. Learn. Res."},{"key":"22_CR15","unstructured":"Lundberg, S., Lee, S.: A unified approach to interpreting model predictions. In: 31st International Conference on Neural Information Processing Systems (NIPS 2017), Long Beach, California, USA, pp. 4768\u20134777. Curran Associates Inc. (2017)"},{"key":"22_CR16","doi-asserted-by":"publisher","first-page":"647","DOI":"10.1007\/s10115-013-0679-x","volume":"41","author":"E \u0160trumbelj","year":"2016","unstructured":"\u0160trumbelj, E., Kononenko, I.: Explaining prediction models and individual predictions with feature contributions. Knowl. Inf. Syst. 41, 647\u2013665 (2016). https:\/\/doi.org\/10.1007\/s10115-013-0679-x","journal-title":"Knowl. Inf. Syst."},{"key":"22_CR17","doi-asserted-by":"crossref","unstructured":"Ribeiro, M., Singh, S., Guestrin, C.: Anchors: high-precision model-agnostic explanations. In: Thirty-Second AAAI Conference on Artificial Intelligence and Thirtieth Innovative Applications of Artificial Intelligence Conference and Eighth AAAI Symposium on Educational Advances in Artificial Intelligence (AAAI 2018\/IAAI 2018\/EAAI 2018), New Orleans, Louisiana, USA, pp. 1527\u20131535. AAAI Press (2018)","DOI":"10.1609\/aaai.v32i1.11491"},{"key":"22_CR18","unstructured":"Introduction to Vertex Explainable AI. https:\/\/cloud.google.com\/vertex-ai\/docs\/explainable-ai\/overview. Accessed 19 Apr 2024"},{"key":"22_CR19","doi-asserted-by":"publisher","first-page":"4924","DOI":"10.1109\/TIFS.2021.3117075","volume":"16","author":"A Kuppa","year":"2021","unstructured":"Kuppa, A., Le-Khac, N.: Adversarial XAI methods in cybersecurity. IEEE Trans. Inf. Forensics Secur. 16, 4924\u20134938 (2021)","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"22_CR20","doi-asserted-by":"crossref","unstructured":"Shokri, R., Strobel, M., Zick, Y.: On the privacy risks of model explanations. In: 2021 AAAI\/ACM Conference on AI. Ethics, and Society (AIES 2021), pp. 231\u2013241. Association for Computing Machinery, Virtual Event, USA (2021)","DOI":"10.1145\/3461702.3462533"},{"key":"22_CR21","doi-asserted-by":"crossref","unstructured":"Liu, H., Wu, Y., Yu, Z., Zhang, N.: Please tell me more: privacy impact of explainability through the lens of membership inference attack. In: 2024 IEEE Symposium on Security and Privacy (SP), San Francisco, CA, USA, pp. 119\u2013138. IEEE Computer Society (2024)","DOI":"10.1109\/SP54263.2024.00120"},{"issue":"11","key":"22_CR22","doi-asserted-by":"publisher","first-page":"9936","DOI":"10.1002\/int.23022","volume":"37","author":"A Yan","year":"2022","unstructured":"Yan, A., Hou, R., Liu, X., Yan, H., Huang, T., Wang, X.: Towards explainable model extraction attacks. Int. J. Intell. Syst. 37(11), 9936\u20139956 (2022)","journal-title":"Int. J. Intell. Syst."},{"key":"22_CR23","doi-asserted-by":"crossref","unstructured":"Yan, A., Huang, T., Ke, L., Liu, X., Chen, Q., Dong, C.: Explanation leaks: explanation-guided model extraction attacks. Inf. Sci. Int. J. 632(C), 269\u2013284 (2023)","DOI":"10.1016\/j.ins.2023.03.020"},{"key":"22_CR24","doi-asserted-by":"crossref","unstructured":"Fredrikson, M., Jha, S., Ristenpart, T.: Model inversion attacks that exploit confidence information and basic countermeasures. In: 22nd ACM SIGSAC Conference on Computer and Communications Security (CCS 2015), Denver, Colorado, USA, pp. 1322\u20131333. Association for Computing Machinery (2015)","DOI":"10.1145\/2810103.2813677"},{"key":"22_CR25","doi-asserted-by":"publisher","DOI":"10.1016\/j.inffus.2024.102303","volume":"107","author":"H Baniecki","year":"2024","unstructured":"Baniecki, H., Biecek, P.: Adversarial attacks and defenses in explainable artificial intelligence: a survey. Inf. Fusion 107, 102303 (2024)","journal-title":"Inf. Fusion"},{"key":"22_CR26","doi-asserted-by":"crossref","unstructured":"Patel, N., Shokri, R., Zick, Y.: Model explanations with differential privacy. In: 2022 ACM Conference on Fairness. Accountability, and Transparency (FAccT 2022), Seoul, Republic of Korea, pp. 1895\u20131904. Association for Computing Machinery (2022)","DOI":"10.1145\/3531146.3533235"},{"key":"22_CR27","doi-asserted-by":"crossref","unstructured":"Nguyen, T., Lai, P., Phan, H., Thai, M.: XRand: differentially private defense against explanation-guided attacks. In: Proceedings of the AAAI Conference on Artificial Intelligence, vol. 37, no. 10, pp. 11873\u201311881 (2023)","DOI":"10.1609\/aaai.v37i10.26401"},{"issue":"6","key":"22_CR28","doi-asserted-by":"publisher","first-page":"125","DOI":"10.3390\/technologies10060125","volume":"10","author":"A Bozorgpanah","year":"2022","unstructured":"Bozorgpanah, A., Torra, V., Aliahmadipour, L.: Privacy and explainability: the effects of data protection on Shapley values. Technologies 10(6), 125 (2022)","journal-title":"Technologies"},{"key":"22_CR29","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"271","DOI":"10.1007\/978-3-030-57521-2_19","volume-title":"Privacy in Statistical Databases","author":"N Shlomo","year":"2020","unstructured":"Shlomo, N.: Integrating differential privacy in the statistical disclosure control tool-kit for synthetic data production. In: Domingo-Ferrer, J., Muralidhar, K. (eds.) PSD 2020. LNCS, vol. 12276, pp. 271\u2013280. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-57521-2_19"},{"issue":"8","key":"22_CR30","doi-asserted-by":"publisher","first-page":"1200","DOI":"10.1109\/TKDE.2010.247","volume":"23","author":"G Wang","year":"2011","unstructured":"Wang, G., Gehrke, J., Xiao, X.: Differential privacy via wavelet transforms. IEEE Trans. Knowl. Data Eng. 23(8), 1200\u20131214 (2011)","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"22_CR31","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"337","DOI":"10.1007\/978-3-030-57521-2_24","volume-title":"Privacy in Statistical Databases","author":"S Ito","year":"2020","unstructured":"Ito, S., Miura, T., Akatsuka, H., Terada, M.: Differential privacy and its applicability for official statistics in japan \u2013 a comparative study using small area data from the Japanese population census. In: Domingo-Ferrer, J., Muralidhar, K. (eds.) PSD 2020. LNCS, vol. 12276, pp. 337\u2013352. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-57521-2_24"},{"key":"22_CR32","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"283","DOI":"10.1007\/978-3-031-13945-1_20","volume-title":"PSD 2022","author":"M Slokom","year":"2022","unstructured":"Slokom, M., Wolf, P., Larson, M.: When machine learning models leak: an exploration of synthetic training data. In: Domingo-Ferrer, J., Laurent, M. (eds.) PSD 2022. LNCS, vol. 13463, pp. 283\u2013296. Springer, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-031-13945-1_20"},{"key":"22_CR33","series-title":"Lecture Notes in Computer Science (Lecture Notes in Artificial Intelligence)","doi-asserted-by":"publisher","first-page":"422","DOI":"10.1007\/978-3-030-59491-6_40","volume-title":"Foundations of Intelligent Systems","author":"J Tritscher","year":"2020","unstructured":"Tritscher, J., Ring, M., Schlr, D., Hettinger, L., Hotho, A.: Evaluation of post-hoc XAI approaches through synthetic tabular data. In: Helic, D., Leitner, G., Stettinger, M., Felfernig, A., Ra\u015b, Z.W. (eds.) ISMIS 2020. LNCS (LNAI), vol. 12117, pp. 422\u2013430. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-59491-6_40"},{"key":"22_CR34","unstructured":"Paszke, A., et al.: PyTorch: an imperative style, high-performance deep learning library. In: 33rd International Conference on Neural Information Processing Systems (NeurIPS 2019), Vancouver, Canada, pp. 8026\u20138037. Curran Associates Inc. (2019)"},{"key":"22_CR35","doi-asserted-by":"crossref","unstructured":"Bottou, L.: On-line learning and stochastic approximations. On-Line Learn. Neural Netw. 9\u201342 (1999)","DOI":"10.1017\/CBO9780511569920.003"},{"key":"22_CR36","unstructured":"Sutskever, I., Martens, J., Dahl, G., Hinton, G.: On the importance of initialization and momentum in deep learning. In: 30th International Conference on Machine Learning (ICML 2013), Atlanta, GA, USA, pp. 1139\u20131147. JMLR.org (2013)"},{"key":"22_CR37","unstructured":"Hinton, G.: Coursera Neural Networks for Machine Learning Lecture 6. https:\/\/www.cs.toronto.edu\/~tijmen\/csc321\/slides\/lecture_slides_lec6.pdf. Accessed 19 Apr 2024"},{"key":"22_CR38","unstructured":"Kingma, D., Ba, J.: Adam: a method for stochastic optimization. In: International Conference on Learning Representations (ICLR) (2015)"}],"container-title":["Lecture Notes in Computer Science","Privacy in Statistical Databases"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-69651-0_22","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,12]],"date-time":"2024-09-12T07:34:34Z","timestamp":1726126474000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-69651-0_22"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"ISBN":["9783031696503","9783031696510"],"references-count":38,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-69651-0_22","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2024]]},"assertion":[{"value":"13 September 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"PSD","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Privacy in Statistical Databases","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Antibes Juan-les-Pins","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"France","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2024","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"25 September 2024","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"27 September 2024","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"psd2024","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/crises-deim.urv.cat\/psd2024\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}