{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,13]],"date-time":"2026-06-13T05:45:49Z","timestamp":1781329549442,"version":"3.54.1"},"publisher-location":"Cham","reference-count":58,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031708787","type":"print"},{"value":"9783031708794","type":"electronic"}],"license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024]]},"DOI":"10.1007\/978-3-031-70879-4_1","type":"book-chapter","created":{"date-parts":[[2024,9,4]],"date-time":"2024-09-04T19:02:20Z","timestamp":1725476540000},"page":"3-23","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":6,"title":["Attesting Distributional Properties of\u00a0Training Data for\u00a0Machine Learning"],"prefix":"10.1007","author":[{"given":"Vasisht","family":"Duddu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Anudeep","family":"Das","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nora","family":"Khayata","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hossein","family":"Yalame","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Thomas","family":"Schneider","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"N.","family":"Asokan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2024,9,5]]},"reference":[{"key":"1_CR1","doi-asserted-by":"crossref","unstructured":"Atapoor, S., Smart, N.P., Alaoui, Y.T.: Private Liquidity Matching Using MPC. In: CT-RSA (2022)","DOI":"10.1007\/978-3-030-95312-6_5"},{"key":"1_CR2","volume-title":"Hacking smart machines with smarter ones: How to extract meaningful data from machine learning classifiers","author":"G Ateniese","year":"2015","unstructured":"Ateniese, G., Mancini, L.V., Spognardi, A., Villani, A., Vitali, D., Felici, G.: Hacking smart machines with smarter ones: How to extract meaningful data from machine learning classifiers. Int. J. Secur, Netw (2015)"},{"key":"1_CR3","unstructured":"Canonne, C.L.: A survey on distribution testing: Your data is big. but is it blue? Theory of Computing (2020)"},{"key":"1_CR4","doi-asserted-by":"crossref","unstructured":"Carter, H., Mood, B., Traynor, P., Butler, K.R.B.: Outsourcing secure two-party computation as a black box. In: Secur. Commun. Networks (2015)","DOI":"10.1007\/978-3-319-26823-1_15"},{"key":"1_CR5","unstructured":"Chang, I., Sotiraki, K., Chen, W., Kantarcioglu, M., Popa, R.: HOLMES: efficient distribution testing for secure collaborative learning. In: USENIX Security (2023)"},{"key":"1_CR6","doi-asserted-by":"crossref","unstructured":"Chase, M., Ghosh, E., Mahloujifar, S.: Property inference from poisoning. arXiv:2101.11073 (2021)","DOI":"10.1109\/SP46214.2022.9833623"},{"key":"1_CR7","doi-asserted-by":"crossref","unstructured":"Chaudhari, H., Abascal, J., Oprea, A., Jagielski, M., Tram\u00e8r, F., Ullman, J.: SNAP: efficient extraction of private properties with poisoning. In: S &P (2023)","DOI":"10.1109\/SP46215.2023.10179334"},{"key":"1_CR8","unstructured":"Chen, M., Ohrimenko, O.: Protecting global properties of datasets with distribution privacy mechanisms. arXiv:2207.08367 (2022)"},{"key":"1_CR9","unstructured":"Congress, U.: H.r.6580 - algorithmic accountability act of 2022 (2022). https:\/\/www.congress.gov\/bill\/117th-congress\/house-bill\/6580\/text"},{"key":"1_CR10","doi-asserted-by":"crossref","unstructured":"Coston, A., Kawakami, A., Zhu, H., Holstein, K., Heidari, H.: A validity perspective on evaluating the justified use of data-driven decision-making algorithms. In: SaTML (2023)","DOI":"10.1109\/SaTML54575.2023.00050"},{"key":"1_CR11","unstructured":"Croce, F., Hein, M.: Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks. In: ICML (2020)"},{"key":"1_CR12","doi-asserted-by":"crossref","unstructured":"Duddu, V., Das, A., Khayata, N., Yalame, H., Schneider, T., Asokan, N.: Attesting distributional properties of training data for machine learning (full version). arXiv:2308.09552 (2023)","DOI":"10.1007\/978-3-031-70879-4_1"},{"key":"1_CR13","unstructured":"EC, E.C.: Regulation of the european parliament and of the council laying down harmonized rules on artificial intelligence (artificial intelligence act) (2021)"},{"key":"1_CR14","unstructured":"Eisenhofer, T., Riepel, D., Chandrasekaran, V., Ghosh, E., Ohrimenko, O., Papernot, N.: Verifiable and provably secure machine unlearning. arXiv:2210.09126 (2022)"},{"key":"1_CR15","unstructured":"Englehardt, S.: Next steps in privacy-preserving telemetry with Prio. https:\/\/blog.mozilla.org\/security\/2019\/06\/06\/next-steps-in-privacy-preserving-telemetry-with-prio\/ (2019)"},{"key":"1_CR16","doi-asserted-by":"crossref","unstructured":"Fang, C., et al.: Proof-of-learning is currently more broken than you think. arXiv:2208.03567 (2023)","DOI":"10.1109\/EuroSP57164.2023.00052"},{"key":"1_CR17","doi-asserted-by":"crossref","unstructured":"Ganju, K., Wang, Q., Yang, W., Gunter, C.A., Borisov, N.: Property inference attacks on fully connected neural networks using permutation invariant representations. In: CCS (2018)","DOI":"10.1145\/3243734.3243834"},{"key":"1_CR18","doi-asserted-by":"crossref","unstructured":"Garg, S., et al.: Experimenting with zero-knowledge proofs of training. In: CCS (2023)","DOI":"10.1145\/3576915.3623202"},{"key":"1_CR19","doi-asserted-by":"crossref","unstructured":"Goldreich, O., Micali, S., Wigderson, A.: How to play any mental game. In: STOC (1987)","DOI":"10.1145\/28395.28420"},{"key":"1_CR20","doi-asserted-by":"crossref","unstructured":"Hartmann, V., Meynent, L., Peyrard, M., Dimitriadis, D., Tople, S., West, R.: Distribution inference risks: Identifying and mitigating sources of leakage. arXiv:2209.08541 (2022)","DOI":"10.1109\/SaTML54575.2023.00018"},{"key":"1_CR21","doi-asserted-by":"crossref","unstructured":"Huang, G., Liu, Z., Van Der\u00a0Maaten, L., Weinberger, K.Q.: Densely connected convolutional networks. In: Computer Vision and Pattern Recognition (2017)","DOI":"10.1109\/CVPR.2017.243"},{"key":"1_CR22","doi-asserted-by":"crossref","unstructured":"Huang, Y., Li, X., Li, K.: Ema: auditing data removal from trained models. In: Medical Image Computing and Computer Assisted Intervention (2021)","DOI":"10.1007\/978-3-030-87240-3_76"},{"key":"1_CR23","doi-asserted-by":"crossref","unstructured":"Jia, H., et al.: Proof-of-learning: definitions and practice. In: S &P (2021)","DOI":"10.1109\/SP40001.2021.00106"},{"key":"1_CR24","unstructured":"Juarez, M., Yeom, S., Fredrikson, M.: Black-box audits for group distribution shifts. arXiv:2209.03620 (2022)"},{"key":"1_CR25","doi-asserted-by":"crossref","unstructured":"Kamiran, F., Calders, T.: Data pre-processing techniques for classification without discrimination. Knowledge and Information Systems (2011)","DOI":"10.1007\/s10115-011-0463-8"},{"key":"1_CR26","unstructured":"Kaviani, D., Popa, R.A.: MPC Deployments. https:\/\/mpc.cs.berkeley.edu (2023)"},{"key":"1_CR27","doi-asserted-by":"crossref","unstructured":"Kawamoto, Y., Murakami, T.: Local obfuscation mechanisms for hiding probability distributions. In: ESORICS (2019)","DOI":"10.1007\/978-3-030-29959-0_7"},{"key":"1_CR28","doi-asserted-by":"crossref","unstructured":"Keller, M.: MP-SPDZ: a versatile framework for multi-party computation. In: CCS (2020)","DOI":"10.1145\/3372297.3417872"},{"key":"1_CR29","unstructured":"Keller, M., Sun, K.: Secure quantized training for deep learning. In: ICML (2022)"},{"key":"1_CR30","unstructured":"Kilbertus, N., Gascon, A., Kusner, M., Veale, M., Gummadi, K., Weller, A.: Blind justice: Fairness with encrypted sensitive attributes. In: ICML (2018)"},{"key":"1_CR31","unstructured":"Knott, B., et\u00a0al.: CrypTen: Secure multi-party computation meets machine learning. In: NeurIPS (2021)"},{"key":"1_CR32","doi-asserted-by":"crossref","unstructured":"Kostiainen, K., Asokan, N., Ekberg, J.: Practical property-based attestation on mobile devices. In: TRUST (2011)","DOI":"10.1007\/978-3-642-21599-5_6"},{"key":"1_CR33","doi-asserted-by":"crossref","unstructured":"Lindell, Y.: Secure multiparty computation. In: CACM (2020)","DOI":"10.1145\/3387108"},{"key":"1_CR34","doi-asserted-by":"crossref","unstructured":"Liu, X., Tsaftaris, S.A.: Have you forgotten? a method to assess if machine learning models have forgotten data. arXiv:2004.10129 (2020)","DOI":"10.1007\/978-3-030-59710-8_10"},{"key":"1_CR35","doi-asserted-by":"crossref","unstructured":"Melis, L., Song, C., Cristofaro, E.D., Shmatikov, V.: Exploiting unintended feature leakage in collaborative learning. In: S &P (2019)","DOI":"10.1109\/SP.2019.00029"},{"key":"1_CR36","doi-asserted-by":"crossref","unstructured":"Miao, Y., et al.: The audio auditor: User-level membership inference in internet of things voice services. In: PETS (2021)","DOI":"10.2478\/popets-2021-0012"},{"key":"1_CR37","unstructured":"Mohassel, P., Rindal, P.: ABY$$ ^{\\text{3}}$$: A mixed protocol framework for machine learning. In: CCS (2018)"},{"key":"1_CR38","doi-asserted-by":"crossref","unstructured":"Mohassel, P., Zhang, Y.: SecureML: a system for scalable privacy-preserving machine learning. In: S &P (2017)","DOI":"10.1109\/SP.2017.12"},{"key":"1_CR39","unstructured":"MPC-Alliance: MPC Alliance. https:\/\/www.mpcalliance.org (2023)"},{"key":"1_CR40","doi-asserted-by":"crossref","unstructured":"Ng, L.L., Chow, S.M.: SoK: Cryptographic neural-network computation. In: S &P (2023)","DOI":"10.1109\/SP46215.2023.10179483"},{"key":"1_CR41","doi-asserted-by":"crossref","unstructured":"Papernot, N., McDaniel, P., Sinha, A., Wellman, M.P.: SoK: Security and privacy in machine learning. In: EuroS &P (2018)","DOI":"10.1109\/EuroSP.2018.00035"},{"key":"1_CR42","doi-asserted-by":"crossref","unstructured":"Park, S., Kim, S., Lim, Y.s.: Fairness audit of machine learning models with confidential computing. In: WWW (2022)","DOI":"10.1145\/3485447.3512244"},{"key":"1_CR43","doi-asserted-by":"crossref","unstructured":"Pasquini, D., Ateniese, G., Bernaschi, M.: Unleashing the tiger: Inference attacks on split learning. In: CCS (2021)","DOI":"10.1145\/3460120.3485259"},{"key":"1_CR44","unstructured":"Patra, A., Schneider, T., Suresh, A., Yalame, H.: ABY2.0: improved mixed-protocol secure two-party computation. In: USENIX Security (2021)"},{"key":"1_CR45","doi-asserted-by":"crossref","unstructured":"Riazi, M.S., Weinert, C., Tkachenko, O., Songhori, E.M., Schneider, T., Koushanfar, F.: Chameleon: A hybrid secure computation framework for machine learning applications. In: ASIACCS (2018)","DOI":"10.1145\/3196494.3196522"},{"key":"1_CR46","unstructured":"Sadeghi, A.R., St\u00fcble, C.: Property-based attestation for computing platforms: caring about properties, not mechanisms. In: Workshop on New Security Paradigms (2004)"},{"key":"1_CR47","doi-asserted-by":"crossref","unstructured":"Segal, S., Adi, Y., Pinkas, B., Baum, C., Ganesh, C., Keshet, J.: Fairness in the eyes of the data: Certifying machine-learning models. In: AIES (2021)","DOI":"10.1145\/3461702.3462554"},{"key":"1_CR48","unstructured":"Shamsabadi, A.S., et al.: Confidential-PROFITT: confidential proof of fair training of trees. In: International Conference on Learning Representations (2023)"},{"key":"1_CR49","doi-asserted-by":"crossref","unstructured":"Song, C., Shmatikov, V.: Auditing data provenance in text-generation models. In: KDD (2019)","DOI":"10.1145\/3292500.3330885"},{"key":"1_CR50","doi-asserted-by":"crossref","unstructured":"Suri, A., Evans, D.: Formalizing and estimating distribution inference risks. In: PETS (2022)","DOI":"10.56553\/popets-2022-0121"},{"key":"1_CR51","doi-asserted-by":"crossref","unstructured":"Suri, A., Lu, Y., Chen, Y., Evans, D.: Dissecting distribution inference. In: SaTML (2023)","DOI":"10.1109\/SaTML54575.2023.00019"},{"key":"1_CR52","unstructured":"Weng, C., Yang, K., Xie, X., Katz, J., Wang, X.: Mystique: efficient conversions for zero-knowledge proofs with applications to machine learning. In: USENIX Security (2021)"},{"key":"1_CR53","unstructured":"Zaheer, M., Kottur, S., Ravanbakhsh, S., Poczos, B., Salakhutdinov, R.R., Smola, A.J.: Deep sets. In: NeurIPS (2017)"},{"key":"1_CR54","doi-asserted-by":"crossref","unstructured":"Zhang, R., Liu, J., Ding, Y., Wang, Z., Wu, Q., Ren, K.: \u201cadversarial examples\u201d for proof-of-learning. In: S &P (2022)","DOI":"10.1109\/SP46214.2022.9833596"},{"key":"1_CR55","unstructured":"Zhang, W., Tople, S., Ohrimenko, O.: Leakage of dataset properties in Multi-Party machine learning. In: USENIX Security (2021)"},{"key":"1_CR56","doi-asserted-by":"crossref","unstructured":"Zhang, Z., Chen, M., Backes, M., Shen, Y., Zhang, Y.: Inference attacks against graph neural networks. In: USENIX Security (2022)","DOI":"10.1145\/3548606.3560662"},{"key":"1_CR57","unstructured":"Zheng, W., Deng, R., Chen, W., Popa, R.A., Panda, A., Stoica, I.: Cerebro: a platform for multi-party cryptographic collaborative learning. In: USENIX Security (2021)"},{"key":"1_CR58","doi-asserted-by":"crossref","unstructured":"Zhou, J., Chen, Y., Shen, C., Zhang, Y.: Property inference attacks against GANs. arXiv:2111.07608 (2021)","DOI":"10.14722\/ndss.2022.23019"}],"container-title":["Lecture Notes in Computer Science","Computer Security \u2013 ESORICS 2024"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-70879-4_1","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,11,27]],"date-time":"2024-11-27T19:43:44Z","timestamp":1732736624000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-70879-4_1"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"ISBN":["9783031708787","9783031708794"],"references-count":58,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-70879-4_1","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024]]},"assertion":[{"value":"5 September 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Bydgoszcz","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Poland","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2024","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"16 September 2024","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"20 September 2024","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"29","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2024","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/esorics2024.org","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}