{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,17]],"date-time":"2026-06-17T22:42:23Z","timestamp":1781736143082,"version":"3.54.5"},"publisher-location":"Cham","reference-count":79,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032078834","type":"print"},{"value":"9783032078841","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,10,13]],"date-time":"2025-10-13T00:00:00Z","timestamp":1760313600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,10,13]],"date-time":"2025-10-13T00:00:00Z","timestamp":1760313600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-07884-1_24","type":"book-chapter","created":{"date-parts":[[2025,10,12]],"date-time":"2025-10-12T16:22:31Z","timestamp":1760286151000},"page":"469-487","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["The DCR Delusion: Measuring the\u00a0Privacy Risk of\u00a0Synthetic Data"],"prefix":"10.1007","author":[{"given":"Zexi","family":"Yao","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nata\u0161a","family":"Kr\u010do","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Georgi","family":"Ganev","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yves-Alexandre","family":"de Montjoye","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,10,13]]},"reference":[{"key":"24_CR1","doi-asserted-by":"crossref","unstructured":"Abay, N.C., Zhou, Y., Kantarcioglu, M., Thuraisingham, B., Sweeney, L.: Privacy preserving synthetic data release using deep learning. In: ECML PKDD (2019)","DOI":"10.1007\/978-3-030-10925-7_31"},{"key":"24_CR2","doi-asserted-by":"crossref","unstructured":"Acs, G., Melis, L., Castelluccia, C., De Cristofaro, E.: Differentially private mixture of generative neural networks. IEEE TKDE (2018)","DOI":"10.1109\/ICDM.2017.81"},{"key":"24_CR3","unstructured":"Alan Turing Institute. Reprosyn (2022). https:\/\/github.com\/alan-turinginstitute\/ reprosyn"},{"key":"24_CR4","unstructured":"Amazon AWS. How to Evaluate the Quality of the Synthetic Data \u2013 Measuring from the Perspective of Fidelity, Utility, and Privacy (2022)"},{"key":"24_CR5","unstructured":"Annamalai, M.S.M.S., Gadotti, A., Rocher, L.: A linear reconstruction approach for attribute inference attacks against synthetic data. In: USENIX Security (2024)"},{"key":"24_CR6","unstructured":"Annamalai, M.S.M.S., Ganev, G., De Cristofaro, E.: \u201cWhat do you want from theory alone?\u201d experimenting with tight auditing of differentially private synthetic data generation. In: USENIX Security (2024)"},{"key":"24_CR7","unstructured":"Becker, B., Kohavi, R.: Adult. UCI Machine Learning Repository (1996)"},{"key":"24_CR8","unstructured":"Berka, P., et al.: Guide to the financial data set. PKDD2000 discovery challenge (2000)"},{"key":"24_CR9","unstructured":"Borisov, V., Sessler, K., Leemann, T., Pawelczyk, M., Kasneci, G.: Language models are realistic tabular data generators. In: ICLR (2023)"},{"key":"24_CR10","unstructured":"Boudewijn, A.T.P., et al.: Privacy measurement in tabular synthetic data: state of the art and future research directions. In: NeurIPS SyntheticData4ML (2023)"},{"key":"24_CR11","doi-asserted-by":"crossref","unstructured":"Carlini, N., Chien, S., Nasr, M., Song, S., Terzis, A., Tram\u00e8r, F.: Membership inference attacks from first principles. In: IEEE S &P (2022)","DOI":"10.1109\/SP46214.2022.9833649"},{"key":"24_CR12","unstructured":"Carlini, N., et al.: Extracting training data from diffusion models. In: USENIX Security (2023)"},{"key":"24_CR13","unstructured":"Ceritli, T., Ghosheh, G.O., Chauhan, V.K., Zhu, T., Creagh, A.P., Clifton, D.A.: Synthesizing Mixed-type Electronic Health Records using Diffusion Models. arXiv:2302.14679 (2023)"},{"key":"24_CR14","doi-asserted-by":"crossref","unstructured":"Chen, D., Yu, N., Zhang, Y., Fritz, M.: GAN-Leaks: a taxonomy of membership inference attacks against generative models. In: ACM CCS (2020)","DOI":"10.1145\/3372297.3417238"},{"key":"24_CR15","doi-asserted-by":"crossref","unstructured":"D\u2019Amico, S., Dall\u2019Olio, D., Sala, C., et al.: Synthetic Data Generation by Artificial Intelligence to Accelerate Research and Precision Medicine in Hematology. JCO Clinical Cancer Informatics (2023)","DOI":"10.1200\/CCI.23.00021"},{"key":"24_CR16","doi-asserted-by":"crossref","unstructured":"De Cristofaro, E.: Synthetic Data: Methods, Use Cases, and Risks. IEEE S &P Magazine (2024)","DOI":"10.1109\/MSEC.2024.3371505"},{"key":"24_CR17","unstructured":"Du, Y., Li, N.: Systematic Assessment of Tabular Data Synthesis Algorithms. arXiv:2402.06806 (2024)"},{"key":"24_CR18","unstructured":"Duan, J., Kong, F., Wang, S., Shi, X., Xu, K.: Are diffusion models vulnerable to membership inference attacks?. In: ICLR (2023)"},{"key":"24_CR19","unstructured":"Ganev, G., Annamalai, M.S.M.S., De Cristofaro, E.: The Elusive Pursuit of Reproducing PATE-GAN: Benchmarking, Auditing, Debugging. TMLR (2025)"},{"key":"24_CR20","doi-asserted-by":"crossref","unstructured":"Ganev, G., De Cristofaro, E.: The Inadequacy of Similaritybased Privacy Metrics: Privacy Attacks against \u201cTruly Anonymous\u201d Synthetic Datasets. In: IEEE S &P (2025)","DOI":"10.1109\/SP61157.2025.00218"},{"key":"24_CR21","doi-asserted-by":"crossref","unstructured":"Golob, S., Pentyala, S., Maratkhan, A., De Cock, M.: Privacy Vulnerabilities in Marginals-based Synthetic Data. In: SaTML (2025)","DOI":"10.1109\/SaTML64287.2025.00059"},{"key":"24_CR22","unstructured":"Gu\u00e9pin, F., Kr\u010do, N., Meeus, M., de Montjoye, Y.-A.: Lost in the averages: A new specific setup to evaluate membership inference attacks against machine learning models. arXiv:2405.15423 (2024)"},{"key":"24_CR23","doi-asserted-by":"crossref","unstructured":"Gu\u00e9pin, F., Meeus, M., Cretu, A.-M., de Montjoye, Y.-A.: Synthetic is all you need: removing the auxiliary data assumption for membership inference attacks against synthetic data. In: ESORICS (2023)","DOI":"10.1007\/978-3-031-54204-6_10"},{"key":"24_CR24","doi-asserted-by":"crossref","unstructured":"Guillaudeux, M., et al.: Patient-centric synthetic data generation, no reason to risk re-identification in biomedical data analysis. NPJ Digital Medicine (2023)","DOI":"10.21203\/rs.3.rs-1674043\/v1"},{"key":"24_CR25","doi-asserted-by":"crossref","unstructured":"Hayes, J., Melis, L., Danezis, G., De Cristofaro, E.: LOGAN: membership inference attacks against generative models. In: PoPETs (2019)","DOI":"10.2478\/popets-2019-0008"},{"key":"24_CR26","doi-asserted-by":"crossref","unstructured":"Hilprecht, B., H\u00e4rterich, M., Bernau, D.: Monte Carlo and reconstruction membership inference attacks against generative models. In: PoPETs (2019)","DOI":"10.2478\/popets-2019-0067"},{"key":"24_CR27","unstructured":"Houssiau, F., et al.: TAPAS: a toolbox for adversarial privacy auditing of synthetic data. In: NeurIPS SyntheticData4ML (2022)"},{"key":"24_CR28","unstructured":"Yuzheng, H., et al.: SoK: privacy-preserving data synthesis. In: IEEE S &P (2024)"},{"key":"24_CR29","unstructured":"Jordon, J., et al.: Synthetic Data\u2013what, why and how? arXiv:2205.03257 (2022)"},{"key":"24_CR30","unstructured":"Jordon, J., Yoon, J., Der Schaar, M.V.: PATE-GAN, Generating synthetic data with differential privacy guarantees. In: ICLR (2018)"},{"key":"24_CR31","doi-asserted-by":"crossref","unstructured":"Kaabachi, B., et al.: A scoping review of privacy and utility metrics in medical synthetic data. NPJ Digital Medicine (2025)","DOI":"10.1038\/s41746-024-01359-3"},{"key":"24_CR32","doi-asserted-by":"crossref","unstructured":"Kiran, A., Rubini, P., Saravana Kumar, S.: Comprehensive Review of Privacy, Utility, and Fairness Offered by Synthetic Data. IEEE Access (2025)","DOI":"10.1109\/ACCESS.2025.3532128"},{"key":"24_CR33","unstructured":"Kong, F., et al.: An efficient membership inference attack for the diffusion model by proximal initialization. arXiv:2305.18355 (2023)"},{"key":"24_CR34","unstructured":"Kotelnikov, A., Baranchuk, D., Rubachev, I., Babenko, A.: TabDDPM, Modelling Tabular Data with Diffusion Models. In: ICML (2023)"},{"key":"24_CR35","doi-asserted-by":"crossref","unstructured":"Liu, T., Fan, J., Li, G., Tang, N., Du, X.: Tabular Data Synthesis with Generative Adversarial Networks: Design Space and Optimizations. VLDBJ (2023)","DOI":"10.1007\/s00778-023-00807-y"},{"key":"24_CR36","unstructured":"Liu, T., Vietri, G., Wu, S.Z.: Iterative methods for private synthetic data: Unifying framework and new methods. NeurIPS (2021)"},{"key":"24_CR37","doi-asserted-by":"crossref","unstructured":"Lu, P.-H., Wang, P.-C., Yu, C.-M.: Empirical evaluation on synthetic data generation with generative adversarial network. In: WIMS (2019)","DOI":"10.1145\/3326467.3326474"},{"key":"24_CR38","doi-asserted-by":"crossref","unstructured":"McKenna, R., Miklau, G., Sheldon, D.: Winning the NIST contest: a scalable and general approach to differentially private synthetic data. JPC (2021)","DOI":"10.29012\/jpc.778"},{"key":"24_CR39","unstructured":"McKenna, R., Mullins, B., Sheldon, D., Miklau, G.: AIM: An adaptive and iterative mechanism for differentially private synthetic data. PVLDB (2022)"},{"key":"24_CR40","doi-asserted-by":"crossref","unstructured":"Meeus, M., Guepin, F., Cre\u0163u, A.-M., de Montjoye, Y.-A.: Achilles\u2019 heels: vulnerable record identification in synthetic data publishing. In: ESORICS (2023)","DOI":"10.1007\/978-3-031-51476-0_19"},{"key":"24_CR41","unstructured":"Mendelevitch, O., Lesh, M.D.: Fidelity and privacy of synthetic medical data. arXiv:2101.08658 (2021)"},{"key":"24_CR42","unstructured":"Rita-P. Moro, S., Cortez, P.: Bank Marketing. UCI Machine Learning Repository (2014)"},{"key":"24_CR43","unstructured":"Mostly AI. Truly anonymous synthetic data \u2013 evolving legal definitions and technologies (part II) (2020)"},{"key":"24_CR44","unstructured":"Mueller, M., Gruber, K., Fok, D.: Continuous diffusion for mixed-type tabular data. In: ICLR (2025)"},{"key":"24_CR45","unstructured":"Redman, M., et al.: Resolving individuals contributing trace amounts of DNA to highly complex mixtures using high-density SNP genotyping microarrays. PLoS Genet (2008)"},{"key":"24_CR46","unstructured":"Office for National Statistics. Census Microdata Teaching Files (2011)"},{"key":"24_CR47","doi-asserted-by":"crossref","unstructured":"Osorio-Marulanda, P.A., Epelde, G., Hernandez, M., Isasa, I., Reyes, N.M., Iraola, A.B.: Privacy mechanisms and evaluation metrics for synthetic data generation: a systematic review. IEEE Access (2024)","DOI":"10.1109\/ACCESS.2024.3417608"},{"key":"24_CR48","volume-title":"Generating Privacy-compliant","author":"D Panfilo","year":"2022","unstructured":"Panfilo, D.: Generating Privacy-compliant. University of Trieste, Utility-preserving Synthetic Tabular and Relational Datasets through Deep Learning (2022)"},{"key":"24_CR49","doi-asserted-by":"crossref","unstructured":"Panfilo, D., Boudewijn, A., Saccani, S., et al.: A deep learning-based pipeline for the generation of synthetic tabular data. IEEE Access (2023)","DOI":"10.1109\/ACCESS.2023.3288336"},{"key":"24_CR50","unstructured":"Pang, W., Shafieinejad, M., Liu, L., Hazlewood, S., He, X.: ClavaDDPM: multi-relational data synthesis with cluster-guided diffusion models. In: NeurIPS (2024)"},{"key":"24_CR51","doi-asserted-by":"crossref","unstructured":"Park, N., Mohammadi, M., Gorde, K., Jajodia, S., Park, H., Kim, Y.: Data synthesis based on generative adversarial networks. PVLDB (2018)","DOI":"10.14778\/3231751.3231757"},{"key":"24_CR52","doi-asserted-by":"crossref","unstructured":"Pastaltzidis, I., et al.: Data augmentation for fairness-aware machine learning: Preventing algorithmic bias in law enforcement systems. In: ACM FAccT (2022)","DOI":"10.1145\/3531146.3534644"},{"key":"24_CR53","doi-asserted-by":"crossref","unstructured":"Ping, H., Stoyanovich, J., Howe, B.: DataSynthesizer: privacy-preserving synthetic datasets. In: SSDBM (2017)","DOI":"10.1145\/3085504.3091117"},{"key":"24_CR54","unstructured":"Pollock, J., Shilov, I., Dodd, E., de Montjoye, Y.-A.: Free Record-Level Privacy Risk Evaluation Through Artifact-Based Methods. arXiv:2411.05743 (2024)"},{"key":"24_CR55","doi-asserted-by":"crossref","unstructured":"Pyrgelis, A., Troncoso, C., De Cristofaro, E.: Knock Knock, Who\u2019s There? Membership Inference on Aggregate Location Data. In: NDSS (2017)","DOI":"10.14722\/ndss.2018.23183"},{"key":"24_CR56","doi-asserted-by":"crossref","unstructured":"Salem, A., et al.: SoK: Let the privacy games begin! A unified treatment of data inference privacy in machine learning. In: IEEE S &P (2023)","DOI":"10.1109\/SP46215.2023.10179281"},{"key":"24_CR57","unstructured":"Shi, J., Xu, M., Hua, H., Zhang, H., Ermon, S., Leskovec, J.: TabDiff: a mixed-type diffusion model for tabular data generation. In: ICLR (2025)"},{"key":"24_CR58","unstructured":"Shokri, R., Stronati, M., Song, C., Shmatikov, V.: Membership inference attacks against machine learning models. In: IEEE S &P (2025)"},{"key":"24_CR59","doi-asserted-by":"crossref","unstructured":"Sivakumar, J., Ramamurthy, K., Radhakrishnan, M., Won, D.: GenerativeMTD: A Deep Synthetic Data Generation Framework for Small Datasets. KBS (2023)","DOI":"10.1016\/j.knosys.2023.110956"},{"key":"24_CR60","unstructured":"Stadler, T., Oprisanu, B., Troncoso, C.: Synthetic data \u2013 anonymization groundhog day. In: USENIX Security (2022)"},{"key":"24_CR61","unstructured":"Synthetic Data Expert Group, FCA. Using Synthetic Data in Financial Services (2024)"},{"key":"24_CR62","unstructured":"Syntho (2025). https:\/\/www.syntho.ai\/synthos-quality-assurance-report\/"},{"key":"24_CR63","unstructured":"van Breugel, B., Sun, H., Qian, Z., van der Schaar, M.: Membership inference attacks against synthetic data through overfitting detection. AISTATS (2023)"},{"key":"24_CR64","unstructured":"Vector Institute. MIDSTModels (2025). https:\/\/github.com\/VectorInstitute\/MIDST\/"},{"key":"24_CR65","doi-asserted-by":"crossref","unstructured":"Venugopal, R., et al.: Privacy Preserving Generative Adversarial Networks to Model Electronic Health Records. Neural Networks (2022)","DOI":"10.1016\/j.neunet.2022.06.022"},{"key":"24_CR66","unstructured":"Wu, X., Pang, Y., Liu, T., Wu, S.: Winning the MIDST Challenge: New Membership Inference Attacks on Diffusion Models for Tabular Data Synthesis. arXiv:2503.12008 (2025)"},{"key":"24_CR67","unstructured":"Xie, L., Lin, K., Wang, S., Wang, F., Zhou, J.: Differentially private generative adversarial network. arXiv:1802.06739 (2018)"},{"key":"24_CR68","unstructured":"Xu, L., Skoularidou, M., Cuesta-Infante, A., Veeramachaneni, K.: Modeling tabular data using conditional GAN. In: NeurIPS (2019)"},{"key":"24_CR69","doi-asserted-by":"crossref","unstructured":"Yale, A., Dash, S., Dutta, R., Guyon, I., Pavao, A., Bennett, K.P.: Assessing privacy and quality of synthetic health data. In: AIDR (2019)","DOI":"10.1145\/3359115.3359124"},{"key":"24_CR70","unstructured":"YData. How to evaluate the re-identification risk in Synthetic Data? (2023)"},{"key":"24_CR71","doi-asserted-by":"crossref","unstructured":"Ye, J., Maddi, A., Murakonda, S.K., Bindschaedler, V., Shokri, R.: Enhanced membership inference attacks against machine learning models. In: ACM CCS (2022)","DOI":"10.1145\/3548606.3560675"},{"key":"24_CR72","doi-asserted-by":"crossref","unstructured":"Yoon, J., Mizrahi, M., Ghalaty, N.F., et al.: EHRSafe: Generating High-fidelity and Privacy-preserving Synthetic Electronic Health Records. NPJ Digital Medicine (2023)","DOI":"10.21203\/rs.3.rs-2347130\/v1"},{"key":"24_CR73","unstructured":"Zarifzadeh, S., Liu, P., Shokri, R.: Low-cost high-power membership inference attacks. In: ICML (2024)"},{"key":"24_CR74","unstructured":"Zhang, H., Zhang, J., Shen, Z., et al.: Mixed-type tabular data synthesis with score-based diffusion in latent space. In: ICLR (2024)"},{"key":"24_CR75","doi-asserted-by":"crossref","unstructured":"Zhang, J., Cormode, G., Procopiuc, C.M., Srivastava, D., Xiao, X.: PrivBayes: Private data release via Bayesian networks. ACM TODS (2017)","DOI":"10.1145\/3134428"},{"key":"24_CR76","doi-asserted-by":"crossref","unstructured":"Zhang, T., Wang, S., Yan, S., Li, J., Liu, Q.: Generative table pre-training empowers models for tabular prediction. In: EMNLP (2023)","DOI":"10.18653\/v1\/2023.emnlp-main.917"},{"key":"24_CR77","unstructured":"Zhang, X., Ji, S., Wang, T.: Differentially private releasing via deep generative model (technical report). arXiv:1801.01594 (2018)"},{"key":"24_CR78","unstructured":"Zhao, Z., Kunar, A., Birke, R., Chen, L.Y.: CTAB-GAN, Effective Table Data Synthesizing. In: ACML (2021)"},{"key":"24_CR79","unstructured":"Zhu, D., Chen, D., Grossklags, J., Fritz, M.: Data forensics in diffusion models: A systematic analysis of membership privacy. arXiv:2302.07801 (2023)"}],"container-title":["Lecture Notes in Computer Science","Computer Security \u2013 ESORICS 2025"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-07884-1_24","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,12]],"date-time":"2025-10-12T16:22:55Z","timestamp":1760286175000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-07884-1_24"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,13]]},"ISBN":["9783032078834","9783032078841"],"references-count":79,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-07884-1_24","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,10,13]]},"assertion":[{"value":"13 October 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Toulouse","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"France","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"22 September 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"24 September 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.esorics2025.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}