{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,4]],"date-time":"2026-02-04T18:13:35Z","timestamp":1770228815314,"version":"3.49.0"},"reference-count":63,"publisher":"Springer Science and Business Media LLC","issue":"11","license":[{"start":{"date-parts":[[2023,6,19]],"date-time":"2023-06-19T00:00:00Z","timestamp":1687132800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,6,19]],"date-time":"2023-06-19T00:00:00Z","timestamp":1687132800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Computing"],"published-print":{"date-parts":[[2023,11]]},"DOI":"10.1007\/s00607-023-01180-y","type":"journal-article","created":{"date-parts":[[2023,6,19]],"date-time":"2023-06-19T18:02:21Z","timestamp":1687197741000},"page":"2419-2442","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Membership inference attacks against compression models"],"prefix":"10.1007","volume":"105","author":[{"given":"Yong","family":"Jin","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Weidong","family":"Lou","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yanghua","family":"Gao","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2023,6,19]]},"reference":[{"key":"1180_CR1","doi-asserted-by":"publisher","unstructured":"Toma, Rafia N, Farzin Piltan, Kichang Im, Dongkoo Shon, Tae H. Yoon, Dae-Seung Yoo, and Jong-Myon Kim (2022) A bearing fault classification framework based on image encoding techniques and a convolutional neural network under different operating conditions. Sensors 22, no. 13: 4881. https:\/\/doi.org\/10.3390\/s22134881","DOI":"10.3390\/s22134881"},{"issue":"12","key":"1180_CR2","doi-asserted-by":"publisher","first-page":"4401","DOI":"10.3390\/s22124401","volume":"22","author":"N Rathnayake","year":"2022","unstructured":"Rathnayake N, Rathnayake U, Dang TL, Hoshino Y (2022) An efficient automatic fruit-360 image identification and recognition using a novel modified cascaded-ANFIS algorithm. Sensors 22(12):4401. https:\/\/doi.org\/10.3390\/s22124401","journal-title":"Sensors"},{"key":"1180_CR3","doi-asserted-by":"crossref","unstructured":"KIM I, BAEK W, KIM S (2020) Spatially attentive output layer for image classification. In: Proceedings of 2020 IEEE\/CVF conference on computer vision and pattern recognition (CVPR). Piscataway: IEEE Press, pp 9530\u20139539","DOI":"10.1109\/CVPR42600.2020.00955"},{"key":"1180_CR4","doi-asserted-by":"crossref","unstructured":"SZEGEDY C, LIU W, JIA Y Q, et al (2015) Going deeper with convolutions. In: Proceedings of 2015 IEEE conference on computer vision and pattern recognition (CVPR). Piscataway: IEEE Press,pp 1\u20139","DOI":"10.1109\/CVPR.2015.7298594"},{"key":"1180_CR5","doi-asserted-by":"crossref","unstructured":"Wang TW, Zhu YZ, Jin LW et al (2020) Decoupled attention network for text recognition. In: The thirty-second innovative applications of artificial intelligence conference. AAAI Press, Palo Alto, pp 12216\u201312224","DOI":"10.1609\/aaai.v34i07.6903"},{"key":"1180_CR6","doi-asserted-by":"crossref","unstructured":"YU et al (2020) Towards accurate scene text recognition with semantic reasoning networks. In: Proceedings of 2020 IEEE\/CVF conference on computer vision and pattern recognition (CVPR). Piscataway: IEEE Press, pp 12110\u201312119","DOI":"10.1109\/CVPR42600.2020.01213"},{"key":"1180_CR7","doi-asserted-by":"crossref","unstructured":"GRAVES A, MOHAMED AR, HINTON G (2013) Speech recognition with deep recurrent neural networks. In: Proceedings of 2013 IEEE international conference on acoustics, speech and signal processing. Piscataway: IEEE Press, pp 6645\u20136649","DOI":"10.1109\/ICASSP.2013.6638947"},{"issue":"6","key":"1180_CR8","doi-asserted-by":"publisher","first-page":"82","DOI":"10.1109\/MSP.2012.2205597","volume":"29","author":"G Hinton","year":"2012","unstructured":"Hinton G, Deng L, Yu D et al (2012) Deep neural networks for acoustic modeling in speech recognition: the shared views of four research groups. IEEE Signal Process Mag 29(6):82\u201397","journal-title":"IEEE Signal Process Mag"},{"issue":"3","key":"1180_CR9","first-page":"93","volume":"29","author":"P Sen","year":"2008","unstructured":"Sen P, Namata G, Bilgic M et al (2008) Collective classification in network data. AI Mag 29(3):93\u2013106","journal-title":"AI Mag"},{"issue":"7","key":"1180_CR10","doi-asserted-by":"publisher","first-page":"1019","DOI":"10.1002\/asi.20591","volume":"58","author":"D Liben-Nowell","year":"2007","unstructured":"Liben-Nowell D, Kleinberg J (2007) The link-prediction problem for social networks. J Am Soc Inf Sci Technol 58(7):1019\u20131031","journal-title":"J Am Soc Inf Sci Technol"},{"key":"1180_CR11","doi-asserted-by":"publisher","unstructured":"Rani M, Dhok S, Deshmukh R (2020) A machine condition monitoring framework using compressed signal processing. Sensors (Basel, Switzerland) 20(1):E319. https:\/\/doi.org\/10.3390\/s20010319.PMID: 31935948; PMCID: PMC6983155","DOI":"10.3390\/s20010319."},{"key":"1180_CR12","doi-asserted-by":"publisher","first-page":"259","DOI":"10.1016\/j.sigpro.2018.09.038","volume":"155","author":"Q Wang","year":"2019","unstructured":"Wang Q, Du PF, Yang JY et al (2019) Transferred deep learning based waveform recognition for cognitive passive radar. Signal Process 155:259\u2013267","journal-title":"Signal Process"},{"issue":"4","key":"1180_CR13","doi-asserted-by":"publisher","first-page":"4827","DOI":"10.1109\/JSEN.2020.3029459","volume":"21","author":"H Darvishi","year":"2020","unstructured":"Darvishi H, Ciuonzo D, Eide ER et al (2020) Sensor-fault detection, isolation and accommodation for digital twins via modular data-driven architecture. IEEE Sens J 21(4):4827\u20134838","journal-title":"IEEE Sens J"},{"issue":"4","key":"1180_CR14","doi-asserted-by":"publisher","first-page":"4225","DOI":"10.1109\/TNSM.2021.3098157","volume":"18","author":"A Nascita","year":"2021","unstructured":"Nascita A, Montieri A, Aceto G et al (2021) XAI meets mobile traffic classification: understanding and improving multimodal deep learning architectures. IEEE Trans Netw Serv Manage 18(4):4225\u20134246","journal-title":"IEEE Trans Netw Serv Manage"},{"key":"1180_CR15","doi-asserted-by":"crossref","unstructured":"SHOKRI R, STRONATI M, SONG CZ, et al (2017) Membership inference attacks against machine learning models. In: Proceedings of 2017 IEEE symposium on security and privacy (SP). Piscataway: IEEE Press, pp 3\u201318","DOI":"10.1109\/SP.2017.41"},{"key":"1180_CR16","doi-asserted-by":"crossref","unstructured":"Salem A, Zhang Y, Humbert M et al (2019) ML-leaks: model and data independent membership inference attacks and defenses on machine learning models. In: Proceedings 2019 network and distributed system security symposium. Internet Society, Reston, pp 24\u201327","DOI":"10.14722\/ndss.2019.23119"},{"key":"1180_CR17","doi-asserted-by":"crossref","unstructured":"YEOM S, GIACOMELLI I, FREDRIKSON M, et al (2018) Privacy risk in machine learning: analyzing the connection to overfitting. In: Proceedings of 2018 IEEE 31st computer security foundations symposium (CSF). Piscataway: IEEE Press, pp 268\u2013282","DOI":"10.1109\/CSF.2018.00027"},{"key":"1180_CR18","doi-asserted-by":"crossref","unstructured":"Liu S, Lin Y, Zhou Z, et al (2018) On-demand deep model compression for mobile devices: A usage-driven model selection framework. In: Proceedings of the 16th annual international conference on mobile systems, Applications, and Services, pp 389\u2013400","DOI":"10.1145\/3210240.3210337"},{"issue":"1","key":"1180_CR19","doi-asserted-by":"publisher","first-page":"126","DOI":"10.1109\/MSP.2017.2765695","volume":"35","author":"Y Cheng","year":"2018","unstructured":"Cheng Y, Wang D, Zhou P et al (2018) Model compression and acceleration for deep neural networks: the principles, progress, and challenges. IEEE Signal Process Mag 35(1):126\u2013136","journal-title":"IEEE Signal Process Mag"},{"key":"1180_CR20","doi-asserted-by":"crossref","unstructured":"Yeom S, Giacomelli I, Fredrikson M, et al (2018) Privacy risk in machine learning: Analyzing the connection to overfitting. In: 2018 IEEE 31st computer security foundations symposium (CSF). IEEE, pp 268\u2013282","DOI":"10.1109\/CSF.2018.00027"},{"issue":"6","key":"1180_CR21","doi-asserted-by":"publisher","first-page":"141","DOI":"10.1109\/MSP.2012.2211477","volume":"29","author":"L Deng","year":"2012","unstructured":"Deng L (2012) The mnist database of handwritten digit images for machine learning research [best of the web]. IEEE Signal Process Mag 29(6):141\u2013142","journal-title":"IEEE Signal Process Mag"},{"key":"1180_CR22","unstructured":"Simonyan K, Zisserman A (2014) Very deep convolutional networks for large-scale image recognition. arXiv preprint arXiv:1409.1556"},{"key":"1180_CR23","doi-asserted-by":"crossref","unstructured":"Nasr M, Shokri R, Houmansadr A (2018) Machine learning with membership privacy using adversarial regularization. In: Proceedings of the ACM SIGSAC conference on computer and communications security. 2018, pp 634\u2013646","DOI":"10.1145\/3243734.3243855"},{"key":"1180_CR24","doi-asserted-by":"crossref","unstructured":"Homer N, Szelinger S, Redman M, Duggan D, Tembe W, Muehling J, Pearson J. et al (2008) Resolving individuals contributing trace amounts of DNA to highly complex mixtures using high-density SNP genotyping microarrays. PLoS Genetics 4(8)","DOI":"10.1371\/journal.pgen.1000167"},{"issue":"9","key":"1180_CR25","doi-asserted-by":"publisher","first-page":"965","DOI":"10.1038\/ng.436","volume":"41","author":"S Sankararaman","year":"2009","unstructured":"Sankararaman S, Obozinski G, Halperin E et al (2009) Genomic privacy and limits of individual detection in a pool. Nat Genet 41(9):965\u2013967","journal-title":"Nat Genet"},{"key":"1180_CR26","doi-asserted-by":"crossref","unstructured":"Pyrgelis A, Troncoso C, De Cristofaro E (2018) Knock knock, who\u2019s there? membership inference on aggregate location data. In: NDSS","DOI":"10.14722\/ndss.2018.23183"},{"key":"1180_CR27","unstructured":"Truex S, Liu L, Gursoy ME, et al (2019) Demystifying membership inference attacks in machine learning as a service. IEEE Trans Serv Comput"},{"key":"1180_CR28","doi-asserted-by":"crossref","unstructured":"NASR M, SHOKRI R, HOUMANSADR A (2019) Comprehensive privacy analysis of deep learning: passive and active white-box inference attacks against centralized and federated learning. In: Proceedings of 2019 IEEE symposium on security and privacy (SP). Piscataway: IEEE Press, pp 739\u2013753","DOI":"10.1109\/SP.2019.00065"},{"key":"1180_CR29","unstructured":"Leino K, Fredrikson M (2020) Stolen memories: leveraging model memorization for calibrated white-box membership inference. In: 2020 USENIX Security Symposium (USENIX Security 20). USENIX Association, Berkeley, pp 1605\u20131622"},{"key":"1180_CR30","doi-asserted-by":"crossref","unstructured":"LONG et al (2020) A pragmatic approach to membership inferences on machine learning models. In: Proceedings of 2020 IEEE European Symposium on Security and Privacy (EuroS &P). Piscataway: IEEE Press, pp 521\u2013534","DOI":"10.1109\/EuroSP48549.2020.00040"},{"key":"1180_CR31","doi-asserted-by":"crossref","unstructured":"Pyrgelis A, Troncoso C, De Cristofaro E (2017) Knock knock, who\u2019s there? Membership inference on aggregate location data. arXiv preprint arXiv:1708.06145","DOI":"10.14722\/ndss.2018.23183"},{"key":"1180_CR32","unstructured":"Choquette-Choo C A, Tramer F, Carlini N, et al (2021) Label-only membership inference attacks. In: International conference on machine learning. PMLR, pp 1964\u20131974"},{"key":"1180_CR33","doi-asserted-by":"crossref","unstructured":"Liu Y, Zhao Z, Backes M et al (2022) Membership inference attacks by exploiting loss trajectory. In: Proceedings of the ACM SIGSAC Conference on Computer and Communications Security, 2022, pp 2085\u20132098","DOI":"10.1145\/3548606.3560684"},{"key":"1180_CR34","doi-asserted-by":"crossref","unstructured":"Carlini N, Chien S, Nasr M, et al (2022) Membership inference attacks from first principles. In: 2022 IEEE Symposium on Security and Privacy (SP). IEEE, pp 1897\u20131914","DOI":"10.1109\/SP46214.2022.9833649"},{"key":"1180_CR35","unstructured":"Li H, Kadav A, Durdanovic I, et al (2016) Pruning filters for efficient convnets. arXiv preprint arXiv:1608.08710"},{"key":"1180_CR36","unstructured":"Molchanov P, Tyree S, Karras T, et al (2016) Pruning convolutional neural networks for resource efficient inference. arXiv preprint arXiv:1611.06440"},{"key":"1180_CR37","doi-asserted-by":"crossref","unstructured":"Wang Z, Li C, Wang X (2021) Convolutional neural network pruning with structural redundancy reduction. In: Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition, pp 14913\u201314922","DOI":"10.1109\/CVPR46437.2021.01467"},{"key":"1180_CR38","unstructured":"Hinton G, Vinyals O, Dean J (2015) Distilling the knowledge in a neural network. arXiv preprint arXiv:1503.02531, 2(7)"},{"key":"1180_CR39","doi-asserted-by":"crossref","unstructured":"Wang L, Yoon KJ (2021) Knowledge distillation and student-teacher learning for visual intelligence: a review and new outlooks. IEEE Trans Pattern Anal Mach Intell","DOI":"10.1109\/TPAMI.2021.3055564"},{"key":"1180_CR40","unstructured":"Cheng Y, Wang D, Zhou P, et al (2017) A survey of model compression and acceleration for deep neural networks. arXiv preprint arXiv:1710.09282"},{"key":"1180_CR41","unstructured":"Liu B, Wang M, Foroosh H, et al (2015) Sparse convolutional neural networks. In: Proceedings of the IEEE conference on computer vision and pattern recognition, pp 806\u2013814"},{"key":"1180_CR42","doi-asserted-by":"crossref","unstructured":"Zhou H, Alvarez JM, Porikli F (2016) Less is more: Towards compact cnns. In: European conference on computer vision. Springer, Cham, pp 662\u2013677","DOI":"10.1007\/978-3-319-46493-0_40"},{"key":"1180_CR43","unstructured":"Li H, Kadav A, Durdanovic I, et al (2016) Pruning filters for efficient convnets. arXiv preprint arXiv:1608.08710"},{"key":"1180_CR44","doi-asserted-by":"crossref","unstructured":"Wang Y, Xu C, Xu C, et al (2018) Adversarial learning of portable student networks. In: Proceedings of the AAAI conference on artificial intelligence, 32(1)","DOI":"10.1609\/aaai.v32i1.11667"},{"issue":"5","key":"1180_CR45","doi-asserted-by":"publisher","first-page":"1369","DOI":"10.3390\/s20051369","volume":"20","author":"F Guzzi","year":"2020","unstructured":"Guzzi F, De Bortoli L, Molina RS, Marsi S, Carrato S, Ramponi G (2020) Distillation of an end-to-end oracle for face verification and recognition sensors. Sensors 20(5):1369. https:\/\/doi.org\/10.3390\/s20051369","journal-title":"Sensors"},{"key":"1180_CR46","doi-asserted-by":"crossref","unstructured":"Strimel GP, Sathyendra KM, Peshterliev S (2018) Statistical model compression for small-footprint natural language understanding. arXiv preprint arXiv:1807.07520","DOI":"10.21437\/Interspeech.2018-1333"},{"key":"1180_CR47","doi-asserted-by":"crossref","unstructured":"Xing J (2003) An image compression model based on the human visual system. In: Visual information processing XII. International Society for Optics and Photonics 5108:63\u201372","DOI":"10.1117\/12.485820"},{"key":"1180_CR48","doi-asserted-by":"crossref","unstructured":"Park W, Kim D, Lu Y, et al (2019) Relational knowledge distillation. In: Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition, pp 3967\u20133976","DOI":"10.1109\/CVPR.2019.00409"},{"key":"1180_CR49","doi-asserted-by":"crossref","unstructured":"Tung F, Mori G (2019) Similarity-preserving knowledge distillation. In: Proceedings of the IEEE\/CVF international conference on computer vision, pp 1365\u20131374","DOI":"10.1109\/ICCV.2019.00145"},{"key":"1180_CR50","unstructured":"Polino A, Pascanu R, Alistarh D (2018) Model compression via distillation and quantization. arXiv preprint arXiv:1802.05668"},{"key":"1180_CR51","unstructured":"Zhao R, Hu Y, Dotzel J, et al (2019) Improving neural network quantization without retraining using outlier channel splitting. In: International conference on machine learning. PMLR, pp 7543\u20137552"},{"key":"1180_CR52","unstructured":"Lou Q, Guo F, Liu L, et al (2019) Autoq: Automated kernel-wise neural network quantization. arXiv preprint arXiv:1902.05690"},{"key":"1180_CR53","unstructured":"Nagel M, Amjad RA, Van Baalen M, et al (2020) Up or down? adaptive rounding for post-training quantization. In: International Conference on Machine Learning. PMLR, pp 7197\u20137206"},{"key":"1180_CR54","doi-asserted-by":"crossref","unstructured":"Yang J, Shen X, Xing J, et al (2019) Quantization networks[C]\/\/Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition, pp 7308\u20137316","DOI":"10.1109\/CVPR.2019.00748"},{"key":"1180_CR55","doi-asserted-by":"crossref","unstructured":"Jin Q, Yang L, Liao Z (2020) Adabits: Neural network quantization with adaptive bit-widths. In: Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition, pp 2146\u20132156","DOI":"10.1109\/CVPR42600.2020.00222"},{"key":"1180_CR56","unstructured":"Jin Q, Yang L, Liao Z (2019) Towards efficient training for neural network quantization. arXiv preprint arXiv:1912.10207"},{"key":"1180_CR57","unstructured":"Choi Y, El-Khamy M, Lee J (2016) Towards the limit of network quantization. arXiv preprint arXiv:1612.01543"},{"key":"1180_CR58","unstructured":"Yao Z, Dong Z, Zheng Z, et al (2021) Hawq-v3: dyadic neural network quantization. In: International conference on machine learning. PMLR, pp 11875\u201311886"},{"key":"1180_CR59","unstructured":"Louizos C, Reisser M, Blankevoort T, et al (2018) Relaxed quantization for discretized neural networks. arXiv preprint arXiv:1810.01875"},{"key":"1180_CR60","doi-asserted-by":"crossref","unstructured":"Chen J, Jordan MI, Wainwright MJ (2020) Hopskipjumpattack: a query-efficient decision-based attack. In: 2020 IEEE symposium on security and privacy (sp). IEEE, pp 1277\u20131294","DOI":"10.1109\/SP40000.2020.00045"},{"key":"1180_CR61","unstructured":"Krizhevsky A, Hinton G (2009) Learning multiple layers of features from tiny images"},{"key":"1180_CR62","unstructured":"Song L, Mittal P (2021) Systematic evaluation of privacy risks of machine learning models. In: 30th USENIX Security Symposium (USENIX Security 21), pp 2615\u20132632"},{"key":"1180_CR63","doi-asserted-by":"crossref","unstructured":"Gers FA (1999) Learning to forget: continual prediction with LSTM. In : 9th International conference on artificial neural networks: ICANN \u201999. 9th International Conference onArtificial Neural Networks: ICANN \u201999. Edinburgh, UK, 7\u201310 IEE, pp 850\u2013855","DOI":"10.1049\/cp:19991218"}],"container-title":["Computing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00607-023-01180-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s00607-023-01180-y\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00607-023-01180-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,9,28]],"date-time":"2023-09-28T17:03:25Z","timestamp":1695920605000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s00607-023-01180-y"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,6,19]]},"references-count":63,"journal-issue":{"issue":"11","published-print":{"date-parts":[[2023,11]]}},"alternative-id":["1180"],"URL":"https:\/\/doi.org\/10.1007\/s00607-023-01180-y","relation":{},"ISSN":["0010-485X","1436-5057"],"issn-type":[{"value":"0010-485X","type":"print"},{"value":"1436-5057","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,6,19]]},"assertion":[{"value":"19 September 2022","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"4 April 2023","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"19 June 2023","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare that they have no conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}},{"value":"This article does not contain any studies with human participants or animals performed by any of the authors.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethical approval"}}]}}