{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,12]],"date-time":"2026-01-12T21:24:04Z","timestamp":1768253044324,"version":"3.49.0"},"reference-count":34,"publisher":"Springer Science and Business Media LLC","issue":"3","license":[{"start":{"date-parts":[[2021,8,31]],"date-time":"2021-08-31T00:00:00Z","timestamp":1630368000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,8,31]],"date-time":"2021-08-31T00:00:00Z","timestamp":1630368000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int. J. Inf. Secur."],"published-print":{"date-parts":[[2022,6]]},"DOI":"10.1007\/s10207-021-00564-5","type":"journal-article","created":{"date-parts":[[2021,8,31]],"date-time":"2021-08-31T21:02:31Z","timestamp":1630443751000},"page":"1-14","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":4,"title":["Evaluating differentially private decision tree model over model inversion attack"],"prefix":"10.1007","volume":"21","author":[{"given":"Cheolhee","family":"Park","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9690-5055","authenticated-orcid":false,"given":"Dowon","family":"Hong","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Changho","family":"Seo","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2021,8,31]]},"reference":[{"issue":"6","key":"564_CR1","doi-asserted-by":"publisher","first-page":"1164","DOI":"10.1016\/j.jbi.2012.07.011","volume":"45","author":"CL Chi","year":"2012","unstructured":"Chi, C.L., Street, W.N., Robinson, J.G., Crawford, M.A.: Individualized patient-centered lifestyle recommendations: an expert system for communicating patient specific cardiovascular risk information and prioritizing lifestyle options. J. Biomed. Inform. 45(6), 1164\u20131174 (2012)","journal-title":"J. Biomed. Inform."},{"key":"564_CR2","doi-asserted-by":"crossref","unstructured":"International Warfarin Pharmacogenetics Consortium: Estimation of the warfarin dose with clinical and pharmacogenetic data. N Engl J Med 360(8), 753\u2013764 (2009)","DOI":"10.1056\/NEJMoa0809329"},{"key":"564_CR3","doi-asserted-by":"crossref","unstructured":"He, K., Zhang, X., Ren, S., Sun, J.: Delving deep into rectifiers: surpassing human-level performance on imagenet classification. In: Proceedings of the IEEE International Conference on Computer Vision. pp. 1026-1034 (2015)","DOI":"10.1109\/ICCV.2015.123"},{"key":"564_CR4","unstructured":"Vinyals, O., Kaiser, \u0141., Koo, T., Petrov, S., Sutskever, I., Hinton, G.: Grammar as a foreign language. In: Advances in Neural Information Processing Systems. pp. 2773\u20132781 (2015)"},{"key":"564_CR5","doi-asserted-by":"crossref","unstructured":"He, K., Zhang, X., Ren, S., Sun, J.: Deep residual learning for image recognition. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 770\u2013778 (2016)","DOI":"10.1109\/CVPR.2016.90"},{"key":"564_CR6","unstructured":"Fredrikson, M., Lantz, E., Jha, S., Lin, S., Page, D., Ristenpart, T.: Privacy in pharmacogenetics: an end-to-end case study of personalized warfarin dosing. In: 23rd USENIX Security Symposium. USENIX Security 14, 17\u201332 (2014)"},{"key":"564_CR7","doi-asserted-by":"crossref","unstructured":"Fredrikson, M., Jha, S., Ristenpart, T.: Model inversion attacks that exploit confidence information and basic countermeasures. In: Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security. ACM. pp. 1322-1333 (2015)","DOI":"10.1145\/2810103.2813677"},{"key":"564_CR8","doi-asserted-by":"crossref","unstructured":"Shokri, R., Stronati, M., Song, C., Shmatikov, V.: Membership inference attacks against machine learning models. In: 2017 IEEE Symposium on Security and Privacy. IEEE. pp. 3\u201318 (2017)","DOI":"10.1109\/SP.2017.41"},{"key":"564_CR9","unstructured":"Tram\u00e8r, F., Zhang, F., Juels, A., Reiter, M.K., Ristenpart, T.: Stealing machine learning models via prediction apis. In: 25th USENIX Security Symposium. USENIX Security 16, 601\u2013618 (2016)"},{"key":"564_CR10","doi-asserted-by":"crossref","unstructured":"Yeom, S., Giacomelli, I., Fredrikson, M., Jha, S.: Privacy risk in machine learning: Analyzing the connection to overfitting. In 2018 IEEE 31st Computer Security Foundations Symposium. IEEE. pp. 268\u2013282 (2018)","DOI":"10.1109\/CSF.2018.00027"},{"key":"564_CR11","doi-asserted-by":"crossref","unstructured":"Dwork, C., McSherry, F., Nissim, K., Smith, A.: Calibrating noise to sensitivity in private data analysis. In: Theory of Cryptography Conference. Springer. pp. 265\u2013284 (2006)","DOI":"10.1007\/11681878_14"},{"key":"564_CR12","doi-asserted-by":"crossref","unstructured":"Dwork, C., Roth, A.: The algorithmic foundations of differential privacy. Found. Trends$$\\text{\\textregistered} $$ Theor. Comput. Sci. 9(3\u20134). 211-407 (2014)","DOI":"10.1561\/0400000042"},{"key":"564_CR13","doi-asserted-by":"crossref","unstructured":"Blum, A., Dwork, C., McSherry, F., Nissim, K.: Practical privacy: the SuLQ framework. In: Proceedings of the twenty-fourth ACM SIGMOD-SIGACT-SIGART Symposium on Principles of Database Systems. ACM. pp. 128\u2013138 (2005)","DOI":"10.1145\/1065167.1065184"},{"key":"564_CR14","doi-asserted-by":"crossref","unstructured":"Friedman, A., Schuster, A.: Data mining with differential privacy. In: Proceedings of the 16th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining. ACM. pp. 493\u2013502 (2010)","DOI":"10.1145\/1835804.1835868"},{"key":"564_CR15","doi-asserted-by":"crossref","unstructured":"Mohammed, N., Barouti, S., Alhadidi, D., Chen, R.: Secure and private management of healthcare databases for data mining. In: 2015 IEEE 28th International Symposium on Computer-Based Medical Systems. IEEE, pp. 191\u2013196 (2015)","DOI":"10.1109\/CBMS.2015.54"},{"key":"564_CR16","doi-asserted-by":"crossref","unstructured":"Jagannathan, G., Pillaipakkamnatt, K., Wright, R. N.: A practical differentially private random decision tree classifier. In: 2009 IEEE International Conference on Data Mining Workshops. IEEE, pp. 114\u2013121 (2009)","DOI":"10.1109\/ICDMW.2009.93"},{"key":"564_CR17","doi-asserted-by":"crossref","unstructured":"Jagannathan, G., Monteleoni, C., Pillaipakkamnatt, K.: A semi-supervised learning approach to differential privacy. In: 2013 IEEE 13th International Conference on Data Mining Workshops. IEEE, pp. 841\u2013848 (2013)","DOI":"10.1109\/ICDMW.2013.131"},{"key":"564_CR18","doi-asserted-by":"crossref","unstructured":"Patil, A., Singh, S.: Differential private random forest. In: 2014 International Conference on Advances in Computing, Communications and Informatics. IEEE, pp. 2623\u20132630 (2014)","DOI":"10.1109\/ICACCI.2014.6968348"},{"key":"564_CR19","unstructured":"Fletcher, S., Islam, M.Z.: A differentially private decision forest. In: 13th Australasian Data Mining Conference, pp. 1\u201310 (2015)"},{"key":"564_CR20","doi-asserted-by":"crossref","unstructured":"Fletcher, S., Islam, M.Z.: A differentially private random decision forest using reliable signal-to-noise ratios. In: Australasian Joint Conference on Artificial Intelligence. Springer, Berlin. pp. 192\u2013203 (2015)","DOI":"10.1007\/978-3-319-26350-2_17"},{"key":"564_CR21","doi-asserted-by":"crossref","unstructured":"Rana, S., Gupta, S.K., Venkatesh, S.: Differentially private random forest with high utility. In: 2015 IEEE International Conference on Data Mining. IEEE, pp. 955\u2013960 (2015)","DOI":"10.1109\/ICDM.2015.76"},{"key":"564_CR22","doi-asserted-by":"publisher","first-page":"16","DOI":"10.1016\/j.eswa.2017.01.034","volume":"78","author":"S Fletcher","year":"2017","unstructured":"Fletcher, S., Islam, M.Z.: Differentially private random decision forests using smooth sensitivity. Expert Syst. Appl. 78, 16\u201331 (2017)","journal-title":"Expert Syst. Appl."},{"issue":"1","key":"564_CR23","first-page":"61","volume":"11","author":"MA Rahman","year":"2018","unstructured":"Rahman, M.A., Rahman, T., Lagani\u00e8re, R., Mohammed, N., Wang, Y.: Membership inference attack against differentially private deep learning model. Trans. Data Privacy 11(1), 61\u201379 (2018)","journal-title":"Trans. Data Privacy"},{"key":"564_CR24","unstructured":"Wang, Y., Si, C., Wu, X.: Regression model fitting under differential privacy and model inversion attack. In: Twenty-Fourth International Joint Conference on Artificial Intelligence (2015)"},{"key":"564_CR25","unstructured":"Zhang, T., He, Z., Lee, R.B.: Privacy-preserving machine learning through data obfuscation. 2018. arXiv preprint arXiv:1807.01860"},{"key":"564_CR26","doi-asserted-by":"publisher","first-page":"124988","DOI":"10.1109\/ACCESS.2019.2938759","volume":"7","author":"C Park","year":"2019","unstructured":"Park, C., Hong, D., Seo, C.: An attack-based evaluation method for differentially private learning against model inversion attack. IEEE Access 7, 124988\u2013124999 (2019)","journal-title":"IEEE Access"},{"key":"564_CR27","unstructured":"Jayaraman, B., Evans, D.: Evaluating differentially private machine learning in practice. In: 28th USENIX Security Symposium. USENIX Security 19 (2019)"},{"key":"564_CR28","unstructured":"Quinlan, J.R.: C4.5: Programs for Machine Learning. Elsevier (2014)"},{"key":"564_CR29","doi-asserted-by":"crossref","unstructured":"Homer, N., Szelinger, S., Redman, M., Duggan, D., Tembe, W., Muehling, J., Pearson, J.V., Stephan, D.A., Nelson, S.F., Craig, D.W.: Resolving individuals contributing trace amounts of DNA to highly complex mixtures using high-density SNP genotyping microarrays. PLoS Genet. 4(8), e1000167 (2008)","DOI":"10.1371\/journal.pgen.1000167"},{"key":"564_CR30","unstructured":"Ateniese, G., Felici, G., Mancini, L.V., Spognardi, A., Villani, A., Vitali, D.: Hacking smart machines with smarter ones: How to extract meaningful data from machine learning classifiers. 2013. arXiv preprint arXiv:1306.4447"},{"key":"564_CR31","doi-asserted-by":"crossref","unstructured":"Calandrino, J. A., Kilzer, A., Narayanan, A., Felten, E. W., Shmatikov, V.: \u201cYou might also like:\u201d Privacy risks of collaborative filtering. In: 2011 IEEE Symposium on Security and Privacy. IEEE, pp. 231\u2013246 (2011)","DOI":"10.1109\/SP.2011.40"},{"key":"564_CR32","unstructured":"Hickey, W.: FiveThirtyEight.com, DataLab: How americans like their steak. 2014 http:\/\/fivethirtyeight.com\/datalab\/how-americans-like-their-steak\/"},{"key":"564_CR33","unstructured":"Smith, T.W., Marsden, P., Hout, M., Kim, J.: General Social Surveys. National Opinion Research Center (2012)"},{"key":"564_CR34","unstructured":"Prince, J.: Social science research on pornography. http:\/\/byuresearch.org\/ssrp\/downloads\/GSShappiness.pdf"}],"container-title":["International Journal of Information Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-021-00564-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10207-021-00564-5\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-021-00564-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,27]],"date-time":"2022-05-27T11:11:24Z","timestamp":1653649884000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10207-021-00564-5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,8,31]]},"references-count":34,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2022,6]]}},"alternative-id":["564"],"URL":"https:\/\/doi.org\/10.1007\/s10207-021-00564-5","relation":{},"ISSN":["1615-5262","1615-5270"],"issn-type":[{"value":"1615-5262","type":"print"},{"value":"1615-5270","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,8,31]]},"assertion":[{"value":"31 August 2021","order":1,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declaration"}},{"value":"All authors declare that they have no conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}},{"value":"This article does not contain any studies with human participants or animals performed by any of the authors.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethical approval"}}]}}