{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,31]],"date-time":"2026-01-31T17:12:32Z","timestamp":1769879552915,"version":"3.49.0"},"reference-count":48,"publisher":"Springer Science and Business Media LLC","issue":"15","license":[{"start":{"date-parts":[[2023,10,18]],"date-time":"2023-10-18T00:00:00Z","timestamp":1697587200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,10,18]],"date-time":"2023-10-18T00:00:00Z","timestamp":1697587200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Multimed Tools Appl"],"DOI":"10.1007\/s11042-023-17394-3","type":"journal-article","created":{"date-parts":[[2023,10,18]],"date-time":"2023-10-18T07:02:20Z","timestamp":1697612540000},"page":"44455-44484","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":15,"title":["Assessment of data augmentation, dropout with L2 Regularization and differential privacy against membership inference attacks"],"prefix":"10.1007","volume":"83","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-8840-7379","authenticated-orcid":false,"given":"Sana","family":"Ben Hamida","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hichem","family":"Mrabet","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Faten","family":"Chaieb","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Abderrazak","family":"Jemai","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2023,10,18]]},"reference":[{"key":"17394_CR1","unstructured":"(2009) CIFAR-10 and CIFAR-100 datasets. https:\/\/www.cs.toronto.edu\/kriz\/cifar.html"},{"key":"17394_CR2","doi-asserted-by":"publisher","unstructured":"Abadi M, Chu A, Goodfellow I, et\u00a0al (2016) Deep Learning with Differential Privacy. Proceedings of the 2016 ACM SIGSAC conference on computer and communications security pp 308\u2013318. https:\/\/doi.org\/10.1145\/2976749.2978318, arXiv:1607.00133","DOI":"10.1145\/2976749.2978318"},{"key":"17394_CR3","doi-asserted-by":"crossref","unstructured":"Al-Qarafi A, Alrowais F, Alotaibi SS, et al (2022) Optimal machine learning based privacy preserving blockchain assisted internet of things with smart cities environment. Appl Sci 12(12):5893","DOI":"10.3390\/app12125893"},{"key":"17394_CR4","doi-asserted-by":"publisher","unstructured":"Al-Rubaie M, Chang JM (2019) Privacy-preserving machine learning: threats and solutions. IEEE Security & Privacy 17(2):49\u201358. https:\/\/doi.org\/10.1109\/MSEC.2018.2888775, https:\/\/ieeexplore.ieee.org\/document\/8677282","DOI":"10.1109\/MSEC.2018.2888775"},{"issue":"3","key":"17394_CR5","doi-asserted-by":"publisher","first-page":"4897","DOI":"10.32604\/cmc.2022.019709","volume":"70","author":"S Ben Hamida","year":"2022","unstructured":"Ben Hamida S, Mrabet H, Belguith S et al (2022) Towards securing machine learning models against membership inference attacks. Computers, Materials & Continua 70(3):4897\u20134919","journal-title":"Computers, Materials & Continua"},{"key":"17394_CR6","doi-asserted-by":"publisher","unstructured":"Ben\u00a0Hamida S, Mrabet H, Jemai A (2022b) How differential privacy reinforces privacy of machine learning models? In: B\u01cedic\u01ce C, Treur J, Benslimane D, et\u00a0al. (eds) Advances in computational collective intelligence. Springer international publishing, cham, communications in computer and information science, pp 661\u2013673, https:\/\/doi.org\/10.1007\/978-3-031-16210-7_54","DOI":"10.1007\/978-3-031-16210-7_54"},{"key":"17394_CR7","doi-asserted-by":"crossref","unstructured":"Bernau D, Robl J, Grassal PW, et\u00a0al (2021) Comparing local and central differential privacy using membership inference attacks. https:\/\/www.springerprofessional.de\/en\/comparing-local-and-central-differential-privacy-using-membershi\/19361800","DOI":"10.1007\/978-3-030-81242-3_2"},{"key":"17394_CR8","doi-asserted-by":"publisher","unstructured":"Biggio B, Roli F (2018) Wild patterns: Ten years after the rise of adversarial machine learning. Pattern Recogn 84:317\u2013331. https:\/\/doi.org\/10.1016\/j.patcog.2018.07.023, www.sciencedirect.com\/science\/article\/pii\/S0031320318302565","DOI":"10.1016\/j.patcog.2018.07.023"},{"key":"17394_CR9","first-page":"26","volume":"26","author":"J Chen","year":"2021","unstructured":"Chen J, Wang WH, Shi X (2021) Differential privacy protection against membership inference attack on machine learning for genomic data. Pacific Symposium Biocomput 26:26\u201337","journal-title":"Pacific Symposium Biocomput"},{"key":"17394_CR10","doi-asserted-by":"publisher","unstructured":"Chen L, Yan N, Yang H, et\u00a0al (2020) A data augmentation method for deep learning based on multi-degree of freedom (DOF) automatic image acquisition. Applied Sciences 10(21):7755, number: 21 Publisher: Multidisciplinary Digital Publishing Institute https:\/\/doi.org\/10.3390\/app10217755, https:\/\/www.mdpi.com\/2076-3417\/10\/21\/7755,","DOI":"10.3390\/app10217755"},{"key":"17394_CR11","unstructured":"Choquette-Choo CA, Tramer F, Carlini N, et\u00a0al. (2021) Label-only membership inference attacks. In: Proceedings of the 38th international conference on machine learning. PMLR, pp 1964\u20131974. iSSN: 2640\u20133498, https:\/\/proceedings.mlr.press\/v139\/choquette-choo21a.html"},{"key":"17394_CR12","unstructured":"Cortes C, Mohri M, Rostamizadeh A (2012) L2 regularization for learning kernels. arXiv preprint arXiv:1205.2653"},{"key":"17394_CR13","unstructured":"Du J, Li S, Chen X, et\u00a0al. (2021) Dynamic differential-privacy preserving sgd. arXiv preprint arXiv:2111.00173"},{"key":"17394_CR14","doi-asserted-by":"crossref","unstructured":"Dwork C (2006) Differential privacy. In: Automata, languages and programming: 33rd International Colloquium, ICALP 2006, Venice, Italy, July 10-14, 2006, Proceedings, Part II 33, Springer, pp 1\u201312","DOI":"10.1007\/11787006_1"},{"key":"17394_CR15","first-page":"1","volume":"31","author":"T Fawcett","year":"2004","unstructured":"Fawcett T (2004) ROC Graphs: Notes and practical considerations for researchers. Mach Learn 31:1\u201338","journal-title":"Mach Learn"},{"issue":"6","key":"17394_CR16","doi-asserted-by":"publisher","first-page":"104","DOI":"10.3390\/risks9060104","volume":"9","author":"L G\u0103budeanu","year":"2021","unstructured":"G\u0103budeanu L, Brici I, Mare C et al (2021) Privacy intrusiveness in financial-banking fraud detection. Risks 9(6):104","journal-title":"Risks"},{"key":"17394_CR17","unstructured":"Galinkin E (2021) The influence of dropout on membership inference in differentially private models. http:\/\/arxiv.org\/abs\/2103.09008arXiv:2103.09008 [cs]"},{"key":"17394_CR18","unstructured":"Gastaldi X (2017) Shake-shake regularization. arXiv:1705.07485 [cs]"},{"key":"17394_CR19","doi-asserted-by":"crossref","unstructured":"Hu H, Salcic Z, Sun L, et\u00a0al. (2021) Membership inference attacks on machine learning: A survey. arXiv:2103.07853 [cs]","DOI":"10.1109\/ICDM51629.2021.00129"},{"key":"17394_CR20","doi-asserted-by":"crossref","unstructured":"Hu H, Salcic Z, Sun L, et\u00a0al (2022) Membership inference attacks on machine learning: A survey. arXiv:2103.07853","DOI":"10.1109\/ICDM51629.2021.00129"},{"key":"17394_CR21","doi-asserted-by":"crossref","unstructured":"Jarin I, Eshete B (2021) DP-UTIL: Comprehensive utility analysis of differential privacy in machine learning. arXiv:2112.12998 [cs] version: 1","DOI":"10.1145\/3508398.3511513"},{"key":"17394_CR22","unstructured":"Jayaraman E (2019) Evaluating differentially private machine learning in practice $${|}$$ USENIX. https:\/\/www.usenix.org\/conference\/usenixsecurity19\/presentation\/jayaraman"},{"key":"17394_CR23","doi-asserted-by":"crossref","unstructured":"Jia J, Salem A, Backes M, et\u00a0al. (2019) MemGuard: Defending against black-box membership inference attacks via adversarial examples. arXiv:1909.10594 [cs]","DOI":"10.1145\/3319535.3363201"},{"key":"17394_CR24","unstructured":"Kaya Y, Dumitras T (2021) When does data augmentation help with membership inference attacks? In: Proceedings of the 38th international conference on machine learning. PMLR, pp 5345\u20135355. https:\/\/proceedings.mlr.press\/v139\/kaya21a.html, iSSN: 2640-3498"},{"key":"17394_CR25","unstructured":"Kaya Y, Hong S, Dumitras T (2019) Shallow-deep networks: Understanding and mitigating network overthinking. In: Proceedings of the 36th international conference on machine learning. PMLR, pp 3301\u20133310. https:\/\/proceedings.mlr.press\/v97\/kaya19a.html, iSSN: 2640-3498"},{"key":"17394_CR26","doi-asserted-by":"publisher","unstructured":"Li J, Li N, Ribeiro B (2021a) Membership inference attacks and defenses in classification models. In: Proceedings of the eleventh ACM conference on data and application security and privacy. Association for computing machinery, New York, NY, USA, CODASPY \u201921, pp 5\u201316. https:\/\/doi.org\/10.1145\/3422337.3447836","DOI":"10.1145\/3422337.3447836"},{"key":"17394_CR27","doi-asserted-by":"publisher","unstructured":"Li Q, Wen Z, Wu Z, et\u00a0al. (2021b) A survey on federated learning systems: Vision, hype and reality for data privacy and protection. IEEE Transactions on Knowledge and Data Engineering pp 1\u20131. https:\/\/doi.org\/10.1109\/TKDE.2021.3124599, arXiv:1907.09693 [cs, stat]","DOI":"10.1109\/TKDE.2021.3124599"},{"key":"17394_CR28","unstructured":"Li S, Wang Y, Li Y, et\u00a0al. (2022) l-leaks: Membership inference attacks with logits. arXiv preprint arXiv:2205.06469"},{"key":"17394_CR29","doi-asserted-by":"publisher","unstructured":"Liu C, Chakraborty S, Verma D (2019) Secure model fusion for distributed learning using partial homomorphic encryption. In: Calo S, Bertino E, Verma D (eds) Policy-based autonomic data governance. Lecture notes in computer science, Springer International Publishing, Cham, p 154\u2013179. https:\/\/doi.org\/10.1007\/978-3-030-17277-0_9","DOI":"10.1007\/978-3-030-17277-0_9"},{"key":"17394_CR30","doi-asserted-by":"publisher","unstructured":"Nasr M, Shokri R, Houmansadr A (2018) Machine learning with membership privacy using adversarial regularization. In: Proceedings of the 2018 ACM SIGSAC conference on computer and communications security. Association for computing machinery, New York, NY, USA, CCS \u201918, pp 634\u2013646. https:\/\/doi.org\/10.1145\/3243734.3243855","DOI":"10.1145\/3243734.3243855"},{"key":"17394_CR31","doi-asserted-by":"crossref","unstructured":"Nasr M, Song S, Thakurta A, et\u00a0al. (2021) Adversary instantiation: Lower bounds for differentially private machine learning. arXiv:2101.04535 [cs]","DOI":"10.1109\/SP40001.2021.00069"},{"key":"17394_CR32","unstructured":"Rigaki M, Garcia S (2021) A survey of privacy attacks in machine learning. Tech Rep arXiv:2007.07646, arXiv, arXiv:2007.07646 [cs] type: article"},{"key":"17394_CR33","doi-asserted-by":"crossref","unstructured":"Salem A, Zhang Y, Humbert M, et\u00a0al. (2018) ML-Leaks: Model and data independent membership inference attacks and defenses on machine learning models. arXiv:1806.01246 [cs] arXiv: 1806.01246","DOI":"10.14722\/ndss.2019.23119"},{"key":"17394_CR34","unstructured":"Shejwalkar V, Houmansadr A (2019) Reconciling utility and membership privacy via knowledge distillation. Undefined https:\/\/www.semanticscholar.org\/reader\/3a8f6430be660a5fc34d589806622cc73c209731"},{"key":"17394_CR35","doi-asserted-by":"crossref","unstructured":"Shokri R, Stronati M, Song C, et\u00a0al. (2017) Membership inference attacks against machine learning models. arXiv:1610.05820 [cs, stat] arXiv: 1610.05820","DOI":"10.1109\/SP.2017.41"},{"key":"17394_CR36","doi-asserted-by":"publisher","unstructured":"Song C, Raghunathan A (2020) Information leakage in embedding models. In: Proceedings of the 2020 ACM SIGSAC conference on computer and communications security. Association for computing machinery, New York, NY, USA, CCS \u201920, pp 377\u2013390. https:\/\/doi.org\/10.1145\/3372297.3417270","DOI":"10.1145\/3372297.3417270"},{"key":"17394_CR37","unstructured":"Srivastava N, Hinton G, Krizhevsky A, et\u00a0al. (2014) Dropout: A simple way to prevent neural networks from overfitting. Journal of Machine Learning Research 15(56):1929\u20131958. http:\/\/jmlr.org\/papers\/v15\/srivastava14a.html"},{"key":"17394_CR38","doi-asserted-by":"publisher","unstructured":"Truex S, Liu L, Gursoy ME, et\u00a0al. (2019a) Effects of differential privacy and data skewness on membership inference vulnerability. In: 2019 First IEEE international conference on trust, privacy and security in intelligent systems and applications (TPS-ISA), pp 82\u201391, https:\/\/doi.org\/10.1109\/TPS-ISA48467.2019.00019","DOI":"10.1109\/TPS-ISA48467.2019.00019"},{"key":"17394_CR39","unstructured":"Truex S, Liu L, Gursoy ME, et\u00a0al (2019b) Towards demystifying membership inference attacks. arXiv: 1807.09173"},{"issue":"3","key":"17394_CR40","doi-asserted-by":"publisher","first-page":"191","DOI":"10.1177\/1460458212442933","volume":"18","author":"W Wilkowska","year":"2012","unstructured":"Wilkowska W, Ziefle M (2012) Privacy and data security in e-health: Requirements from the user\u2019s perspective. Health Informatics J 18(3):191\u2013201","journal-title":"Health Informatics J"},{"issue":"110","key":"17394_CR41","first-page":"014","volume":"259","author":"D Wu","year":"2023","unstructured":"Wu D, Qi S, Qi Y et al (2023) Understanding and defending against white-box membership inference attack in deep learning. Knowl-Based Syst 259(110):014","journal-title":"Knowl-Based Syst"},{"key":"17394_CR42","unstructured":"Yang Z, Shao B, Xuan B, et\u00a0al. (2020) Defending model inversion and membership inference attacks via prediction purification. arXiv:2005.03915 [cs]"},{"key":"17394_CR43","unstructured":"Yann L, Corinna C, Christopher JCB (2010) MNIST handwritten digit database, Yann LeCun, Corinna Cortes and Chris Burges. http:\/\/yann.lecun.com\/exdb\/mnist\/"},{"key":"17394_CR44","doi-asserted-by":"crossref","unstructured":"Yeom S, Giacomelli I, Fredrikson M, et\u00a0al. (2018) Privacy Risk in Machine Learning: Analyzing the Connection to Overfitting. arXiv:1709.01604 [cs, stat]","DOI":"10.1109\/CSF.2018.00027"},{"key":"17394_CR45","doi-asserted-by":"publisher","unstructured":"Yeom S, Giacomelli I, Menaged A et al (2020) Overfitting, robustness, and malicious algorithms: A study of potential causes of privacy risk in machine learning. J Comput Secur 28(1):35\u201370. https:\/\/doi.org\/10.3233\/JCS-191362, www.medra.org\/servlet\/aliasResolver?alias=iospress &doi=10.3233\/JCS-191362","DOI":"10.3233\/JCS-191362"},{"key":"17394_CR46","doi-asserted-by":"publisher","unstructured":"Ying X (2019) An overview of overfitting and its solutions. J Phys: Conf Ser 1168(022):022. https:\/\/doi.org\/10.1088\/1742-6596\/1168\/2\/022022, https:\/\/iopscience.iop.org\/article\/10.1088\/1742-6596\/1168\/2\/022022","DOI":"10.1088\/1742-6596\/1168\/2\/022022"},{"key":"17394_CR47","doi-asserted-by":"crossref","unstructured":"Yu D, Zhang H, Chen W, et\u00a0al. (2021) How does data augmentation affect privacy in machine learning? In: AAAI","DOI":"10.1609\/aaai.v35i12.17284"},{"key":"17394_CR48","doi-asserted-by":"publisher","unstructured":"Zheng J, Cao Y, Wang H (2021) Resisting membership inference attacks through knowledge distillation. Neurocomputing 452:114\u2013126. https:\/\/doi.org\/10.1016\/j.neucom.2021.04.082, www.sciencedirect.com\/science\/article\/pii\/S0925231221006329","DOI":"10.1016\/j.neucom.2021.04.082"}],"container-title":["Multimedia Tools and Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11042-023-17394-3.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11042-023-17394-3\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11042-023-17394-3.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,4,29]],"date-time":"2024-04-29T11:30:58Z","timestamp":1714390258000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11042-023-17394-3"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,10,18]]},"references-count":48,"journal-issue":{"issue":"15","published-online":{"date-parts":[[2024,5]]}},"alternative-id":["17394"],"URL":"https:\/\/doi.org\/10.1007\/s11042-023-17394-3","relation":{},"ISSN":["1573-7721"],"issn-type":[{"value":"1573-7721","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,10,18]]},"assertion":[{"value":"19 February 2023","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"14 July 2023","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"1 October 2023","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"18 October 2023","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare that they have no conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflicts of interest"}}]}}