{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,8]],"date-time":"2026-06-08T18:31:24Z","timestamp":1780943484716,"version":"3.54.1"},"reference-count":85,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,10,19]],"date-time":"2025-10-19T00:00:00Z","timestamp":1760832000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,10,19]],"date-time":"2025-10-19T00:00:00Z","timestamp":1760832000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,10,19]]},"DOI":"10.1109\/iccv51701.2025.00121","type":"proceedings-article","created":{"date-parts":[[2026,4,29]],"date-time":"2026-04-29T19:45:49Z","timestamp":1777491949000},"page":"1216-1227","source":"Crossref","is-referenced-by-count":2,"title":["Membership Inference Attacks With False Discovery Rate Control"],"prefix":"10.1109","author":[{"given":"Chenxu","family":"Zhao","sequence":"first","affiliation":[{"name":"Iowa State University,Department of Computer Science"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wei","family":"Qian","sequence":"additional","affiliation":[{"name":"Iowa State University,Department of Computer Science"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Aobo","family":"Chen","sequence":"additional","affiliation":[{"name":"Iowa State University,Department of Computer Science"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mengdi","family":"Huai","sequence":"additional","affiliation":[{"name":"Iowa State University,Department of Computer Science"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978318"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01012"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01219-9_9"},{"key":"ref4","article-title":"A gentle introduction to conformal prediction and distribution-free uncertainty quantification","author":"Angelopoulos","year":"2021","journal-title":"arXiv preprint"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1214\/15-AOS1337"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.52202\/068431-2129"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1214\/22-AOS2244"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1111\/j.1467-9868.2010.00746.x"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1111\/j.2517-6161.1995.tb02031.x"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.52202\/075280-0016"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00019"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833649"},{"key":"ref13","article-title":"Quantifying memorization across neural language models","volume-title":"The Eleventh International Conference on Learning Representations","author":"Carlini","year":"2023"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-72117-5_52"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1002\/aaai.12209"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484756"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00750"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.00304"},{"key":"ref19","article-title":"Shadow-free membership inference attacks: Recommender systems are more vulnerable than you thought","author":"Chi","year":"2024","journal-title":"arXiv preprint"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/WACV57701.2024.00482"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1002\/SERIES1345"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01263"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01015"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01855"},{"key":"ref26","first-page":"2881","article-title":"What neural networks memorize and why: Discovering the long tail via influence estimation","volume":"33","author":"Feldman","year":"2020","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1214\/21-AOS2137"},{"key":"ref28","first-page":"1660","article-title":"Adaptive conformal inference under distribution shift","volume":"34","author":"Gibbs","year":"2021","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref29","article-title":"Certified data removal from machine learning models","author":"Guo","year":"2019","journal-title":"arXiv preprint"},{"key":"ref30","first-page":"228","article-title":"Membership inference attacks on deep regression models for neuroimaging","author":"Gupta","year":"2021","journal-title":"Medical Imaging with Deep Learning"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58598-3_28"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-19821-2_21"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58592-1_31"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1371\/journal.pgen.1000167"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3523273"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3485368"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1214\/19-EJS1554"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00371"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/iccv51070.2023.00449"},{"key":"ref42","article-title":"Masked autoencoders are scalable learners of cellular morphology","author":"Kraus","year":"2023","journal-title":"arXiv preprint"},{"key":"ref43","volume-title":"Cifar-10 (canadian institute for advanced research)","author":"Krizhevsky","year":"2009"},{"key":"ref44","article-title":"Conformal prediction with large language models for multi-choice question answering","author":"Kumar","year":"2023","journal-title":"arXiv preprint"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00072"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.31274\/td-20251215-112"},{"key":"ref47","article-title":"Integrative conformal p-values for powerful out-of-distribution testing with labeled outliers","author":"Liang","year":"2022","journal-title":"arXiv preprint"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP48549.2020.00040"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1080\/01621459.2019.1699421"},{"key":"ref50","article-title":"Machine learning meets false discovery rate","author":"Marandon","year":"2022","journal-title":"arXiv preprint"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/SPW59333.2023.00013"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1016\/j.jiixd.2024.02.001"},{"key":"ref53","first-page":"1932","article-title":"Towards understanding and enhancing robustness of deep learning models against malicious unlearning attacks","volume-title":"Proceedings of the 29th ACM SIGKDD Conference on Knowledge Discovery and Data Mining","author":"Qian","year":"2023"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i13.29382"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00780"},{"key":"ref56","article-title":"Ml-leaks: Model and data independent membership inference attacks and defenses on machine learning models","author":"Salem","year":"2018","journal-title":"arXiv preprint"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00474"},{"key":"ref58","first-page":"9389","article-title":"Just how toxic is data poisoning? a unified benchmark for backdoor and data poisoning attacks","volume-title":"International Conference on Machine Learning","author":"Schwarzschild","year":"2021"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01455"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i11.17150"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref62","article-title":"Very deep convolutional networks for large-scale image recognition","author":"Simonyan","year":"2014","journal-title":"arXiv preprint"},{"key":"ref63","first-page":"2615","article-title":"Systematic evaluation of privacy risks of machine learning models","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Song","year":"2021"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.6028\/nist.ai.100-2"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP53844.2022.00027"},{"key":"ref66","article-title":"Conformal prediction under covariate shift","author":"Tibshirani","year":"2019","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1007\/b106715"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00721"},{"key":"ref69","article-title":"Bridging model heterogeneity in federated learning via uncertaintybased asymmetrical reciprocity learning","author":"Wang","year":"2024","journal-title":"arXiv preprint"},{"key":"ref70","article-title":"Transferable normalization: Towards improving transferability of deep neural networks","author":"Wang","year":"2019","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.00027"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.23087"},{"key":"ref73","article-title":"On the importance of difficulty calibration in membership inference attacks","author":"Watson","year":"2021","journal-title":"arXiv preprint"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-99-8138-0_2"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560675"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2018.00027"},{"key":"ref77","article-title":"Robust yet efficient conformal prediction sets","author":"Zargarbashi","year":"2024","journal-title":"arXiv preprint"},{"key":"ref78","article-title":"Low-cost high-power membership inference by boosting relativity","author":"Zarifzadeh","year":"2023","journal-title":"arXiv preprint"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3154029"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484770"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1109\/WACV57701.2024.00477"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.emnlp-main.253"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.52202\/075280-3276"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00553"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01631"}],"event":{"name":"2025 IEEE\/CVF International Conference on Computer Vision (ICCV)","location":"Honolulu, HI, USA","start":{"date-parts":[[2025,10,19]]},"end":{"date-parts":[[2025,10,25]]}},"container-title":["2025 IEEE\/CVF International Conference on Computer Vision (ICCV)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11443115\/11443287\/11444641.pdf?arnumber=11444641","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T05:06:52Z","timestamp":1777612012000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11444641\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,19]]},"references-count":85,"URL":"https:\/\/doi.org\/10.1109\/iccv51701.2025.00121","relation":{},"subject":[],"published":{"date-parts":[[2025,10,19]]}}}